Personal Data Protection Law Information Text

As Gönenli Süt ve Süt Ürünleri Gıda San ve Tic A.Ş., we are highly sensitive to the security of your personal data. In this regard, as a company, we attach great importance to processing and storing all personal data belonging to individuals related to the company, in accordance with the provisions of the Law on Protection of Personal Data No. 6698 ("KVKK"). As the "Data Controller" defined under KVKK, we process your personal data as described below and within the limits prescribed by the legislation.

In this information text:

• Personal Data: Any information related to an identified or identifiable real person,
• Personal Data Protection Law ("KVKK"): The Law No. 6698 on the Protection of Personal Data, which came into force with its publication in the Official Gazette on 07.04.2016,
• Data Controller: The real or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system,
• Data Processor: A real or legal person who processes personal data on behalf of the Data Controller based on the authority given by the Data Controller.

Data Controller:

Under KVKK, personal data shared with us by you in your capacity as a supplier, customer, employee, intern, visitor, etc. will be evaluated by Gönenli Süt ve Süt Ürünleri Gıda San ve Tic A.Ş., as the designated data controller, within the scope outlined below.

1. Collection, Processing, and Business Purposes of Personal Data:

Personal data may vary depending on your relationship with our company; it can be collected in both automated and non-automated methods through our departments, websites, social media channels, mobile applications, and other means in verbal, written, or electronic form. Your personal data may be created, updated, and processed as long as your relationship with our company continues.

The collected personal data will be processed in accordance with the personal data processing conditions and purposes stated in Articles 5 and 6 of KVKK, for the following purposes:

• Ensuring necessary operations for your use of our services,
• Ensuring the legal and commercial security of our company and individuals in business relations with us,
• Defining and implementing our company's strategies,
• Managing our human resources policies.

In accordance with the rules of law and good faith:

• It will be processed in an accurate and up-to-date manner when necessary,
• For specific, clear, and legitimate purposes,
• Relevant, limited, and proportionate to the purpose for which it was processed,
• Retained for the period required by the relevant legislation or the purpose for which it was processed.

2. Transfer of Processed Personal Data to Third Parties and for What Purpose:

Your personal data may be transferred to our business partners, suppliers, legally authorized public institutions, and private individuals in accordance with the personal data processing conditions and purposes stated in Articles 8 and 9 of KVKK for the purposes of providing necessary services to you, ensuring the legal and commercial safety of our company and individuals in business relations, determining and implementing our commercial and business strategies, and managing our human resources policies.

3. Method of Collecting Personal Data and Legal Basis:

Your personal data is collected through verbal, written, or electronic means for the purpose of providing our services and fulfilling our company’s legal and contractual obligations. The legal basis for collecting your personal data is in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of KVKK and as described in items (1) and (2) above.

4. Rights of Personal Data Owner Under Article 11 of KVKK:

As the owner of personal data, you have the right to:

• Learn whether your personal data is being processed,
• Request information about personal data if it has been processed,
• Learn the purpose of processing personal data and whether it is used appropriately,
• Learn about third parties to whom your personal data has been transferred, both domestically and abroad,
• Request the correction of any incomplete or inaccurate personal data,
• Request the deletion or destruction of personal data under the conditions prescribed in Article 7 of KVKK,
• Request notification of these actions to third parties to whom personal data has been transferred,
• Object to any outcome based solely on automated processing of personal data,
• Request compensation for damages caused by unlawful processing of personal data.

As per Article 13, paragraph 1 of KVKK, you can submit your requests regarding these rights to us in writing or through other methods defined by the Personal Data Protection Board. As of now, the Personal Data Protection Board has not defined any other method, so your application must be made in writing. The written application should be sent to us via hand delivery, mail, or notary to the following addresses: info@gonenlisut.com or Taştepe Mah. Taştepe Sok No: 38 Gönen Balıkesir.

Sincerely,