INFORMATION TEXT ON THE PROCESSING AND PROTECTION OF PERSONAL DATA

DATE: 11.11.19
VERSION NO: PO-017

DATA CONTROLLER
As ALTUNSA GIDA SANAYİ ve TİCARET A.Ş (hereinafter referred to as the “COMPANY”), we place the utmost importance on the security of your personal data that you have shared with us through our website, by filling out any application forms, or through other means. Within this framework, we prioritize the protection and processing of all types of personal data belonging to all individuals related to our Companies, including those benefiting from our products and services, in accordance with the Constitution of the Republic of Turkey, the agreements to which our country is a party, and the Personal Data Protection Law No. 6698 (“Law”). With full awareness of this responsibility, we act as a “Data Controller” as defined in the Law. We aim to inform you by explaining below the purposes for which your personal data may be processed, the method of collection of your personal data, the legal purpose, and to whom the data may be transferred.

COLLECTION, PROCESSING, PURPOSES OF PROCESSING, PARTIES TO WHOM PERSONAL DATA IS TRANSFERRED, AND LEGAL GROUNDS
COLLECTION, PROCESSING, PURPOSES OF PROCESSING OF YOUR PERSONAL DATA
Your personal data is processed by our Companies in order to carry out our activities, to provide the products and services we offer within the framework of legal requirements, and to ensure that our Companies fulfill their contractual and legal obligations in an accurate and complete manner. We process your personal data through various channels in accordance with the legislation and policies of our Companies, based on the principles stated in the Law, within the conditions and purposes of personal data processing specified in Articles 5 and 6 of the Law, for the purposes mentioned in this information text.

    • Execution of Company Internal Operations

    • Execution of Customer-Facing Processes and Operations

    • Execution of Marketing Operations

    • Conduct of Legal, Technical, and Administrative Outcome-Related Activities

    • Execution of Corporate Communication Operations

In line with the above purposes, in order to provide the best service on behalf of all our brands, the necessary work is carried out by our business units. For the customization, recommendation, promotion, and marketing of products and services offered by our Company, our Company and our Company’s business partners, solution partners, suppliers, subsidiaries, and direct or indirect global and local affiliates conduct the necessary activities. Also, the necessary efforts are made to inform individuals about the contents of these products and services, to obtain approval for sending commercial electronic messages, and to carry out related activities as required by law. The execution of internal operations, handling of customer requests and complaints, conducting product surveys, monitoring questions directed to our Company, conducting reputation research, ensuring compliance with ethical values and legal obligations as per the Policy, and ensuring the legal, technical, and commercial security of our Company and persons in a business relationship with our Company are among the purposes of processing personal data.

The personal data of data subjects who do not currently benefit from the products and services provided by our Company but may benefit from them in the future may also be processed for purposes such as tracking customer contacts, opening potential customer records, measuring employee performance, and planning product and service sales processes.

For more detailed information on the purposes of processing your personal data by our Company and our data retention policy, you may visit http://www.altunkayagroup.com/kvkk.php and http://www.altunkayagroup.com/kvkk_imha.php or contact our company.

PARTIES TO WHOM YOUR PERSONAL DATA IS TRANSFERRED AND PURPOSES OF TRANSFER
The personal data collected may be transferred by our Company, in compliance with the fundamental principles set forth in the Law and under the personal data processing conditions specified in Articles 8 and 9 of the Law, to our business partners, suppliers, Company officials, shareholders, employees, regulatory bodies, subcontractors, service providers, legally authorized public institutions, and private individuals for the following purposes:

    • Execution of Company Internal Operations

    • Execution of Customer-Facing Processes and Operations

    • Execution of Marketing Operations

    • Conduct of Legal, Technical, and Administrative Outcome-Related Activities

    • Execution of Corporate Communication Operations

The personal data collected within the scope of Microsoft Office programs, used for internal and operational purposes without a cloud system, are recorded on our file server for easy access between departments. These personal data are transferred abroad solely for the purpose of obtaining Microsoft Office services and managing contractual activities with Microsoft Office, with necessary administrative and technical measures taken to prevent unauthorized access.

LEGAL GROUNDS FOR THE COLLECTION OF PERSONAL DATA
Your personal data is collected, used, recorded, stored, and processed by our Company based on explicit, understandable, and written disclosure to personal data owners, obtaining their explicit consent where necessary, in a lawful and honest manner, limited and connected to legitimate purposes specified above and within the principle of proportionality. In this context, your personal data may be collected, processed, and transferred in verbal or written form through e-mail, phone, our website, social media, mobile internet sites, and demand/complaint platforms, as well as through sales, provision, and tracking of products and/or services, evaluation of requests/complaints, and receipt of participation requests for campaigns/contests and promotions.

PROTECTION OF CHILDREN’S PRIVACY
Our Companies take the privacy of children seriously. The websites operate in compliance with all applicable laws in the specified jurisdictions. We do not collect personal data from individuals legally under sixteen (16) years of age, or under thirteen (13) if permitted by applicable law. Children under the age of sixteen (16), or under thirteen (13) as applicable, are required to obtain consent from their parent/guardian before submitting any personal data on the site. If we identify that a user is under this age, we do not use or continue processing their personal data without parental/guardian consent. However, children may not participate in certain activities without such consent. A parent/guardian may contact us using the options listed under “Management of Personal Information” to review, cancel, modify, or reject further collection or use of the child’s personal data (please provide the child’s name, address, and e-mail).

RIGHTS OF THE PERSONAL DATA OWNER UNDER ARTICLE 11 OF THE LAW
The rights you have under Article 11 of the Law No. 6698 are as follows:
Personal data owners may:

    • Learn whether their personal data is processed,

    • Request information if their personal data has been processed,

    • Learn the purpose of the processing and whether their data is used in accordance with the purpose,

    • Know the third parties to whom personal data is transferred domestically or abroad,

    • Request the correction of personal data if it has been processed incompletely or inaccurately and request the notification of the transaction to third parties to whom personal data has been transferred,

    • Request the deletion or destruction of personal data if the reasons for processing no longer exist, even if processed in accordance with the Law and other relevant laws, and request notification of this action to third parties to whom the personal data has been transferred,

    • Object to adverse consequences arising from the analysis of processed data exclusively by automated systems,

    • Demand compensation for damages incurred due to unlawful processing of personal data.

To exercise the above rights, you can send your request including necessary information to identify your identity and explanations regarding the right you wish to exercise, by filling out the form available at www.altunkayagroup.com. You may submit a signed copy of the form along with documents verifying your identity to the address “Başpınar(Organize) OSB Mah. O.S.B. 4. Bölge 83409 No 3 Şehitkamil/Gaziantep/Turkey” with a wet signature, or you may send the form electronically with a secure e-signature to [email protected]. Upon submission of your request using the methods stated above, our Company will conclude your request free of charge within 30 (thirty) days, depending on the nature of the request. However, if a fee is determined by the Personal Data Protection Board, the fee specified in the tariff set by our Company will be charged.

Click here for the Application Form!