GDPR Demystify Text


This information text and its annexes are prepared by YA-SA HOLDING Inc. ("YA-SA"), as the data supervisor, within the context of fulfillment of the information obligation regulated by Article 10, Law on Personal Data Protection ("LPPD").


We would like to express that at YA-SA, we show ultimate attention when processing personal data of our shareholders, employees, trainees, future employees, visitors, suppliers, employees-executives-shareholders of suppliers, customers, potential customers, employee and executives of customers, business associates, executives-employees-shareholders of business associates, family members and/or relatives of our employees-trainees and employees of business associates, of referees, claimant third parties and their attorneys or legal representatives and other relevant third parties. Accordingly please find detailed information about data processed according to group of people, data subject, purposes of processing and transfer as well as our corporate policy in tab ‘Protection of Personal Rights’ on our website at

Your personal data is collected using physical and/or electronic media based on legal reasons as conclusion or performance of a contract stated under Article 5 and 6, LPPD, performing legal obligations, being prescribed by laws, publicizing data and establishment, exercise and protection of a right by the person concerned, being required for the legitimate interests of the data supervisor, provided that the fundamental rights and liberties of the person concerned are not impaired or express consent by the data owner.

We process your personal data in accordance with the principles in article 4 of LPPD and the provisions of article 5 and article 6 of LPPD.

In some instances, we can share your personal data we process, domestically and/or internationally, particularly for the purposes of informing authorized persons, institutions and organizations, managing contract processes, conducting activities in accordance with the legislation, performing strategic planning activities and carrying out commercial processes, with our business associates, suppliers, customers, shareholders, consultants, auditors, lawyers, accountants as well as authorized public institutions and organizations and real or private law legal persons.


Your rights vested under Article 11 of LPPD

  • To be informed about whether your personal data is processed or not,
  • To request information if your personal data is processed,
  • To be informed about the purpose of processing personal data and whether they are used suitable for the respective purpose or not,
  • To have knowledge about third parties receiving personal data domestically or internationally,
  • To request, in case personal data are processed incompletely or inaccurately, necessary corrections be made and accordingly to request third parties to whom your personal data are transferred be notified about the operations made,
  • To request deletion or destruction of personal data upon ending of cause requiring data processing and accordingly to request third parties to whom your personal data are transferred be notified about the operations made,
  • To appeal to the negative results against him/her arising from analysis of the data processed exclusively through automatic systems,
  • In case the personal data are damaged due to the processing thereof in contrary to the Law, to request that the damages are indemnified

Please submit us your applications as regards to your rights listed above by filling out the Data Supervisor Application Form announced in our website at

Your application will be concluded, free of charge, at the soonest possible date and within thirty days at the latest. If the transaction, subject of your application, would yield an additional cost, then you may be charged according to the rates to be fixed by the Personal Data Protection Board.