TOYOTA BOSHOKU TURKIYE

PERSONAL DATA PROTECTION RELATED DISCLOSURE STATEMENT – WEBSITE

As Toyota Boshoku Türkiye Otomotiv San. ve Tic. A.Ş. (“Company”), registered with the Sakarya Trade Registry Office under number 12207 and operating at 1st Organized Industrial Zone, Pk.160, 54580 Arifiye/Sakarya, we present the following information within the scope of our obligation to inform you regarding the processing of your personal data during your visit to our website, in accordance with the Law on Protection of Personal Data No. 6698 (“Law”).

A. Definitions

According to the Law No. 6698:

·         Personal data refers to any information relating to an identified or identifiable natural person.

·         Processing of personal data means any operation performed on personal data, whether fully or partially automated or by non-automated means provided that it is part of a data recording system, such as collection, recording, storage, preservation, alteration, reorganization, disclosure, transfer, acquisition, making available, classification, or prevention of use.

·         Data subject refers to the natural person whose personal data is processed.

·         Data controller refers to the natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system.

·         Obligation to inform refers to the duty of the data controller or its authorized representative to inform the data subject at the time of data collection about the identity of the data controller, the purpose of processing, to whom and for what purpose the data may be transferred, the method and legal basis of collection, and other rights listed in Article 11 of the Law.

B. Data Subject

 You, as the visitor of our website, are defined as a Website Visitor and considered a Data Subject under the Law.

C. Data Controller

 Toyota Boshoku Turkiye is the data controller responsible for determining the purposes and means of processing your personal data and managing the data recording system.

D. Collection of Your Personal Data

Your personal data is collected through digital platforms by automated means when you visit our website at www.toyota-boshokutr.com .

E. Processed Personal Data, Purposes, and Legal Grounds

Website Usage
We collect certain personal data due to your use of our website. This includes:

·         Website traffic information

·         Transaction security data (such as connection time, visited pages, IP address)

These are processed for purposes such as compliance with legislation, creating and tracking visitor records, managing information security processes, and archiving activities, based on Article 5/2(a) of the Law and Article 4 of Law No. 5651 on Regulation of Publications on the Internet and Combating Crimes Committed Through Such Publications.

Cookie Policy
A cookie is a simple text file stored on your computer or mobile device by a website server. Only that server can access or read its contents. Each cookie is unique to your browser and contains anonymous information such as a unique identifier, site name, and some numbers.

Cookies may be set by the website you visit (“first-party cookies”) or by other websites providing content on the page you view (“third-party cookies”).

·         First-Party Cookies: Used for login, session management, and navigation on Toyota Boshoku Turkiye’s system. These are strictly necessary.

·         Google Analytics: These cookies collect statistical data to improve site presentation and usage. Data collected via these cookies is transferred to Google servers and stored in compliance with Google’s data protection principles. If you do not want this data collected, visit: https://tools.google.com/dlpage/gaoptout.

You can personalize your cookie preferences by changing your browser settings:

·         https://support.google.com/chrome/answer/95647?hl=tr

·         https://support.microsoft.com/tr-tr/help/17442/windows-internet-explorer-delete-manage-cookies

·         https://support.microsoft.com/tr-tr/help/4468242/microsoft-edge-browsing-data-and-privacy-microsoft-privacy

·         https://support.mozilla.org/tr-TR/kb/Cookies

·         https://help.opera.com/en/latest/security-and-privacy/

·         https://support.apple.com/kb/ph19214?locale=tr_TR

F. Transfer of Your Personal Data

Your personal data may be transferred to relevant authorities without your consent and without an obligation to inform, if requested under Article 28/1 of the Law. In unforeseen circumstances, your data may also be transferred to public institutions (such as ministries) as explicitly required by law, within the limits and purposes set forth by legislation. Apart from these legal obligations, your personal data is not shared with third parties.

G. Your Rights Regarding Personal Data

Under the Law, you have the right to:

a) Learn whether your personal data is processed,
b) Request information if processed,
c) Learn the purpose of processing and whether it is used accordingly,
d) Know third parties to whom data is transferred domestically or abroad,
e) Request correction if data is incomplete or inaccurate,
f) Request deletion or destruction if processing reasons no longer exist,
g) Request notification of actions taken under (d) and (e) to third parties,
h) Object to results arising from automated analysis,
i) Claim compensation for damages caused by unlawful processing.

You can exercise these rights by applying to our Company as the data controller.

H. Application Method to Data Controller

 Applications can be made:

·         In person: Submit a written application to 1st Organized Industrial Zone, Pk.160, 54580 Arifiye/Sakarya, with “Information Request Under the Law on Protection of Personal Data” written on the envelope.

·         Via notary: Send a written application to the same address with the same note on the envelope.

·         Via KEP (Registered Electronic Mail): Send a signed application to [email protected], with “Information Request Under the Law on Protection of Personal Data” in the subject line.

Applications will be concluded as soon as possible and within 30 days at the latest, in accordance with Article 13 of the Law.

For detailed information on procedures and principles, please refer to the Communiqué on Procedures and Principles of Application to Data Controller by the Personal Data Protection Authority:
https://www.mevzuat.gov.tr/mevzuat?MevzuatNo=24455&MevzuatTur=9&MevzuatTertip=5