Personal Data Processing and Protection Policy

Personal Data Processing and Protection Policy

---

Last updated: 22/12/2024

---

As SAM Güvenlik ve Koruma Hizmetleri A.Ş., acting as the data controller under the Personal Data Protection Law No. 6698 ("Law"), we process your personal data with the necessary care and sensitivity within the scope of the services we provide. In this context, we would like to inform you about the purposes for which your data is processed, with whom it may be shared, and how your data is collected.

1. Purposes of Processing Personal Data

As SAM Güvenlik ve Koruma Hizmetleri A.Ş., we process the identity and contact data you share with us, as well as digital trace data collected when you visit our website, and if applicable, photo or video recordings taken during your visit to our premises or participation in meetings or events, with your consent. These data are processed solely for the following purposes to ensure SAM Güvenlik ve Koruma Hizmetleri A.Ş. can provide the best possible service to its customers:

• Execution of service processes and processing data related to customer/supplier employees and other persons involved in service or procurement-related transactions,
• Creation of visitor records and ensuring the security of our premises,
• Recording traffic data as required by Law No. 5651,
• Ensuring information system security and continuity within the scope of data security,
• Managing customer relations, improving and developing business processes, conducting analyses, surveys, and reporting activities,
• Conducting sponsorship activities,
• Fulfilling requests from official institutions and implementing decisions communicated to SAM Güvenlik ve Koruma Hizmetleri A.Ş.,
• Carrying out storage and archiving activities,
• Fulfilling obligations arising from the legislation and ensuring compliance with SAM Güvenlik ve Koruma Hizmetleri A.Ş.’s policies and procedures.

2. Transfer of Personal Data

Your personal data may be transferred to regulatory and supervisory public institutions and organizations, professional associations, and persons or organizations authorized by the relevant legislation, as well as to the companies we cooperate with and from whom we receive services, as necessary to fulfill the purposes stated in this privacy notice and in compliance with the relevant legal regulations.

3. Methods and Legal Basis for Personal Data Collection

Your personal data is collected for the purposes outlined above in compliance with the fundamental principles set out in the Law, based on the following legal grounds: necessity under the law, performance of a contract, legal obligations of the data controller, data made public by you, and legitimate interests of SAM Güvenlik ve Koruma Hizmetleri A.Ş., provided that it does not harm your fundamental rights and freedoms. Personal data may be collected through the following methods:

• Verbally, in writing, or electronically through closed-circuit camera systems when visiting our premises,
• Through applications made via email,
• Through building management for security purposes,
• Through applications and software used by SAM Güvenlik ve Koruma Hizmetleri A.Ş.,
• Through cookies when visiting our website or subscribing to our site, and via social media channels.

4. Your Rights Under the Law:

You can exercise your rights under Article 11 of the Law, which regulates the rights of the data subject, by submitting your request using the "Data Subject Application Form" available at the address Yenibosna Merkez Mahallesi Ladin SK. Kuyumcukent Blok No: 4M/1B030 Bahçelievler / İstanbul or by sending it via email to info@samguvenlik.com.tr. Your identity will be verified before processing your request through secure electronic or mobile signatures.

SAM Güvenlik ve Koruma Hizmetleri A.Ş. will respond to requests in accordance with Article 13 of the Law, within a maximum of 30 (thirty) days, depending on the nature of the request.

If the process incurs costs, the Personal Data Protection Authority’s tariff will apply. If a request is denied, the reason(s) for the denial will be provided in writing or electronically.