GDPR Application Procedure | Malkan Makina

Knowing who is making the request is the first and most important checkpoint.

Data subject

The natural person whose personal data is processed by the Company.

Attorney

On behalf of the data subject, with a notarised power of attorney granting specific authority.

Parent / guardian

On behalf of minors and persons under guardianship, with a document evidencing the power of representation.

Requests made on behalf of legal entities fall outside this procedure; the Law protects the data of natural persons only.

Every application, through any of the four channels, is recorded with the same care.

• Written applicationPetition with wet signature, in person, via a notary public or by registered mail with return receipt: Karayolları Mah. 559. Sok. No:16 Gaziosmanpaşa / İSTANBUL, Türkiye
• Registered e-mail (KEP)malkanmakina@hs06.kep.tr
• Secure electronic or mobile signatureBy sending the signed application to info@malkan.com.tr
• Your registered e-mail addressFrom the address you previously notified to the Company and registered in our system, to info@malkan.com.tr

Applications must be submitted in Turkish.

A complete application is the first condition for a fast response.

• Name, surname and, for written applications, signature,
• Turkish ID number for Turkish citizens; nationality and passport number or, if any, ID number for foreign nationals,
• Residential or business address for notification,
• E-mail address, telephone and fax number for notification, if any,
• Subject of the request and, if any, related information and documents.

Using the form is recommended, but any application containing this information is assessed even without it.

Protecting your data starts with not giving it to the wrong person.

• Where necessary to confirm that the application comes from the data subject, additional information or documents may be requested.
• Information and documents requested for this purpose are used only for identity verification and kept in the application file.
• Personal data is not shared with applicants whose identity cannot be verified; they are informed of this with reasons.

Every application closes with a reasoned response.

1. 1RecordingThe application is recorded on the date it reaches the Company.
2. 2ReviewThe request is assessed as soon as possible according to its nature.
3. 3Within 30 daysThe request is accepted, or rejected with reasons; the response is sent in writing or electronically.

Accepted requests are carried out. If the application arose from the Company’s error, any fee charged is refunded.

Free of charge is the rule; the exception is in the Board’s tariff.

Rule

Applications are concluded free of charge.

Written response

No fee up to ten pages; for each page beyond ten, the processing fee set in the Communiqué may be charged.

Recording medium

If the response is provided on a medium such as a CD or USB stick, the fee may not exceed the cost of the medium.

If our response does not satisfy you, the way is open: the Personal Data Protection Board.

If your application is rejected, you find the response insufficient or no response is given in time, you may lodge a complaint with the Board under Article 14 of the Law.

Precondition

An application must first have been made to the Company.

Time limit

Within 30 days of learning the response, and in any case within 60 days of the application date.

We state the limits of the rights openly too.

Under Article 28/2 of the Law, rights other than the right to claim compensation cannot be exercised where processing is necessary for preventing crime or for an investigation, concerns data made public by the data subject, is necessary for supervisory or regulatory duties of competent authorities, or for protecting the State’s economic and financial interests.

The full list of your rights is in Section 7 of our Privacy Notice.