Personal Data Protection and KVKK Information Notice

This inform­a­tion notice has been pre­pared under Art­icle 10 of Turk­ish Per­sonal Data Pro­tec­tion Law No. 6698 (“KVKK”) and the Com­mu­niqué on the Pro­ced­ures and Prin­ciples for Ful­filling the Oblig­a­tion to Inform, to inform you about the per­sonal data pro­cessed through the TÜRKSOY GROUP web­site.

1. Data controller

Field	Information
Trade name	trade name
Address	Bahçeşehir Mah. Susam Sok. No: 10, 66100 Merkez/Yozgat, Türkiye
MERSİS No	MERSİS number
KEP address	KEP address
E-mail	info@groupturksoy.com
VERBİS registration	whether a registration obligation exists, and the registration number

2. Categories of personal data processed

Category	Data	Source
Identity	Full name	Message form, e-mail, telephone or fax
Contact	E-mail address, telephone or fax number	Message form, e-mail, telephone or fax
Professional information	Company name (if any)	Message form, e-mail, telephone or fax
Request information	The content of your message	Message form, e-mail, telephone or fax
Transaction security	IP address, date and time, page requested, browser information	Server logs

The data above is pro­cessed when you con­tact us through the mes­sage form, by e-mail, tele­phone or fax. Inform­a­tion you send with the mes­sage form on the con­tact page is for­war­ded to us as an e-mail via our server and is not stored on the Web­site. Please do not share spe­cial cat­egor­ies of per­sonal data, such as health, reli­gion or ethnic origin, in your mes­sage.

3. Purposes of processing

• Receiv­ing, assess­ing and answer­ing con­tact requests,
• Fol­low­ing up part­ner­ship and press requests,
• Car­ry­ing out inform­a­tion secur­ity pro­cesses; pre­vent­ing misuse of the Web­site and attacks,
• Ful­filling legal oblig­a­tions and provid­ing inform­a­tion to com­pet­ent author­it­ies.

4. Method of collection and legal bases

Your per­sonal data is col­lec­ted elec­tron­ic­ally, and partly by auto­mated means, through requests you send us through the mes­sage form, by e-mail, tele­phone or fax and through the Web­site’s server logs. Pro­cessing is based on the fol­low­ing legal grounds:

• KVKK Art. 5(2)(c): where your request is dir­ectly related to the con­clu­sion of a con­tract,
• KVKK Art. 5(2)(ç): where it is neces­sary for the data con­trol­ler to fulfil its legal oblig­a­tion,
• KVKK Art. 5(2)(e): where it is neces­sary for the estab­lish­ment, exer­cise or pro­tec­tion of a right,
• KVKK Art. 5(2)(f): where it is neces­sary for our legit­im­ate interest in answer­ing your requests and keep­ing the Web­site secure, provided that it does not harm your fun­da­mental rights and freedoms.

Your expli­cit con­sent is not relied on for these activ­it­ies.

5. Transfers

Lim­ited to the pur­poses above, your per­sonal data may be trans­ferred, in accord­ance with KVKK Art­icles 8 and 9, to:

• the sup­pli­ers we use for host­ing the Web­site and deliv­er­ing e-mail (names of the host­ing and e-mail ser­vice pro­viders),
• leg­ally author­ised public author­it­ies, upon request.

Trans­fers abroad: If the ser­vice pro­viders’ serv­ers are loc­ated abroad, the trans­fer is made under KVKK Art. 9 on the basis of an adequacy decision, appro­pri­ate safe­guards (for example, stand­ard con­trac­tual clauses noti­fied to the Per­sonal Data Pro­tec­tion Author­ity) or one of the occa­sional cases listed in the law. Cur­rent status: server loc­a­tions and trans­fer mech­an­ism.

6. Retention periods

Data	Period
Contact requests (e-mail, telephone, fax)	retention period
Server logs	retention period

Data whose reten­tion period has expired is deleted, des­troyed or anonymised in accord­ance with the Com­pany’s per­sonal data reten­tion and destruc­tion policy (policy to be pre­pared).

7. Your rights under KVKK Art. 11

By apply­ing to the data con­trol­ler, you have the right to:

• learn whether your per­sonal data is being pro­cessed,
• request inform­a­tion about the pro­cessing if it has been pro­cessed,
• learn the pur­pose of pro­cessing and whether the data is used in line with that pur­pose,
• know the third parties to whom it is trans­ferred in Türkiye or abroad,
• request cor­rec­tion if it is incom­plete or inac­cur­ate,
• request its dele­tion or destruc­tion under the con­di­tions set out in KVKK Art. 7,
• request that cor­rec­tion, dele­tion and destruc­tion be noti­fied to third parties to whom the data has been trans­ferred,
• object to a result against you arising from the ana­lysis of the pro­cessed data exclus­ively by auto­mated sys­tems,
• claim com­pens­a­tion for damage suffered as a result of unlaw­ful pro­cessing.

8. How to apply

You may submit your request in Turk­ish and in writ­ing, in accord­ance with the Com­mu­niqué on the Pro­ced­ures and Prin­ciples for Applic­a­tions to the Data Con­trol­ler:

• by a peti­tion bear­ing your wet sig­na­ture, to Bahçeşe­hir Mah. Susam Sok. No: 10, 66100 Merkez/Yozgat, Türki­ye,
• by registered elec­tronic mail, to KEP address,
• with a secure elec­tronic sig­na­ture or mobile sig­na­ture, or from an e-mail address you have pre­vi­ously noti­fied to us and that is registered in our system, to info@group­turk­soy.com.

Your request must include your full name, sig­na­ture, Turk­ish iden­tity number (for for­eign nation­als, nation­al­ity and pass­port number), address for noti­fic­a­tions, e-mail address if any, and the sub­ject of your request.

Requests are con­cluded free of charge within 30 days at the latest; if the pro­cess requires an addi­tional cost, the fee set out in the tariff determ­ined by the Board may be charged. If your request is rejec­ted, you find the answer insuf­fi­cient, or no answer is given in time, you may lodge a com­plaint with the Per­sonal Data Pro­tec­tion Board under KVKK Art. 14.

This Eng­lish ver­sion is provided for inform­a­tion. In case of dis­crep­ancy, the Turk­ish ver­sion pre­vails.