THE INFORMATIVE TEXT ON PROCESSING PERSONAL DATA
We, IAS (‘’Company’’), show ultimate sensitivity about the security of your personal data. In this context, we
attribute great importance to processing and preserving any personal data belonging to all persons affiliated with
the Company, including our customers benefiting from our products and services, their workers and our workers in
accordance with the Law on the Protection of Personal Data (LPPD) number 6698, GDPR (Global Data Protection
Regulation), The Constitution of the Republic of Turkey and international conventions to which our country is bound
regarding human rights.
2. Definition, Collection, Processing, Processing Time of Personal Data and Purposes of Processing
In this context, We would like to clarify you as a Data Supervisor as regulated by Law on Protection of Personal Data.
With full comprehension of this responsibility, we process your personal data within the limits by legislation as
explained below. Your personal data can be omitted you share with our company as customer, subscriber, supplier
or employee can be processed in a measured and connected manner with our activity and service objectives, can be
transferred to third parties at home and abroad, can be stored and can be used for profiling in accordance with the
law as detailed below.
Personal data is defined in the Law as any information relating to an identified or identifiable real person.
Depending on the products, services or business operations provided by our Company, your personal data can be
collected verbally, in written or electronically by SMS and similar means via automatic or non-automatic tools
through offices, branch offices, our corporate website https://www.caniaserp.com/, our contact form available on
our website, social media channels, mobile applications etc. at the stage of signing commercial contracts and / or
during the commercial relationship process.
Your personal data will be collected, processed and updated, as long as you keep benefiting our Company’s products
In addition, your personal data can be processed when you use our call center or website with the intention of
benefiting from the Company services; or visit our Company or website; or participate in online and physical
trainings, seminars, or events organized by our Company.
The collected personal data, together with the reasons listed below;
to benefit you from the products and services offered by our company, establishing and executing the
contract regarding the service provided, to understand your satisfaction level with the products and services
provided, to respond to your requests faster and to improve our communication with you and to serve you
better, to inform you about our products and services, to measure your satisfaction about our products and
services, to develop and diversify our products and services in line with your requests and needs, to create
campaigns, to develop of commercial activities, development of website operation according to your needs,
determination and implementation of our company's commercial and business strategies,
to be able to communicate with you and to be informed about the events, meetings and trainings to take
- to organize and realize online and physical trainings, meetings and events.
to assure legal and commercial security of our Company as well as of the persons in business relationship
with our Company (administrative operations relating to communications within the Company, ensuring
physical security and supervision at the Company premises, assessment processes for business customers /
complaint management processes, as well as reputation investigation processes, efficiency management,
legal compliance process, audit and financial affairs, etc.);
- to determine and implement commercial and business strategies of our Company;
to execute the Human Resources policies of our Company, our worker’s personal data in order to increase
the level of performance and employee satisfaction, and to ensure occupational safety and peace, as well as
the obligations stipulated by the Labor Law, labor and social security legislation and other legislation in force,
will be processed in accordance with the articles 5 and 6 of the Law in connection with law and honesty, in
connection with the purposes of processing, as limited and measured, as correct and current for certain clear and
3. Persons and Purposes to Which the Processed Personal Data can be Transferred
The collected and processed personal data, for the purposes listed in Article 2 of this document, can be shared
within our company but not limited to; our business partners, business contacts, subcontractors, suppliers, company
officials and shareholders or regulatory supervisory agencies and official authorities, private persons when required
by relevant legislation in accordance with the law and legislation in force. They may be transferred domestic or
abroad by law in accordance with the articles 8 and 9 of the Law on the Protection of Personal Data regulating data
processing conditions and purposes.
4. Methods and Legal Reason for Collecting Personal Data
Your personal data is collected verbally, in written or electronically so that our Company can provide its products and
services within the legal framework for the above stated purposes while completely and properly fulfilling its
responsibilities incurring from the relevant contract and law.
Your personal data is collected verbally, in written or electronically through channels which is not limited to;
website, our corporate website https://www.caniaserp.com/, our contact and membership form, miscellaneous
contracts, by real or legal persons who process data on behalf of our Company or Company, via mobile applications,
e-mail, application forms, etc. during our business relations and the signing of commercial contracts and / or the
commercial relationship process.
Your personal data collected for this legal reason can be processed and transferred with purposes stated in the
articles (1) and (2) of this text within the scope of the personal data processing conditions and purposes determined
in the articles 5 and 6 of the LPPD.
5. Personal Data Holder’s Rights Stated in the Article 11 of the LPPD
Provided that the personal data holders submit to our Company their claims relating to their rights by the below
stated means in this Informative Text, our Company will finalize the claim within thirty days at the latest free of
charge, depending on the quality of the claim. Yet in case the Personal Data Protection Board imposes a price, a
payment will be collected as per the tariff determined by our Company.
Within this scope, personal data holders are entitled:
- To learn whether their personal data is processed,
- To demand information in case their data is processed,
- To learn the purpose for processing the data and whether it is used for that purpose,
- To know about the third persons receiving the relevant personal data at home or in foreign countries,
To claim correction of the personal data, in case it is incompletely or incorrectly processed, and within this
scope, to request notification to the third persons to whom the personal data is transferred,
To demand deletion or disposal of personal data and notify the third persons that have received the data of
such an act, in case the reasons for processing the personal data disappear, despite the relevant data has
been processed in compliance with the provisions of the LPPD and other relevant regulations,
To object to the results of processed data analyses made exclusively by electronic systems, if they are to the
detriment of the personal data holders,
To claim compensation for the damages, in case any damage occurs due to processing of personal data in
defiance of the law.
As per the 1st paragraph of the Article 13 of the LPPD, you may submit your claims to our Company in written or by
other means determined by the Personal Data Protection Board in order to use your rights stated above.
In this application, which contains your explanations about the right you have as a personal data owner and you
have made and requested to use your rights mentioned above; We remind you that the matter you are requesting is
clear and understandable, the subject you are requesting is related to your person or if you are acting on behalf of
someone else, you should be specially authorized in this regard and you have to get a document your authority, as
well as include identity and address information and attachment documents should be added to the application.
Within this framework, the channels and methods to deliver your applications in written as defined by the Article 11
of the LPPD are explicated below:
In order to exercise your above-mentioned rights, you may deliver, in person, the necessary information evidencing
your identity and your petition containing your request, or send the same through notary public or through other
means designated by the Personal Data Protection Committee or transmit the same with secure electronic signature
to the address firstname.lastname@example.org
. Our Company will finalize the claim within thirty days at the latest free
of charge, depending on the quality of the claim. Yet in case the Personal Data Protection Board imposes a price, a
payment will be collected as per the tariff determined by our Company.