Protection of Personal Data
PDPL CLARIFICATION STATEMENT
1. Subject
The subject of this PDPL Clarification Statement is to set forth the principles regarding Alez Fabrikası ("Company") processing all kinds of personal data belonging to all persons related to the Company in accordance with the Law on the Protection of Personal Data No. 6698 ("Law"). Accordingly, the Company, which is the data controller in accordance with Article 3 of the Law, informs and enlightens personal data owners (employees, employee candidates, customers, suppliers, consultants, business partners, shareholders, company officials, company representatives, persons with whom a contractual relationship exists and their employees, persons who are subject to all kinds of legal transactions, visitors, and real or legal persons with whom it communicates for any reason whatsoever) with this PDPL Clarification Statement in accordance with Article 10 of the Law. Personal data and special categories of personal data processed by the Company are stored securely in physical or electronic environments for a period appropriate to the processing purpose. The Company declares that it acts in accordance with the obligations stipulated in all relevant legislation, especially the PDPL, regarding the protection of personal data within the scope of these activities.
1. Data Controller and Representative
Data Controller
- Company Title: Alez Fabrikası
- Address: Bozburun, Ahmet Nuri Erikoğlu Cd. No: 47, 20020 Denizli Merkezefendi/Denizli
- Tax No: 24178627692
- Tax Office: Gökpınar Tax Office
- Phone No: 0541 477 77 11
- Email: info@alezfabrikasi.com
- Website: www.alezfabrikasi.com.tr
2. Purposes of Personal Data Processing
2.1. Personal data is processed by the data controller or legal/natural persons to be appointed by the data controller, in accordance with the general principles specified in Article 4 of the Law, based on one or more of the personal data processing conditions specified in Articles 5 and 6, to achieve the following purposes. In all personal data processing activities carried out by the Company, compliance with the obligations specified in all relevant legislation, especially the Law, and the decisions of the Personal Data Protection Board is ensured. If explicit consent is given;
- Managing Information Security Processes
- Managing Access Authorizations
- Conducting Activities in Compliance with Legislation
- Fulfilling obligations undertaken under the distance sales contract and other contracts concluded with customers
- Managing Customer Relationship Management Processes
- Conducting Customer Satisfaction Activities
- Tracking Requests / Complaints
- Sending messages, newsletters, and other publications via email, SMS, WhatsApp, etc. platforms
will be processed for the purposes listed and may be shared with the persons specified in this clarification text.
2.2. In addition to the purposes mentioned above, personal data may also be processed to ensure the fulfillment of legal obligations specified in the Law and other legislation, as determined by regulatory and supervisory authorities.
3. Transfer of Personal Data and Purposes of Transfer
Personal data processed within the scope of the stated purposes may be transferred by the Company to the following persons with whom the Company has a contractual relationship, limited to the subject of the contract, in accordance with the principles of Article 8 of the Law, based on the explicit consent of the personal data owner if available, or based on the provisions of Article 5 paragraph 2 and Article 6 paragraph 3 of the Law if data processing conditions requiring no explicit consent exist:
- To the Company's business partners, dealers, or affiliates, for the purpose of fulfilling commercial activities and ensuring their continuity,
- To suppliers and supplier employees, limited to the purpose of providing outsourced products and services,
- To auditing firms within the scope of relevant contracts, for the purpose of auditing commercial activities in accordance with relevant legislative provisions,
- To legal and tax advisors, financial advisors, and other advisors if any,
- To shareholders, limited to the purpose of designing and implementing strategies related to the Company's commercial activities,
- To public institutions and organizations, limited to their demands within the scope of their legal authority,
- To institutions and organizations designated to ensure the fulfillment of legal obligations specified in the Law,
- To banks and insurance companies regarding the Company's commercial activities,
- To payment institutions for identity verification purposes in accordance with the payment institution framework agreement that customers will approve during the payment phase and the Regulation on Measures Regarding the Prevention of Laundering Proceeds of Crime and Financing of Terrorism published in the Official Gazette dated January 9, 2008, and numbered 26751.
4. Transfer Abroad
4.1. The Company may transfer personal data abroad at any time by obtaining the explicit consent of the personal data owner.
4.2. In cases where there is no explicit consent from the personal data owner, personal data may be transferred abroad if the conditions for data processing without explicit consent, stipulated in Article 5 paragraph 2 and Article 6 paragraph 3 of the Law, exist. In this case, personal data may be transferred, in accordance with Article 9 of the Law, only to persons and organizations residing in foreign countries declared by the Personal Data Protection Board as having adequate protection, after such declaration; and for countries where adequate protection is not found and declared, the transfer will be limited to cases where data controllers in Turkey and the relevant foreign country guarantee adequate protection in writing and the Board's permission for the transfer can be obtained.
5. Method of Collection and Legal Basis of Personal Data
5.1. Personal data is collected by our Company or by real or legal persons processing data on behalf of the Company through various channels, including but not limited to websites, contracts with personal data owners, information forms, surveys, social media applications, call centers, participation in trainings, seminars, fairs, and similar events organized by the Company, parties with whom the Company has a business relationship and/or from whom it receives complementary services, contracted organizations, offices and other physical environments with which it can communicate, and similar other channels, verbally, in writing, or electronically, and is obtained with the explicit consent of the personal data owner when possible.
5.2. Personal data is acquired for the purposes of enabling the Company to maintain its commercial life and to fulfill its legal obligations completely and accurately in all business processes, and personal data collected in this regard is processed in accordance with the general principles listed in Article 4 of the Law, based on the data processing conditions specified in Article 5 of the Law. In this context, the following types of "personal data" may be processed in accordance with the terms and conditions set forth in the Clarification Text:
Identity Data
Your name, surname, date of birth, and other identity data
Contact Data
Your address, phone number, email address, and other contact data
Customer Transaction Data
Your voice and other digital information, such as your voice call records kept as per call center standards
6. Retention of Personal Data
Your personal data is processed only for the period necessary to fulfill the purposes explained in the clarification text and, in any case, in accordance with our company's practices and the customs of commercial life; after these periods expire, it is deleted, destroyed, or anonymized. The personal data you have entered into the system can only be changed by you, and all necessary technical and administrative measures are taken by our Company to prevent others from accessing and changing this information.
7. Our Cookie Policy
Our Company reserves the right to link the behavior of users visiting the site, even if they are not members, with a cookie in the browser and to define remarketing lists based on metrics such as the number of pages viewed, visit duration, and goal completion, for the purpose of online behavioral advertising and marketing. You can learn about the cookies and similar devices we use, their purposes, how you can manage your preferences, and other information that may be of interest to you in our Cookie Policy.
8. Rights of the Personal Data Owner
8.1. The personal data owner has the following rights listed in Article 11 of the Law:
- To learn whether personal data is processed,
- To request information if personal data has been processed,
- To learn the purpose of personal data processing and whether they are used in accordance with their purpose,
- To know the third parties to whom personal data is transferred domestically or abroad,
- To request correction of personal data if it is incomplete or incorrectly processed,
- To request the deletion or destruction of data if the reasons requiring the processing of personal data have disappeared,
- To request that corrected or deleted information be notified to third parties to whom personal data has been transferred, if applicable,
- To object to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems,
- To request compensation for damages if personal data is processed unlawfully.
8.2. Personal data owners will be able to exercise their rights mentioned above, in accordance with Article 13 paragraph 1 of the Law, using the following information and methods, as per the "Communiqué on the Procedures and Principles for Application to the Data Controller" published in the Official Gazette dated March 10, 2018, and numbered 30356.
Information to be Included in the Application Content:
- Applicant's name, surname, and signature if the application is written,
- If the applicant is a citizen of the Republic of Turkey, his/her T.C. identity number; if not, his/her nationality along with passport number or identity number, if any,
- Applicant's residence or business address for notifications,
- Applicant's email address, phone, or fax number for notifications,
- Subject of the applicant's request,
- Information and documents related to the applicant's request.
Application Methods:
- The applicant can personally deliver the application form (“APPENDIX-1”) with a wet signature, in a sealed envelope with the note “Information Request Regarding the Law on the Protection of Personal Data” on the envelope, to the reception desk at the Company's address.
- The applicant can send a notification to the Company's address via a notary public, but the phrase “Information Request Regarding the Law on the Protection of Personal Data” must be added to the notification envelope.
In addition to these;
- With a secure electronic signature defined in the Electronic Signature Law No. 5070,
- With a mobile signature,
- To the Company's registered email address info@alezfabrikasi.com, with the note “Information Request Regarding the Law on the Protection of Personal Data” in the subject line of the email,
- Applications can also be made by using the email address previously notified to the Company and registered in the Company's system.
8.3. As a personal data owner, in the application containing explanations regarding the request; the requested matter must be clear and understandable, the requested matter must be related to the personal data owner, or if the application is made on behalf of someone else, specific authorization must be held and this authority must be documented, the application must include identity and address information, and documents proving identity must be attached to the application.
8.4. It is important that the information shared during the application is transmitted accurately; this is necessary for exercising the rights over data under the Law, and the responsibility for any incorrect or erroneous information provided belongs to the relevant person.
8.5. Applications will be concluded as soon as possible and within 30 (thirty) days at the latest.
8.6. If the response to applications regarding the processing of personal data requires an additional cost, a fee determined by the Personal Data Protection Board may be charged to the relevant person (applicant).
9. Request for Information Update
Should there be any changes in their data, the personal data owner will be able to notify their updated and correct personal information to the Company's address or to the e-mail address info@alezfabrikasi.com.
10. Amendments
The Company reserves the right to amend this Clarification Statement in the event of changes in the Law or in the methods determined by the Personal Data Protection Board.
ANNEX-1
KVKK Information Request Application Form
First Name and Last Name:
Turkish ID No:
(In case of not being a Turkish Citizen,
Nationality, Passport or ID No if available)
Address:
Email:
Phone and/or Fax:
Subject of Request:
Explanations
Signature