Musixen

INFORMATION TEXT



MUSETECHS SOFTWARE CONSULTING IMPORT AND EXPORT TRADE AND INDUSTRY INC.

has adopted a number of basic rules in order to fulfill its legal obligations with the utmost care and sensitivity in order to protect the privacy of all your personal data you share and your fundamental rights and freedoms, especially the privacy of private life, in order to provide better service to our valued users/customers. Musetechs Yazılım Danışmanlık İthalat Ve İhracat Ticaret Ve Sanayi A.Ş. aims to protect the rightful trust of its customers in Musetechs Yazılım Danışmanlık İthalat Ve İhracat Ticaret Ve Sanayi A.Ş by acting in accordance with these basic rules.

As Musetechs Yazılım Danışmanlık İthalat Ve İhracat Ticaret Ve Sanayi A.Ş, in accordance with GDPR-related articles and DIRECTIVE DECISIONS, in this "Information Form" we have prepared as Data Controller, information is provided on the purpose for which your personal data will be processed, to whom and for what purpose your processed personal data can be transferred, the method and legal reason for the collection of your data and your rights to request information, correction and other rights regarding your personal data listed in the relevant article of GDPR.

Any up-to-date information about you that you have shared with our company within the scope of GDPR will be considered as "Personal Data", and this data will be stored in the most secure way possible, in accordance with the legislation and the procedures and principles set forth below, in accordance with the conditions stipulated by the legislation. .

A) Data Controller

As "Data Controller", data can be processed by Musetechs Yazılım Danışmanlık İthalat Ve İhracat Ticaret Ve Sanayi A.Ş. within the scope of what is explained below.
Your personal data that you have transmitted to Musetechs Yazılım Danışmanlık İthalat Ve İhracat Ticaret Ve Sanayi A.Ş can be recorded, stored, updated, changed, edited, shared by third parties, classified and processed for the continuation of the services by Musetechs Yazılım Danışmanlık İthalat Ve İthalat Ticaret Ve Sanayi A.Ş.

B) Processing of Specific Personal Data and Methods


Within the framework of your use of the products and services of Musetechs Yazılım Danışmanlık İthalat Ve İhracat Ticaret Ve Sanayi A.Ş., your personal data specified below are processed through our sales offices, website and other channels:


• Your open identity data such as name, surname, Passport Number and other country citizenship number information, date of birth, place of birth, gender,
• Your address, telephone number, e-mail address and other contact data,
• All kinds of information, including information about the immovables related to the product/service you have purchased, and your payment information regarding them,
• Your other personal data that you have personally transmitted within the framework of your requests, suggestions, and complaints,
• If you use our websites, your behavior and digital trace information obtained through cookies,
• Your voice call recordings kept in accordance with company standards,
• Your camera recording images that occur when you visit our workplaces,
• Your personal data of special nature for the work of the human resources department.

C) For What Purposes Your Personal Data Will Be Processed


Your personal data listed above may be processed for the purposes listed below and for other similar purposes;
• Communicating with you,
• Performance of the contracts signed with the products and services offered,
• Informing about products by means of e-mail and online advertising,
• Presenting special campaigns and promotional activities related to our products/services and analysis of the data we process within this scope within the framework of statistical and planning activities,
• Managing customer satisfaction and complaints; fulfillment of requests transmitted through channels such as our sales offices, our website, etc.; conducting customer satisfaction surveys,
• Solving problems related to products and services,
• Procurement of services from external sources such as the development of products and services and the acquisition of technology and infrastructure services,
• Arrangement of mandatory information and documents within the framework of operation in accordance with the relevant legislation, storage and sharing of information requested by public institutions and organizations, fulfillment of notification obligations and fulfillment of other legal obligations,
• Taking all necessary technical and administrative measures in order to ensure the security of our systems and applications,
• Sharing information and documents that are essential for doing business with our business partners within the framework of the presentation and development of our products and services

In accordance with the provisions of other relevant legislation, your personal data may be processed, transferred to the physical and/or electronic archive and information systems of Musetechs Yazılım Danışmanlık İthalat Ve İhracat Ticaret Ve Sanayi A.Ş. and kept in both digital and physical environment.

D) To Whom Your Personal Data May Be Transferred


Your above-mentioned personal data may be shared with the following people or institutions within the scope of the Law and relevant legislation and for the purposes listed above, in accordance with the law and the rules of honesty, and by observing the principle of proportionality, by providing data security with confidentiality agreements that also contain provisions regarding data transfer:

• Service providers and business partners that provide infrastructure and software support that we benefit from and cooperate with,
• Official institutions and organizations such as regulatory and supervisory institutions,
• Our business partners, solution partners, especially the third parties we consult, including lawyers, tax consultants and auditors


E) Legal Reasons for Processing Your Personal Data

Your personal data is processed by Musetechs Yazılım Danışmanlık İthalat Ve İhracat Ticaret Ve Sanayi A.Ş. in accordance with the purposes mentioned above and in full compliance with the principles specified by the GDPR. This processing aims to provide products and services and to ensure the proper execution of the rights and obligations regulated by the legislation.

F) Your Rights as a Personal Data Owner

Within the scope of GDPR, you have the right:
· To be informed whether your personal data is being processed,
· To request information if your personal data has been processed,
· To learn the purpose of processing your personal data and whether they are being used in accordance with that purpose,
· To know the third parties to whom your personal data has been transferred,
· To request the correction of your incomplete or inaccurately processed personal data,
· To inform the third parties to whom your personal data has been transferred about any corrections,
· To request the rectification, deletion, or destruction of your personal data in case of incomplete or inaccurate processing,
· To object to the processing of your personal data, particularly in cases where automated systems are used and the outcome has a negative impact on you,
· To demand compensation for damages in case of unlawful processing of your personal data.
Your requests included in your applications will be concluded as soon as possible and free of charge, within thirty days at the latest, depending on the nature of the request. However, if the transaction requires a separate cost, a fee may be charged. If the application is made due to an error caused by Musetechs Yazılım Danışmanlık İthalat Ve İhracat Ticaret Ve Sanayi A.Ş., the fee will be refunded.
According to the GDPR, you can send your application request in writing to Musetechs Yazılım Danışmanlık İthalat Ve İhracat Ticaret Ve Sanayi A.Ş. You can submit your request by filling out the form on our website and attaching a copy of your ID and other contact information. You can deliver it to the Customer Relations Department in person, through a notary public, by registered letter with return receipt, or by email to the following address: support@musixen.com.
Musetechs Yazılım Danışmanlık İthalat Ve İhracat Ticaret Ve Sanayi A.Ş. reserves the right to inform you about any changes that may occur in the GDPR and other relevant legislation and to make amendments to the text of the consent letter.

G) Circumstances That Do Not Require Consent


Pursuant to GDPR, Musetechs Yazılım Danışmanlık İthalat Ve İhracat Ticaret Ve Sanayi A.Ş., who is the data controller, has the right to process personal data without obtaining explicit consent, in cases where data processing is necessary for its legitimate interests provided that it is expressly stipulated in the law and is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract, it is mandatory for Musetechs Yazılım Danışmanlık İthalat Ve İhracat Ticaret Ve Sanayi A.Ş., as the data controller, to fulfill its legal obligations, provided that it is made public by the person concerned, data processing is mandatory for the establishment, exercise or protection of a right, provided that it does not harm the fundamental rights and freedoms of the data subject.


Musetechs Yazılım Danışmanlık İthalat Ve İhracat Ticaret Ve Sanayi A.Ş.
MEMBER INFORMATION AND OPEN CONSENT DECLARATION TEXT

Information Note is about the processing of personal data obtained by Emniyet Evleri Mahallesi Yeniçeri Sokak Güler İş Merkezi No:2/3 Kağıthane / İstanbul (“MUSETECHS YAZILIM DANIŞMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş.” / “Company”) from users who are members by signing up to become a member and benefit from the application developed by the company in order to carry out its main field of activity, within the scope of GDPR, DIRECTIVE DECISIONS and other relevant legislation by our Company.

A. PERSONAL DATA COLLECTED, METHOD OF COLLECTION AND LEGAL REASON

In order to benefit from and use the application developed by our company to carry out its main activity, data such as name and surname, person's date of birth, gender, contact numbers, e-mail addresses, credit card information and other financial payment information, address information, music/song-related records containing audio and video are collected by the company from the data owner during and after the membership process.

B. PURPOSE OF PROCESSING PERSONAL DATA

Your personal data will be processed by the COMPANY for the following purposes within the scope of personal data processing conditions and purposes specified in GDPR articles and DIRECTIVE DECISIONS:
1. In order to ensure the operation and development of the software-containing application developed to perform the main activity of the company, and to produce strategies to determine the market network and target audience.
2. All other legal obligations.

C. TO WHOM AND FOR WHAT PURPOSE PERSONAL DATA MAY BE TRANSFERRED

Your personal data may be transferred to the following persons within the framework of the personal data processing conditions and purposes specified in GDPR articles and DIRECTIVE decisions.
1. To company officials and our company's lawyers, independent auditors, potential shareholders, NGOs and organizations whose field of activity is music.
2. Occupational health and safety and information security experts, legally authorized public and private institutions and organizations such as the relevant Ministry, Court, Prosecutor's Office.
3. Visits to the sites of third parties related to the company's business subject and for the purpose of on-site operation, to the enterprises, institutions and organizations that own the field.
4. Data can be transferred abroad in order to carry out the main activity of the company.
5. For internet service providers such as YANDEX, GOOGLE, the company may share data to perform its core business. These data are kept in accordance with the privacy policies.

D. KEEPING PERSONAL DATA CORRECT AND UPDATED

Due to the obligation of the Data Controllers to keep the personal data accurate and up-to-date, the Related Person undertakes to update the personal data he/she shares with our Company is correct and in case of change, and accepts and declares that he/she cannot claim any rights due to the failure to notify our Company of the correct and up-to-date personal data.

E. STORAGE AND DISPOSAL

The personal data obtained is stored for 10 years and is destroyed within 180 days following the expiration of the 10 years, if no lawsuit has been filed by the members of the application within this 10-year period.

OPEN CONSENT DECLARATION

I ACKNOWLEDGE, REPRESENT AND UNDERSTAND THAT I AGREE TO DO THE FOLLOWING WITH EXPRESS CONSENT:
• to share my general and special personal data, which I shared as documents and information while filling the Application Membership Application Form, with my own express consent, with Musetechs Yazılım Danışmanlık İthalat Ve İhracat Ticaret Ve Sanayi A.Ş.
• The collection, recording, storage of my personal data, which I have provided during the establishment and execution of the application and membership agreement, by Musetechs Yazılım Danışmanlık İthalat Ve İhracat Ticaret Ve Sanayi A.Ş., as “Data Controller”, in full or partially automatic or non-automatic ways provided that it is a part of any data recording system, necessary for the purpose for which they are processed or in the relevant legislation. to be stored for the stipulated period, modified, updated, controlled at regular intervals and, if necessary, rearranged, disclosed, transferred, taken over, made available, classified or processed, including preventing its use,
• Without being limited to the ones listed above, in order to carry out all kinds of transactions stipulated in the law, and to fulfill my obligations stipulated in the legislation and/or the contract, my personal data is transferred to the public institutions and organizations to which it is liable, relevant third parties, especially the relevant non-governmental organizations, and the quality of application, and data is transferred to third parties and company institutions abroad, when necessary, in order to ensure functioning and development as required.

ARTIST INFORMATION AND OPEN CONSENT DECLARATION TEXT

Artıst Informatıon And Open Consent Declaratıon Text is about the processing of personal data obtained by (“MUSETECHS YAZILIM DANIŞMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş.” / “COMPANY”) from persons who share records on music/songs containing audio and video as a requirement of the contracts made for the application developed by Musetechs to perform the main activity of the company, within the scope of GDPR, DIRECTIVE DECISIONS and other relevant legislation.

A. PERSONAL DATA COLLECTED, METHOD OF COLLECTION AND LEGAL REASON

Name, surname, person birth information, gender, contact numbers, e-mail addresses, credit card information and other financial payment information, address information, music/song recordings containing audio and video obtained by the company from the data owner during the sharing of elements to benefit from the application developed by our company in order to perform its main activity, to use the application and to contribute to performance of the agreements made for the application.

B. PURPOSE OF PROCESSING PERSONAL DATA

Your personal data will be processed by the COMPANY for the following purposes within the scope of personal data processing conditions and purposes specified in GDPR articles and DIRECTIVE DECISIONS:
1. In order to ensure the operation and development of the software-containing application developed to perform the main activity of the company and to produce strategies,

C. TO WHOM AND FOR WHAT PURPOSE PERSONAL DATA MAY BE TRANSFERRED

Your personal data may be transferred to the following persons within the framework of the personal data processing conditions and purposes specified in GDPR articles and DIRECTIVE decisions:
1. To company officials and our company's lawyers, independent auditors, potential shareholders, NGOs and organizations whose field of activity is music
2. Occupational health and safety and information security experts, legally authorized public and private institutions and organizations such as the relevant Ministry, Court, Prosecutor's Office,
3. Visits to the sites of third parties related to the company's business subject and for the purpose of on-site operation, to the enterprises, institutions and organizations that own the field
4. Data can be transferred abroad in order to carry out the main activity of the company.
5. For internet service providers such as YANDEX, GOOGLE, the company may share data to perform its core business. These data are kept in accordance with the privacy policies.

D. KEEPING PERSONAL DATA CORRECT AND UPDATED

Due to the obligation of the Data Controllers to keep the personal data accurate and up-to-date, the Related Person undertakes to update the personal data he/she shares with our Company is correct and in case of change, and accepts and declares that he/she cannot claim any rights due to the failure to notify our Company of the correct and up-to-date personal data.

E. STORAGE AND DISPOSAL

The personal data obtained is stored for 10 years and is destroyed within 180 days following the expiration of the 10 years, if no lawsuit has been filed by the members of the application within this 10-year period.

F. RIGHTS OF THE RELATED PERSON AND THE METHOD OF USE OF THE RIGHTS

The "Relevant Person", the personal data owner, will be able to notify the rights and requests set forth in the GDPR by filling in the Application Form at https://www.musixen.com/ in accordance with the procedure.

OPEN CONSENT DECLARATION

I ACKNOWLEDGE, REPRESENT AND UNDERSTAND THAT I AGREE TO DO THE FOLLOWING WITH EXPRESS CONSENT:
• to share my general and special personal data, which I shared as documents and information while filling the Application Membership Application Form, with my own express consent, with Musetechs Yazılım Danışmanlık İthalat Ve İhracat Ticaret Ve Sanayi A.Ş.
• The collection, recording, storage of my personal data, which I have provided during the establishment and execution of the application and membership agreement, by Musetechs Yazılım Danışmanlık İthalat Ve İhracat Ticaret Ve Sanayi A.Ş. , as “Data Controller”, in full or partially automatic or non-automatic ways provided that it is a part of any data recording system, necessary for the purpose for which they are processed or in the relevant legislation. to be stored for the stipulated period, modified, updated, controlled at regular intervals and, if necessary, rearranged, disclosed, transferred, taken over, made available, classified or processed, including preventing its use,
• Without being limited to the ones listed above, in order to carry out all kinds of transactions stipulated in the law, and to fulfill my obligations stipulated in the legislation and/or the contract, my personal data is transferred to the public institutions and organizations to which it is liable, relevant third parties, especially the relevant non-governmental organizations, and the quality of application, and data is transferred to third parties and company institutions abroad, when necessary, in order to ensure functioning and development as required.

PERSONAL DATA PROTECTION AND PRIVACY POLICY

A. SCOPE

Protection of Personal Data and Privacy Policy of MUSETECHS YAZILIM DANISMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş. hereinafter referred to as "MUSETECHS YAZILIM DANISMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş." has been prepared in order to provide the necessary information by explaining the whole of the rules for the processing of personal data.

B. DEFINITIONS

Personal Data: It is any type of information that can be identified or identifiable and includes all situations that enable the identification of the person as a result of carrying a concrete content that expresses the physical, economic, cultural, social or psychological identity of the person or as a result of associating with any record such as identity, tax, insurance number.
Special personal data: Data on race, ethnicity, political opinion, philosophical belief, religion, sect or other beliefs, association, foundation or union membership, health, sexual life, criminal conviction and security measures, and biometric and genetic data.
Express Consent: Consent on a specific subject, based on being informed and expressed with free will.
Anonymization: Making personal data incapable of being associated with an identified or identifiable natural person under any circumstances, even by matching with other data.
Processing personal data: It is any operation performed on the data, such as obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, classifying or using personal data in whole or in part by automatic or non-automatic means provided that it is a part of any data recording system. blocking. This includes all types of operations performed on the data, starting from the first time the data is obtained.
Personal data owner: Natural person whose personal data is processed
Filing System: Registration system where personal data is processed and structured according to certain criteria
Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.
Data processor: The natural or legal person who processes personal data on behalf of the data controller based on the authority given by him.
GDPR: General Data Protection Regulation
Policy: Protection of Personal Data and Privacy Policy of MUSETECHS YAZILIM DANISMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş.

C. PURPOSE


The purpose of this policy is to inform the relevant people about the data processing activities and systems related to personal data carried out byMUSETECHS YAZILIM DANIŞMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş.

D. PERSONAL DATA


1.General Principles Regarding Personal Data Processing


MUSETECHS YAZILIM DANISMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş. processes personal data in accordance with the following principles, pursuant to GDPR articles and DIRECTIVE DECISIONS and within the scope of the purposes exemplified in the 'Purposes of Processing Personal Data' section of this Policy:
- Compliance with the law and honesty rules
- Being accurate and up-to-date when necessary
- Processing for specific, explicit and legitimate purposes
- Being connected, limited and restrained for the purpose for which they are processed.
- Preservation for the period required by the relevant legislation or for the purpose for which they are processed.

2. Processed Personal Data

Processed Personal Data which is processed by MUSETECHS YAZILIM DANISMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş. is processed in the light of activities that can be carried out without express consent in accordance with the relevant articles of the GDPR or by obtaining the express consent of the data owners. These types of personal data, which are processed in accordance with the principles in this Policy, depending on the type and nature of the relationship between MUSETECHS YAZILIM DANISMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş and the data owner, the communication channels used and the purpose information, are as follows, but not limited to these.
- Information identifying the data owner such as name, surname, profession, title, employment information, educational status, gender, marital status, spouse/child information, citizenship status, military service information, criminal record information, tax liability status,
- Data such as date of birth, place of birth, identity number, blood group, religion and photograph contained in identification documents such as a photocopy of identity card, photocopy of identity card, passport and driver's license,
- Contact information such as address, e-mail, telephone and fax numbers, and communication records within the scope of telephone calls and e-mail correspondence, other voice data,
- Real person information in documents for legal persons such as tax plate, trade newspaper, authorization certificate, ISO documents, qualification certificates, circular of signature and activity certificate,
- Detailed financial data on pricing, settlement, collection and payment activities.
- All kinds of audio and video recordings containing music-songs, etc., that make the identity of the artists, members and users identifiable, to be presented in the application used due to the main activity of the company.

3. Purposes of Processing Personal Data

Personal data is processed by MUSETECHS YAZILIM DANISMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş. for the purposes stated in the relevant provisions of GDPR and listed below;
- Clearly stipulated in laws,
- MUSETECHS YAZILIM DANISMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş. is directly related to and necessary for the establishment or performance of a contract,
- Processing of personal data is mandatory for MUSETECHS YAZILIM DANISMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş. to fulfill its legal obligations,
- Processing of personal data by MUSETECHS YAZILIM DANISMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş. for the purpose of making it public, provided that they are made public,
- Processing of personal data by MUSETECHS YAZILIM DANISMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş. is mandatory for the establishment, use or protection of the rights of MUSETECHS YAZILIM DANISMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş. or its data owners or third parties,
- It is mandatory to process personal data for the legitimate interests of MUSETECHS YAZILIM DANISMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş., provided that it does not harm the fundamental rights and freedoms of data owners,
- If the data processing activity is necessary for the protection of the life or physical integrity of the personal data owner or someone else, and in this case, the personal data owner is unable to express his consent due to actual impossibility or legal invalidity.

Personal data is processed by MUSETECHS YAZILIM DANISMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş., within the scope of the above-mentioned conditions, for the purpose of providing services and compliance with the legislation and for the purposes stated below;
- In line with the aim of ensuring the execution of human resources policies of MUSETECHS YAZILIM DANISMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş.;
- In line with the fulfillment of legal and commercial obligations with MUSETECHS YAZILIM DANISMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş. and people who have business relations with MUSETECHS YAZILIM DANISMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş, To ensure the physical security and control of the administrative operations, service-oriented operations and locations, carried out by MUSETECHS YAZILIM DANISMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş, business partner/customer/supplier/business partner (authorized or employees or partners) evaluation processes, legal and commercial risk analysis, legal compliance process, financial affairs execution.
- In line with the purpose of determining and implementing the commercial and business strategies of MUSETECHS YAZILIM DANISMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş.;
- Finance operations, communication, market research and social responsibility activities, purchasing operations (demand, offer, evaluation, order, budgeting, contract) carried out by MUSETECHS YAZILIM DANISMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş.
- Internal system and application management operations can be listed as the management of legal operations.

4. Retention Period of Personal Data

Personal data is kept within the body of MUSETECHS YAZILIM DANIŞMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş for the duration of the relevant legal storage periods, and is kept for the period necessary for the realization of the activities related to this data and the purposes specified in this Policy. Personal data whose purpose of use has expired and whose legal storage period has expired is deleted, destroyed or anonymized by MUSETECHS YAZILIM DANIŞMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş. in accordance with the relevant article of GDPR.

5. Rights of Data Owner

The rights of real persons whose personal data are processed are regulated and in accordance with this article, data owners have the following rights over MUSETECHS YAZILIM DANIŞMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş.:
a. Learning whether personal data is processed
b. If personal data has been processed, requesting information about it
c. Learning the purpose of processing personal data and whether they are used in accordance with the purpose
d. Knowing the third parties to whom personal data is transferred at home or abroad,
e. Requesting correction of personal data in case of incomplete or incorrect processing,
f. Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in the relevant article of the Law,
g. Requesting notification of correction and deletion processes to third parties to whom personal data has been transferred
h. Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
i. Requesting the compensation of the damage in case you suffer damage due to the unlawful processing of personal data
Requests from data owners for the use of one of the above rights will be met within 30 days at the latest.
Within the scope of these requests and GDPR, all questions and requests regarding your personal data can be submitted by filling out the application form and personally delivering the identifying documents, sending them through a notary public or by e-mail registered to support@musixen.com.
If the requests require additional costs, MUSETECHS YAZILIM DANIŞMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş. will be able to charge a fee in the amounts determined within the scope of the relevant legislation.

6. Data Transfer To Abroad

In order to meet the purposes exemplified in the 'Purposes of Processing Personal Data' section of this Policy, personal data may be transferred abroad in accordance with the legislation. In these transfers, necessary administrative and technical measures are taken to protect personal data as required.

7. Security of Personal Data

a. Security Measures
In accordance with the GDPR, our company takes the necessary measures and controls to ensure the appropriate level of security in order to prevent the illegal processing of the personal data it processes, to prevent illegal access to the data and to ensure the preservation of the data, and carries out the necessary audits in this context or have them made.
b. Audit
Our company performs audit or has had it done, in accordance with the relevant Articles of the GDPR. The results of these audits are reported to the relevant department within the scope of the internal operation of the Company and necessary activities are carried out to improve the measures taken.
Necessary systems are established and necessary trainings are provided to the existing employees of our company and those who have just joined the business unit to raise awareness about the protection of personal data.

PERSONAL DATA RETENTION AND DISPOSAL POLICY

CONTENTS


1. INTRODUCTION AND PURPOSE OF PREPARING THE POLICY
2. DEFINITIONS
3. PRINCIPLES
4. EXPLANATIONS ON REASONS REQUESTING STORAGE AND DISPOSAL
5. STORAGE AND DISPOSAL TIMES
6. PROCEDURES FOR STORAGE AND DISPOSAL OF PERSONAL DATA BY OUR COMPANY
I. RECORDING MEDIAS
II. TECHNICAL AND ADMINISTRATIVE MEASURES
i. Administrative Measures
ii. Technical Measures
III. DISPOSAL METHODS OF PERSONAL DATA
7. OTHER MATTERS

1. INTRODUCTION AND PURPOSE OF PREPARING THE POLICY



The Personal Data Retention and Disposal Policy (“Retention and Disposal Policy”) has been prepared on the basis of the relevant article regulations of the GDPR.
It has been prepared by our Company in the capacity of the responsible person in order to fulfill our obligations pursuant to the Regulation on the Deletion, Destruction or Anonymization of Personal Data (“Regulation”) and to inform data subjects about the principles of determining the maximum storage period required for the purpose for which their personal data is processed, and the processes of deletion, destruction and anonymization.

2. DEFINITIONS

Anonymization: Making personal data incapable of being associated with an identified or identifiable natural person in any way, even by matching with other data
Information Note: Explanation to the person concerned about the purpose and how long the personal data will be stored, the method in which it is collected, how it is stored and whether it will be shared with third parties.
Inventory: The inventory that data controllers details the personal data processing activities they carry out in connection with their business processes by explaining the personal data processing purposes, data category, transferred recipient group and data subject group, and the maximum time required for the purposes for which personal data is processed, personal data foreseen to be transferred to foreign countries and measures taken regarding data security
Related Person : Natural person whose personal data is processed
Destruction: Deletion, destruction or anonymization of personal data
GDPR: European Union General Data Protection Regulation
Recording Media: Any environment where personal data is processed wholly or partially automatically or by non-automatic means provided that it is a part of any data recording system.
Personal Data: Any information relating to an identified or identifiable natural person
Processing of Personal Data: Transactions of recording, storing, preserving, changing, reorganizing, disclosing, transferring, taking over, making available, classifying personal data
Deletion of Personal Data: The deletion of personal data is the process of making personal data inaccessible and non-reusable for the relevant users.
Destruction of Personal Data: The process of destroying personal data is the process of making personal data inaccessible, unrecoverable and unusable by anyone in any way.
Special Personal Data: Data about race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, clothing, association, foundation or union membership, health, sexual life, criminal conviction and security measures, and biometric and genetic data of individuals
Periodic Destruction: In the event that all of the personal data processing conditions in the Law are eliminated, the deletion, destruction or anonymization process to be carried out ex officio at repetitive intervals and specified in the personal data storage and destruction policy.
Data Processor: The natural or legal person who processes personal data on behalf of the data controller based on the authority given by him.
Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system
Recording Media Contact Person: The natural person notified by the data controller during registration to the Registry for the communication to be established with the Authority, regarding the obligations of the legal persons residing in Turkey and the representative of the data controller of the legal entity not residing in Turkey, within the scope of the Law and secondary regulations to be issued based on this Law.

3. PRINCIPLES

1. Our company acts within the framework of the principles listed in the relevant article of GDPR in the deletion, destruction and anonymization of personal data:
1.1. Personal data can only be processed in accordance with the procedures and principles stipulated in GDPR and other country laws.
1.2. Compliance with the following principles in the processing of personal data is mandatory in accordance with the GDPR:
1.2.1. Compliance with the law and honesty rules.
1.2.2. Being accurate and up to date when necessary.
1.2.3. Processing for specific, explicit and legitimate purposes.
1.2.4. Being relevant, limited and proportionate to the purpose for which they are processed.
1.2.5. To be kept for the period required by the relevant legislation or for the purpose for which they are processed.
2. In terms of compliance with the above-mentioned principles, our Company acts in accordance with the provisions of the GDPR and DIRECTIVE DECISIONS on data security as a Data Controller.
3. The appropriate method of deleting, destroying or anonymizing personal data ex officio is determined by our Company.
4. In the event that all the conditions for processing personal data cease to exist, personal data is deleted, destroyed or anonymized by our Company ex officio or upon the request of the person concerned. In case the Related Person applies to our Company in this regard;
a. Requests submitted via the application form on the https://www.musixen.com/ web address are finalized within 30 (thirty) days at the latest and the relevant person is informed.
b. In case the data subject to the request has been transferred to third parties, this situation is notified to the third party to which the data is transferred and necessary actions are taken before the third parties.

4. EXPLANATIONS ON REASONS REQUESTING STORAGE AND DISPOSAL

Personal data belonging to data owners are processed, stored and destroyed in electronic environments securely within the limits specified in GDPR and other relevant legislation by our Company in order to maintain commercial activities, to use the personal data obtained in accordance with the purpose of obtaining, to fulfill its legal obligations, to increase the quality of service, to fulfill its legal commitments, to regulate employee rights, and to manage customer or supplier relations.

4.1. Reasons for keeping personal data

a. Being directly related to the establishment and performance of contracts,
b. Storing personal data for the purpose of establishing, exercising or protecting a right,
c. It is mandatory to keep personal data for the legitimate interests of our Company, provided that it does not harm the fundamental rights and freedoms of individuals,
d. Storing personal data for the purpose of fulfilling any legal obligations of our Company,
e. Explicitly stipulating the storage of personal data in the legislation,
f. Explicit consent of data owners in terms of storage activities that require the explicit consent of data owners.

4.2. Reasons Requiring Destruction of Personal Data

Personal data is deleted, destroyed or anonymized by our company, ex officio or upon request, for the following reasons:
a. Changing or eliminating the provisions of the relevant legislation, which are the basis for the processing or storage of personal data,
b. The disappearance of the purpose that requires the processing or storage of personal data,
c. Elimination of conditions requiring the processing of personal data,
d. In cases where the processing of personal data takes place only on the basis of explicit consent, the data owner withdraws his consent,
e. The data controller accepts the application made by the data owner regarding the deletion, destruction or anonymization of his personal data,
f. In cases where the data controller rejects the application made by the data owner for the deletion, destruction or anonymization of his personal data, his response is found insufficient or he does not respond within the period stipulated in the GDPR and the relevant DIRECTIVE DECISIONS; complaining to the Board and approval of this request by the Board,
g. The absence of any conditions justifying the retention of personal data for a longer period of time, although the maximum period for keeping personal data has passed.

5. STORAGE AND DISPOSAL TIMES

Within our company, a classification is made in terms of personal data and special personal data, and the storage and destruction process is determined for each type of personal data.
1. Legal obligations are taken into account and if a period is foreseen for the storage of any personal data, this period is complied with.
2. If the company is legally required to keep a personal data for a period of time beyond the minimum period of time to continue its commercial activities and/or if there is an exceptional need for that personal data, the destruction period is determined as a longer period for that personal data and this is stated in detail in the Clarification and/or Explicit Consent text. At the expiry of the said period, the data is deleted, destroyed or anonymized.
3. You can find the storage, destruction and periodic destruction periods determined by our company from the "Storage and Disposal List" in the annex (Annex-1) of this Policy. Personal data whose storage period has expired are destroyed in accordance with the procedures set forth in this “Retention and Disposal Policy” in 6-month periods, based on the periods in the relevant annex.
4. All transactions regarding the deletion, destruction and anonymization of personal data are recorded and these records are kept for at least five years, excluding other legal obligations.

6. PROCEDURES FOR STORAGE AND DISPOSAL OF PERSONAL DATA BY OUR COMPANY

I. RECORDING MEDIAS

Personal data belonging to data owners are securely stored by our Company in the environments listed in the table below, in accordance with the relevant legislation, especially the GDPR provisions, and within the framework of international data security principles:
Electronic media:
• Computer
• Servers
Physical environments:
• Office Lockers
• Locked Archive
• Folders

II. TECHNICAL AND ADMINISTRATIVE MEASURES

Administrative and technical measures taken by our Company within the framework of the principles set forth in GDPR in order to keep your personal data safe, to prevent its being processed unlawfully or being accessed and to destroy the data in accordance with the law are listed below:

i. Administrative Measures

Our company within the scope of administrative measures;
a. Restricts internal access to stored personal data to personnel required by job description. Whether the data is of a special nature or not and the degree of importance are also taken into account in limiting the access. The provisions of the Access Authorization Policy, prepared on the basis of company practices, are taken into account in the application of this article.
b. In case the processed personal data is obtained by others unlawfully, the relevant person and the EU shall be notified as soon as possible.
c. Regarding the sharing of personal data, it signs a framework agreement on the protection of personal data and data security with the persons to whom personal data is shared, or provides data security with the provisions added to the existing agreement.
d. Employs knowledgeable and experienced personnel about the processing of personal data and provides its personnel with the necessary training within the scope of personal data protection legislation and data security.
e. Carries out and has the necessary audits done in order to ensure the implementation of the GDPR provisions in its own legal entity. Eliminates privacy and security vulnerabilities that arise as a result of audits.

ii. Technical Measures

Our company within the scope of technical measures;
a. Conducts information technology risk assessment processes in terms of Data Security.
b. Provides the technical infrastructure to prevent or monitor the leakage of personal data outside the systems.
c. Provides control of system vulnerabilities by receiving penetration test service regularly and when needed.
d. Ensures that the access authorizations to personal data of employees in all units, especially Information Technologies employees, are kept under control.
e. It is ensured that personal data is destroyed so that it cannot be accessed again.
f. All kinds of digital media where personal data are stored are protected with encryption methods to meet information security requirements.

III. DISPOSAL METHODS OF PERSONAL DATA

Personal data obtained by our Company in accordance with the GDPR and other relevant legislation will be destroyed by our Company, ex officio or upon the application of the Relevant Person, with the following techniques in accordance with the provisions of the relevant legislation, in case the personal data processing purposes listed in the Regulation are no longer valid.

a. Deletion and Destruction Techniques of Personal Data:
The procedures and principles regarding the techniques of deletion and destruction of personal data by our company are listed below:
Deletion from Systems: While deleting the data processed by fully or partially automated means and stored in digital media, methods are used for deleting the data from the related software in a way that will be rendered inaccessible and unusable for the Relevant Users in any way.
Deleting the relevant data in the system by issuing a delete command; removing the access rights of the relevant user on the file or the directory where the file is located on the central server; Deleting the relevant rows in databases with database commands or deleting the data in portable media, i.e. flash media, by using appropriate software can be counted within this scope.
If the deletion of personal data will result in the inaccessibility of other data within the system and the inability to use this data, the personal data will also be deemed deleted if the personal data is archived in a way that cannot be associated with the data subject, provided that the following conditions are met.
- It is closed to the access of any other institution, organization or person,
- Taking all necessary technical and administrative measures to ensure that only authorized persons can access personal data.

Blackening of Personal Data in the Physical Environment: It is a method of physically cutting and removing the relevant personal data from the document in order to prevent the unintended use of personal data or to delete the data requested to be deleted, or to make it invisible by using fixed ink, which cannot be recovered and read with technological solutions.

Physical Destruction: Personal data can also be processed by non-automatic means, provided that they are part of any data recording system. While such data is destroyed, a system of physical destruction of personal data is applied so that it cannot be used later. The destruction of data in paper and microfiche media should also be carried out in this way, as they cannot be destroyed in any other way.

In terms of equipment to be disposed of within the company, first of all, it should be checked whether there is any information on the equipment that may be personal data. For equipment with personal data on it, units (disk, external memory, etc.) equipment should be disassembled and used as spare parts.

Adequate action must be taken beyond the conventional erasing or formatting operations so that the information contained in the storage device cannot be read again.
• If the equipment to be disposed of is an active device (modem, switch, router, etc.), it is disposed of by resetting it to default settings.
• If critical information is on any media (CD, DVD, etc.), the media can be broken and destroyed.
• All papers containing confidential information, but invalid, misprinted, and unusable, are destroyed by using a paper shredder.
• Disposal equipment must be dropped from the inventory list.
• Equipment that does not have the ability to contain information can be used as needed after being removed from embezzlement and inventory.

Overwriting: The overwriting method is a data destruction method that makes it impossible to read and recover old data by writing random data consisting of 0s and 1s at least seven times over magnetic media and rewritable optical media via special software.

During the above-mentioned situations, our Company fully complies with GDPR, Regulation and other relevant legislation provisions in order to ensure data security and takes all necessary administrative and technical measures.

7. OTHER MATTERS

In case of inconsistency between GDPR and other relevant legislative provisions and this Policy, GDPR and other relevant legislative provisions will be applied first.
This Storage and Disposal Policy prepared by our company entered into force on …………….

ANNEX-1

TABLE OF STORAGE AND DISPOSAL TIMES

The storage and destruction periods of the data processed by the Company have been determined on a process basis in the Personal Data Processing Inventory and are given below.

PROCESS and SCOPE     STORAGE AND DISPOSAL TIME
COKIES INFORMATION NOTE
On the Information Note

Cookies are used by Musetechs Yazılım Danışmanlık İthalat Ve İhracat Ticaret Ve Sanayi A.Ş. to improve the experience of site users/members/visitors when visiting our online channels. The use of these technologies is carried out in accordance with GDPR, DIREKTİF and the legislation to which Musetechs Yazılım Danışmanlık İthalat Ve İhracat Ticaret Ve Sanayi A.Ş. is subject to.

The purpose of this Information Note is to inform the Data Owners regarding the processing of personal data to be obtained by the use of cookies by the site users/members/visitors (“Data Owner”) during the operation of the https://www.musixen.com/ website. In this context, information is provided about the type of cookies, their purpose of use and the ability to control these cookies.

The types or functions of cookies used on the https://www.musixen.com/ website may change; new cookies can be added or the use of these cookies can be waived. In this regard, the right to amend the provisions of this Information Note is reserved, and what has been done on the Information Note (this information note will be updated with any changes) will become effective once it is published on our website or in any public media.

Cookies Used and Purposes of Use

Cookies are used for various purposes on our website https://www.musixen.com/ and personal data is processed through these cookies. Personal data is used for the following purposes:
- To perform the basic functions necessary for the operation of the website.
- Analyzing the website and providing performance increase. To determine the number of visitors to the website and to perform performance adjustments in line with this number or to provide updates on the most used sections.
- To increase the functionality of the website and to establish ease of use. For example, sharing from the website to 3rd party social media channels, recording and remembering the user name information or search queries of those who visit the website.

For the purposes within the scope of the information note, personal data may be processed without consent if at least one of the data processing conditions of GDPR and DIRECTIVE decisions are present. In any case, personal data within the scope of the Information Note may be shared with third parties, business partners and group companies from which Musetechs Yazılım Danışmanlık İthalat Ve İhracat Ticaret Ve Sanayi A.Ş. would benefit. We would like to point out that the parties to which the data is transferred may store your personal data on their servers all over the world.

Cookies Used on the Website

Below are the different types of cookies used on the website. 1st party cookies (placed by the site you visit) and 3rd party cookies (placed by servers other than the site you visit) are used on the website.

Controlling the Use of Cookies

By changing the browser settings, preferences for cookies can be personalized. For more information, you can visit the links in the table below:

Google Adwords
Google Analytics
Google Chrome
Internet Explorer
Facebook
Youtube
Mozilla Firefox
Opera
Safari
Doubleclick.net
Twitter
Gemius
Comscore
Adform

Rights of Data Owner

Data owner has the following rights:

a) Learning whether your personal data is processed or not,
b) If your personal data has been processed, requesting information about it,
c) To learn the purpose of processing your personal data and whether they are used in accordance with the purpose,
d) Knowing the third parties to whom your personal data is transferred, in the country or abroad,
e) Requesting correction of your personal data if it is incomplete or incorrectly processed,
f) Requesting the deletion or destruction of your personal data within the framework of the conditions stipulated in the relevant article of the legislation,
g) Requesting notification of the transactions made pursuant to subparagraphs (d) and (e) to third parties to whom personal data has been transferred,
h) Objecting to the emergence of a result against the person himself by analyzing your processed data exclusively through automated systems,
i) To request the compensation of the damage in case you suffer damage due to the illegal processing of personal data.

If you send us the requests in line with the aforementioned rights through the methods specified in the Application Form at https://www.musixen.com/, your applications will be evaluated and finalized as soon as possible and within 30 (thirty) days at the latest.

The data owner undertakes that the information subject to this Information Note is complete, accurate and up-to-date, and that he will immediately update them in case of any changes in this information. The Company has no responsibility if the Data Owner does not provide up-to-date information.

In the event that a request is made by the Data Owner that will result in the data’s not being used by Musetechs Yazılım Danışmanlık İthalat Ve İhracat Ticaret Ve Sanayi A.Ş., he/she may not be able to fully benefit from the operation of the website, and any responsibility arising in this context belongs to the Data Owner.

CONFIDENTIALITY AGREEMENT

I accept and undertake, in accordance with the provisions of the Confidentiality Commitment, that I will store and process the personal data in all electronic/printed media inside/outside the COMPANY in accordance with the GDPR provisions and DIRECTIVE decisions, I will not forward confidential information such as job information, wages, employee records, work records provided to me to other institutions or third parties by any means during the period I work for the COMPANY and after I leave the COMPANY, I will not keep or change the information and records of the employees and administrative personnel within the company, I will use this information within the authority given to me by the procedures and my duties, authorities and responsibilities, I will not use it for personal purposes, I will not disclose it even when my business relationship with the COMPANY is over, I will not try to access employee and administrative personnel information other than those authorized by the procedures, I will immediately notify my supervisor if I realize that there are people who do not comply with the procedures, I will keep the usernames and passwords given to me confidential, I will not use the internal e-mail address given to me for personal purposes, I will not use unlicensed products on information systems, I will not act to endanger the COMPANY's information systems by any means, I will prevent the illegal processing of information, I will take the necessary measures to ensure the appropriate level of security in order to prevent unlawful access and to ensure the preservation of information, if the information I have obtained is processed by other personnel in my unit, I will be jointly responsible with that personnel for taking the above measures, I will not leave documents containing information that should not be shared on the tables in the room of my unit, I will comply with the clean desk policy, I will be subject to legal and administrative sanctions if I violate the above-listed GDPR provisions and DIRECTIVE decisions.

MUSETECHS YAZILIM DANIŞMANLIK İTHALAT VE İHRACAT TİCARET VE SANAYİ A.Ş. APPLICATION FORM GENERAL EXPLANATIONS

Personal data owners defined as the data subject in the GDPR (hereinafter referred to as the "data owner") are granted certain rights regarding the processing of their personal data in the relevant article of the GDPR and applications regarding these rights to our Company, which is the data controller within the scope of GDPR, must be submitted in writing. In this context, applications to be made to our company in "written" form must be printed out and submitted by hand with identity confirmation or through a notary public.

Address to apply: ………………………………………..
or you can apply via support@musixen.com.

Information to be Specified in the Application Submission: “Request for Information on the Protection of Personal Data” should be written on the envelope. Your applications submitted to us will be answered "as soon as possible and within thirty days at the latest" from the date of receipt of your request, depending on the nature of the request. Our answers will be delivered to you in the relevant written or electronic media.

Contact information of the applicant:
A. Name:
B. Surname:
C. PASSPORT Number or relevant country identification number:
D. Phone Number:
E. Email: Address:

B. Please indicate your relationship with our company.
Member
Business Partner
Employee
Job Applicant
Shareholder
Other ()

C. Please specify your request under GDPR in detail:

D. Please choose the method by which you will be notified of our response to your application:
I want it sent to my e-mail address.
I want to receive it by hand.

This application form has been prepared in order to determine your relationship with our company and to respond to your application, if any, regarding your personal data processed by our company in a correct, complete and legal time. Our company reserves the right to request additional documents for identification and authorization determination, in order to eliminate legal risks that may arise from illegal and unfair data sharing and especially to ensure the security of your personal data. In the event that the information regarding your requests you submit within the scope of the form is not correct and up-to-date, or an unauthorized application is made, our company does not accept any liability for such false information or requests arising from unauthorized applications. Our company reserves the right to make changes in this form due to possible changes in GDPR and the methods to be determined by DIRECTIVE DECISIONS and GDPR.

Musixen Musixen Musixen Musixen
Apple Store Google Play App Gallery Galaxy Store MasterCard Visa
Kullanıcı Sözleşmesi Gizlilik ve KVKK Politikasi İletişim
Copyright 2020 Musixen