INFORMATION WITHIN THE SCOPE OF THE PERSONAL DATA PROTECTION LAW

As a company, we attach importance to the security of your personal data. In this direction, we would like to inform you about our data processing activities within the scope of the Law on Protection of Personal Data No. 6698, which is regulated for the protection of fundamental rights and freedoms of individuals, especially the privacy of private life, and personal data.

Pursuant to the Law on Protection of Personal Data No. 6698 (“KVKK”), any information belonging to an identified or identifiable natural person is defined as personal data. Your personal data within our Company may be recorded, changed, rearranged, transferred within legal limits, classified, and updated in our systems with the reasons, purposes, and methods explained below, and your personal data may be processed in accordance with the conditions specified in the KVKK.

Who is the Data Controller?
The data controller refers to the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system. In this direction, Hacı Bekir Lokum ve Şekerli Mamuller Sanayii A.Ş. (“Company”) processes your personal data within the scope of KVKK as the data controller.

What are the Purposes of Processing Your Personal Data?
Your personal data is processed in accordance with the principles set forth in KVKK for the following purposes:

Creation of offers regarding products and services,
Execution of sales processes of products and services,
Contacting our customers regarding changes in contract terms, updates, and delivery status within the framework of the distance sales contract, and providing necessary information,
Management of shopping history,
Membership registration,
Identity verification,
Performing necessary transactions for receiving payment for provided products and services,
Planning and execution of customer relationship management processes,
Management of relations with business partners and/or suppliers,
Contacting within the scope of marketing activities regarding our products and services, sending commercial communications, presenting personalized offers, conducting marketing, survey, and satisfaction studies, planning and/or executing loyalty processes for products and/or services,
Creating campaigns for customers, cross-selling, determining target audience, tracking customer movements and carrying out activities to increase user experience,
Developing and personalizing the website according to customer needs, conducting direct and indirect marketing, personalized marketing and remarketing activities, conducting personalized segmentation, targeting, analysis, and internal reporting activities, market research, planning and execution of customer satisfaction activities and planning and execution of customer relationship management processes,
Planning and execution of activities necessary to recommend and promote offered products and services to relevant persons by customizing them according to their preferences, usage habits, and needs,
Processing shopping information through cookies to provide a better shopping experience to our customers on the website and to help them with products they might be interested in by considering their interests,
Conducting marketing analysis studies and improving service quality,
Providing after-sales support services,
Planning and execution of corporate communication activities,
Planning and execution of delivery transactions and logistics activities,
Tracking legal processes,
Managing internet access records and ensuring data security,
Planning information security processes,
Execution of necessary audit and control processes within the scope of company activities, and conducting reports and examinations,
Sharing information with authorized public institutions and organizations within the framework of legislation,
Evaluation of requests and complaints.

For What Purposes and to Whom Can Your Personal Data Be Transferred?
Your personal data may be transferred to the following persons/organizations within the scope of the processing conditions specified in Articles 8 and 9 of the KVKK, limited to the necessities of commercial life, and only to the extent required by the service, for the purposes of fulfilling sales processes, executing after-sales support processes, planning and executing delivery transactions and logistics activities, receiving support services for sending commercial communications and customer satisfaction surveys, planning activities necessary for recommending and promoting offered products and services to relevant persons by customizing them according to their preferences, usage habits, and needs, tracking website shopping experience through cookies, conducting marketing activities, executing audit and control processes and conducting reports and examinations, conducting and tracking legal affairs and transactions, carrying out activities in accordance with legislation, and sharing information with authorized public institutions and organizations within the framework of legislation:

Companies from which we receive logistics services, including cargo companies
Banks, institutions that legally provide card information storage services, and financing companies
Organizations from which we receive consultancy services on legal, financial, tax, and operational matters
Companies from which we receive support for sending commercial electronic messages and/or conducting marketing activities
Business partners and suppliers from whom we receive services on various matters
Group companies
Authorized public institutions and organizations
Shareholders
Affiliates and subsidiaries

What are the Methods and Legal Reasons for Collecting Your Personal Data?
Your personal data is collected by our Company directly from you, our customer, through our communication channels, company officials, business partners, online transactions, public institutions and organizations, or through these organizations, either electronically automatically in writing/verbally or non-automatically in writing/verbally.
In this context, the personal data collected is processed based on the legal reasons stated in Articles 5 and 6 of the Law, such as "it is necessary to process personal data belonging to the parties of a contract, provided that it is directly related to the establishment or performance of the contract", "it is mandatory for the data controller to fulfill its legal obligation", "it is stipulated in laws", "it is mandatory to process data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject" or, within the scope of marketing and customer satisfaction activities detailed above, which are not directly related to the sales contract, "the explicit consent of the data subject".

What Are Your Rights Regarding Your Personal Data?
You can submit your requests regarding your rights listed below and your requests regarding the application of the Law within the scope of Article 11 of the KVKK regarding the processing of your personal data:

Learning whether your personal data is processed,
Requesting information if your personal data has been processed,
Learning the purpose of processing your personal data and whether they are used appropriately for their purpose,
Knowing the third parties to whom your personal data is transferred in Turkey or abroad,
Requesting correction of your personal data if it is incomplete or incorrectly processed,
Requesting the deletion or destruction of your personal data,
Requesting that the transactions regarding the correction, deletion, or destruction of your personal data be notified to third parties to whom your personal data has been transferred,
Objecting to the emergence of a result against you by analyzing your processed data exclusively through automatic systems,
Requesting compensation for damages in case you suffer damage due to unlawful processing of your personal data.

Since our Company has an obligation to keep records and documents related to transactions carried out with its customers for a certain period within the scope of legal regulations; if you request the deletion, destruction or anonymization of your personal data and if there is a period determined by legal regulations, your request may be fulfilled by our Company at the end of this legal period. However, during this period, your personal data will not be processed by our Company except in legally mandatory situations.

You can always submit your requests regarding your personal data through the communication channels in the Application Form in accordance with the conditions regulated in the Communiqué on the Procedures and Principles of Application to the Data Controller. The application will be concluded free of charge within 30 (thirty) days at the latest, depending on the nature of the request. In case the request is rejected, you will be notified in writing.