Aras Kargo Yurt İçi Yurt Dışı Taşımacılık Anonim Şirketi Privacy Notice On Customs Authorization Processes

1. Data Controller

Aras Kargo Yurt İçi Yurt Dışı Taşımacılık Anonim Şirketi Rüzgarlıbahçe Mah. Yavuz Selim Cad. No:2 Beykoz / İstanbul

Aras Kargo Yurt İçi ve Yurt Dışı Taşımacılık A.Ş. (“Aras Kargo”), respects your privacy and your rights regarding the protection of your personal data, within this scope, in order to ensure the security of your personal data, Aras Kargo maintains a high level protection by adopting all necessary technical and administrative security measures.

Aras Kargo is intended to provide clarification on the categories of your personal data processed by Aras Kargo, the methods of collecting personal data, the purposes of processing personal data, the legal basis for processing personal data, to whom and for what purposes personal data may be disclosed, and your rights listed in Article 11 of Law 6698 on the Protection of Personal Data (the 'LPPD') within the framework of the customs authorization processes and LPPD.

2. The Methods of Collection of Your Personal Data

Your personal data is collected by Aras Kargo wholly or partly by automated means or provided that the process is a part of any data filing system, through non-automated means, from physical and/or electronic environments, via the website www.araskargo.com.tr, printed forms, e-mail, telephone, SMS, mail and online interview/communication platforms, Aras Kargo information technology systems, and integrated systems belonging to authorized public institutions and organizations and other relevant third parties.

3. The Categories of Your Processed Personal Data and the Purposes for and the Legal Basis of the Processing of Your Personal Data

Within the scope of the notice of the Directorate of Customs and Duties Department of the Ministry of Finance of the Turkish Republic of Northern Cyprus (“TRNC”) numbered GRD.0.00-001/09-21/E.1231 and titled “Procedures and Principles to be Applied to Goods Not of Commercial Nature in Fast Cargo Transportation”, the procedures and principles to be applied to goods that are purchased online or sent by fast cargo are determined. In this regard, in accordance with the provision of Authorization of the Carrier, the purposes and legal basis for the processing and transferring of your personal data within the framework of the Customs Transaction Authorization and Undertaking Form are thoroughly explained herein below:

PERSONAL DATA CATEGORY	LEGAL BASIS OF PERSONAL DATA	THE PURPOSA FOR PROCESSING OF PERSONAL DATA
IDENTIFICATION DATA	Article 5(2)(ç) of the LPPD “data processing being required for compliance with a legal obligation to which the data controller is subject.” Article 5(2)(f) of the LPPD “data processing being required for the legitimate interests of the data controller, except where such interests are overridden by the fundamental rights and freedoms of the data subject”	Your personal data in this category is processed for the following purposes: (i) conduction of operations in compliance with legislation; (ii) conduction of financial and accounting affairs; (iii) follow-up and conduction of legal affairs; (iv) conduction / control of business activities; (v) conduction of logistics activities; (vi) conduction of customer relations management procedures; (vii) conduction of storage and archiving activities; (viii) provision of ınformation to authorized persons, ınstitutions and organizations.
COMMUNICATION DATA	Article 5(2)(ç) of the LPPD “data processing being required for compliance with a legal obligation to which the data controller is subject.” Article 5(2)(f) of the LPPD “data processing being required for the legitimate interests of the data controller, except where such interests are overridden by the fundamental rights and freedoms of the data subject”	Your personal data in this category is processed for the following purposes: (i) conduction of operations in compliance with legislation; (ii) conduction of financial and accounting affairs; (iii) follow-up and conduction of legal affairs; (iv) conduction / control of business activities; (v) conduction of logistics activities; (vi) conduction of customer relations management procedures; (vii) conduction of storage and archiving activities; (viii) provision of ınformation to authorized persons, ınstitutions and organizations.
CUSTOMERS’ TRANSACTION DATA	Article 5(2)(ç) of the LPPD “data processing being required for compliance with a legal obligation to which the data controller is subject.” Article 5(2)(f) of the LPPD “data processing being required for the legitimate interests of the data controller, except where such interests are overridden by the fundamental rights and freedoms of the data subject”	Your personal data in this category is processed for the following purposes: (i) conduction of operations in compliance with legislation; (ii) conduction of financial and accounting affairs; (iii) follow-up and conduction of legal affairs; (iv) conduction / control of business activities; (v) conduction of logistics activities; (vi) conduction of customer relations management procedures; (vii) conduction of storage and archiving activities; (viii) provision of ınformation to authorized persons, ınstitutions and organizations.
LEGAL TRANSACTION DATA	Article 5(2)(ç) of the LPPD “data processing being required for compliance with a legal obligation to which the data controller is subject.” Article 5(2)(f) of the LPPD “data processing being required for the legitimate interests of the data controller, except where such interests are overridden by the fundamental rights and freedoms of the data subject”	compliance with legislation; (ii) conduction of financial and accounting affairs; (iii) follow-up and conduction of legal affairs; (iv) conduction / control of business activities; (v) conduction of logistics activities; (vi) conduction of customer relations management procedures; (vii) conduction of storage and archiving activities; (viii) provision of ınformation to authorized persons, ınstitutions and organizations.

4. Transfer of Your Personal Data to Recipient Groups

Your personal data which are processed within the scope of each personal data category listed hereinabove may be transferred to the following recipient groups if the aforesaid personal data processing conditions (legal basis) for the data category concerned are further satisfied in terms of the purposes for transfer, and in accordance with articles 8 and/or 9 of the LPPD:

to our service providers (e.g. internet infrastructure support companies, e-mail service providers) located in Turkey and/or abroad for the purposes as specified hereinabove for each data category, and particularly, in order to ensure the procurement of products and/services for the execution of Aras Kargo’s operations,
to our TRNC Branch located in TRNC for the purposes as specified hereinabove for each data category, and particularly, in order to ensure business and operation continuity, and
to authorized public institutions and organizations (e.g. Information and Communication Technologies Authority, courts) located in Turkey and/or TRNC for the purposes as specified hereinabove for each data category, and particularly, in order to the fulfill Aras Kargo’s statutory obligations and the follow-up the legal affairs thereof.

5. Your Rights as a Data Subject

Your rights as a data subject are regulated in Article 11 of the LPPD and you may submit your applications regarding your rights to Aras Kargo in accordance with the provisions of the Communiqué on the Procedures and Principles of Application to the Data Controller.

* Important Note: We would like to remind you that no special categories of personal data (e.g. religious information or blood type information) should be included within the scope of data subject applications.