GDPR Privacy Notice

Bogazici Maritime & Railway Company

PROCESSING OF PERSONAL DATA

INFORMATION NOTICE

1. Definitions

• Data Controller: The real or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system.
• Personal Data: Any information relating to an identified or identifiable natural person, including but not limited to name, surname, date and place of birth, physical, economic, family and other characteristics, phone number, identification number.
• Special Categories of Personal Data: Data concerning racial or ethnic origin, political opinions, philosophical beliefs, religion, sect or other beliefs, clothing, membership in associations, foundations or unions, health, sexual life, criminal convictions, security measures, as well as biometric and genetic data.
• Data Recording System: A system in which personal data is structured and processed according to specific criteria, which may be physical or electronic.
• Data Controller and Representative: Your personal data is processed by our Company as the data controller under the Law on the Protection of Personal Data as described below.

• Purposes of Processing Personal Data: Your personal data is processed within the scope of Articles 5 and 6 of the Law for purposes such as planning and implementing human resources policies, managing our commercial partnerships and strategies, ensuring legal, commercial and physical security of our company and partners, maintaining corporate operations, enhancing the use of our products and services according to your needs, ensuring data security, developing databases, improving services on our website, responding to requests or complaints, correcting errors on our website, and ensuring compliance with the Bogazici Maritime & Railway Company Personal Data Processing Policy available at www.blojistik.com.
• Recipients of Personal Data and Purposes of Transfer: Your personal data may be shared with our shareholders, business partners, suppliers, group companies, affiliates, cooperating companies and institutions, and third-party service providers (e.g., security, health, occupational safety, legal services), as well as authorized public institutions, strictly for the purposes outlined in this notice and in accordance with Articles 8 and 9 of the Law.
• Methods and Legal Basis for Collecting Personal Data: Your personal data may be collected verbally, in writing, electronically, or by other technical means, including through call centers, our website, and mobile applications, within the scope of the purposes outlined in our Personal Data Processing Policy, and in accordance with legislation, contracts, requests, or legal obligations, and processed by the Company or assigned data processors.
• Rights of Data Subjects under Article 11 of the Law: In accordance with Article 10 of the Law, our Company informs you of your rights, guides you on how to exercise them, and establishes necessary administrative and technical procedures. Pursuant to Article 11 of the Law, you have the right to:

• Learn whether personal data is processed,
• Request information if your personal data has been processed,
• Learn the purpose of personal data processing and whether it is used in accordance with its purpose,
• Know the third parties to whom personal data is transferred domestically or abroad,
• Request correction of incomplete or inaccurate personal data,
• Request deletion or destruction of personal data within the conditions set forth in Article 7 of the Law,
• Request notification of actions taken pursuant to clauses (d) and (e) of Article 11 to third parties to whom personal data has been transferred,
• Object to the emergence of a result against the person through automatic systems processing,
• Claim compensation for damages arising from unlawful processing of personal data.