Visitor KVKK Disclosure Text

In the processing and retention of your personal data, we act in compliance with Law No. 6698 on the Protection of Personal Data (“KVKK”) and, with utmost care to ensure the security of your personal data, we take the necessary technical and administrative measures.

This text has been prepared, within the scope of our disclosure obligation arising from Article 10 of the KVKK, in order to inform you about the purposes for which your personal data are processed, the legal grounds for such processing, the parties to whom the data may be transferred, and your rights.

1. Data Controller

Pursuant to the KVKK, your personal data are processed by Centrum İş Merkezi A.Ş., in the capacity of Data Controller, within the framework described below and within the limits set by the legislation.

2. Purposes and Legal Grounds for the Processing of Personal Data

Your personal data are processed for the purposes of ensuring the security of our plaza and of the persons residing within the building, and of creating and monitoring visitor entry-exit records.

Visitors to our plaza are issued a visitor card by the duty personnel after identity verification and system registration have been completed. The visitor's identity document is checked solely for verification and registration purposes; it is in no way retained by us and is returned to the visitor immediately.

Our data processing activities within this scope are carried out based on the legal grounds set out in Article 5/2(ç) of the KVKK, namely “the necessity of processing data for the data controller to fulfil its legal obligation”, and Article 5/2(f), namely “the necessity of processing data for the legitimate interests of the data controller, provided that such processing does not harm the fundamental rights and freedoms of the data subject”.

3. To Whom and for What Purposes the Processed Personal Data May Be Transferred

Your processed personal data may be shared, in compliance with the conditions set out in Articles 8 and 9 of the KVKK, solely for the purpose of achieving the objectives stated above, with our domestic suppliers from whom infrastructure/software services are procured for the building security and recording systems (within the scope of confidentiality agreements) and with judicial and administrative public authorities that are legally authorised to request such data. Your data are not transferred abroad.

4. Method of Collecting Personal Data and Retention Period

Your personal data are collected through automatic and semi-automatic methods, either manually or by entering data into the system in line with your declarations at the security points, through the license plate recognition systems at the parking entrances, and via the closed-circuit television (CCTV) systems located in the common areas of the building.

Your personal data are retained for the period specified in the applicable legislation or required for the purpose for which they are processed. Upon the expiry of these periods, your data are erased, destroyed or anonymised in accordance with the destruction policies under the KVKK.

5. Which Personal Data Are Processed

Within the scope of your visit, the following personal data of yours are processed:

• Identity Information: First name, last name, Turkish ID number.
• Visit Information: The institution/person visited, and the institution on whose behalf the visit is made.
• Physical Space Security Information: Visitor entry/exit dates and times, visitor card number, image records captured by the building security cameras (CCTV).
• Vehicle Information: Your vehicle license plate number, if you use the parking area.

6. Rights of the Data Subject Listed under Article 11 of the KVKK

As the data subject;

• Learning whether your personal data are processed,
• Requesting information in this regard, if your personal data have been processed,
• Learning the purpose of the processing and whether it is used in line with that purpose,
• Knowing the third parties to whom your data have been transferred domestically or abroad,
• Requesting the rectification of your personal data if they are processed incompletely or inaccurately, and requesting that this be notified to the third parties to whom the data have been transferred,
• Requesting the erasure or destruction of your personal data, even though they have been processed in accordance with the law, in the event that the reasons requiring their processing cease to exist, and requesting that this be notified to the third parties to whom the data have been transferred,
• Objecting to the emergence of a result against you as a consequence of the analysis of your data exclusively by automated systems,
• you have the right to claim compensation for the damage you incur due to the unlawful processing of your data.

To exercise these rights and submit your requests, you may contact us through the contact information provided below. You may submit your applications in writing, in person, through a notary, by registered mail with return receipt, or via our KEP (Registered Electronic Mail) address. Your application will be concluded free of charge, depending on its nature, as soon as possible and within thirty (30) days at the latest. However, if the transaction requires an additional cost, the fee set forth in the tariff determined by the Personal Data Protection Board may be charged.