As Maysa Gıda San. Tic. A.Ş. (“Maysa Gıda” or the “Company”), we attach great importance to the protection of personal data in our capacity as data controller under Turkish Personal Data Protection Law No. 6698 (“KVKK” or the “Law”) and the applicable legislation.
This General Corporate Privacy Notice has been prepared to inform our Visitors, Online Visitors, Customers, Potential Customers, Supplier Employees and Supplier Representatives about the scope and purposes for which their personal data is processed by Maysa Gıda, the methods through which such data is collected, the legal grounds for processing, the parties to whom and purposes for which personal data may be transferred, and the rights available to data subjects under the KVKK.
Your personal data is processed by Maysa Gıda in accordance with the principles set forth under Article 4 of the KVKK, including:
Processing lawfully and fairly,
Ensuring that personal data is accurate and, where necessary, kept up to date,
Processing for specified, explicit and legitimate purposes,
Ensuring that processing is relevant, limited and proportionate to the purposes for which the data is processed,
Retaining personal data only for the period stipulated under applicable legislation or necessary for the purposes for which it is processed.
A data subject may fall within more than one of the categories specified below.
The physical premises security data of individuals visiting Maysa Gıda's headquarters, factory and other business premises, such as CCTV footage and, where necessary, visitor records, may be processed for the purposes of:
Ensuring the security of physical premises,
Protecting employees, visitors and Company assets,
Preventing unauthorised access,
Conducting legal proceedings where necessary.
The following personal data relating to visitors using Maysa Gıda's website may be processed where such information is provided by the individual or obtained through the technologies used on the website:
Transaction security data, such as IP addresses and technical website usage records,
Contact information, such as e-mail addresses and telephone numbers,
Identity information, such as name and surname,
Marketing and website usage information.
Such personal data may be processed for the purposes of:
Conducting activities in compliance with applicable legislation,
Managing information security processes,
Ensuring website security,
Receiving and following up on requests and complaints,
Conducting communication activities,
Evaluating enquiries submitted through website contact forms,
Providing information to authorised persons, institutions and organisations where required by law,
Enabling users to access the website,
Analysing website performance and user experience where explicit consent has been provided and such consent is required.
The following personal data relating to individual customers or representatives and/or employees of corporate customers may be processed:
Identity information,
Contact information,
Customer transaction information,
Financial information,
Legal transaction information,
Physical premises security information,
Marketing information.
Such personal data may be processed for the purposes of:
Conducting the sale of goods and services,
Managing quotation, order and contractual processes,
Providing pre-sales and after-sales technical support,
Managing customer relationships,
Conducting product development and technical support activities,
Conducting finance and accounting operations,
Managing logistics and shipment processes,
Conducting and supervising business activities,
Ensuring compliance with applicable legislation,
Conducting marketing analysis activities,
Managing customer satisfaction processes,
Managing loyalty processes relating to the Company, its products and services,
Conducting communication activities,
Managing risk management processes,
Managing and resolving legal disputes,
Conducting retention and archiving activities,
Providing information to authorised persons, institutions and organisations where required by applicable legislation.
The following personal data relating to individuals interested in Maysa Gıda's products and services or representatives and/or employees of potential corporate customers may be processed:
Identity information,
Contact information,
Customer transaction information,
Marketing information,
Physical premises security information.
Such personal data may be processed for the purposes of:
Promoting products and services,
Managing quotation processes,
Managing potential customer relationships,
Conducting the sale of goods and services,
Conducting pre-contractual processes,
Conducting marketing analysis activities,
Conducting communication activities,
Ensuring the security of physical premises.
The following personal data relating to employees of suppliers from which Maysa Gıda purchases products or services may be processed:
Identity information,
Contact information,
Physical premises security information,
Transaction and operational information.
Such personal data may be processed for the purposes of:
Conducting communication activities,
Conducting and supervising business activities,
Managing supply chain processes,
Conducting procurement processes,
Conducting logistics activities,
Ensuring the security of physical premises,
Conducting activities in compliance with applicable legislation,
Conducting occupational health and safety activities.
The following personal data relating to individual suppliers or representatives of corporate suppliers may be processed:
Identity information,
Contact information,
Financial information,
Legal transaction information,
Transaction information,
Physical premises security information.
Such personal data may be processed for the purposes of:
Conducting and supervising business activities,
Conducting procurement processes for goods and services,
Managing supply chain processes,
Conducting finance and accounting operations,
Managing contractual processes,
Conducting investment and business development processes,
Ensuring the security of physical premises,
Following up on and conducting legal matters,
Conducting communication activities.
The categories of personal data specified above may be collected through:
Contracts,
Order and quotation forms,
Contact forms,
Visitor records,
Physical or electronic documents,
Our website,
E-mail and other electronic communication channels,
Telephone communications,
Information systems,
Computers, telephones and other electronic devices,
CCTV systems,
Documents provided within the scope of customer and supplier relationships,
Information provided directly by the data subject,
Authorised public institutions and organisations and third parties that lawfully provide information.
Personal data may be collected through automated or partially automated means or through non-automated means, provided that such non-automated processing forms part of a data recording system.
Your personal data may be processed for the purposes described above on the basis of the legal grounds stipulated under Article 5 of the KVKK, including:
Processing being expressly provided for by law,
Processing being necessary for the personal data of the parties to a contract, provided that such processing is directly related to the establishment or performance of the contract,
Processing being necessary for the data controller to fulfil its legal obligations,
Processing being necessary for the establishment, exercise or protection of a right,
Processing being necessary for the legitimate interests of Maysa Gıda, provided that such processing does not prejudice the fundamental rights and freedoms of the data subject.
Where a personal data processing activity cannot be based on any of the legal grounds specified above and explicit consent is required under applicable legislation, your personal data will be processed on the basis of your explicit consent.
Your personal data may be transferred to the following parties to the extent necessary and in accordance with the provisions of the KVKK governing the transfer of personal data.
Personal data relating to visitors may be shared with authorised public institutions and organisations, law enforcement authorities and judicial authorities for the purposes of ensuring physical premises security, resolving legal disputes and complying with requests made pursuant to applicable legislation.
Personal data relating to online visitors may be transferred to IT and infrastructure service providers for the purposes of operating and securing the website and to authorised public institutions, organisations and judicial authorities where required under applicable legislation.
Personal data relating to customers may be transferred to:
Authorised public institutions and organisations,
Banks and financial institutions,
Financial advisors and auditors,
Logistics and courier companies,
Insurance companies,
Information technology and infrastructure service providers,
Suppliers,
Legal advisors and law firms.
Such transfers may be made for purposes including conducting business activities, carrying out finance and accounting processes, managing logistics operations, fulfilling legal obligations and protecting legal rights.
Personal data relating to potential customers may be transferred to relevant service providers, legal advisors and, where necessary, authorised authorities for the purposes of conducting sales and business development activities, providing information technology services and managing legal disputes.
Personal data relating to supplier employees and supplier representatives may be transferred to:
Authorised public institutions and organisations,
Banks,
Financial advisors and auditors,
IT service providers,
Logistics and courier companies,
Relevant suppliers,
Legal advisors and law firms,
Judicial authorities where necessary.
Such transfers may be made for the purposes of conducting business activities, carrying out finance and accounting processes, managing the supply chain, fulfilling legal obligations and protecting legal rights.
Certain personal data may be transferred abroad where Maysa Gıda uses website, information technology, cloud, analytics, communication or similar technological infrastructure services whose providers are located outside Türkiye or whose systems or servers are located abroad.
In particular, certain personal data obtained through third-party cookies and Google services used on the website may be processed through or transferred to systems of service providers located outside Türkiye.
Where personal data is transferred abroad, such transfers are carried out in accordance with Article 9 of the KVKK concerning international transfers of personal data and the applicable secondary legislation.
Pursuant to Article 11 of the KVKK, as a data subject you have the right to:
Learn whether your personal data is being processed,
Request information if your personal data has been processed,
Learn the purpose of processing your personal data and whether it is being used in accordance with such purpose,
Know the third parties to whom your personal data has been transferred in Türkiye or abroad,
Request correction of your personal data if it has been processed incompletely or inaccurately,
Request the deletion or destruction of your personal data under the conditions stipulated by the KVKK,
Request that correction, deletion or destruction operations be notified to third parties to whom your personal data has been transferred,
Object to any result arising against you as a result of the analysis of your processed personal data exclusively through automated systems,
Claim compensation for damages arising from the unlawful processing of your personal data.
You may submit requests relating to your rights under Article 11 of the KVKK to Maysa Gıda in accordance with the methods stipulated under the Communiqué on the Procedures and Principles of Application to the Data Controllerand other applicable legislation.
Your application will be reviewed and concluded within the statutory period stipulated under the KVKK, depending on the nature of your request.
Data Controller:
MAYSA GIDA SAN. TİC. A.Ş.
Address:
KOSB Melek Aras Bulvarı No:54
Tuzla / Istanbul / Türkiye
Telephone:
+90 (216) 581 98 00
E-mail:
info@maysagida.com.tr
Website:
www.maysagida.com.tr