Protection of Personal Data

• a) About the Data Controller Your personal data may be processed by GANIK CONFECTIONERY GIDA SAN. TİC. LTD. ŞTİ. within the scope of the Personal Data Protection Law No. 6698 (“Law”). Within the scope of the law, GANIK CONFECTIONERY GIDA SAN. TİC. LTD. ŞTİ. is accepted as the data controller.
• b) Purposes of Processing Your Personal Data Your personal data is processed in accordance with the conditions regarding the processing of personal data listed in Articles 5 and 6 of the Law. The purposes of processing your personal data are, without limitation: Ensuring the legal and commercial security of GANİK CONFECTIONERY FOOD SAN. TİC. LTD. ŞTİ. or GANİK CONFECTIONERY FOOD SAN. TİC. LTD. ŞTİ.’s business partners, continuing the commercial activities of GANİK CONFECTIONERY FOOD SAN. TİC. LTD. ŞTİ. and managing the human resources and employment policies of GANİK CONFECTIONERY FOOD SAN. TİC. LTD. ŞTİ. All necessary technical and administrative measures are taken to prevent the unlawful processing of your personal data and unlawful access to your data, and to ensure the secure storage of your personal data.
• c) Sharing of Your Personal Data Your personal data may be shared with GANİK CONFECTIONERY FOOD SAN. TİC. LTD. ŞTİ. and GANİK CONFECTIONERY FOOD SAN. TİC. LTD. ŞTİ. shareholders, business partners, suppliers, external service providers and legally authorized public institutions and organizations in accordance with the conditions specified in Articles 8 and 9 of the Law. The purposes for sharing your personal data are without limitation: Ensuring the legal and commercial security of GANİK CONFECTIONERY FOOD SAN. TİC. LTD. ŞTİ. or GANİK CONFECTIONERY FOOD SAN. TİC. LTD. ŞTİ.’s business partners, continuing the commercial activities of GANİK CONFECTIONERY FOOD SAN. TİC. LTD. ŞTİ. ŞTİ..’s human resources processes and employment policies are managed. Necessary security measures are taken in case your personal data is shared.
• d) Methods of Collection of Your Personal Data and Their Legal Reasons GANİK CONFECTIONERY GIDA SAN. TİC. LTD. ŞTİ.. collects your personal data through various channels such as surveys, websites, GANİK CONFECTIONERY GIDA SAN. TİC. LTD. ŞTİ.. representatives and similar channels in order to continue its activities and processes it in accordance with the conditions listed in Articles 5 and 6 of the Law for various legal reasons.
• e) Your Rights Arising from the Law Regarding Your Personal Data You have the following rights regarding your personal data pursuant to the law:

1. Learning whether personal data is being processed,
2. To request information regarding the processing of personal data,
3. To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
4. To know the third parties to whom personal data is transferred, either domestically or abroad,
5. To request correction of personal data if it is processed incompletely or incorrectly,
6. Request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law,
7. To request that the operations carried out in accordance with articles 5 and 6 be notified to third parties to whom personal data has been transferred,
8. To object to a result that is to the detriment of the person himself/herself, as a result of the analysis of the processed data exclusively through automatic systems,
9. To request compensation in case of damages due to unlawful processing of personal data.

In order to exercise your rights specified above, you can apply to GANİK ŞEKERLEME GIDA SAN. TİC. LTD. ŞTİ. in writing and send the application to the address information specified below. If new application methods are determined by the Personal Data Protection Board, these methods will be announced by GANİK ŞEKERLEME GIDA SAN. TİC. LTD. ŞTİ..

Your applications within this scope will be finalized in the shortest possible time frame and within 30 days at the most. These applications are currently free of charge. However, if the Personal Data Protection Board determines a fee schedule, a fee may be charged in accordance with this schedule.

In order to exercise your rights, you must submit your request in writing to GANİK SEKERLEME GIDA SAN. TİC. LTD. ŞTİ.. When making a written application to our Company, you can explain which right you want to exercise with your identity information and deliver a signed copy of the form to our Company’s address, Pınarçay OSB 26. Cad. No:9 ÇORUM, or you can send it to our Company’s kep address, ganiksekerleme@hs04.kep.tr, with an electronic signature, or provided that you ensure the accuracy of your identity information, by e-mail to ganik@ganik.com.

While fulfilling your requests regarding the exercise of your rights, we reserve the right to request the expenses incurred by our Company according to the tariff determined in accordance with Article 13 of the KVKK titled Application to the Data Controller. Cases That Do Not Require Consent According to Law No. 6698 Pursuant to Article 5, paragraph 2 of Law No. 6698 on the Protection of Personal Data, the Company has the right to process personal data without obtaining explicit consent in cases where it is expressly provided for in the laws, it is mandatory for the protection of the life or physical integrity of the person who is unable to give his/her consent due to a de facto impossibility or whose consent is not granted legal reality, the processing of personal data belonging to the parties to the contract is necessary, provided that it is directly related to the establishment or performance of a contract, it is mandatory for our Company to fulfill its legal obligation as the data controller, it is made public by the relevant person himself/herself, data processing is mandatory for the establishment, exercise or protection of a right, and data processing is mandatory for the legitimate interests of the Company, which is the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person. In accordance with the principle of openness, the Company is authorized to disclose, transfer and process the relevant data without the need for obtaining consent, in cases where the disclosure is required in the balance sheet or activity reports or in cases where the disclosure is required for public disclosure, in cases where the Company is obliged to fulfill legal obligations arising from the legislation it is subject to or in cases where the transfer of data to the relevant persons or institutions regulated by law is required due to legal obligations and similar cases.