GENERAL INFORMATION TEXT ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

As PEHLİVANOĞLU KAĞIT VE KAĞIT MAMULLERİ AMBALAJ SANAYİ VE TİCARET ANONİM ŞİRKETİ (“PEHLİVANOĞLU” or the “Company”), we attach utmost importance to the security of your personal data. With this awareness, we prioritize the processing and storage of personal data belonging to individuals with whom the Company interacts, in compliance with the Law No. 6698 on the Protection of Personal Data (“Law”), secondary regulations enacted or to be enacted under the Law (regulations, communiqués, circulars), and binding decisions made or to be made by the Personal Data Protection Board.

Fully aware of this responsibility, as a “Data Controller” as defined under the Law, we process your personal data during account registration procedures in the manner described below and within the limits prescribed by applicable laws.

1. Information Regarding the Data Controller

In accordance with the Law, the Data Controller is Pehlivanoğlu Kağıt ve Kağıt Mamulleri Ambalaj Sanayi ve Ticaret Anonim Şirketi, registered with the Istanbul Trade Registry under registration number 242715-0, with MERSIS number 0724004103900011, and headquartered at “Mahmutbey Mah. Taşocağı Cad. Ağaoğlu 212 My Off. No: 3/436 Bağcılar/Istanbul”.

2. Purposes of Processing Personal Data

Your personal data is processed by the Company for the following purposes:

  • Ensuring that the commercial activities of the Company are carried out in accordance with applicable laws and Company policies,
  • Conducting necessary operations within the Company’s business units and executing related activities,
  • Establishing, planning, and implementing the Company’s short, medium, and long-term business strategies,
  • Designing and executing the Company’s human resources activities,
  • Complying with the Company’s obligations under applicable laws,
  • Managing customer relations and corporate communication processes, and
  • Ensuring the legal and commercial security of real and legal persons with whom the Company has business relationships.

Personal data is processed in compliance with the principles outlined in the Law, such as legality, fairness, purpose limitation, and proportionality.

3. Transfer of Personal Data

Your personal data may be transferred for the above-mentioned purposes to the following entities, provided that the conditions under Articles 8 and 9 of the Law are met:

  • Legally authorized public institutions and judicial or administrative authorities,
  • Real or legal persons as permitted by applicable laws,
  • Organizations authorized to audit the Company,
  • Payment institutions contracted to fulfill financial obligations,
  • Business partners and suppliers involved in the execution and development of the Company’s operations.

Such transfers are carried out with due regard to the data security measures prescribed by the Law.

4. Methods and Legal Grounds for Collecting Personal Data

Your personal data is collected by the Company’s authorized personnel through automated or non-automated methods, verbally, in writing, or electronically. Personal data falling into categories such as identity, contact, location, personnel, legal transaction, customer transaction, physical space security, transaction security, risk management, finance, professional experience, marketing, and visual/auditory recordings are processed based on the following legal grounds as stipulated in Article 5 of the Law:

  • Necessity for processing due to the establishment or performance of a contract,
  • Necessity to fulfill the data controller’s legal obligations,
  • Data being made public by the data subject,
  • Necessity for legitimate interests of the Company, provided it does not harm the fundamental rights and freedoms of the data subject.

5. Rights of Data Subjects

You may contact PEHLİVANOĞLU at any time to exercise the following rights:

  • Learn whether your personal data is processed,
  • Request information about the processing of your personal data,
  • Learn the purpose of processing and whether it is used in accordance with this purpose,
  • Know the third parties to whom your personal data is transferred domestically or abroad,
  • Request correction if your personal data is incomplete or incorrectly processed,
  • Request the deletion or destruction of your personal data under the conditions stipulated in Article 7 of the Law,
  • Request notification of the transactions carried out under Articles (d) and (e) above to third parties to whom your personal data has been transferred,
  • Object to the processing of your data solely through automated systems leading to an unfavorable outcome for you,
  • Request compensation for damages arising from unlawful processing of your personal data.

To exercise your rights, you may fill out the application form available at [http://www.pehlivanoglukagit.com.tr/] and submit it via:

  1. Notary, registered mail, or in person to “Mahmutbey Mah. Taşocağı Cad. Ağaoğlu 212 My Off. No: 3/436 Bağcılar/Istanbul,”
  2. Secure electronic signature or mobile signature via email to [info@pehlivanoglukagit.com.tr].

Responses to your requests will be provided in writing. If the response exceeds ten pages, an administrative fee of 1 Turkish Lira per additional page will be charged. If the response is provided on a medium such as CD or flash drive, the cost of the medium may also be charged.

Company