TÜRKİYE METAL SANAYİCİLERİ SENDİKASI
ARTIFICIAL INTELLIGENCE EVALUATION PLATFORM
PRIVACY NOTICE REGARDING THE PROCESSING OF USER PERSONAL DATA
In accordance with the Personal Data Protection Law No. 6698 ("Law"), your personal data may be
processed by Türkiye Metal Sanayicileri Sendikası ("MESS") as the data controller within the scope
described below.
Purposes and Legal Grounds for Processing Personal Data
Your collected personal data may be processed by MESS for the purposes ("Purposes") and legal grounds
described below, within the scope of the personal data processing conditions and purposes specified
in Article 5 of the Law.
Based on the legal ground that processing of personal data of the parties of a contract is
necessary, provided that it is directly related to the establishment or performance of the
contract:
- The execution of membership processes for the company you work for on the Artificial
Intelligence Evaluation Platform ("Platform"),
- Performing all actions arising from the fulfillment of services offered through the
Platform, including assessing the artificial intelligence maturity level of the company you
work for, providing training/consulting services within this scope, and conducting analysis
activities.
Based on the legal ground that processing of data is necessary for the legitimate interests
pursued by the data controller, provided that this processing shall not violate the fundamental
rights and freedoms of the data subject:
- Planning and execution of operational processes for the purpose of performing the services
offered through the Platform,
- Conducting reporting processes,
- Following up and executing legal matters,
- Executing information security processes,
- Planning and execution of corporate communication activities,
- Ensuring that data is accurate or up-to-date,
Based on the legal ground that data processing is necessary for the establishment, exercise, or
protection of a right:
- Receiving, evaluating, and resolving your requests, questions, complaints, and suggestions,
- Retaining records for the general statute of limitations period for the purpose of serving
as evidence in potential future disputes.
Based on the legal ground that it is clearly stipulated by law and is mandatory for the data
controller to fulfill its legal obligation:
- Fulfilling requests from official institutions,
- Providing information to authorized institutions as required by law,
- Responding to data subject requests in accordance with the legislation and taking necessary
actions,
- Ensuring compliance with the retention obligations stipulated in the legislation.
Recipient Parties and Purposes for Transferring Personal Data
Within the scope of the fulfillment of the above-mentioned Purposes, your collected personal data may
be transferred to our suppliers whom we receive services from within the scope of our legitimate
interests; to legally authorized public institutions and legally authorized private individuals
within the scope of expressly provided by the laws and is necessary for fulfillment of the legal
obligation; to Amazon Web Services, Inc. located abroad, in accordance with Article 9-4(c) of the
Law; "The existence of a standard contract published by the Board, containing information such as
data categories, purposes of the data transfer, recipients and recipient groups, technical and
organizational measures to be taken by the data importer, and additional measures for special
categories of personal data" for the purposes of storage, database, security, and management.
Method of Collecting Personal Data
Your personal data is collected by MESS for the fulfillment of the Purposes stated above,
electronically via the Artificial Intelligence Assessment Platform, email, online forms, chatbot
interface and through meetings/interviews conducted face-to-face in a physical environment.
Data Subject's Rights Specified Under Article 11 of the Law
We hereby declare that as personal data subjects, you are entitled to the following rights, set forth
under Article 11 of the Law:
- To learn whether your personal data are being processed,
- To request information if your personal data have been processed,
- To learn the purpose of the processing of your personal data and whether they have been used
accordingly,
- To learn which third parties domestic or abroad your personal data has been transferred to,
- To request rectification in case your personal data has been processed incompletely or
inaccurately and to demand the operations in this regard be reported to third parties your
personal data has been transferred to,
- To demand the erasure or destruction of your personal data if the reasons for the processing no
longer exist even though it was processed in accordance with the Law and other relevant
provisions and to demand the operations in this regard be reported to third parties your
personal data has been transferred to,
- To object to negative consequences to you that are concluded, because of analysis of the
processed personal data through solely automatic systems,
- To demand compensation for the damages that you have suffered because of an unlawful processing
of your personal data.
You may submit your requests regarding the above-listed rights to MESS using the methods prescribed
by law. Your requests will be processed free of charge as soon as possible and within thirty days at
the latest, depending on the nature of your request; however, if the process incurs additional
costs, you may be charged a fee according to the rates determined by the Personal Data Protection
Board.