Data Categories, Data Processing Purposes and Legal Reasons

Purposes and Legal Grounds for Processing Your Personal Data 

Your personal data categories* processed in physical premises security processes, the purposes and legal grounds of the processing and transfer of your personal data are explained in detail in the tables below. 

*For detailed information on data categories, you may review pages 74 et seq. of the Data Controllers Registry Information System Guide published by the Personal Data Protection Authority. For detailed information about the types of your personal data processed by Aras Kargo, you can apply as described in section 5. 

Data Categories 

Legal Grounds 

Processing Purposes 

Identity

  • Pursuant to Art. 5/2(f) of the LPPD, provided that it does not harm the fundamental rights and freedoms of the data subject, for the legitimate interests of the data controller.

Ensuring physical premises, employee, and customer security; Ensuring security of movable property/resources and parcels;

Keeping and tracking visitor records;

Carrying out business operations and ensuring continuity;

Handling complaints and managing customer relations and satisfaction;

Ensuring security of Company operations and parcels;

Audit/internal audit management; Following legal and compliance matters;

Providing information to authorized persons, institutions, and organizations;

Managing retention and archiving activities. 

Physical Premises Security 

  • Pursuant to Art. 5/2(a) of the LPPD, in cases where processing is expressly permitted by law;
  • Pursuant to Art. 5/2(ç) of the LPPD, it is mandatory for the data controller to fulfil its legal obligation.

Ensuring physical premises, employee, and customer security;

Ensuring security of movable property/resources and parcels; 

Carrying out business operations and ensuring continuity; 

Handling complaints and managing customer relations and satisfaction; 

Ensuring security of Company operations and parcels; 

Audit/internal audit management; 

Conducting activities in compliance with legislation; 

Following legal and compliance matters; 

Providing information to authorized persons, institutions, and organizations;

Managing retention and archiving activities. 

Legal Transaction 

  • Pursuant to Art. 5/2(e) of the LPPD, data processing is mandatory for the establishment, exercise or protection of a right;
  • Pursuant to Art. 5/2(f) of the LPPD, provided that it does not harm the fundamental rights and freedoms of the data subject, for the legitimate interests of the data controller.

Audit/internal audit management; 

Conducting activities in compliance with legislation; 

Following legal and compliance matters; 

Providing information to authorized persons, institutions, and organizations;

Managing retention and archiving activities.