One Human Yazılım ve Bilişim Danışmanlığı San. Tic. A.Ş.
Privacy Notice on the Processing of Personal Data
Commercial Electronic Message
As One Human Yazılım ve Bilişim Danışmanlığı San. Tic. A.Ş. (“OneNewOne” or the “Company”), protecting the personal data we obtain while carrying out our processes is one of our primary priorities. We attach great importance to keeping your personal data secure and to using/processing it in compliance with the applicable legislation.
This privacy notice sets out how we process your personal data in connection with the commercial electronic messages sent to you.
- Which personal data do we process, for which purposes and on which legal grounds?
Article 5 of the Law on the Protection of Personal Data (the “Law“) governs the legal grounds for processing personal data. Below we set out the purposes for which we process your personal data and the legal grounds we rely on for those purposes:
| Data Processed | Purposes of Processing | Legal Ground for Processing |
|---|---|---|
| Identity (first name – surname) Contact (telephone number, e-mail address) Other (consent information) |
Informing you about campaigns, promotions, events, surveys and opportunities in line with your communication consent preferences (such communications allow us to increase your engagement with, and satisfaction from, our products/services), | Law art. 5/1 The existence of the data subject’s explicit consent |
| Identity (first name – surname) Contact (e-mail address) Transaction Security (IP address, log records) Other (consent information) Legal Proceedings (information in correspondence with judicial authorities, information in the case file) |
Providing you with this notice online in connection with the sending of commercial electronic messages, and reporting the records of the approval obtained from you online to the authorised institutions and organisations. | Law art. 5/2-(ç) Fulfilment of our legal obligations. |
- With whom and for which purposes do we share your personal data?
Your personal data is shared with third parties in compliance with the rules on the transfer of personal data set out in the Law and the relevant legislation. The parties with whom we share data and the purposes of sharing are as follows:
- Authorised Institutions and Organisations: Fulfilling our legal obligations where they request information or documents from our Company or where notification to such institutions is required. (For example, transferring data to İleti Yönetim Sistemi A.Ş. in order to fulfil the notification obligation under the Regulation on Commercial Communication and Commercial Electronic Messages.)
- Suppliers and Business Partners: Obtaining support from suppliers in order to fulfil the purposes set out under the heading “1. Which personal data do we process, for which purposes and on which legal grounds?” above (for example, obtaining support from suppliers for the sending of commercial electronic messages where you have given explicit consent to receive them),
Where your personal data is transferred, we act in accordance with the rules set out in Articles 8 and 9 of the Law.
- Through which channels do we collect your personal data?
We collect your personal data by automated and partly automated means through forms completed electronically on the website, SMS, e-mail correspondence and telephone calls.
- How can you exercise your rights regarding your personal data?
Article 11 of the Law on the Protection of Personal Data governs the rights of data subjects. Under this article, you have the following rights:
- To learn whether your personal data is being processed,
- To request information if your personal data has been processed,
- To learn the purpose of the processing of your personal data and whether it is used in accordance with that purpose,
- To know the third parties in Türkiye or abroad to whom your personal data is transferred,
- To request the rectification of your personal data if it has been processed incompletely or inaccurately, and to request that the action taken in this respect be notified to the third parties to whom your personal data has been transferred,
- To request the erasure or destruction of your personal data where the reasons requiring its processing have ceased to exist, even though it has been processed in accordance with the Law and other applicable legislation, and to request that the actions taken in this respect — and, where your personal data has been processed incompletely or inaccurately, the actions taken in that respect — be notified to the third parties to whom your personal data has been transferred,
- To object to an adverse result arising against you from the analysis of your processed data exclusively by automated systems,
- To claim compensation for the damage in the event that you suffer damage due to the unlawful processing of your personal data.
You may use the following methods to submit your requests concerning the rights set out above to the Company:
- You may send an e-mail to info@onenewone.com from the e-mail address registered in our systems,
- You may also use the other methods set out in the Communiqué on the Procedures and Principles of Application to the Data Controller.