Notice on the protection and processing of personal data
Prepared under Turkish Law No. 6698 on the Protection of Personal Data.
1. Identity of the data controller
This notice has been prepared by our company, whose details appear below, acting as data controller, under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.
Phone: +90 850 308 49 80
Email: info@d-option.com
Throughout this text “our company”, “we” and “d-option” refer to the legal entity identified above.
2. The personal data we process
Through our website we process only the data you share with us. You do not need to share any personal data in order to visit the site.
| Data category | Data processed | Source |
|---|---|---|
| Identity data | First name, surname | Site forms, email |
| Contact data | Email address, phone number | Site forms, email |
| Company data | Your organization, website address, role | Site forms |
| Request content | The message and service preference you submit in the form | Site forms |
| Application data | The CV and its content submitted with a job application | Career form |
| Transaction security | IP address, browser and device information, site usage records | Cookies and server logs |
3. Purposes of processing
- To prepare a proposal for the service you request and to reply to you
- To answer your enquiries and manage the business relationship
- To assess job applications and run recruitment processes
- To assess partnership applications
- To keep the website running and to measure and improve the user experience
- To ensure information security and prevent misuse
- To meet our legal obligations and to exercise our right of defence in any dispute
4. Method of collection and legal basis
Your personal data is collected through the forms on our website, by email and by telephone, partly by automated means. Our processing rests on the following legal bases set out in Article 5 of the Law.
- Directly related to the formation or performance of a contract: preparing proposals, delivering services and managing the business relationship
- Our legitimate interest: website security, usage analysis and improving our services
- Compliance with our legal obligations: retention and notification duties required by legislation
- Your explicit consent: non-essential cookies and marketing communications
5. Transfer of personal data
Your personal data may be transferred to the following parties, limited to the purposes above and in line with the conditions set out in Articles 8 and 9 of the Law.
- Our suppliers for hosting, email, analytics and advertising services
- Our legal and financial advisers
- Authorised public institutions, limited to requests arising from legislation
Some of the technology providers we use may host servers abroad. In that case the transfer takes place within the conditions set out in Article 9 of the Law. We do not sell your personal data to third parties for marketing purposes.
6. Retention period
We retain your personal data for as long as the purpose of processing requires, taking into account the limitation periods set out in the relevant legislation. Once the purpose no longer applies, your data is deleted, destroyed or anonymised. Data submitted with job applications is kept for a maximum of two years from the date of application unless you request otherwise.
7. Your rights as a data subject
Under Article 11 of the Law you may apply to us to exercise the following rights:
- To learn whether your personal data is processed and, if so, to request information about it
- To learn the purpose of processing and whether the data is used in line with that purpose
- To know the third parties to whom the data is transferred, domestically or abroad
- To request correction where the data is incomplete or inaccurate
- To request deletion or destruction within the conditions set out in the Law
- To request that correction, deletion and destruction be notified to the third parties the data was transferred to
- To object to an outcome against you arising solely from automated analysis
- To claim compensation where you suffer damage due to unlawful processing
8. How to apply
You may submit your requests using the methods set out in the Communiqué on the Procedures and Principles of Application to the Data Controller. You can send your application by email to info@d-option.com or in writing to the address above. Your application must clearly state the information that allows us to verify your identity and the subject of your request.
Your request will be concluded as soon as its nature allows and in any event within thirty days of reaching us. Where the process incurs a cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged.