Protection of Personal Data
Clarification Text for the Person Receiving Product or Service
Hunny Gıda Tarım Üretim ve Ticaret A.Ş. (“Hunny Gıda”), as the data controller, processes your personal data in accordance with the Personal Data Protection Law No. 6698 (KVKK) and other relevant legislation.
According to Article 10 regulating the Obligation to Inform of KVKK, data controllers are obliged to inform the relevant persons whose personal data they process on certain matters.
This clarification text has been prepared in accordance with the Communiqué on the Procedures and Principles to be Complied with in Fulfilling the Obligation to Inform published by the Personal Data Protection Authority in order to fulfill the legal obligation.
Definitions
According to the Personal Data Protection Law No. 6698:
- Personal data: Any information relating to an identified or identifiable natural person;
- Processing of personal data: Any operation performed upon personal data such as obtaining, recording, storing, retaining, altering, re-organizing, disclosing, transferring, taking over, making retrievable, classifying, or preventing the use thereof, fully or partially through automatic means or provided that the process is a part of any data registry system;
- Relevant person (Data subject): The natural person whose personal data is processed;
- Data controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data registry system;
- Obligation to inform: The obligation of the data controller or the person authorized by it to provide information to the relevant persons during the acquisition of personal data regarding the identity of the data controller, the purpose for which personal data will be processed, to whom and for what purpose the processed personal data may be transferred, the method and legal reason for collecting personal data, and other rights listed in Article 11 of the Law.
Relevant Person
You, whose personal data are processed by Hunny Gıda, are defined by us as the Person Receiving Product or Service due to your purchase of a good or service, and you are considered as the Relevant Person by the Law.
Data Controller
Hunny is the data controller responsible for determining the purposes and means of processing personal data regarding you, and for the establishment and management of the data recording system.
Acquisition of Your Personal Data
Your personal data and the methods of acquisition are shown below. The same personal data can also be obtained through multiple methods.
| Method / Environment | Data |
|---|---|
| Automatically directly from you and in the electronic environment | Identity Information (Name, Surname, and T.R. Identity No), Contact (Phone Number (Mobile), E-Mail Address, and Fax Number), Transaction Security (IP Address), Address (Address), Customer Transaction Information (Order No, Order Date, Order Amount, Payment Preference, Ordered Product, etc.), Used Source (Delivery Reason) |
Purposes and Legal Reasons for Processing Your Personal Data
The legal reasons and processing purposes for processing your personal data are listed below.
Based on the necessity of processing personal data belonging to the parties of the contract, provided that it is directly related to the establishment or performance of a contract regulated in KVKK Art. 5/2c:
- Purpose: For the purpose of tracking requests/complaints and based on the Distance Selling Contract concluded/to be concluded with you;
Data: Contact Information (Phone Number (Mobile), E-Mail Address), Customer Transaction Information (Order Status) - Purpose: For the purpose of carrying out logistics activities and based on the Distance Selling Contract concluded/to be concluded with you;
Data: Identity Information (Name, Surname, T.R. Identity No), Document Information (Document Date, Document No), Finance (Tax Office, Tax Identity No), Address (Address, Province of Address, District of Address) - Purpose: For the purpose of carrying out post-sale support services and based on the Distance Selling Contract concluded/to be concluded with you;
Data: Identity Information (Name, Surname, T.R. Identity No), Contact Information (Phone Number (Mobile), E-Mail Address, Fax Number), Transaction Security (IP Address), Address (Address), Customer Transaction Information (Order Date, Order No, Order Amount, Ordered Product, Payment Preference, Order Status, etc.) - Purpose: For the purpose of carrying out product/service sales processes and based on the Distance Selling Contract concluded/to be concluded with you;
Data: Identity Information (Name, Surname, T.R. Identity No), Document Information (Document Date, Document No, Document Amount), Contact Information (Phone Number (Mobile), E-Mail Address, Fax Number), Finance (Tax Office, Tax Identity No, Credit Card Number, Credit Card Expiration Date, Credit Card Security Number, etc.), Transaction Security (IP Address), Address (Address, Province of Address, District of Address), Customer Transaction Information (Fee, Order Date, Order No, Order Amount, Transaction Description, etc.), Used Source (Delivery Reason)
Based on being mandatory for the data controller to fulfill its legal obligation in KVKK Art. 5/2ç:
- Purpose: For the purpose of carrying out storage and archive activities and based on the Commercial Documents to be Kept and Retention Period in the Turkish Commercial Code No. 6102 (Article 82);
Data: Identity Information (Name, Surname, T.R. Identity No), Document Information (Document Date, Document No, Document Amount), Finance (Tax Office, Tax Identity No), Address (Address, Province of Address, District of Address) - Purpose: For the purpose of carrying out storage and archive activities and based on the Regulation on Distance Contracts (Article 20);
Data: Identity Information (Name, Surname, T.R. Identity No), Contact Information (Phone Number (Mobile), E-Mail Address, Fax Number), Transaction Security (IP Address), Address (Address), Customer Transaction Information (Order Date, Order No, Order Amount, Ordered Product, Payment Preference, etc.), Used Source (Delivery Reason)
In case of your explicit consent regarding the transfer of personal data abroad regulated in KVKK Art. 9/1:
- Purpose: For the purpose of carrying out product/service sales processes or carrying out post-sale support services
Data: Identity Information (Name, Surname, T.R. Identity No), Contact Information (Phone Number (Mobile), E-Mail Address, Fax Number), Transaction Security (IP Address), Address (Address), Customer Transaction Information (Order Date, Order No, Order Amount, Ordered Product, Payment Preference)
Transfer of Your Personal Data
Your personal data may be transferred to the relevant authorities without the obligation to inform and without seeking your explicit consent if requested within the framework of KVKK Art. 28/1.
Apart from this, in unforeseen situations, your personal data may be transferred to public institutions specified in the laws (such as ministries, Presidency boards) within the purposes and limitations stipulated in the law if requested in cases clearly stated in the laws.
Outside of our legal obligations that do not require an obligation to inform and your explicit consent; the recipients to whom your personal data are transferred and the purposes of transfer are shown in the table below.
- Recipient: Logistics Companies
Purpose: Carrying out logistics activities
Data: Identity (Name, Surname, and T.R. Identity No), Document Information (Document Date and Document No), Finance (Tax Office and Tax Identity No), Address (Address, Province of Address, and District of Address) - Recipient: Iyzico
Purpose: Carrying out product sales processes and payment transactions
Data: Identity (Name and Surname), Finance (Credit Card Number, Credit Card Expiration Date, Credit Card Security Number, and Payment Method), Customer Transaction (Fee, Order Date, Order No, Transaction Description, Transaction Number, etc.) - Recipient: E-commerce Infrastructure Provider Company
Purpose: Carrying out product/service sales processes and providing post-sale support based on being the supplier of the website infrastructure
Data: Identity (Name, Surname, and T.R. Identity No), Contact (Phone Number (Mobile), E-Mail Address, and Fax Number), Transaction Security (IP Address), Address (Address), Customer Transaction (Order Date, Order No, Order Amount, Ordered Product, and Payment Preference)
Your personal data may be transferred to 3rd parties for the purposes listed above.
Retention Period of Personal Data
Hunny Gıda retains personal data for the period specified in these legislations if it is stipulated in the relevant legislation.
If a period is not regulated in the legislation regarding how long personal data should be kept, Personal Data is processed for the period requiring processing in accordance with the practices of our Company and the customs of its commercial life, depending on the activity carried out by our Company while processing that data, and then deleted, destroyed, or anonymized.
If the purpose of processing personal data has ended; and the retention periods determined by the relevant legislation or our Company have come to an end; personal data can only be stored to constitute evidence in possible legal disputes or to assert the relevant right linked to personal data or to establish a defense. In establishing the periods here, the retention periods are determined based on the statute of limitations for asserting the mentioned right and the examples in the requests directed to our Company on the same subjects previously despite the expiration of the statute of limitations. In this case, the stored personal data is not accessed for any other purpose and access to the relevant personal data is provided only when it needs to be used in the relevant legal dispute. Here too, after the mentioned period expires, personal data is deleted, destroyed, or anonymized.
Your Rights Regarding Your Personal Data
Relevant persons must primarily apply to the data controller to exercise their rights regarding their personal data. According to Article 14 of the Law, a direct complaint cannot be filed to the Personal Data Protection Board.
In accordance with the Law, regarding your personal data you have the right to:
- a) Learn whether your personal data is processed,
- b) Request information if your personal data has been processed,
- c) Learn the purpose of processing your personal data and whether they are used appropriately for their purpose,
- d) Know the third parties to whom your personal data is transferred domestically or abroad,
- e) Request correction of your personal data in case of incomplete or incorrect processing,
- f) Request the deletion or destruction of your personal data if the reasons requiring its processing disappear,
- g) Request notification of the transactions made pursuant to subparagraphs (d) and (e) to third parties to whom your personal data has been transferred,
- h) Object to the emergence of a result against you by analyzing the processed data exclusively through automated systems,
- i) Request the compensation of the damage in case you suffer damage due to unlawful processing of your personal data.
You can exercise your rights by applying to the data controller, namely us.
Application Method to Data Controller
You can make your application;
In writing to the address: Tarabya Mah. Şehit Öğretmen Şenay Aybüke Yalçın Sk. Nurol Sitesi C2-7 Blok No:8 Y İç Kapı No:5 Sarıyer / Istanbul;
or by sending an e-mail to [email protected] using your electronic mail address registered in our system.
You can access more detailed information on the procedures and principles to be followed when applying from the Personal Data Protection Authority's Communiqué on the Procedures and Principles of Application to the Data Controller.
Hunny Gıda Tarım Üretim ve Ticaret A.Ş.