Personal Data Protection and Processing Policy

1. Introduction

As Tufan Gemi Donatım Limited Şirketi, we attach great importance to the privacy and security of the personal data of our customers, business partners, and employees. We have created this policy to take necessary measures regarding the protection and processing of personal data within the scope of the Personal Data Protection Law No. 6698 (“KVKK”) and to provide information transparently.

2. Scope

This policy covers the principles regarding the processing, protection, and retention of personal data of our customers, employees, business partners, and other third parties.

3. Collection and Processing of Personal Data

Your personal data may be collected and processed by Tufan Gemi Donatım Limited Şirketi for the following purposes:

• Execution and management of service processes,
• Management of customer relations and increasing service quality,
• Fulfillment of legal obligations,
• Execution of finance and accounting transactions,
• Planning and execution of our company's commercial activities,
• Evaluation of job applications and management of employment processes.

4. Principles of Personal Data Processing

We adhere to the following principles in processing your personal data:

• Being in compliance with the law and honesty rules,
• Being accurate and up-to-date when necessary,
• Processing for specific, explicit, and legitimate purposes,
• Being related, limited, and measured to the purpose for which they are processed,
• Being preserved for as long as stipulated in the relevant legislation or required for the purpose for which they are processed.

5. Transfer of Personal Data

In line with the purposes mentioned above, your personal data may be shared with our business partners, suppliers, and legally authorized public institutions and organizations. The transfer of your personal data abroad is carried out in accordance with the principles specified in the KVKK.

6. Protection and Security of Personal Data

Tufan Gemi Donatım Limited Şirketi takes necessary technical and administrative measures to protect your personal data. In this context, the following measures are implemented to ensure data security:

• Limitation of access privileges,
• Regular safety audits,
• Use of data encryption methods,
• Organizing information security trainings.

7. Retention Period of Personal Data

Your personal data is stored in accordance with the storage periods stipulated in the relevant legal regulations or for the period necessary for our processing purposes. At the end of the retention periods, your personal data will be deleted, destroyed, or anonymized in accordance with the KVKK and relevant legislation.

8. Rights of the Data Subject

Pursuant to Article 11 of the KVKK, you have the following rights regarding your personal data:

• Learning whether your personal data is processed,
• Requesting information if your personal data has been processed,
• Learning the purpose of processing your personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom your personal data is transferred at home or abroad,
• Requesting correction if your personal data has been incompletely or incorrectly processed,
• Requesting deletion or destruction,
• To object to the emergence of a result against you by analyzing the processed data exclusively through automated systems,
• Requesting compensation if you suffer damage due to unlawful processing.

9. Policy Changes

Tufan Gemi Donatım Limited Şirketi may change this policy from time to time in accordance with current legal regulations and company practices. Changes made to the policy will be effective as soon as they are published on our website.

10. Contact

You can contact us for your questions and requests regarding the protection and processing of your personal data.