PERSONAL DATA PROTECTION COMMITMENT

Resim

Commitment to the Protection of Personal Data

………………… (“Firm”),

The company will provide services within the scope of information technology at Osman Özerman Wellness. As part of these IT services, the company will execute processes such as the creation and management of the website, revisions, server management, email management, system management, review and correction of error reports, and version updates. In doing so, the company will have access to personal data stored on Osman Özerman Wellness' servers or software.

Additionally, physical and digital documents, records, files, archives, emails, applications, and other channels used by the company will also allow access to personal data held by Osman Özerman Wellness.

In order to fulfill its contractual obligations, the company is required to take the necessary administrative and technical measures in accordance with the Personal Data Protection Law ("KVKK" or "Law"). In this regard, the company commits to the obligations outlined in this document.

Through this commitment, the company affirms the following:

  • The channels made available to the company are essential to fulfilling its contractual and legal obligations. Without access to these channels, it would not be able to perform its obligations.

  • Data recorded on Osman Özerman Wellness' servers and software will only be stored on Osman Özerman Wellness' servers. The company will not copy, transfer, or move any personal data from Osman Özerman Wellness' servers to its own or third-party servers without explicit prior written consent from Osman Özerman Wellness.

  • The company will not access, obtain, copy, or transfer personal data recorded by Osman Özerman Wellness unless required for the contractual services and will not act outside of these circumstances.

  • If any data recorded by Osman Özerman Wellness is transferred or copied to the company, the company will take the necessary precautions to protect this data and prevent unauthorized access by personnel or third parties.

  • The company will ensure that data recorded by Osman Özerman Wellness is never transferred or stored abroad, nor will it be backed up on servers located abroad.

  • The company will make personal data obtained from Osman Özerman Wellness' website visible only to Osman Özerman Wellness and will prevent third parties from accessing this data through necessary security measures.

  • The company will inform Osman Özerman Wellness in writing about the cookies used on the website, their functions, and the data collected via these cookies, ensuring that cookies not requested by Osman Özerman Wellness are not used on the website.

  • The company will ensure that all personal data shared by users via the website directly reaches Osman Özerman Wellness' servers and will take necessary technical measures to prevent this data from falling into the hands of third parties.

  • The company will provide Osman Özerman Wellness or any third-party designated by Osman Özerman Wellness access to the company’s data, to audit compliance with the Law and request documentation regarding administrative and technical measures taken.

  • The company will ensure that all its personnel are informed and trained in compliance with the Law, and that personnel who do not attend training will not be assigned tasks related to providing services to Osman Özerman Wellness.

  • The company will obtain commitments from its personnel that they will carry out their tasks in full compliance with the Law, and personnel who refuse to provide such commitments will not be permitted to serve Osman Özerman Wellness.

  • The company will ensure that all maintenance services performed comply with the Law and that the technical and administrative measures taken meet the requirements of the Law.

  • The company understands that unlawful data acquisition or leakage may result in criminal liability and administrative fines. The company commits to never sharing personal data in violation of the Law or requesting, receiving, copying, or obtaining such data from Osman Özerman Wellness.

  • The company is aware that it has been subjected to a compliance program under the Law, has received consultancy on KVKK, and is aware of all its obligations under KVKK.

  • The company will immediately notify Osman Özerman Wellness in case of suspicion of any data leak.

  • The company will respond to any requests related to personal data held by Osman Özerman Wellness within 3 days, in writing.

  • Any documents, records, or files containing personal data from Osman Özerman Wellness must be sent to the company’s designated email address or physical address as specified in this document.

In the event that the company violates any terms of this commitment or the Law, it agrees to indemnify Osman Özerman Wellness for any damages, penalties, lawsuits, and claims.

X