SHELLIX MEMBER DISCLOSURE TEXT

PURPOSE and SCOPE OF THE DISCLOSURE TEXT

This clarification text applies to the relevant person marked below.

At Tournamovie, your personal data is processed and protected by Shellix Smart Solutions A.Ş. (hereinafter referred to as “Company” or “Shellix”) as the data controller within the scope of the Personal Data Protection Law No. 6698 (hereinafter referred to as “KVKK” or “Law”).  Your personal data are processed in line with the reasons, purposes and methods described below within the scope of KVKK and the relevant legal legislation.

This disclosure text is prepared for the relevant persons who are members of the Tournamovie application.

SUBJECT OF THE CLARIFICATION TEXT

The Clarification Text on the Processing of Personal Data at Shellix has been prepared in accordance with the article titled “Data Controller’s Obligation to Inform” in Article 10 of the KVKK: It has been prepared in order to inform you in the most transparent way about the identity of the data controller, the method and legal reason for collecting your personal data, the purpose for which this data will be processed, to whom and for what purpose it can be transferred, and what your rights are listed in Article 11 of the KVKK. Please visit Shellix’s company headquarters for more detailed information on the relevant issues.

PURPOSES OF PROCESSING YOUR DATA, WITH WHOM AND FOR WHAT PURPOSES YOUR DATA IS SHARED – TRANSFER ABROAD

Your verbal, written or electronic personal data are collected and processed by our Company due to its commercial activities; legislation to which our Company is subject (Technology Development Zones Law, Technology Development Zones Implementation Regulation, Turkish Code of Obligations, Turkish Commercial Code, Consumer Protection Law, Labor Law, Personal Data Protection Law, Revenue Administration and other relevant institutions’ regulations) and contracts to which we are a party. This personal data will be used for the purposes listed below.

Our company accepts, declares and undertakes that it will not use your personal data other than the above-mentioned activities and purposes, and that it will not share it with third parties other than legal obligations, situations required by official institutions and those specified in this clarification text.

Our company will be able to share your personal data with our company’s business partners (You can find detailed information about which are Shellix’s Businesses at www.shellix.com) and affiliates for the purposes of ensuring the satisfaction of the MEMBERS with the explicit consent of the MEMBERS or within the legislation we are obliged to.

Personal data regarding the processing listed in this clarification text are not transferred abroad.

YOUR PROCESSED PERSONAL DATA – PURPOSE OF PROCESSING – METHOD OF COLLECTION – LEGAL REASON

1. IDENTITY INFORMATION: Email address, password

Purpose of Processing: Authentication , forgot password.

Method of Data Collection: Your information is collected through electronic forms.

Legal Reason for Processing Your Data: Art. 5/2 (c) of 6698 SK as specified in Article 5 of KVKK: Establishment or performance of the Contract,

YOUR RIGHTS UNDER THE KVKK

You have the following rights regarding your personal data in accordance with Article 11 of the LPPD and related legislation:

1. To learn whether personal data is being processed,
2. Request information if personal data has been processed,
3. To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
4. To know the third parties to whom personal data are transferred domestically or abroad,
5. To request correction of personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
6. Although it has been processed in accordance with the provisions of the KVK Law and other relevant laws, to request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
7. In the event that a result arises to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems, to object to this result,
8. In case of damage due to unlawful processing of personal data, to demand compensation for the damage.

ı. To request deletion / destruction within the framework of the conditions stipulated in Article 7 of the KVKK,

RELEVANT PERSONS may exercise their above-mentioned rights at any time by choosing one of the following ways: sending to the physical address given below, sending to the e-mail address or KEP address specified below from the registered e-mail addresses. Notifications made outside these addresses will not be taken into consideration.

MEASURES TAKEN BY US FOR THE PROTECTION OF PERSONAL DATA

As Shellix, we protect your personal data by taking all possible measures. As a company, protecting your personal data is an important issue for our corporate identity. In this regard, our company takes the necessary technical and administrative measures to protect your personal data in a reliable environment, to protect it against unauthorized access or loss, misuse, disclosure, alteration or destruction of this information.

Our company undertakes that it will take the necessary measures in the event of any data breach or if it thinks that there is a data breach, and that it will immediately notify you and the Personal Data Protection Board about this situation.

ON THE TIMELINESS AND ACCURACY OF PERSONAL DATA

Those who share their personal data with our company acknowledge and declare that they are aware that it is important that this information is accurate and kept up-to-date, both in terms of the rights they have on their personal data in terms of the Personal Data Protection Law No. 6698 and other relevant legislation, and that the responsibilities arising from providing incorrect information will be entirely their own.

You can make the necessary notifications regarding the changes and/or updates regarding your personal data you have shared at the KEP address specified below or by physical mail to our company’s address.

DELETION, DESTRUCTION OR ANONYMIZATION OF PROCESSED PERSONAL DATA

Your personal data, limited to the purposes specified in this Clarification Text; It will be processed by complying with the data processing and statute of limitations periods in all relevant laws and other legal legislation to which our Company and the centers and units affiliated to our Company are subject. In case of changes in the laws regarding data processing periods, the new periods determined will be taken as basis.

As a requirement of the principle of purpose limitation, your personal data is processed limited to the fulfillment of the purposes described in this Clarification Text, the measures taken in accordance with Article 7 / f.1 of the KVKK and Article 138 of the Turkish Penal Code and in any case, in accordance with the practices of the Company and the customs of its commercial life, and after the expiration of the periods, it is deleted, destroyed or anonymized.

IDENTITY OF THE DATA CONTROLLER

Shellix Smart Solutions Inc. 

Mrk : Muğla Teknopark Yönetici A.Ş Kötekli Mahallesi Denizli Yolu Bulvarı No:4B-28 Menteşe/MUĞLA

Tel: +90 532 273 1778

APPLICATION TO THE DATA CONTROLLER

In order to exercise your rights above and to send us your complaints and suggestions:

– By sending it to the company headquarters with documents to verify your identity,

– You can forward it to [email protected] from the e-mail address previously notified as the relevant person and registered in our system or by sending it to our KEP address [email protected].

Pursuant to the Communiqué on the Procedures and Principles of Application to the Data Controller, the application of the Data Subject must include the name, surname, signature if the application is in writing, Turkish ID number, (passport number if the applicant is a foreigner), residential or workplace address for notification, e-mail address for notification, telephone number and fax number, if any, and information on the subject of the request.

The Relevant Person must clearly and comprehensibly state the matter requested in the application, which will be made to exercise the rights mentioned above and includes explanations regarding the right requested to be exercised. Information and documents related to the application must be attached to the application.

Although the subject of the request must be related to the applicant’s person, if acting on behalf of someone else, the applicant must be specifically authorized in this regard and this authority must be documented (special power of attorney). In addition, the application must contain identity and address information and identity-verifying documents must be attached to the application. Requests made by unauthorized third parties on behalf of someone else will not be evaluated.