KADOOĞLU YAĞ SAN. VE TİC. A.Ş, we would like to inform you that we attach importance to the protection of your Personal Data and that we have taken measures and steps in accordance with the legal regulations in this field.
LEGAL BASIS AND GENERAL PRINCIPLES
I. Compliance with the law and honesty rules,
ii. Being accurate and up-to-date when necessary,
iii. Processing for specific, explicit and legitimate purposes,
iv. Being connected, limited and measured for the purpose of processing
v. Being kept for the period stipulated in the relevant legislation or required for the purpose for which they are processed.
KADOOĞLU YAĞ SAN. VE TİC. DATA PROCESSED BY A.S
Our company can process general and special personal data with the explicit consent of the data owner or without explicit consent in cases stipulated in Articles 5 and 6 of the KVK Law. General and special data processed by our company are exemplified below, which data will be processed for each data owner; The type of relationship between the data subject and our Company (member-customer, employee, business partner, service provider etc.) may vary depending on various factors such as the nature of the communication channels used.
I. Data for identifying the data subject such as name, surname, profession, title, institution / organization information, educational background, employment history, gender, marital status, citizenship status, tax liability status and, if any, information about the parent, guardian and attorney,
ii. Data such as date of birth, place of birth, identity number, blood type, religion and photograph included in identification documents such as identity card, passport, driver’s license,
iii. Contact information such as home, workplace or temporary residence address, telephone, e-mail and fax number,
iv. In case the data owner (customer-member) connects to our Company’s internet address with social media accounts, the information that the data owner approves to be shared via those channels
v. Communication records such as phone calls, electronic mail correspondence and other audio and visual data regarding the products purchased by the data owner,
vi. Internet protocol (IP) address, device ID, unique identifier information, device type, advertisement ID, unique device icon, statistics on web page views, incoming and outgoing traffic information, routing URL, internet log information, location information, the sites visited and the transactions and actions carried out through our websites, platforms, our internet network, and our advertising and electronic mail content.
Purposes of Using Personal Data
KADOOĞLU YAĞ SAN. VE TİC. A.Ş may process personal data for the purposes stated below and be kept for the period required by these purposes, in cases and to the extent permitted by the legislation.
I. To fulfill legal and administrative obligations and to exercise the rights arising from the current legislation,
ii. Providing information to public officials on public security issues upon request and in accordance with the legislation,
iii. Negotiation, establishment and execution of contracts concluded / considered to be concluded (For example, establishment of a distance sales contract between our Company and member customers and fulfillment of the obligations undertaken under the relevant articles of the Law on the Protection of the Consumer and the distance sales contract),
iv. Confirming the identity information of the customers who shop / have made through the website / mobile applications and recording the necessary address and other necessary information for communication,
v. Providing customers with a better shopping experience, determining suitable products that customers may be interested in considering their interests, informing customers about appropriate products, informing customers about campaigns, promotions and advantages, and providing effective customer service,
vi. Providing suggestions and solutions to our customers by our contracted institutions and solution partners and informing our customers about the services we provide,
vii. Communicating with our customers about the conditions, current status and updates of the contracts we have concluded under the relevant articles of the Law on the Protection of the Consumer and the distance sales contract and making the necessary information,
viii. Arranging all records and documents that will be the basis of processing in electronic (internet / mobile etc.) or paper environment,
ix. To increase customer satisfaction, to be able to recognize our customers who shop from the website and / or mobile applications and to use them in customer environment analysis, to use them in various marketing and advertising activities, and to organize surveys in electronic and / or physical environment through contracted organizations,
x. Evaluating customer complaints and suggestions regarding our products and services,
xi. Ensuring and developing coordination, cooperation and efficiency in or between units within our company,
xii. Ensuring the security of the website and other electronic systems and physical environments used by our company,
xiii. Notifying changes in the legislation or rules and policies accepted by our Company or making other notifications concerning the data subject,
xiv. Investigating, detecting, preventing and reporting violations of the contract and the law to the relevant administrative or judicial authorities,
xv. Resolving current and future legal disputes,
xvi. Answering requests and questions,
xvii. Meeting the needs of our employees within the framework of human resources policies of our company and carrying out, developing and improving the recruitment processes,
xviii. Evaluating the eligibility of job applications, finalizing them and contacting the candidates who have applied for a job,
xix. Development and improvement of our company’s human resources, public relations and marketing policies,
xx. Data processing is mandatory for the establishment, use or protection of a right,
xxi. Protecting the legitimate interests of our company, provided that it does not harm the fundamental rights and freedoms of the data owner.
Protection, Security and Control of Your Personal Data
Within the scope of the relevant legislation, our company takes the necessary technical and administrative measures to ensure the appropriate level of security as a data controller in order to prevent the processing of personal data and illegal access to the data and to ensure the protection of personal data. In this context, it is ensured that the business processes and activities of our Company are carried out in accordance with the internal policies and rules prepared for the protection of personal data. Efforts are carried out to raise awareness among employees about the legislation on the protection of personal data and internal policies and rules prepared in this direction, and necessary statements and commitments are taken from employees and persons and institutions that process data on behalf of our Company, and violations of these statements and commitments are subject to certain sanctions. Necessary information security measures are implemented to prevent unauthorized access to personal data, and the adequacy of the measures taken is subject to periodic checks to continuously improve the existing data security system.
Sharing of Personal Data with Third Persons domestically and Duration of Storage
Rights of the Data Owner within the Framework of the Law on Protection of Personal Data
As a data owner, in accordance with Article 11 of the KVK Law:
I. learning whether your personal data is processed,
ii. to request information about personal data if it has been processed,
iii. learning the purpose of processing personal data and whether they are used appropriately for their purpose,
iv. To know the third parties in the country to whom personal data are transferred,
v. To request correction of personal data in case of incomplete or incorrect processing,
vi. In case the reasons requiring the processing of personal data disappear, to request their deletion or destruction,
vii. request that the correction and deletion be notified to third parties to whom personal data have been transferred,
viii. To object to the emergence of an unfavorable result by analyzing the processed data exclusively through automated systems,
ix. To request the compensation of the damage in case of damage due to the illegal processing of personal data
Requests from data owners will be evaluated and concluded within thirty days at the latest, according to the nature of the request, within the framework of article 13 of the KVK Law. Positive or negative responses to requests from data owners can be notified to data owners in writing or electronically. Although the requests of data owners will be concluded free of charge as a rule, if the response of the request requires an additional cost, a fee may be charged in the amounts determined within the framework of the relevant legislation.
Collection Method of Personal Data and Legal Reason
Although personal data is generally obtained from data owners, the business partners we work with within the framework of the conditions specified in Articles 5 and 6 of the KVK Law and persons, institutions and organizations that are referred to as reference in job applications or included in the work and educational background of the applicant, recruitment platforms, It is also possible to obtain it through persons and institutions represented by the data owner / representing the data owner.