KAÇMAZLAR GIDA MADDELERİ SAN. VE TİC. LTD. ŞTİ.

PROTECTION AND PROCESSING OF PERSONAL DATA CLARIFICATION TEXT FOR NATURAL PERSON- SUPPLIER- BUSINESS PARTNER- NATURAL PERSON REPRESENTATIVE-VISITOR

As KAÇMAZLAR GIDA MADDELERİ SAN. VE TİC. LTD. ŞTİ. (KAÇMAZLAR), we attach utmost importance to ensuring the security of your personal information that you provide to us both when using our website, by filling in the relevant application forms or by other means, within the framework of the relevant legislation, especially the Turkish Constitution, the relevant international conventions to which our country is a party and the Law on Personal Data Protection (“LPPD”) no. 6698. We would like to inform you in the capacity of Data Controller about the aforementioned legislation and some definitions specified in this legislation.

Processed Personal Data
Identity Data: Name, surname, T.R. ID No, Vehicle plate, Contact Data: E-mail address, address and phone number, Financial Data: Bank Account Information, Working Data: SSI entry declaration and assignment documents, work commencement date, title, signature circular, Visual and Audio Data: Camera recordings, call center audio recording, For Online Visitors visiting the Website: Transaction Security Information (IP address, site traffic information) Marketing Information (cookie records), For Online Visitors who fill out the forms on the Website, – Credentials (name, surname), – Contact Information

(E-mail address, phone number, etc.)
Method and Legal Reason for Collecting Your Personal Data
Personal data is collected to be kept for as long as is necessary for the purpose of processing by fully automated (cookies, server log files and pixel tags, etc.) or partially automated (filling in various forms, sending resumes, etc.) means.

Personal data is processed based on the explicit consent of the Online Visitor. However, personal data is clearly stipulated in the Laws stated in Article 5, paragraph 2 of the Law.

(ii) it is compulsory for data controller to fulfil its legal obligation,

Data processing is mandatory for the establishment, use or protection of a right,
It is mandatory to process data for the legitimate interests of data controller, provided that it does not harm the fundamental rights and freedoms of personal data owners, it can also be processed without explicit consent based on one of its legal reasons.
Purposes of Processing Your Personal Data
Conducting Emergency Management Processes
Conducting Training Activities
Conducting Access Authorities
Conducting Activities in accordance with the Legislation
Conducting Finance and Accounting Operations
Conducting Physical Space Security
Conducting and Following Legal Affairs
Conducting Communication Activities
Planning Human Resources Processes
Conducting/ Auditing Occupational Health / Safety Activities
Conducting Business Continuity
Conducting Logistics Activities
Conducting Goods / Service Procurement Processes
Conducting Goods / Service Sales Support Services
Conducting Goods / Service Production and Operation Processes Conducting Customer Relationship Management Processes
Conducting Customer Satisfaction-Oriented Activities
Conducting Performance Evaluation Processes
Conducting Retention and Archive Activities
Conducting Contract Processes
Tracking of Requests / Complaints
Conducting Supply Chain Management Processes
Conducting Wage Policy
Conducting Products / Services Marketing Processes
Ensuring the Security of Data Controller Operations
Informing Authorized Persons, Institutions and Organizations
Conducting Management Activities
Creating and Tracking Visitor Records
Depending on the transactions made by the Online Visitor on the Website in the event that personal data is clearly stipulated in the laws or in the framework of other conditions specified in paragraph 2 of Article 5 of the Law,
In order to conduct/audit business activities, to conduct customer relationship management processes, to follow up requests/complaints and to conduct communication activities in this context,
In case of filling out the forms in the career title or sending a resume, in order to carry out the application processes of the employee/trainee candidates,
in order to carry out the information security processes of “Site traffic information” (In addition, in accordance with Law No. 5651 and other legislation, the Site Provider has the obligation to record and store the site traffic information.)
In order to conduct marketing analysis processes, to conduct advertising/campaign/promotion processes and to conduct information security processes, the information obtained through cookies is processed.
The processing of personal data for the purpose of sending commercial electronic messages is subject to the explicit consent of the Online Visitor.
Third-party cookies can also be used on the Website along with cookies that are mandatory for the operation and security of the website. The Online Visitor may not accept cookies or may be alerted by changing the browser settings. Certain functions of the Website may not work properly when the use of cookies is stopped.
To whom and for what purpose the Processed Personal Data may be Transferred
In the event that one of the conditions in the second paragraph of the fifth article of the Law is found, personal data may be transferred to group companies, subsidiaries, affiliates, business partners and authorized public institutions and organizations provided that necessary security measures are taken within the framework of the conditions specified in the eighth and ninth articles of the Law.
In the absence of one of the conditions in paragraph 2 of Article 5 of the Law, the transfer of Personal Data is subject to the explicit consent of the relevant person.
Rights of the Relevant Person pursuant to Article 11 of the Law
In accordance with Article 10 of the Law, KAÇMAZLAR informs the relevant person (personal data owner) of his/her rights; provides guidance on how to use these rights and carries out the necessary internal functioning, administrative and technical arrangements for all these.
Pursuant to Article 11 of the Law, personal data owners have the following rights;
Being aware of whether their personal data are processed,
Requesting information if their personal data has been processed,
Being aware of the purpose of the processing of personal data and whether they are used in accordance with their purpose,
Being aware of the third parties to whom personal data are transferred at home or abroad,
Requesting correction of personal data in case of incomplete or incorrect processing
Requesting the removal or disposal of your personal data within the framework of the conditions stipulated in Article 7 of the Law,
Requesting notification of the transactions (correction and destruction of the data) made in accordance with Article 11 (d) and (e) of the Law to the third parties to whom their personal data are transferred,
Objecting to the emergence of a result against the processed data by analyzing them exclusively through automated systems,
Requesting compensation in case of loss due to unlawful processing of personal data.
Pursuant to paragraph 1 of Article 13 of the Personal Data Protection Law, you may submit your request for exercising your rights mentioned above to our Company with the method (s) determined/to be determined by the Personal Data Protection Board.
Your request containing your explanations regarding your right to exercise one of the rights specified in Article 11 of the Law, along with the documents identifying your identity, by filling in the Personal Data Owner Application Form within the scope of the Personal Data Protection Law no. 6698 at www.karlidag.com.tr completely;
Alternatively, if you wish,
You can submit your application in writing and with a signed copy to “1. Organize Sanayi Bölgesi 2. Cad. No: 3 Malatya”.
You can send it to the above address via notary public or registered mail,
You can send your application to info@karlidag.com.tr with the documents identifying you.
In the requests and applications; Name, surname and signature (if the application is in writing), TR ID number for the citizens of the Republic of Turkey, nationality, passport number or, if any, ID number for foreigners, place of residence or workplace address for notification, electronic mail address for notification, telephone and fax number, if any,
The subject of the request must be present. Information and documents related to the subject should be added to the application.
KAÇMAZLAR concludes the requests included in the application free of charge as soon as possible and within thirty days at the latest according to the nature of the request. However, if the said transaction requires a separate cost, the fee in the tariff determined by the Board may be charged.
KAÇMAZLAR can accept the request or refuse it with justification, and will notify the person concerned in writing or electronically. If the request in the application is accepted, KAÇMAZLAR must take the necessary actions as soon as possible and inform the relevant person. If the error in the application is sue to KAÇMAZLAR, the fee is refunded to the relevant person.
In case of rejection of the application, inadequate response or failure to respond to the application in time, the person concerned has the right to file a complaint with the Board within thirty days and possibly sixty days as of the date of receipt of the response.

Data Security
KAÇMAZLAR is obliged to take all kinds of administrative and technical measures required for ensuring appropriate security level and ensuring preservation of personal data and preventing personal data in contradiction with the law and accessing personal data in contradiction with the law and preventing personal data in contradiction with the law.

Amendments
KAÇMAZLAR SÜT MAMÜLLERİ SAN. VE TİC. A Ş reserves the right to make changes in this disclosure notice due to the changes that may be made in the Law on the Protection of Personal Data and the methods to be determined by the Personal Data Protection Board.