PRIVACY POLICY

KADOOĞLU YAĞ SAN. VE TİC. A.Ş, we would like to inform you that we attach importance to the protection of your Personal Data and that we have taken measures and steps in accordance with the legal regulations in this field.

Our company takes the necessary measures to protect the personal data of our valued members and customers, dealers, business partners, shareholders, employees and other real persons who establish a relationship with us by making a job application or visiting our website or in any other way. We have prepared this Personal Data Protection and Privacy Policy (“Privacy Policy”) in order to inform you about our Company rules and policies regarding the processing of personal data and the use of cookies and similar technologies within the framework of the Law on Protection of Personal Data (“KVK Law”).

KADOOĞLU YAĞ SAN. VE TİC. A.Ş and www.kadooglu.com make sure that you will be subject to the privacy policy in this text regarding the confidentiality, protection, processing, use, change, communications and other issues of member and customer information in the website and mobile application and that you accept the conditions every time you use our website. We would like to remind you that you have to review this text to become

As the data controller, it is possible for our Company to provide personal data policies and / or notifications different from this text, depending on the type and nature of the relationship between our Company and the data subject. In this case, such special policies and notifications provided to the data subject may contain aspects that are different from or in addition to the explanations in this Privacy Policy, and the special policies and notifications provided by the data owner should be considered first.

LEGAL BASIS AND GENERAL PRINCIPLES

Protection of personal data, especially Law No. 6698, is regulated in the Law No. 5651 on the Regulation of Broadcasts on the Internet and the Fight Against Crimes Committed Through These Publications, the Law No. 6563 on the Regulation of Electronic Commerce and the relevant secondary legislation. In addition, a number of criminal sanctions are stipulated in the Turkish Penal Code No. 5237 for the protection of personal data. In this context, when the Law on the Protection of Personal Data is examined, it is seen that the definition of “personal data” refers to all kinds of information about real persons whose identity is known or can be determined. In other words, anonymous information, anonymized information and other data that cannot be associated with a specific person are not considered personal data within the scope of this Privacy Policy. Data processing, on the other hand, is obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, classifying personal data fully or partially automatically or by non-automatic means provided that it is part of any data recording system. It refers to all kinds of operations that can be performed on personal data such as preventing or preventing their use. Our company takes necessary measures to protect privacy and in accordance with all legal principles regarding the processing of personal data; processes personal data for the purposes specified in this Privacy Policy in accordance with the following principles:

I. Compliance with the law and honesty rules,
ii. Being accurate and up-to-date when necessary,
iii. Processing for specific, explicit and legitimate purposes,
iv. Being connected, limited and measured for the purpose of processing
v. Being kept for the period stipulated in the relevant legislation or required for the purpose for which they are processed.

KADOOĞLU YAĞ SAN. VE TİC. DATA PROCESSED BY A.S

Our company can process general and special personal data with the explicit consent of the data owner or without explicit consent in cases stipulated in Articles 5 and 6 of the KVK Law. General and special data processed by our company are exemplified below, which data will be processed for each data owner; The type of relationship between the data subject and our Company (member-customer, employee, business partner, service provider etc.) may vary depending on various factors such as the nature of the communication channels used.

In accordance with the relevant legislation and the principles in this Privacy Policy, the type of relationship between the data subject and our Company (for example, the relationship between our company and a member-customer, employee, business partner, service provider, dealer, etc.) types of data can be processed:

I. Data for identifying the data subject such as name, surname, profession, title, institution / organization information, educational background, employment history, gender, marital status, citizenship status, tax liability status and, if any, information about the parent, guardian and attorney,
ii. Data such as date of birth, place of birth, identity number, blood type, religion and photograph included in identification documents such as identity card, passport, driver’s license,
iii. Contact information such as home, workplace or temporary residence address, telephone, e-mail and fax number,
iv. In case the data owner (customer-member) connects to our Company’s internet address with social media accounts, the information that the data owner approves to be shared via those channels
v. Communication records such as phone calls, electronic mail correspondence and other audio and visual data regarding the products purchased by the data owner,
vi. Internet protocol (IP) address, device ID, unique identifier information, device type, advertisement ID, unique device icon, statistics on web page views, incoming and outgoing traffic information, routing URL, internet log information, location information, the sites visited and the transactions and actions carried out through our websites, platforms, our internet network, and our advertising and electronic mail content.

Purposes of Using Personal Data

KADOOĞLU YAĞ SAN. VE TİC. A.Ş may process personal data for the purposes stated below and be kept for the period required by these purposes, in cases and to the extent permitted by the legislation.

I. To fulfill legal and administrative obligations and to exercise the rights arising from the current legislation,
ii. Providing information to public officials on public security issues upon request and in accordance with the legislation,
iii. Negotiation, establishment and execution of contracts concluded / considered to be concluded (For example, establishment of a distance sales contract between our Company and member customers and fulfillment of the obligations undertaken under the relevant articles of the Law on the Protection of the Consumer and the distance sales contract),
iv. Confirming the identity information of the customers who shop / have made through the website / mobile applications and recording the necessary address and other necessary information for communication,
v. Providing customers with a better shopping experience, determining suitable products that customers may be interested in considering their interests, informing customers about appropriate products, informing customers about campaigns, promotions and advantages, and providing effective customer service,
vi. Providing suggestions and solutions to our customers by our contracted institutions and solution partners and informing our customers about the services we provide,
vii. Communicating with our customers about the conditions, current status and updates of the contracts we have concluded under the relevant articles of the Law on the Protection of the Consumer and the distance sales contract and making the necessary information,
viii. Arranging all records and documents that will be the basis of processing in electronic (internet / mobile etc.) or paper environment,
ix. To increase customer satisfaction, to be able to recognize our customers who shop from the website and / or mobile applications and to use them in customer environment analysis, to use them in various marketing and advertising activities, and to organize surveys in electronic and / or physical environment through contracted organizations,
x. Evaluating customer complaints and suggestions regarding our products and services,
xi. Ensuring and developing coordination, cooperation and efficiency in or between units within our company,
xii. Ensuring the security of the website and other electronic systems and physical environments used by our company,

xiii. Notifying changes in the legislation or rules and policies accepted by our Company or making other notifications concerning the data subject,
xiv. Investigating, detecting, preventing and reporting violations of the contract and the law to the relevant administrative or judicial authorities,
xv. Resolving current and future legal disputes,
xvi. Answering requests and questions,
xvii. Meeting the needs of our employees within the framework of human resources policies of our company and carrying out, developing and improving the recruitment processes,
xviii. Evaluating the eligibility of job applications, finalizing them and contacting the candidates who have applied for a job,
xix. Development and improvement of our company’s human resources, public relations and marketing policies,
xx. Data processing is mandatory for the establishment, use or protection of a right,
xxi. Protecting the legitimate interests of our company, provided that it does not harm the fundamental rights and freedoms of the data owner.

Protection, Security and Control of Your Personal Data

Within the scope of the relevant legislation, our company takes the necessary technical and administrative measures to ensure the appropriate level of security as a data controller in order to prevent the processing of personal data and illegal access to the data and to ensure the protection of personal data. In this context, it is ensured that the business processes and activities of our Company are carried out in accordance with the internal policies and rules prepared for the protection of personal data. Efforts are carried out to raise awareness among employees about the legislation on the protection of personal data and internal policies and rules prepared in this direction, and necessary statements and commitments are taken from employees and persons and institutions that process data on behalf of our Company, and violations of these statements and commitments are subject to certain sanctions. Necessary information security measures are implemented to prevent unauthorized access to personal data, and the adequacy of the measures taken is subject to periodic checks to continuously improve the existing data security system.

Sharing of Personal Data with Third Persons domestically and Duration of Storage

Provided that we comply with the general principles listed in Article 4 of the KVK Law and the conditions stipulated in Articles 8 and 9 and take the necessary security measures, personal data can be transferred to domestic and third parties for the purposes shown under the heading of “Processing Purposes of Personal Data” of this Privacy Policy. and we can process and store them on domestic servers or other electronic media. In this context, your personal data can be shared with the program partner institutions and organizations we cooperate with in order to carry out our activities, domestic individuals and institutions from which we use the services to store the data, with physical server and / or cloud service, with domestic companies that we receive service for sending commercial electronic messages, with the interbank card center Various domestic advertising companies can be shared with other business partners within the scope of marketing activities in order to increase customer experience and provide better service, with our contracted banks, internationally certified payment institutions.

Except where a longer period is required by law or a longer period is permitted, our Company retains personal data only for the period required to fulfill the purposes specified in this Privacy Policy. Personal data, whose storage period has expired, is deleted, destroyed or anonymized by our Company within the framework of Article 7 of the KVK Law.

Rights of the Data Owner within the Framework of the Law on Protection of Personal Data

As a data owner, in accordance with Article 11 of the KVK Law:

I. learning whether your personal data is processed,
ii. to request information about personal data if it has been processed,
iii. learning the purpose of processing personal data and whether they are used appropriately for their purpose,
iv. To know the third parties in the country to whom personal data are transferred,
v. To request correction of personal data in case of incomplete or incorrect processing,
vi. In case the reasons requiring the processing of personal data disappear, to request their deletion or destruction,
vii. request that the correction and deletion be notified to third parties to whom personal data have been transferred,
viii. To object to the emergence of an unfavorable result by analyzing the processed data exclusively through automated systems,
ix. To request the compensation of the damage in case of damage due to the illegal processing of personal data

If you want to use any of the above-mentioned rights as a data owner, you can fill out the application form attached to this Privacy Policy and send a wet signed copy of the form to KADOOĞLU YAĞ SAN. VE TİC. A.Ş, 4.Organized industrial zone. 83422 Cad. No: 11, 27600 Şehitkamil / Gaziantep, in person or via a notary public or send the form to kadooglu@hs02.kep.tr registered e-mail address with your secure electronic signature. It has the same legal consequences as notifications made via a notary in paper form.)

Requests from data owners will be evaluated and concluded within thirty days at the latest, according to the nature of the request, within the framework of article 13 of the KVK Law. Positive or negative responses to requests from data owners can be notified to data owners in writing or electronically. Although the requests of data owners will be concluded free of charge as a rule, if the response of the request requires an additional cost, a fee may be charged in the amounts determined within the framework of the relevant legislation.

Collection Method of Personal Data and Legal Reason

Your personal data can be obtained in written, verbal, audio or video recording or other physical or electronic forms for the purposes specified in this Privacy Policy, within the framework of the conditions included in Articles 5 and 6 of the KVK Law. Personal data; Stores and other physical environments where data subjects may contact may be collected through websites, mobile applications, social media and other public channels or through training, conferences and similar events or by investigation method.
Although personal data is generally obtained from data owners, the business partners we work with within the framework of the conditions specified in Articles 5 and 6 of the KVK Law and persons, institutions and organizations that are referred to as reference in job applications or included in the work and educational background of the applicant, recruitment platforms, It is also possible to obtain it through persons and institutions represented by the data owner / representing the data owner.