Suppliers and Business Partners
As PwC Türkiye1 (“PwC Türkiye”), a member of the PwC Network which is a global network of technology-based, individual, and independent partnerships and companies, we hereby provide the following information regarding the processing of your personal data to fulfill the obligation to inform under Article 10 of the Personal Data Protection Law No. 6698 (“PDPL”).
1 PwC Bağımsız Denetim ve Serbest Muhasebeci Mali Müşavirlik A.Ş. & PwC Yeminli Mali Müşavirlik A.Ş. & PwC Danışmanlık Hizmetleri A.Ş. & PwC Yönetim Danışmanlığı A.Ş. & PwC Serbest Muhasebeci Mali Müşavirlik Ltd. Şti.
Scope, Purpose, and Legal Reason for the Processing of Your Personal Data
We process your personal data within the scope of the processing conditions listed in Article 5 of the PDPL, as explained in detail below:
The execution of works related to the goods or services provided by you, the coordination and management of communication in this context, and the quality control and assessment of the service/contract performance.
In the case that we receive support from you for the provision of our services, to make proposals, conduct pre-service processes, carry out and control business activities, and provide services.
To conduct quality control and risk management processes.
To use and update Information Technology (“IT”) systems (including account management, internal financial reporting, provision of IT services, storage, hosting, maintenance, support activities).
Your name-surname, the company you work for, sector, department and title, phone number, email address information, and personal data contained in the information and documents shared with us within the scope of the commercial relationship will be processed for the above-mentioned purposes, via electronic or physical media through printed documents and forms, by automatic and non-automatic methods, based on the legal ground that “processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject” in accordance with Article 5/2 (f) of PDPL. For individual supplier and business partners, your personal data including name-surname, the company you work for, sector, department and title, phone number, email address information, if necessary for the service, financial information and personal data contained in the information and documents shared with us within the scope of the commercial relationship will be processed for the above-mentioned purposes via electronic or physical media through printed documents and forms by automatic and non-automatic methods, based on the legal ground that “processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract” in accordance with Article 5/2 (c) of PDPL and “processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject” in accordance with Article 5/2 (f) of PDPL.
To develop commercial activities and services (to identify customer needs and to improve services).
To analyze and evaluate the efficiency of interactions between parties (CRM uses an algorithm to execute this analysis, considering interaction frequency, duration, proximity, and response time in evaluations).
To plan and execute market research for sales, marketing, and/or promotion of commercial activities and services.
To plan and execute information access authorizations of business partners and/or suppliers, to manage relationships with business partners and/or suppliers.
To provide analysis to PwC management on processes including trends, relationship maps, sales intelligence, and processes corresponding to commercial account objectives, including preparing criteria related to services received.
To execute processes and operations conducted towards determining and implementing commercial and business strategies, financial operations, communication, and conducting market research processes.
To execute contract processes.
Your name-surname, the company you work for, sector, department and title, phone number, email address information will be processed for the above-mentioned purposes via electronic or physical media through printed documents and forms by automatic and non-automatic methods, based on the legal ground that “processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject” in accordance with Article 5/2 (f) of PDPL. For individual supplier and business partners, your personal data including name-surname, the company you work for, sector, department and title, phone number, email address information, and if necessary for the service, financial information will be processed for the above-mentioned purposes via electronic or physical media through printed documents and forms by automatic and non-automatic methods, based on the legal ground that “processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract” in accordance with Article 5/2 (c) of PDPL and “processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject” in accordance with Article 5/2 (f) of PDPL.
To manage the website, systems, and applications.
Your transaction security information will be processed for the above-mentioned purpose via electronic or physical media through printed documents and forms by automatic and non-automatic methods, based on the legal ground that “processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject” in accordance with Article 5/2 (f) of PDPL.
Performance and proceeding of legal affairs.
Your name-surname, the company you work for, sector, department and title, phone number, email address information, and personal data contained in the information and documents shared with us within the scope of the commercial relationship will be processed for the above-mentioned purpose via electronic or physical media through printed documents and forms by automatic and non-automatic methods, based on the legal ground that “data processing is necessary for the establishment, exercise or protection of any right” in accordance with Article 5/2 (e) of PDPL.
To provide information to relevant and authorized individuals, institutions, and/or organizations as required by legislation.
Your name-surname, the company you work for, sector, department and title, phone number, email address information, and personal data contained in the information and documents shared with us within the scope of the commercial relationship will be processed for the above-mentioned purpose via electronic or physical media through printed documents and forms by automatic and non-automatic methods, based on the legal ground that “it is expressly provided for by the laws” in accordance with Article 5/2 (a) of PDPL and “it is necessary for compliance with a legal obligation to which the data controller is subject” in accordance with Article 5/2 (ç) of PDPL.
Transfer of Personal Data
In accordance with Article 8 of the PDPL, to the extent necessary for the realization of the above-mentioned purposes and for compliance with PwC's global company policies and limited to these purposes, your personal data will be shared:
Based on Article 5/2 (f) of the PDPL, within the scope of being necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject;
With other suppliers and/or business partners, if necessary for the provision of our services or with clients if required under the terms of agreement between clients and PwC Türkiye,
With IT service providers for the purpose of using and updating Information Technology ("IT") systems (including the provision of IT services, storage, hosting, maintenance, support activities),
Based on Article 5/2 (e) of the PDPL, within the scope of being necessary for the establishment, exercise, or protection of any right;
With lawyers, judicial and administrative authorities, if necessary for the performance and proceeding of legal affairs,
Based on Article 5/2 (a) within the scope of being expressly provided for by the laws and Article 5/2 (ç) of the PDPL, within the scope of being necessary for compliance with a legal obligation to which the data controller is subject;
With relevant and authorized individuals, institutions, and/or organizations, if necessary for the fulfillment of PwC Türkiye's obligations arising from legislation.
Your personal data will be transferred to the IT service providers we receive services from and to PwC companies located abroad, to the extent necessary for the realization of the purposes stated above and for compliance with PwC's global company policies, in accordance with Article 9 of the PDPL. You can find detailed information about the service providers used by PwC Türkiye and the locations where processing takes place here. You can find the countries where PwC companies are located here.
Your Rights in Accordance with Article 11 of the PDPL and Our Contact Information
As per Article 11 of the PDPL, you may exercise your rights by applying to PwC Türkiye. Requests for the use of rights within Article 11 of the PDPL are to be submitted in writing or to the pwc.turkiye@hs03.kep.tr electronic address via the Application Form on the “https://www.pwc.com.tr/tr/hakkimizda/pwc-turkiye-kvk-basvuru-formu.pdf” link or with a secure electronic signature as defined in the Electronic Signature Law numbered 5070 or by using mobile signature or by using the e-mail address previously notified to the data controller by the data subject and registered in the data controller’s system, it should be sent to the address tr.dpo@tr.pwc.com with the expression “Request for Personal Data Information” in the subject section.
Data Controller: PwC Türkiye
Contact Address: Kılıçali Paşa Mah. Meclis-i Mebusan Cad. No:8 Galataport İstanbul D Blok Beyoğlu/İSTANBUL
