INFORMATION NOTICE
1. Data Controller
As the data controller, Stoneline Yapı Ürünleri Sanayi Anonim Şirketi (hereinafter referred to as “StoneArchive”), fulfills its obligation to inform data subjects in accordance with Article 10 of the Law No. 6698 on the Protection of Personal Data (“KVKK”).
This Information Notice has been prepared to inform data subjects about the personal data processing activities carried out by StoneArchive, including:
• which categories of personal data are processed,
• the purposes of processing,
• the legal grounds for processing, and
• the rights of data subjects arising from KVKK.
Your personal data may be processed by StoneArchive, acting as the data controller, within the scope explained below and may be transferred domestically and abroad.
The term data controller refers to the real or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system.
You may contact us in your capacity as data controller through all methods determined by the Personal Data Protection Board and via the “Support / Contact Us” section within the application.
2. Purpose of Processing Personal Data
The categories of personal data processed are listed below, and each category is processed for the purposes and legal grounds specified opposite it.
a. Identity Data
Purposes and Legal Grounds for Processing
Your personal data under this category is processed in accordance with:
• Article 5/2(c) of KVKK, where processing is necessary for the establishment or performance of a contract,
• Article 5/2(ç), where processing is mandatory for the data controller to fulfill its legal obligations,
• Article 5/2(d), where the data has been made public by the data subject,
• Article 5/2(e), where processing is necessary for the establishment, exercise, or protection of a right,
• Article 5/2(f), where processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
Additionally, where applicable, personal data may be processed based on explicit consent pursuant to Article 5/1 of KVKK for the following purposes:
Emergency Management Processes, Information Security Processes, Access Authorization Processes, Compliance with Legal Obligations, Finance and Accounting Operations, Physical Premises Security, Assignment Processes, Legal Affairs Follow-up, Communication Activities, Human Resources Planning, Execution and Audit of Business Activities, Improvement of Business Processes, Ensuring Business Continuity, Logistics Operations, Procurement Processes, After-Sales Support Services, Sales Processes, Customer Relationship Management, Performance Evaluation, Risk Management, Archiving and Storage Activities, Contract Management, Handling Requests and Complaints, Wage Policy Management, Ensuring Operational Security of the Data Controller, Providing Information to Authorized Institutions and Organizations, Management Activities, Creation and Monitoring of Visitor Records.
Data Retention Period:
Personal data under this category is retained for 10 years after the termination of the relevant contract (employment contract, service contract, etc.).
b. Contact Data
Purposes and Legal Grounds for Processing
Personal data under this category is processed in accordance with:
• Article 5/2(a), where it is explicitly stipulated by law,
• Article 5/2(c), where processing is necessary for the establishment or performance of a contract,
• Article 5/2(ç), where processing is mandatory for legal obligations,
• Article 5/2(e), where processing is necessary for the establishment, exercise, or protection of a right,
• Article 5/2(f), where processing is necessary for legitimate interests of the data controller.
Additionally, where explicit consent exists pursuant to Article 5/1 of KVKK, data may be processed for the following purposes:
Emergency Management, Information Security, Audit and Ethics Activities, Access Authorization, Compliance Activities, Finance and Accounting Operations, Assignment Processes, Legal Affairs Management, Communication Activities, Human Resources Planning, Execution and Audit of Business Activities, Business Continuity, Logistics Operations, Procurement Processes, After-Sales Support Services, Sales Processes, Production and Operational Processes, Customer Relationship Management, Customer Satisfaction Activities, Organization and Event Management, Marketing Analysis Activities, Advertising, Campaign and Promotion Processes, Risk Management, Archiving and Storage Activities, Contract Management, Handling Requests and Complaints, Asset and Resource Security, Marketing of Products and Services, Ensuring Operational Security of the Data Controller, Providing Information to Authorized Institutions, Management Activities.
Data Retention Period:
Personal data under this category is retained for 10 years after the termination of the contract.
c. Location Data
Purposes and Legal Grounds for Processing
Personal data under this category is processed in accordance with:
• Article 5/2(ç), where processing is mandatory for legal obligations,
• Article 5/2(e), where processing is necessary for the establishment, exercise, or protection of a right,
• Article 5/2(f), where processing is necessary for legitimate interests of the data controller.
Additionally, where explicit consent exists pursuant to Article 5/1 of KVKK, data may be processed for the following purposes:
Assignment Processes, Execution and Audit of Business Activities, Business Continuity, Logistics Operations, Procurement and Sales Processes, Asset and Resource Security, Supply Chain Management, Ensuring Operational Security of the Data Controller, Management Activities.
Data Retention Period:
Personal data under this category is retained for 1 year.
3. Parties to Whom Personal Data May Be Transferred and Purposes of Transfer
Your personal data is transferred in compliance with KVKK and relevant legislation, limited to lawful and good faith principles.
For the purpose of ensuring business continuity, data may be transferred to email servers and call centers; to third parties providing verification and technical support services for information security; to third parties providing services for the execution of the Message Management System (İYS); and to authorized public institutions (such as the Ministry of Trade).
In the event of legal disputes or official requests, data may be transferred to judicial authorities, administrative bodies, lawyers, mediators, and other authorized public or private entities.
Additionally, for the resolution of applications, requests, or complaints submitted by you, data may be transferred directly to you, to authorized third parties, or to cooperating institutions and organizations as required for proper process execution.
4. Methods of Collecting Personal Data
Personal data may be collected through various methods in compliance with KVKK and relevant legislation.
Customer data may be collected via physical forms, electronic forms on StoneArchive’s website or mobile applications, or verbal declarations.
Data belonging to visitors and potential product or service recipients is generally collected through verbal statements.
5. Retention Period of Personal Data
Personal data is retained by StoneArchive for the legally required retention periods and for the duration specified for each data category in this notice.
Once the purpose of processing ceases and the legal retention period expires, personal data is deleted, destroyed, or anonymized.
6. Rights of the Data Subject
The real person whose personal data is processed is defined as the data subject.
Data subjects have the right to:
• learn whether their personal data is processed,
• request information if it has been processed,
• learn the purpose of processing and whether it is used accordingly,
• know the third parties to whom data is transferred domestically or abroad,
• request correction of incomplete or inaccurate data,
• request deletion or destruction of data when legal retention conditions cease,
• request notification of such actions to third parties,
• object to results arising solely from automated processing,
• claim compensation for damages arising from unlawful processing.
EXPLICIT CONSENT TEXT
“Explicit consent” refers to consent given freely, with informed awareness, for a specific matter, without any pressure or coercion.
Accordingly, this text has been prepared solely to inform you about personal data processing activities that require your explicit consent.
Providing consent is not mandatory, and we would like to emphasize that refusing consent will not prevent you from benefiting from basic services.
Pursuant to Articles 5 and 6 of the Law No. 6698 on the Protection of Personal Data (“KVKK”), information regarding the processing of your personal data within the scope of legal obligations, contractual necessities, and other exceptional circumstances has been provided to you separately through the Information Notice.
Therefore, this text includes only those personal data for which your explicit consent is required for processing, storage, and transfer.
This Explicit Consent Text covers only the data processing, storage, and transfer activities that are subject to explicit consent under KVKK.
Data Controller
Stoneline Yapı Ürünleri Sanayi Anonim Şirketi
(hereinafter referred to as “StoneArchive”)
As StoneArchive, due to your status as a member/user/data subject, we request your explicit consent for the processing of your personal data and, where necessary, for its transfer to third parties—outside the exceptional cases set forth in Articles 5 and 6 of KVKK—within the scope specified below:
For the purposes of ensuring compliance with legislation; managing company/product/service loyalty processes; carrying out communication activities; executing goods/services sales processes; conducting marketing analysis activities; managing advertising, campaign, promotion, event, and organization processes; and executing marketing processes of products and services, I hereby freely give my consent to the processing and transfer of my IDENTITY, CONTACT, and LOCATION data.
Data Subject
Full Name :
☐ I Accept
☐ I Do Not Accept
If there are any personal data listed above that you do not consent to being processed or transferred, please indicate them below.
If you consent to the processing and transfer of all personal data, please leave the section below blank.
Personal Data You Do Not Consent to Be Processed
☐ Identity
☐ Contact
☐ Location
Personal Data You Do Not Consent to Be Transferred
☐ Identity
☐ Contact
☐ Location