Supplier Information Note




INFORMATION NOTE REGARDING SUPPLIERS WITHIN THE SCOPE OF THE LAW ON THE PROTECTION OF PERSONAL DATA

Rollic Games Oyun Yazılım ve Pazarlama Anonim Şirketi ("Company"), processes data regarding its suppliers and if these suppliers are legal persons, processes data of the personnel, and executives of said suppliers, in ordinance with the Law on the Protection of Personal Data no. 6698 ("Law") as the data controller. The purpose of this present document is to fulfill the obligation to inform the aforementioned persons within the scope of Article 11 of the Law.

  1. WHICH PERSONAL DATA DO WE PROCESS?

    Data Categorization

    Context

    Identity Information

    Name, Last name

    Contact Information

    Phone number, e-mail address

    Financial Information

    Bank account information regarding real person suppliers

    Visual Information

    Visual camera recording

    Legal Transaction

    Documents, (correspondences, etc.) that may be used in a possible lawsuit/enforcement process



  2. FOR WHAT PURPOSE AND WITH WHAT LEGAL REASON DO WE PROCESS YOUR PERSONAL DATA?
    Personal data of the suppliers may be used for the establishment of a contractual relationship between the supplier and the company, fulfillment of legal obligations arising from the said contract, and legitimate interest of the data controller in accordance with the requirements of Article 5 of the Law. In this scope, data regarding the suppliers (or their personnel and executives) are processed in reference to the requirement to process data in order to enter a contract or fulfill an obligation and the requirement to process data for the data controller to achieve their legitimate interest as regulated under Article 5/2 of the Law.

    Additionally, personal data cited above may be processed to fulfill our legal obligations. Data processed for this purpose are processed in reference to instances where it is stated in the regulation or a legal obligation requires data processing.


  3. TO WHOM ARE DO WE TRANSFER PERSONAL DATA AND WHY?
    Data regarding the suppliers may be transferred to our third-party service providers if our contractual obligations to the suppliers require so. Data transferred for this purpose are transferred in reference to requirements arising from the fulfillment of contractual obligations.

    Furthermore, the data regarding our suppliers may be transferred to the dependent companies of the Company and their servers located abroad as the Company keeps its servers abroad and it is a global company. Data transferred for this purpose are transferred on the basis of explicit consent.

    Moreover, data regarding our suppliers may be transferred to authorized institutions if our legal obligations require so. Data transferred for this purpose are processed in reference to instances where a legal code or a legal obligation requires data transfer.


  4. METHOD OF PERSONAL DATA COLLECTION
    Your personal data are collected via contracts, e-mail, written or electronic channels (including camera systems).


  5. WHAT ARE YOUR RIGHTS IN THE SCOPE OF LAW?
    Your requests regarding your personal data within the scope of Article 11 of the Law can be submitted to the Company’s address at Vişnezade Mah.Şehit Mehmet Sk. Maçka Residances Sit.9b/80 Beşiktaş, İstanbul or those can be submitted to the Company by creating a request via https://www.rollicgames.com/privacy/request in writing in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Your rights under Article 11 of the Law are as follows:
    • To learn whether his/her personal data are processed or not,
    • To demand information as to if his/her personal data have been processed,
    • To learn the purpose of the processing of his/her personal data and whether these personal data are used in compliance with the purpose
    • To know the third parties to whom his/her personal data are transferred in the country or abroad,
    • To request the rectification if the personal data are processed incompletely or inaccurately and to request the notification of such rectification to third parties to whom the personal data has been transferred
    • To request the deletion or destruction of personal data in the event that the reasons requiring its processing cease to exist, despite the fact that it has been processed in accordance with the provisions of the KVKK and other relevant legislation, and to notify of such operation to third parties to whom the personal data has been transferred,
    • To object to the occurrence of a result against the data subject himself/herself by analyzing the data processed solely through automated system,

    • To claim compensation for the damage, if he/she suffers damage arising from the unlawful processing of his/her personal data.


    The applications submitted to us, depending on the nature of the request, shall be responded to within maximum 30 (thirty) days as of the receipt of the request by our Company.