Information
PRIVACY POLICY ON CLOSED CIRCUIT CAMERA RECORDING SYSTEMS OF ZORLU TESİS YÖNETİM A.Ş.
DISCLOSURE TEXT ABOUT THE PROCESSING OF VISITOR AND CAMERA PERSONAL DATA
According to the provisions of the Personal Data Protection Law No. 6698 (the "Law"); your personal data may be processed by Zorlu Yapı Yatırım A.Ş. and Zorlu Tesis Yönetim A.Ş. (the "Company"), acting as data controllers, in line with the scope described below.
This Disclosure Text applies to all natural persons visiting the premises of the Company, including the employees and potential employees of the suppliers and tenants operating at all Company-owned premises.
- Purposes and Legal Reasons for Processing Personal Data
Your personal data may be processed by our Company for the following purposes in accordance with the fundamental principles described in the Law and within the framework of the personal data processing conditions:
|
Personal Data |
Purpose |
Legal Reason |
|
o Identification Information (name, surname, Turkish Identity Number)
o Contact Information (e-mail, telephone number)
o Physical Space Security Information (CCTV camera recordings, visiting hours)
o Vehicle and visitor information (information about entry into and exit from the premises) |
o Creating visitor records, o Ensuring the security of company premises, employees and visitors, o Ensuring the security of physical spaces, o Control and supervision in case of occurrence of any legal dispute, o Fulfilling legal obligations and protecting public health. |
As prescribed in the Article 5 of the Law: · Processing of data is mandatory for the legitimate interests of the data controller, provided that it does not damage the fundamental rights and freedoms of the data owner. · Processing of data is mandatory for the data controller to fulfill its legal obligations. · Processing of data is mandatory for the establishment, exercise or protection of a right (e.g., if it has the value of evidence in a legal dispute). · It is explicitly prescribed in the law, the legal obligation described in the Article 5 of the Law (e.g., data controllers have an obligation to ensure data security under the Law). |
|
o Providing information to authorized persons, institutions and organizations o Fulfilling our obligations arising from the legislation o Managing information security processes o Managing activities in accordance with the legislation |
If an incident occurs or if you witness an incident during your visit, the information that you provide regarding the incident, and if you experience any security issues during your visit, the information that you provide regarding the incident and your personal data may be processed.
- Persons and Purposes of Transferring Your Processed Personal Data
Your personal data may be transferred to the following parties for the specified purposes in accordance with the conditions described in the article of the Law regarding the transfer of personal data.
- As part of our legal obligations, your personal data may be transferred to legally-authorized public institutions and legally-authorized private institutions and third parties such as supervisory authorities, courts, law firms or legally-authorized public organizations to the extent necessary to ensure compliance with applicable legal regulations and to exercise, assert or defend legal rights.
- Your collected personal data may be shared with Zorlu Holding A.Ş. in a way that is limited to the "Purposes of Processing Personal Data" described in the Section 1 of this text.
- Period of Retention of Personal Data
Our Company will retain personal data for the period required by the processing purposes described herein above and for the periods prescribed in relevant legislation. In addition, in case of any possible dispute, our Company may retain your personal data for the period of time specified in relevant legislation in a way that is limited to the purpose of establishing necessary defenses as part of the dispute.
- Methods of Collecting Personal Data
Your personal data is collected verbally from you through visitor records made by our Company or electronically through CCTV camera recordings, card readers and other automated or non-automated methods.
- Rights of the Personal Data Owner Listed in the Article 11 of the Law
We hereby inform you that, as a personal data owner, you have the following rights pursuant to the Article 11 of the Law:
- To know whether your personal data has been processed or not,
- If your personal data has been processed, to ask for information about processing of such data,
- To know the purpose of processing of personal data and to know whether such data is used in accordance with the purpose,
- To know the third parties inland or abroad, to whom such personal data has been disclosed,
- If the personal data has been processed incompletely or wrongly, to ask for correction of it and to ask for providing information to third parties, to whom such personal data has been disclosed, regarding the operation conducted,
- To ask for deletion or disposal of personal data in case of disappearance of the reasons that require processing, although your personal data has been processed according to the provisions of the Law and other relevant laws, and to ask for providing information to third parties, to whom such personal data has been disclosed, regarding the operation conducted,
- To object to the occurrence of any negative results about data owner through analysis of the processed data exclusively by automatic systems,
- To ask for the indemnification of the loss suffered due to the processing of personal data in violation of the law.
If you, as Data Owner, forward your request to exercise these rights in writing to Zorlu Center, Levazım Mahallesi, Vali Cad. No:2, 34340 Beşiktaş/İstanbul, or send an e-mail to zorlucenterinfo@zorlu.com through the e-mail address that you previously notified to our Company and registered in the systems of our Company; your request will be assessed and finalized within 30 (thirty) days.
Last Updated on: 25.07.2025