INFORMATION ABOUT THE LAW ON PROTECTION OF PERSONAL DATA

As a company we are committed to the security of personal data. In this direction, we would like to inform you about our data processing activities within the scope of the Personal Data Protection Law No.6698, which is regulated to protect the fundamental rights and freedoms of individuals, especially the privacy of private life.

In accordance with the Personal Data Protection Law No.6698 (“KVKK”), all kinds of information regarding an identified or identifiable natural person are defined as personal data. Your personal data at our company; The reasons, purposes and methods described below may be recorded in our systems, changed, rearranged, transferred within legal limits, classified, updated and your personal data may be processed in accordance with the conditions listed in the KVKK.

Who is the Data Controller?
Data controller refers to the real person or company who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system. In this direction, Hacı Bekir Lokum ve Şekerli Mamuller Sanayii A.Ş. (The "Company") processes your personal data within the scope of KVKK as the data controller.

What are the Purposes of Processing Your Personal Data?
Your personal data are processed in accordance with the principles stipulated in the KVKK for the following purposes:

• Creating offers for products and services,
• Conducting the sales processes of products and services,
• To communicate with our customers about the changes in the terms of the distance sales contract, updates, the status of delivery,
• Managing shopping history,
• Registration of membership,
• Identity verification,
• Carrying out the necessary transactions to receive payment for the products and services provided,
• Planning and execution of customer relationship management processes,
• Management of relations with business partners and / or suppliers,
• Communicating within the scope of marketing activities regarding our products and services, sending commercial messages, submitting personalized offers, conducting marketing, surveys and satisfaction studies, planning and / or execution of product and / or service loyalty processes,
• Creating campaigns for customers, cross-selling, determining the target audience, carrying out activities that enhancing user experience by following customer transactions.
• Developing the website and customizing it according to customer needs, direct and indirect marketing, conducting personalized marketing and remarketing activities, conducting personal segmentation, targeting, analysis and internal reporting activities, marketing research, planning and execution of customer satisfaction activities and customer relations,
• Planning and executing the activities required for the recommendation and promotion of the products and services offered to the relevant people by customizing them according to the usage habits and needs of the relevant people,
• Processing shopping information through cookies in order to provide a better shopping experience to our customers on the website and to assist our customers with the products they may be interested in considering their interests,
• Conducting marketing analysis studies and improving service quality,
• Performing after sales support services,
• Planning and execution of corporate communication activities,
• Planning and execution of delivery operations and logistics activities,
• Follow-up of legal processes,
• Internet access records management and data security,
• Planning information security processes,
• Carrying out the necessary audit and control processes as well as reporting and audits within the scope of company activities,
• Sharing information with authorized public institutions and organizations within the framework of the legislation,
• Evaluation of demands and complaints.

For What Purposes Can Your Personal Data Be Transferred To Whom?
Your personal data are, within the scope of the requirements of commercial life; fulfillment of sales processes, execution of after-sales support processes, planning and execution of delivery operations and logistics activities, receiving support services for sending commercial messages and customer satisfaction surveys, customizing the products and services offered according to the usage habits and needs of the relevant people, and planning the activities necessary for the promotion, tracking the website shopping experience through cookies, conducting marketing activities, carrying out audit and control processes and reporting, conducting and monitoring legal affairs and transactions, to be able to transfer to the following persons / organizations limited to the purposes of sharing information with the institutions and only to the extent required by the service within the scope of the processing conditions specified in Articles 8 and 9 of the KVKK,

• Companies that we receive logistics service, including cargo companies
• Banks, institutions that legally provide card information storage services and financing companies
• Organizations that we receive consultancy on legal, financial, tax and operational issues
• Companies we receive support for sending commercial electronic messages and / or conducting marketing activities
• Business partners and suppliers, the service we received on various topics
• Group companies
• Authorized public institutions and organizations
• Shareholders
• Affiliates and subsidiaries

What are the Methods and Legal Reasons for Collecting Your Personal Data?
Your personal data is collected by our Company directly from our customers through channels such as our communication channels, company officials, business partners, online transactions, public institutions and organizations, or by electronic means in written / verbal form or by non-automatic means in written or verbal form.

Personal data collected in this context are among the legal reasons listed in Articles 5 and 6 of the Law, provided that "the processing of personal data belonging to the parties of the contract is necessary, provided that it is directly related to the establishment or execution of the contract", "in order for the data controller to fulfill his legal "mandatory" obligation. "prescribed by law", "mandatory data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned" or "related to marketing and customer satisfaction activities that are not directly related to the sales contract" express consent of the person ”is processed based on legal reasons.

What Are Your Rights Regarding Your Personal Data?

Regarding the processing of your personal data, within the scope of Article 11 of the KVKK, you can send us your requests regarding the following rights and the implementation of the Law: Learning whether your personal data is processed,

1. If your personal data has been processed, to request information regarding this,
2. Learning the purpose of processing your personal data and whether they are used appropriately,
3. To know the third parties to whom your personal data is transferred domestically or abroad,
4. To request correction of your personal data in case of incomplete or incorrect processing,
5. To request the deletion or destruction of your personal data,
6. Request notification within the scope of correction, deletion or destruction of your personal data to third parties to whom your personal data is transferred,
7. Object to the occurrence of a result against you by analyzing your processed data exclusively through automated systems,
8. To request the compensation of the damage in case you suffer due to unlawful processing of your personal data.

Since our company is obliged to keep records and documents regarding transactions with its customers for a certain period of time within the scope of legal regulations; If you request the deletion, destruction or anonymization of your personal data and there is a period determined by legal regulations, this request can be fulfilled by our Company at the end of the legal period. However, your personal data will not be processed during this period, except in cases legally required by our Company.

You can always submit your requests regarding your personal data to the Data Supervisor through the communication channels in the Application Form in accordance with the conditions set out in the Communiqué on Application Procedures and Principles. Depending on the nature of the request and within 30 (thirty) days at the latest, the application will