PERSONAL DATA PROTECTION AND DISCLOSURE OBLIGATION IN ACCORDANCE WITH THE PERSONAL DATA PROTECTION LAW No. 6698
As Mantilla Pazarlama Gıda Sanayi ve Ticaret Anonim Şirketi (“Company”), we process all kinds of personal data of all persons associated with the Company in accordance with the Personal Data Protection Law No. 6698 (Law). In accordance with Article 10 of the Law, the Company, which is the "data controller", is under the obligation to inform personal data owners in accordance with the Personal Data Protection Law No. 6698. With this Information Text, relevant persons who have data are informed and enlightened in accordance with the provision of Article 10 of the Law.
1. Identity of the Data Controller
This information is provided within the scope of the Personal Data Protection Law No. 6698 (“KVKK”) in order to fulfill the obligation to inform its suppliers, business partners, affiliates, customers, visitors and real or legal persons with whom it communicates for whatever reason in the capacity of Data Controller.
Company Title: Mantilla Paz. Food Industry ve Tic.A.Ş.
Address: Mehmet Akif Mah. Bahriye Cad. No:161 İç Kapı No:23 Küçükçekmece-İSTANBUL
Tax Number: 6121729099
Tax Office: HalkalıVD
Phone Number: 0232 4405500
Email: info@mantilla.com.tr
Web: www.mantilla.com.tr
2. Person Groups and Processed Data
Customers; Identity information (Name-surname, TR ID Number, Tax Number), Contact Information (Address, E-mail/KEP address, Telephone number), Legal transaction information (correspondence with judicial authorities, case file information) Customer Transaction Information (bill, check , invoice, order information, bank account and IBAN information) Visual records (security camera recording in the building)
Suppliers; Customers; Identity information (Name-surname, TR ID Number, Tax Number) Contact Information (Address, E-mail/KEP address, Telephone number) Location information, Legal transaction information (correspondence with judicial authorities, case file information) Customer Transaction Information ( promissory note, check, invoice, order information, bank account and IBAN information) Visual records (security camera recording in the building)
Any person with whom we have a commercial business relationship or from whom services are received, business partners, affiliates; (Name-surname, TR ID Number, Tax Number) Contact Information (Address, E-mail/KEP address, Telephone number), Legal transaction information (correspondence with judicial authorities, case file information) Customer Transaction Information (bill, check, invoice , order information, bank account and IBAN information) Visual records (security camera recording inside the building)
Visitors; Visual records (security camera recording inside the building)
3. Purposes for which personal data will be processed
Your personal data is processed in accordance with the general principles specified in Article 4 of the Law, based on one or more of the personal data processing conditions specified in Article 5. In all personal data processing activities carried out by the company, we act in accordance with the obligations specified in all relevant legislation and Board Decisions, especially the Law. Purposes of processing your personal data; Within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law;
– Ability to fulfill legal obligations arising from the relevant legislation to which our company is subject.
– To be informed by our business units about the products, services or commercial activities offered by the company.
– Customizing the products and services offered by our company according to your needs and recommending alternatives to real and legal persons who have commercial relations.
– Ensuring the legal and commercial security of our company and the people who have business relations with our company and determining and implementing our company's commercial and business strategies
– Execution of the supply and logistics process without disruption
– Carrying out financial and accounting transactions
– Execution and follow-up of legal processes
– Execution of information security processes
– Ensuring transaction security
– Evaluation of customer satisfaction and complaints
– By recording images to ensure physical security
– Protection of public order and health
– Planning and managing the financing and invoicing of all services provided,
– In order to carry out human resources processes or ensure occupational health and safety
– For purposes such as carrying out our quality and standard audits or fulfilling our reporting, notification and other obligations determined by laws and regulations.
– In addition, it may be processed by the data controller or the legal/real persons he/she will appoint, within the scope of the requirements and obligations determined to ensure the fulfillment of the legal obligations specified in the Law, as required or required by regulatory and supervisory institutions and legal regulations.
4. To whom and for what purpose the processed personal data can be transferred
Your personal data processed for the above purposes and within the conditions specified by the Law;
– In order to carry out our activities, in this process, by the parties with whom we have a data processing contract, limited to the subject of the contract.
– In order to carry out commercial activities and ensure their continuity, our company has partnerships with business partnerships, group companies or subsidiaries.
– To our suppliers on a limited basis in order to provide outsourced products and services.
– To audit firms within the scope of relevant contracts for the purpose of auditing our commercial activities in accordance with the provisions of the relevant legislation.
– Limited to our shareholders for the purpose of designing strategies regarding our company's commercial activities
– Legal requirements, limited to the relevant field, to legal consultants
– To legally authorized public institutions and organizations within the legal authority of the relevant public institutions and organizations, within the limited scope of their requests and cases of necessity.
– Institutions and organizations designated to ensure the fulfillment of legal obligations specified in the law
– To banks regarding our company's commercial and accounting activities
It can be transferred with your explicit consent or under the conditions specified by law.
5. Method and Legal Reason for Collecting Personal Data
Your personal data may be processed by our company or real or legal persons who process data on behalf of our company; The website, contracts made with you, information forms, job application forms, employment contracts are collected through verbal, written or electronic channels, with your express consent when necessary.
This information is obtained for the purpose of our commercial and administrative activities, in this context, for our company to be able to continue its commercial life and to fulfill its responsibilities arising from the law completely and accurately. ” is processed based on.
– Having your explicit consent
– It is clearly stipulated in the legislation to which our Company is subject, especially the Tax Procedure Law, Turkish Code of Obligations, Turkish Commercial Code, Labor Law, Social Security Law, and to fulfill the criteria determined by the Ministry of Agriculture and Forestry and the Ministry of Health,
– Complying with information storage, reporting and information obligations stipulated by legislation and official authorities
– Provided that it is directly related to the establishment or performance of a contract, it is necessary to process personal data of the parties to the contract, to provide the requested products and services and to fulfill the requirements of the contracts you have concluded.
– It is mandatory to fulfill the legal obligation
– It has been made public by the person concerned
– Data processing is mandatory for the establishment, exercise or protection of a right
– Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned.
Your special personal data is collected, stored and processed based on the following legal compliance reasons.
– Having your explicit consent
– Personal data other than health, without explicit consent in cases stipulated by law;
Health-related personal data can only be processed and stored by persons or authorized institutions and organizations who are under the obligation of confidentiality in order to protect public health and workplace health, without seeking the explicit consent of the person concerned.
6. Rights of the Data Owner
As the data subject, you have the following rights listed in Article 11 of the Law:
– Learning whether personal data is processed or not
– Requesting information if personal data has been processed
– Learning the purpose of processing personal data and whether they are used for their intended purpose
– Knowing third parties to whom personal data is transferred domestically or abroad
– Request correction of personal data if they are incomplete or incorrectly processed
– Requesting the deletion or destruction of your personal data in case the reasons requiring the processing of your personal data disappear
– Requesting that your information, corrected or deleted upon your request, be notified to third parties to whom personal data has been transferred, if any.
– Object to the emergence of a result against the person by analyzing the processed data exclusively through automatic systems
– Requesting compensation for damage in case of damage due to illegal processing of personal data
In order to exercise your above-mentioned rights, you can send your written request to Mehmet Akif Mah. using the Data Request Form, along with the necessary information that identifies you and your explanations about the right you want to use. Bahriye Cad. No:161 İç Kapı No:23 Küçükçekmece-İSTANBUL with a wet signature or by using the registered electronic mail (KEP) address, secure electronic signature, mobile signature or the e-mail address previously notified to the Company by the data owner and registered in the Company's system. You can send it signed with a secure electronic signature to our registered e-mail address mantilla@hs03.kep.tr.
In your application containing your explanations regarding the right you have as a personal data owner and which you request to exercise, in order to exercise your above-mentioned rights; The matter you are requesting must be clear and understandable, the matter you are requesting must be personally related to you, or if you are acting on behalf of someone else, you must be specifically authorized in this matter and your authority must be documented, the application must include identity and address information, and documents proving your identity must be attached to the application.
In this context, your applications will be finalized as soon as possible and within 30 days at most. If your applications regarding the processing of personal data are answered and require an additional cost, the relevant person (applicant) may be charged the fee at the tariff determined by the Personal Data Protection Board.