STARA METAL was established in 1997 in İstanbul as a Turkish-Italian partnership. Manufacturing products such as eyelets, rivets, hooks and buttons made of brass, sheet metal and stainless materials used in textile, shoes, saddlery and tarpaulin industries in its new 10,000 m2 facility in Hadımköy as of 2008, STARA METAL applies the same sensitive principles it practices in the industry to the protection of personal data as well. Within this scope, we take great care in processing, preserving and deleting private and general personal data of our visitors from all kinds of channels in accordance with the Personal Data Protection Law No. 6698, secondary regulations (legislations, disclosures, mandates) that have been or will be put into effect, and the binding decisions taken or will be taken by the Personal Data Protection Board. With the awareness of this responsibility, we process your personal data as “Data Controller” as defined by the Law, as explained below and within the limits established by the legislation.

INFORMATION OF DATA CONTROLLER

Residing at “Ömerli Mah. Der Saadet Sok. No:28/334555 Arnavutköy/İstanbul Türkiye”, STARA METAL Industry and Trade Inc. is the Data Controller in accordance with the Law.

PURPOSE OF PROCESSING PERSONAL DATA

STARA METAL requires the processing of personal data both when fulfilling its legal obligations directly and when it’s indirectly required by these obligations and the services provided. In this regard, your personal data is processed by STARA METAL always in a related, limited and measured way for the following purposes:

• Fulfilling our obligations specified in Personal Data Protection Law No. 6698 and the secondary regulations issued under this Law,
• Fulfilling our obligations specified in Law No. 5651 on Regulation of Broadcasts via Internet and Prevention of Crimes Committed Through Such Broadcasts and the secondary regulations issued under this Law,
• Providing information needed by the relevant public institutions, judicial or administrative authorities and law enforcement authorities when necessary,
• Ensuring safety measures at workplace and preventing disruptions to the working environment,
• Fulfilling our obligations for the implementation and functioning of the relevant business processes with the scope of the contractual relationship.

TRANSFER OF PERSONAL DATA

Within the scope of purposes mentioned above, your personal data is transferred to public institutions and organizations only in order to fulfill possible legal obligations in line with the demands of parties with which we have business relations and judicial or administrative jurisdictions in accordance with the conditions specified in Articles 8 and 9 of the Law.

METHOD OF AND LEGAL GROUND FOR COLLECTING PERSONAL DATA

Your personal data may be collected orally, in writing or electronically by natural or legal persons authorized by STARA METAL, by automatic or non-automatic methods through e-mail, telephone, website, various contracts, paper forms and applications.

In this context;

Personal data such as name, last name, identity number, other identity information, driver’s license information, license plate and registration, phone number, e-mail address, STARA METAL systems user name, IP address, secure areas login information, signature and ID photocopies are processed in accordance with the clauses 2/a-c-ç-e-f of Article 5 and paragraph 3 of Article 6 of the Law, based on the legitimate interests of STARA METAL, provided they don’t harm your fundamental rights and freedoms.

RIGHTS OF THE DATA SUBJECT UNDER THE LAW

At any time, you can apply to STARA METAL and request,

• To learn whether your personal data is processed, the purpose of processing, whether the data is used in compliance with the purpose, and demand information if the data has been processed,
• To know the third parties to whom your personal data are transferred domestically or internationally
• To rectify the incomplete or inaccurate data, if any,
• To erase or destroy your personal data under the conditions referred to in Article 7 of the Law,
• Reporting of the operations carried out pursuant to sub-paragraphs (c ) and (d) to third parties to whom your personal data has been transferred
• To object to the occurrence of a result against yourself by analyzing the data processed solely through automated systems, and to claim compensation for the damage arising from the unlawful processing of your personal data.

If you application for these purposes requires an additional cost, you will have to pay the fee stated in the Communiqué on Application Procedures and Principles to the Data Controller determined by the Personal Data Protection Board. In case of a written response to your application, no fee will be charged for the first 10 (ten) pages, and a processing fee of 1 TL will be charged for each page above 10 (ten) pages. If the answer to your application is given on a recording device such as a CD or flash memory, you will be charged for the cost of the recording medium.

The requests in your application will be finalized as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request.

In order to use your rights within the law, you can submit your applications in writing, in Turkish, to STARA METAL, and visit the website of Personal Data Protection Authority for detailed information.

You can submit your application by;

• Filling the application form at starametal.com and personally submitting or sending through a notary an inked signed copy of the document to “Ömerli Mah. Der Saadet Sok. No:28/334555 Arnavutköy/İstanbul TÜRKİYE”,
• Filling the application form at starametal.com and signing with your secure electronic signature under the Electronic Signature Law No. 5070 and sending the secure electronic signed form to starametalas@hs01.kep.tr

In your application as the personal data owner that you will submit to exercise your rights mentioned above containing your explanations regarding the right you demand to use, the matter you request must be clear and understandable and must be related to your person. In the case of you acting on behalf of someone else you will need to submit your special power of attorney certified by a notary.

Your applications must include your name, last name, signature, identity number, residence or workplace address, e-mail address, telephone and fax number as stated in the “Communiqué on Application Procedures and Principles to the Data Controller”. Applications that don\’t include the aforementioned elements will be rejected by STARA METAL.

STARA METAL always reserves the right to make changes to this disclosure text for reasons arising from the Law, secondary regulations and Board decisions. Changes to the disclosure will become effective immediately as of the date they are notified to you.

STARA METAL SAN. VE TİC. A.Ş