1.
Data Controller, Personal Data Categories, and Collection Methods
In accordance with
Law No. 6698 on the Protection of Personal Data ("Law No. 6698") and
the General Data Protection Regulation ("GDPR") if you are a citizen
of the European Union, your personal data such as identity, contact, message
content, customer transactions, and transaction security are being collected
automatically through electronic means and written data transmission methods.
As the data controller, BNS Gıda ve Turizm Hizmetleri Anonim Şirketi
("Company") processes your personal data as detailed below.
2. Purposes and
Legal Grounds for the Processing of Personal Data
The personal data collected by us are
processed based on the following purposes and legal grounds.
|
Purpose
of Data Processing
|
Data
Category
|
Legal
Ground
|
|
Conducting activities in compliance with
the legislation
|
Transaction Security
|
Article
5(2)-a of Law No. 6698 (KVKK)
It is explicitly provided for in the laws.
Article
5(2)-ç of Law No. 6698 (KVKK)
It is necessary for the data controller to fulfill its legal obligation.
|
|
Managing information security processes
|
Transaction Security
|
|
Managing communication activities
|
Identity, Contact, Customer Transaction
|
Article 5(1) of Law No.
6698(KVKK)
The
explicit consent of the data subject is required.
|
|
Managing customer satisfaction processes
|
Identity, Contact, Customer Transaction
|
|
Managing the collection of requests,
suggestions, and feedback
|
Identity, Contact, Message Content, Customer
Transaction
|
Article 5(2)-c of Law No.
6698 (KVKK)
It is necessary for processing personal
data of the parties to a contract, provided that it is directly related to
the establishment or performance of the contract.
|
|
Managing storage and archiving
activities
|
Identity, Contact, Transaction Security, Message
Content, Customer Transaction
|
Article 5(2)-f of Law No.
6698 (KVKK)
It is necessary for the
legitimate interests of the data controller, provided that it does not
violate the fundamental rights and freedoms of the data subject.
|
3.
Transfer of Personal Data
Your
personal data may be transferred to third parties under the following
conditions:
|
Legal
Basis for the Transfer
|
Purpose
of the Transfer
|
Recipient
of the Transfer
|
|
Article 8(2)-a of Law No. 6698 (KVKK)
Necessary for the data controller to fulfill its legal
obligation.
|
Conducting activities in compliance with the legislation
|
Authorized Public Institutions
|
|
Article 8(2)-a of Law No.
6698 (KVKK)
Necessary for the legitimate
interests of the data controller, provided that it does not violate the
fundamental rights and freedoms of the data subject.
|
Obtaining
services for the operation of the website activities
|
Business Partners Located in Turkey
|
4. Application Procedures and Principles
As a data
subject, if you have a request regarding your rights listed in Article 11 of
Law No. 6698, and if you are a citizen of the European Union, you may submit
your requests regarding rights such as withdrawing your explicit consent,
obtaining information about your data and accessing them, correcting, deleting,
or restricting the processing of your personal data under certain circumstances,
data portability under certain conditions, objecting to the processing of your
personal data, and other similar rights. You can submit your requests by
filling out the Personal Data Protection Application Form, which you can obtain
from our website, or by submitting your request through methods that meet the
minimum conditions specified in the Communique on the Application Procedures
and Principles to the Data Controller.As the Company, we will resolve your
request as quickly as possible and, at the latest, within thirty days free of
charge, depending on the nature of your request. However, if the process
requires additional costs, the Company will charge a fee in accordance with the
tariff set by the Personal Data Protection Authority. In case of a rejection of
your application, insufficient response, or failure to respond within the
specified time frame, you can inform us about this matter. Additionally, as a
data subject, you have the right to lodge a complaint with the competent data
protection authority in your country within thirty days from the date you learn
of our response, or within sixty days from the date you submit your application
in accordance with the proper procedure.
|
Application
Method
|
Application
Address
|
|
Electronic communication
via KEP (Registered Electronic Mail)
|
[email protected]
|
|
Communication
sent via a registered email address in our system, or with a secure
electronic signature or mobile signature
|
[email protected]
|
|
Written
application submitted in person or via notary
|
Küçükbakkalköy,
Hazar Sk. No:17, 34758 - Ataşehir / İstanbul / Türkiye
|
