Privacy Policy

The purpose of this Privacy Policy is to explain how the www.caninsaat.com.tr website (the “Website”), operated by Can Construction Industry and Trade Corporation (the “Company”) sets forth the terms and conditions regarding the use of personal data shared with the Company by Site users/visitors (the “Data Subject”) or generated by the Company during the Data Subject’s use of the Site, in connection with the operation of the www.caninsaat.com.tr website (the “Website”). The principles followed by Can Construction Industry and Trade Joint Stock Company when collecting and using personal data obtained through the website (the “Website”) at the discretion of its users/visitors are set forth in this Privacy Policy. The Data Subject hereby declares that they have been informed regarding the processing of their personal data in accordance with this Privacy Policy and that they consent to the use of their personal data as specified herein.

Personal Data That May Be Collected Under this heading, the Company lists the types of data it processes that are considered personal data under the Personal Data Protection Law. Can Construction Industry and Trade Corporation may collect the aforementioned data from its users/visitors, as well as any other information that may be necessary for the provision of the services offered on the Website and that is considered personal data under the Personal Data Protection Law and all relevant legislation.

• Job Application Form – Contact Information and Other Details
  • First Name Last Name
  • Phone Number
  • Email Address
  • Residential Address
  • Date of Birth
  • Place of Birth
  • Educational Status
  • Occupation
  • School Attended
  • Year of Graduation
  • Criminal Record
  • Military Status
• Contact/Purchasing Contact/Feedback Form – Subject/Reason
• Contact/Purchasing Contact/Feedback Form – Contact Information
  • First Name Last Name
  • Email Address
  • Address
  • Phone
  • Contact Form – Request Text
• Transaction Security Information
  • IP Information
• Knowledge of Legal Procedures and Compliance
• Information on Request/Complaint Management
• User Information
• Incident Management Knowledge
• User Transaction Information

Pursuant to Articles 3 and 7 of the Personal Data Protection Law, data that has been irreversibly anonymized shall not be considered personal data under the provisions of said law, and processing activities related to such data shall be carried out without being subject to the provisions of this Privacy Policy.

Can Construction Industry and Trade Corporation may also process personal data and share it with third parties without obtaining the user’s/visitor’s separate consent, in accordance with Articles 5 and 8 of the Personal Data Protection Law and/or where exceptions under relevant legislation apply. The main such cases are listed below:

• As expressly provided for by law,
• Where it is necessary to protect the life or physical integrity of a person—or that of another—who is unable to express consent due to actual impossibility, or whose consent is not legally valid,
• Provided that the processing of personal data is necessary in direct connection with the conclusion or performance of any contract between the user and Can Construction Industry and Trade Corporation,
• It is necessary in order to fulfill legal obligations,
• It is necessary in order to fulfill legal obligations,
• When data processing is necessary for the establishment, exercise, or defense of a legal claim,
• Provided that it does not infringe upon the user’s fundamental rights and freedoms, the processing of data is necessary for the legitimate interests of Can Construction Industry and Trade Corporation.

Data Sharing

The Company may transfer the Data Subject’s personal data, as well as any new data derived from such personal data, to its business partners, shareholders, suppliers, and Company officials, solely for the purpose of providing the relevant services, in order to fulfill the purposes specified in this Privacy Policy.

The Company uses this information to enhance the Data Subject’s experience (including improvements and personalization), to ensure the Data Subject’s security, detect fraudulent or unauthorized use, conduct operational assessments and investigations, resolve errors related to Site services, and fulfill any of the purposes set forth in this Privacy Policy. To this end, the Company may share such information with third parties, including third-party service providers (such as those sending SMS messages), hosting service providers, law firms, research companies, and call centers. The Data Subject acknowledges and agrees in advance that, subject to the limitations set forth above, the aforementioned third parties may store the Data Subject’s personal data on servers located anywhere in the world.

Regarding the Right to Access Data and Requests for Correction

The Data Subject may contact the Company to request information regarding himself or herself;

• The right to know whether personal data is being processed,
• To request information regarding the processing of personal data,
• The right to learn the purpose of the processing of personal data and whether it is being used in accordance with that purpose,
• The right to know which third parties, whether domestic or international, personal data is transferred to,
• The right to request the correction of personal data if it has been processed incompletely or incorrectly,
• The right to request the erasure or destruction of personal data in accordance with the conditions set forth in the relevant legislation,
• The right to request that third parties to whom personal data has been transferred be notified of any corrections, deletions, or destruction carried out in accordance with applicable laws,
• The right to object to a decision made solely through the automated processing of personal data that results in adverse consequences for the individual,
• Individuals have the right to request compensation for damages suffered as a result of the unlawful processing of their personal data.

To exercise rights regarding personal data, the “Form for Requests Submitted by the Data Subject to the Data Controller” may be used. Can Construction Industry and Trade Corporation may provide a reasoned positive or negative response to the requests listed above in writing or via digital means. Responses to requests submitted in this regard will be provided within 30 (thirty) days at the latest. As a general rule, no fee is charged for the necessary actions taken in response to such requests. However, if the actions involve costs, a fee may be charged based on the tariff determined by the Personal Data Protection Board in accordance with Article 13 of the Personal Data Protection Law.

The Data Subject warrants that the information covered by this Privacy Policy is complete, accurate, and up-to-date, and undertakes to update such information immediately in the event of any changes. The Company shall bear no liability should the Data Subject fail to provide up-to-date information.

The Data Subject acknowledges that if he or she makes a request that would result in the Company being unable to use any of his or her personal data, he or she may not be able to fully benefit from the Site’s functionality, and hereby declares that he or she shall bear all liability arising in this

Retention Period for Personal Data

The Company will retain the personal data provided by the Data Subject for as long as necessary to fulfill the processing purposes specified above.

In addition, in the event of any dispute that may arise between the Company and the Data Subject, the Company may retain personal data solely for the purpose of mounting the necessary defenses in connection with such dispute and for the duration of the statute of limitations periods established under applicable law.

Data Security Measures and Commitments

The Company, in accordance with the conditions set forth in the relevant legislation or as stated in this Privacy Policy;

• that personal data is not processed in violation of the law,
• that personal data not be accessed in violation of the law,
• It undertakes to take the necessary technical and administrative measures to ensure an appropriate level of security for the protection of personal data and to have the necessary audits conducted.

The Company may not disclose the personal data it has collected about the Data Subject to any third party in violation of this Privacy Policy and the provisions of the Personal Data Protection Law, nor may it use such data for any purpose other than the purpose of processing.

If links to other applications are provided on the Site, the Company assumes no responsibility for the privacy policies or content of those applications.

Changes to the Privacy Policy

The Company reserves the right to amend the provisions of this Privacy Policy without prior notice. The updated Privacy Policy takes effect on the date it is provided to the Data Subject by any means.