As Akanlar Çikolata İçecek Gıda San. ve Nak. Tic. Limited Şirketi (“COMPANY”), we would like to inform you about your personal data in accordance with the "Law on the Protection of Personal Data No. 6698" (KVKK), which was enacted to protect fundamental rights and freedoms, particularly the privacy of private life.

Your personal data is processed and stored for the period stipulated by the relevant legislation or as long as necessary for the purposes for which they are processed, in accordance with the following methods, legal grounds, purposes, and conditions, and all necessary administrative and technical measures are taken by our company to ensure its protection.

1. Data Controller and Representative:

The data controller for your personal data collected by our company’s headquarters, factory locations, subcontractors, suppliers, and business partners is Akanlar Çikolata İçecek Gıda San. ve Nak. Tic. Limited Şirketi.

2. Method of Collecting Personal Data:

Your personal data may be collected through our Headquarters (Gaziantep), company website, official social media accounts, parties providing complementary or extension services to our company, contracted institutions, business partners, suppliers, subcontractors, and similar channels, either automatically or non-automatically, in written, verbal, or electronic form.

3. Legal Grounds and Purposes for Processing Personal Data:

Your personal data is collected by our Company using automatic or non-automatic methods during activities such as:

• Job application forms and contracts (employment, supplier, purchasing),
• Purchase order forms, offer forms, documents submitted during job applications,
• E-mail correspondence, cargo deliveries, information forms, and other communication channels,
• Sales transactions, order entry, logistics operations, invoicing (invoice/return invoice), accounting processes, procurement, training, fairs, and verbal information shared.

Purposes of Processing Personal Data include:

• Fulfillment of legal obligations arising from legislation,
• Offering our company’s products and services, fulfilling obligations, and arranging records/documents,
• Compliance with local and international regulations regarding data retention, reporting, informing, taxation,
• Sending advertising and promotional SMS/email to parties whose consent has been previously obtained under Law No. 5653 on Regulation of Electronic Commerce,
• Planning, auditing, and executing information security processes,
• Managing HR processes (recruitment, payroll, benefits, and training),
• Managing financial/accounting activities,
• Improving efficiency, performance, and internal analysis,
• Managing supplier and business partner access,
• Executing logistics and operational activities,
• Customer relationship management and satisfaction activities,
• Handling customer requests and complaints,
• Ensuring operational security and corporate compliance,
• Marketing and sales planning,
• Ensuring data accuracy and up-to-dateness,
• Providing mandatory information to authorized institutions,
• Managing visitor records.

Cases Not Requiring Explicit Consent:

Under KVKK, your personal data may be processed without your explicit consent in cases such as:

• Clearly stipulated by law,
• Necessary for the protection of life or physical integrity of a person unable to express consent,
• Necessary for the performance of a contract,
• Required for the company to fulfill its legal obligations,
• Publicly disclosed by the data subject,
• Mandatory for the establishment, exercise, or protection of a right,
• Necessary for the legitimate interests of the company, provided it does not harm fundamental rights and freedoms.

6. Persons/Organizations to Whom Personal Data May Be Transferred:

• Company’s business partners, shareholders, affiliates,
• Akanlar İthalat İhracat San.Tic.Limited Şirketi,
• Authorized public authorities, legal entities, and administrative bodies,
• Individuals or organizations permitted by legislation such as Tax Procedure Law, Social Security Institution regulations, Court of Accounts, Labor Law, Turkish Commercial Code, Code of Obligations, and other laws,
• Service providers for product/service comparison, analysis, evaluation, advertising, and those cooperating for achieving the purposes stated above,
• Institutions authorized for sending communications to customers, logistics companies delivering orders, as per Articles 8 and 9 of Law No. 6698.

7. Rights of the Personal Data Owner:

Under Article 11 of KVKK, you have the following rights regarding your personal data:

• Learn whether your personal data is processed,
• Request information if your personal data has been processed,
• Learn the purpose of processing and whether they are used for their intended purpose,
• Know the third parties to whom your data is transferred domestically or abroad,
• Request correction if your data is incomplete or incorrectly processed and request notification to third parties,
• Request deletion or destruction of your personal data within the conditions set forth in KVKK and request notification to third parties,
• Object to any result arising against you through analysis exclusively by automated systems,
• Request compensation if you suffer damage due to unlawful processing of personal data.