[BITTER ÇİKOLATACIM CONSULTANCY MANAGEMENT FOOD IMPORT EXPORT INDUSTRY TRADE LTD] Personal Data Policy

General Information about the Personal Data Protection Law

The Personal Data Protection Law No. 6698 (hereinafter referred to as the "KVKK") was accepted on March 24, 2016, and published in the Official Gazette No. 29677 on April 7, 2016. Some parts of the KVKK came into force on its publication date, while others came into effect on October 7, 2016.

Notification as Data Controller

In accordance with the Personal Data Protection Law No. 6698, and in the capacity of Data Controller, your personal data may be recorded, stored, updated, disclosed or transferred to third parties, classified, and processed in the ways listed in the KVKK, as explained in this document.

How Your Personal Data Can Be Processed

In accordance with the Personal Data Protection Law No. 6698, your personal data shared with our company may be obtained, recorded, stored, modified, reorganized, and processed in various ways, either fully or partially, automatically or manually, as part of a data recording system. Any transaction conducted on your data is considered as “personal data processing” under the KVKK.

The Purposes and Legal Grounds for Processing Your Personal Data

Your personal data shared by you will be processed for the following purposes and in accordance with the related legal grounds:

• To fulfill the requirements of the services we provide to our customers, in accordance with the terms of the contract and technology, and to improve the products and services we offer;
• To record necessary identity, address, and other information in order to identify the information of the transaction owner, in accordance with the Electronic Commerce Law No. 6563, Consumer Protection Law No. 6502, and the Distance Contracts Regulation published on August 26, 2015, in the Official Gazette No. 29457;
• To organize all records and documents necessary for payment systems, electronic contracts, or paper-based transactions, and comply with legal obligations such as information storage, reporting, and informing authorities;
• For public safety concerns, legal disputes, and upon request from relevant authorities, to provide information to prosecutors, courts, and public officials as required by law;
• To be processed in accordance with the Personal Data Protection Law No. 6698 and relevant secondary regulations.

Third Parties or Organizations to Whom Your Personal Data May Be Transferred

Your personal data shared with our company may be transferred to the following third parties or organizations:

• Our e-commerce infrastructure provider, IdeaSoft Yazılım San. ve Tic. A.Ş.,
• Suppliers, cargo companies, and other parties related to the services offered,
• Partners providing services as Data Processors or those working with us,
• Domestic and international organizations and other third parties.

How Your Personal Data is Collected

Your personal data is collected through:

• Forms on our website and mobile applications (such as name, surname, Turkish ID number, address, phone, email, etc.),
• Data related to IP records, cookies, browsing time and details, and location data collected from pages accessed with a username and password,
• Data collected via verbal, written, or electronic means through our sales and marketing department, branches, suppliers, other sales channels, paper-based forms, business cards, digital marketing, and call center channels,
• Data shared for commercial purposes, job applications, and proposals, via business cards, CVs, proposals, or other means (either face-to-face or at a distance, verbally or electronically),
• Indirect data collected from other channels such as websites, blogs, contests, surveys, games, campaigns, and social media platforms.

Personal Data Collected Before the KVKK Came into Effect

Personal data that was obtained before the effective date of the KVKK (April 7, 2016) in a lawful manner, such as membership, electronic communication consent, product/service purchases, etc., will also be processed and stored in accordance with the conditions and terms outlined in this document.

Transfer of Your Personal Data Abroad

Personal data collected in Turkey or stored abroad, in accordance with the methods described above, may be transferred to foreign service providers located in countries with adequate protection of personal data, as determined by the Personal Data Protection Board, and for purposes in line with the contract.

Storage and Protection of Personal Data

Your personal data will be stored securely in our databases and systems in accordance with Article 12 of the KVKK. It will not be shared with third parties, except as required by law or this document. Our company is responsible for ensuring the security of the systems and databases containing personal data, including implementing necessary software and physical security measures to prevent unauthorized access or unlawful processing of personal data. If any illegal acquisition of personal data occurs, it will be reported to the Personal Data Protection Board in accordance with legal regulations.

Ensuring Your Personal Data is Accurate and Up-to-Date

Under Article 4 of the KVKK, our company is required to keep your personal data accurate and up to date. To fulfill our obligations under the applicable laws, customers must provide accurate and up-to-date information, or update it through our website or mobile application.

Rights of the Personal Data Owner under KVKK No. 6698

As per Article 11 of the Personal Data Protection Law No. 6698, which came into effect on October 7, 2016, the personal data owner has the following rights:

• Learn whether their personal data has been processed,
• If processed, request information about the processing,
• Learn the purpose of processing personal data and whether they are used in accordance with the purpose,
• Learn about the third parties to whom personal data has been transferred,
• Request the correction of incomplete or incorrect personal data,
• Request the deletion or destruction of personal data in the cases provided in Article 7 of KVKK,
• Request notification of corrections, deletions, or destructions to third parties who have been informed of the data,
• Object to results obtained through automated systems that process personal data,
• Request compensation for damages caused by the unlawful processing of personal data.

Contact Information

Email: [email protected]