KVKK
Kervan Gıda Sanayi ve Ticaret Anonim Şirketi Personal Data Processing Disclosure Statement
Dear Visitor,
We would like to inform you within the scope of the Personal Data Protection Law.
In accordance with the Personal Data Protection Law No. 6698 (“PDPL”), all your personal data that identify or can identify you, including your sensitive personal data, may be processed by Kervan Gıda Sanayi ve Ticaret Anonim Şirketi (“Company”) as the data controller.
The processing of personal data refers to any operation performed on data, such as collection, recording, storage, preservation, modification, reorganization, disclosure, transfer, classification, or prevention of use.
The protection of your personal data is of vital importance to us. We want to assure you that we will take all necessary measures and continue to be fully transparent in this regard.
Which Personal Data We Process
We process your personal data, including but not limited to the following, in a limited, relevant, and proportionate manner:
Your full name; address; various email addresses; various phone numbers, including mobile numbers; nationality; financial information related to you, including payment and billing details; details of contracts you enter into with third parties to receive services; details of your relationships with other parties; date of birth; IP address information; shopping history; cookie records; information obtained through campaign activities; and visual and audio data.
For our employees: personal, identity, and contact information; details of children and other dependents (for tax allowance processes); medical records; vehicle registration details; driver’s license information; accident reports; bank account information; professional qualification details and documents; fingerprints; visual and audio data; registration number; photographs; video recordings; warning notices and disciplinary action information; criminal record information, etc.
Purposes of Personal Data Processing
The personal data we collect may be processed for the purposes of ensuring the legal and commercial security of our Company and those in business relations with our Company; conducting satisfaction assessment activities for existing customers; tracking requests and complaints; managing loyalty processes related to the company, products, and services; handling and following up on legal matters; conducting training activities; managing organizations and events; carrying out sales, marketing, procurement, and after-sales support processes; performing finance and accounting operations; conducting marketing analysis studies; managing business operations; executing internal audit processes; implementing occupational health and safety activities; fulfilling notification obligations to relevant/authorized public authorities (e.g., courts, Ministry of Finance, Ministry of Labor and Social Security, Ministry of Interior, etc.); ensuring the implementation of our human resources policies; managing information and physical security processes; carrying out storage and archiving activities; and ensuring that activities are conducted in compliance with applicable legislation.
Transfer of Your Personal Data
Your personal data is processed and securely stored for the purposes mentioned above and is never shared with third parties without your explicit consent or legal requirement. Your personal data may be transferred, based on legal obligations and/or your consent, to: Authorized public institutions and organizations due to obligations arising from legal regulations such as the Turkish Commercial Code (TTK), Tax Procedure Law (VUK), Social Security Institution (SGK), Labor Law, Occupational Health and Safety Law (ISG Law), Vocational Qualification Authority Law, and Workplace Medicine Regulations; Intermediary financial institutions to evaluate financial risks;Independent audit firms for audit purposes; Intermediary educational institutions providing vocational training services; Our business partners;Real persons or private law legal entities, suppliers, affiliates, shareholders, group companies, and local/international organizations supporting our business processes.
Methods of Personal Data Collection
Your personal data is collected by our Company through various channels and based on different legal grounds in order to monitor and conduct our commercial activities. Data may be collected electronically in digital environments or on paper in physical environments. Within the scope of commercial process activities, data may be gathered through written documents/forms such as order forms, customer information forms, return forms, supplier information forms, contact information forms, purchase request forms, account opening forms, other commercial documents, payment information, valuable documents, candidate application forms, complaint/request/contact forms, assignment and asset forms, as well as notifications you provide, either verbally, in writing, or electronically. Collection may be fully or partially automated, or non-automated as part of any data recording system, and may also be obtained from outside Kervan Gıda Sanayi ve Ticaret Anonim Şirketi, including domestic/foreign affiliates, shareholders, program partner institutions we collaborate with, public authorities, and other third parties, through various methods.
Your Rights under Article 11 of the PDPL
As a personal data owner, if you submit your requests regarding your rights to our Company using the methods outlined in this Disclosure Statement, our Company will finalize the request free of charge as soon as possible, and no later than 30 days, depending on the nature of the request. However, if the Personal Data Protection Board prescribes a fee, the fee determined by our Company’s tariff will apply.
In this context, you have the following rights regarding your personal data:
a) To learn whether your personal data is being processed,
b) If your personal data has been processed, to request information about it,
c) To learn the purpose of processing your personal data and whether it is being used in accordance with that purpose,
ç) To know the third parties to whom your personal data has been transferred, domestically or abroad,
d) If your personal data is incomplete or inaccurate, to request its correction and to request that the third parties to whom the personal data has been transferred be notified of this correction,
e) Even if your personal data has been processed in accordance with the PDPL and other relevant legislation, to request the deletion or destruction of your personal data when the reasons for processing no longer exist, and to request that the third parties to whom the personal data has been transferred be notified of this deletion or destruction,
f) To object to the emergence of a result against yourself through the analysis of processed data exclusively by automated systems,
g) To request compensation for damages in case of harm resulting from the unlawful processing of personal data.
Data Controller and Methods for Requesting Information by the Relevant Person
In accordance with the PDPL, you can submit your request to exercise the rights mentioned above in writing or via other methods determined by the Personal Data Protection Board, using the channels listed below.
As a data subject, you must submit your rights request in writing to our Company, providing the necessary documents to verify your identity. To ensure that applications made to our Company under Article 11 of the PDPL are managed accurately and promptly, we recommend using the “Data Subject Information Request Form” available under the Personal Data Protection section at www.kervangida.com and submitting it in person or by mail along with any documents or information that may be required and the documents necessary to verify your identity.
Additionally, you can submit the completed Data Subject Information Request Form securely with an electronic signature to kervangida@hs01.kep.tr or as an online user via kvkk@kervangida.com.
You can submit your applications in writing using the “Data Subject Information Request Form” and in accordance with the methods specified in the Personal Data Protection Law No. 6698 and by the Personal Data Protection Authority, or via methods to be determined in the future.