Information Text Regarding Personal Data

Disclosure Text Regarding Personal Data

As Gluten Free Factory (“{SellerNameKisa}”); we have prepared this disclosure text in order to inform our visitors, online visitors, customers, potential customers, supplier employees, and supplier officials regarding the processing, storage and transfer of your personal data within the framework of our activities arising from the Law on the Protection of Personal Data No. 6698 (“KVKK”), the European Union General Data Protection Regulation (“GDPR”) and relevant legislation and legal regulations.

1) What are the Categories of Personal Data We Process and For What Purposes Do We Process Them?

Your personal information is processed by Gluten Free Factory in accordance with Article 4.2 of the KVKK; in accordance with the principles of being lawful and honest, being accurate and up-to-date when necessary, being processed for specific, clear and legitimate purposes, being related to the purpose of processing, being limited and proportionate, being stored for the period stipulated in the relevant legislation or necessary for the purpose of processing, within the scope of our established and ongoing business relationships with our business partners (it is possible for a person to fall into more than one category), it may be processed for the purposes specified below.

A. Our Visitors

The identity information of our visitors (e.g. name, surname, Turkish ID number, place and date of birth) will be processed for the purpose of creating and monitoring visitor records.

B. Our Online Visitors

Transaction security information (e.g. your IP address information), marketing information (e.g. shopping history information, cookie records) and (if you inform us of these) identity information, contact information (your e-mail address, full address, telephone number) of our online visitors who use our website; It will be processed for the purpose of carrying out activities in accordance with the legislation, carrying out information security processes, following up on requests/complaints, carrying out communication activities, providing information to authorized persons, institutions and organizations, and providing you with access to our website via the internet.

C. Our Customers

Identity information, contact information, customer transaction information (e.g. order information), financial information (e.g. balance sheet information), legal transaction information, marketing information (e.g. shopping history information, etc.) of our natural person customers or legal entity customers' authorities and/or employees; It will be processed for the purposes of carrying out activities in accordance with the legislation, carrying out finance and accounting affairs, carrying out/auditing business activities, carrying out logistics activities, carrying out after-sales support services for goods/services, carrying out sales processes for goods/services, carrying out marketing analysis studies, carrying out contract processes, providing information to authorized persons, institutions and organizations, resolving legal disputes, carrying out storage and archive activities, carrying out risk management processes, carrying out advertising/campaign/promotion processes, being able to send commercial electronic messages, carrying out loyalty processes for companies/products/services, carrying out communication activities.

D. Our Potential Customers

The identity information, contact information, customer transaction information, marketing information of the authorized persons and/or employees of our real person customers or legal entity customers will be processed for the purposes of managing sales processes for goods/services, carrying out contract processes, carrying out advertising/campaign/promotion processes, being able to send commercial electronic messages, carrying out marketing analysis studies.

E. Our Solution Partners

The identity information, contact information, dealer transaction information (order information, etc.), financial information (balance sheet information, etc.), legal transaction information, marketing information (shopping history information) of our real person solution partners or legal entity solution partners will be processed for the purposes of conducting activities in accordance with the legislation, conducting financial and accounting affairs, conducting/auditing business activities, conducting logistics activities, conducting after-sales support services for goods/services, conducting sales processes for goods/services, conducting marketing analysis studies, conducting contract processes, informing authorized persons, institutions and organizations, resolving legal disputes, conducting storage and archive activities, conducting risk management processes, conducting advertising/campaign/promotion processes, being able to send commercial electronic messages, conducting service processes for the end consumer, and conducting communication activities.

F. Our Supplier Employee

The identity information, contact information, professional experience information (e.g. in-service training information) of our supplier employees; Conducting communication activities, Conducting/supervising business activities, Conducting supply chain management processes, Conducting logistics activities, Conducting activities in accordance with legislation, Occupational health/safety activities

G. Our Supplier Authorized Person

The identity information, contact information, customer transaction information, financial information, marketing information, legal transaction information of our natural person suppliers or legal person supplier authorized persons will be processed for the purposes of conducting/auditing business activities, conducting goods/service purchasing processes, conducting finance and accounting affairs, conducting contract processes, conducting investment processes, following up and conducting legal affairs.

2) What are the Collection Methods of Your Personal Data?

Your personal data specified in categories above are collected through physical means such as order forms, contracts, visitor forms or through information systems and electronic devices (e.g. telecommunication infrastructure, computers and phones), third parties, our website and other documents declared by the relevant person, through automatic or non-automatic means.

3) How Long Do We Keep Your Personal Data?

If a period is stipulated in the relevant legislation, your personal data specified in categories above will be kept for the period stipulated; If no period is foreseen, it is stored for as long as our legitimate interest continues, taking into account the following criteria.

1.    Gluten Free Factory applications
2.    Applied commercial practices
3.    The limitation periods stipulated in the relevant legislation
At the end of these periods, the stored personal data is deleted, destroyed or made anonymous.

4) What is the Legal Reason for Collecting Your Personal Data?

Your personal data is collected by Gluten Free Factory in line with the realization of the purposes explained above, as specified in Article 5 of the KVKK;

1.     It is clearly foreseen in the laws,
2.     Provided that it is directly related to the establishment or execution of a contract; The processing of personal data belonging to the parties to the contract is necessary,
3.     It is mandatory for the data controller to fulfill its legal obligation,  Data processing is mandatory for the establishment, exercise or protection of a right, Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person.
4.    The identity and contact data of our Solution Partners, Customers and Potential Customers will be processed for the purposes of advertising, campaigns, promotions and sending commercial electronic messages based on their explicit consent. You always have the right to request that communication regarding our advertising, campaigns, promotions and sending commercial electronic messages be stopped and to withdraw your explicit consent.

If you do not want to be contacted for advertising, campaigns, promotions and sending commercial electronic messages from now on, you can use your right of cancellation through the contact information you have shared with us.

5) Do We Transfer Your Personal Data to a Third Party?

1.    Personal data of our visitors may be shared with law enforcement and judicial authorities for the purpose of resolving legal disputes and upon request in accordance with the relevant legislation.

2.    Personal data of our online visitors may be shared with judicial authorities and authorized public institutions and organizations for the purpose of resolving legal disputes and upon request in accordance with the relevant legislation.

3.    Personal data of our customers are transferred to authorized public institutions and organizations for the purpose of following up and conducting legal affairs, conducting activities in accordance with the legislation, providing information to authorized persons, institutions and organizations within the scope stipulated by the legal regulations; to our group companies, solution partners, cargo companies, suppliers, banks and financial advisors to the extent necessary for the execution/supervision of business activities, execution of risk management processes and proper performance of our services. In addition, the personal data in question may be transferred to the law office from which we receive service and to judicial authorities in order to be used as evidence in legal disputes that may arise in the future.
4.    Personal data of our potential customers may be transferred to our solution partners to the extent necessary for the proper performance of our services and to the law firm and judicial authorities from which we receive services in order to be used as evidence in legal disputes that may arise in the future. 5.    Personal data of our solution partners are transferred to authorized public institutions and organizations to the extent necessary for the proper performance of activities, to inform authorized persons, institutions and organizations within the scope stipulated by legal regulations; to our solution partners, cargo companies, suppliers and banks to the extent necessary for the proper performance of our services, to the proper performance of business activities, to the execution of risk management processes, to the follow-up and execution of legal affairs.

In addition, the personal data in question may be transferred to the law firm from which we receive service and to judicial authorities in order to be used as evidence in possible future legal disputes.

6.    The personal data of our supplier employees are transferred to authorized public institutions and organizations for the purposes of carrying out activities in accordance with the legislation, informing authorized persons, institutions and organizations, following up and conducting legal affairs and carrying out/supervising business activities within the scope of the legal regulation; to group companies, cargo companies, suppliers, our financial consultancy office and banks to the extent necessary for the proper performance of the service. In addition, the personal data in question may be transferred to the law firm from which we receive service and to judicial authorities in order to be used as evidence in possible future legal disputes.

7.    The personal data of our supplier employees are transferred to authorized public institutions and organizations for the purposes of carrying out activities in accordance with the legislation, following up and conducting legal affairs, informing authorized persons, institutions and organizations, carrying out/supervising business activities within the scope of the legal regulation; In order to properly perform the service, it is transferred to group companies, suppliers, cargo companies, banks and our financial advisor to the extent necessary. In addition, the personal data in question may be transferred to the law office from which we receive service and to judicial authorities in order to be used as evidence in legal disputes that may arise in the future.

6) Do We Transfer Your Personal Data Abroad?

It may be shared with third parties abroad, our business partners / suppliers based on the rules within the framework of Article 9 of the KVKK.

7) How Can You Exercise Your Rights Regarding Your Personal Data?

Right to Rectification: If you have any personal data that you think is incorrect, you have the right to request that our company correct it. At the same time, if you have any personal data that you think is incomplete, you have the right to request that our company complete it.
Right to Access: You have the right to request a copy of your personal data from our company. You may be asked to pay a certain amount for this activity.
Withdrawal of Consent: You have the right to withdraw your consent at any time, without affecting the lawfulness of the processing activity carried out based on consent prior to the withdrawal of your explicit consent to our company.

Right to be forgotten: You have the right to request that our company erase your personal data in certain circumstances.

Right to Data Portability: In certain circumstances, you have the right to request that our company transfer your personal data that we have obtained to another organization or directly to you.
Right to Restrict Processing: In certain circumstances, you have the right to request that our company restrict the processing of your personal data.
Right to Object to Processing: In certain circumstances, you have the right to object to the processing of your personal data by our company.
Right to File a Complaint with a Supervisory Authority: If you believe that we have processed your personal data in breach of applicable data protection directives, you have the right to lodge a complaint with the competent regulatory authority, first of all, if you live in the European Union, the relevant supervisory regulatory authority in the Member State of your habitual residence or place of business or in which you believe that the data protection breach has occurred.
You can send us your requests regarding the rights mentioned above and your requests within the scope of Article 11 of the KVKK, which regulates the rights of the relevant persons, through the “Data Controller Application Form” prepared for your convenience in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller” located at the address “http://www.glutenfreefactory.com.tr” belonging to {Company}.

Data Controller: {Company}
Address: {SellerAddress}
Mail: {SellerEmail}