Personal Data Protection Policy
As TERRA ORGANİK TARIM KOZMETİK SAN. TİC. A.Ş. (‘‘TERRA’’), we have prepared this clarification text in order to notify our Visitors, Online Visitors, Customers, Potential Customers, Supplier Employees, Authorised Persons of the Supplier, regarding the processing, storage and transfer of your personal data within the framework of the activities resulting from the Personal Data Protection Law numbered 6698 (‘‘KVKK’’) and the relevant legislation and legal regulations.
1) What are the Categories of Personal Data We Process and for Which Purposes Do We Process Them?
(i) To comply with the law and the principles of straightforwardness;
(ii) To be accurate and up-to-date whenever necessary;
(iii) To be processed for certain, obvious and legal purposes;
(iv) To be connected, limited and restrained with the objectives of processing;
(v) To be stored as long as the period stipulated by the relevant legislation or required for the purposes of processing.
Your personal data may be processed by TERRA in accordance with the principles listed above as stipulated in the Article 4.2 of the KVKK, within the scope of our established and ongoing business relationships with our business partners (it is possible for a person to fall into more than one category) for the following purposes.
A. Our Visitors
Physical location security information (e.g. camera footage);
a). to be processed for the purposes of ensuring the security of physical location.
B. Online Visitors
Transaction security information (e.g. your IP address information), marketing information (e.g. shopping history information, cookie logs) and (if you have notified us*) identity information, contact information (e.g. your e-mail address) of our online visitors who use our website will be processed in order to
- carry out the activities in accordance with the legislation,
- carry out information security processes,
- follow up requests/complaints,
- carry out communication activities,
- inform the authorised persons, institutions and organisations,
- enable you to access our website via the internet.
C. Our Customers
Identity information, contact information, customer transaction information (e.g. order information), physical location security information, financial information (e.g. balance sheet information), legal transaction information and marketing information (e.g. shopping history information) of our natural person customers or the officers and/or employees of our legal entity customers will be processed in order to
- carry out activities in accordance with the legislation;
- carry out financial and accounting affairs;
- conduct/supervise business activities;
- carry out logistics activities;
- carry out after-sales support services for goods and services;
- carry out the sales processes of goods and services;
- carry out marketing analysis studies;
- carry out agreement processes;
- provide information to authorised persons, institutions and organisations;
- ensure the security of physical space;
- resolve legal disputes;
- carry out storage and archive activities;
- carry out risk management processes;
- carry out advertisement/campaign/promotion processes;
- carry out the processes of commitment to the company/products/services;
- carry out communication activities.
D. Potential Customers
Identity information, contact information, customer transaction information, physical location security information and marketing information of our natural person customers or the officers and/or employees of our legal entity customers will be processed in order to
- carry out the sales processes of goods and services;
- carry out agreement processes;
- ensure the security of physical space;
- carry out advertisement/campaign/promotion processes;
- carry out marketing activities.
E. Our Supplier Employees
Identity information, contact information and physical location security information of our supplier employees will be processed in order to
- carry out communication activities;
- conduct/supervise business activities;
- ensure the security of physical space;
- carry out supply chain management processes;
- carry out logistics activities;
- carry out activities in accordance with the legislation;
- carry out occupational health/safety activities.
F. Authorised Persons of Our Supplier
Identity information, contact information, physical location security information, customer transaction information, financial information, marketing information and legal transaction information of our natural person suppliers or authorized persons of our legal entity suppliers will be processed in order to
- conduct/supervise business activities;
- carry out the sales processes of goods and services;
- carry out financial and accounting affairs;
- carry out agreement processes;
- carry out investment processes;
- ensure the security of physical space;
- follow up and carry out legal affairs.
2. What are the Methods of Collecting Your Personal Data?
Your personal data listed above in categories are collected through physical means such as order forms, contracts, visitor forms, or through automated or non-automated means through information systems and electronic devices (e.g. telecommunication infrastructure, computers and telephones), third parties (e.g. KKB and Findeks), our website and other documents submitted by the data owner.
3. What are the Legal Grounds for Collecting Your Personal Data?
Your personal data are processed by TERRA on the basis of the legal reasons listed below and specified in the article 5 of the KVKK in line with the fulfilment of the above-mentioned purposes:
(i) It is clearly stipulated by Laws;
(ii) It is necessary to process personal data owned by the parties of an agreement on the condition that it is directly related with concluding or execution of the said agreement;
(iii) It is required in order to enable data supervisor to perform her/his legal obligations;
(iv) It is mandatory to process data in order to establish, exercise or protect a right;
(v) It is obligatory to process data for the legitimate interests of data supervisor provided that fundamental rights and freedoms of the related person are not harmed.
When the data processing activity cannot be grounded on one of the above legal reasons, your personal data may be processed based on your explicit consent. Within this context, in case you consent to receive electronic commercial messages, your personal data related to communication such as name, surname, e-mail will be processed in order to inform you about our campaigns and products.
4. Do We Transfer Your Personal Data to a Third Party?
a) Personal data belonging to our visitors may be shared with law enforcement and judicial authorities upon request in order to resolve legal disputes and in accordance with the relevant legislation.
b) Personal data belonging to our online visitors may be shared with judicial authorities and competent public institutions and organisations upon request in order to resolve legal disputes and in accordance with the relevant legislation.
c) Personal data belonging to our customers are transferred to the public institutions and organisations in order to carry out the activities in accordance with the legislation, to follow up and carry out legal affairs and to provide information to the competent persons, institutions and organisations, and to our group companies, informatics company, suppliers, cargo companies, insurance companies, banks and our financial advisor to the extent necessary for the execution/supervision of business activities, the execution of risk management processes and the proper fulfilment of our services, within the scope stipulated by legal regulations. Furthermore, such personal data may be transferred to the law firm and judicial authorities from which we receive services in order to be used as evidence in legal disputes that may arise in the future.
d) Personal data belonging to our potential customers may be transferred to the law firm and judicial authorities from which we receive services in order to be used as evidence in legal disputes that may arise in the future.
e) Personal data belonging to our supplier employee are transferred to the public institutions and organisations in order to carry out the activities in accordance with the legislation, to follow up and carry out legal affairs, to provide information to the competent persons, institutions and organisations and to carry out/inspect business affairs, and to our group companies, informatics company, suppliers, cargo companies, banks and our financial advisor to the extent necessary for the execution/supervision of business activities. Furthermore, such personal data may be transferred to the law firm and judicial authorities from which we receive services in order to be used as evidence in legal disputes that may arise in the future.
f) Personal data belonging to authorised persons of our supplier are transferred to the public institutions and organisations in order to carry out the activities in accordance with the legislation, to follow up and carry out legal affairs, to provide information to the competent persons, institutions and organisations and to carry out/inspect business affairs, and to our group companies, informatics company, suppliers, cargo companies, banks and our financial advisor to the extent necessary for the execution/supervision of business activities. Furthermore, such personal data may be transferred to the law firm and judicial authorities from which we receive services in order to be used as evidence in legal disputes that may arise in the future.
5. Do We Transfer Your Personal Data Abroad?
As TERRA, we process your personal data only for the purposes stated above in the event of obtaining your explicit consent.
6. How Can You Exercise Your Rights Regarding Your Personal Data?
Pursuant to Law numbered 6698, the right to apply to the data supervisor on the following issues regarding the processing of personal data has been granted. Accordingly, applicants have the following rights:
a. Learn whether your personal data are processed or not;
b. Demand information regarding processing your personal data in case it is processed;
c. Learn the reason why your personal data are processed and whether your personal data are used according to declared purposes or not;
d. Learn the third parties to whom your personal data are transferred within the borders of our country or abroad;
e. Ask for correction in case your personal data are processed deficiently or improperly;
f. Request your personal data to be deleted or destroyed within the framework of provisions stipulated by the article 7;
g. To request that the transactions made pursuant to subparagraphs (e) and (f) be notified to third parties to whom your personal data have been transferred;
h. Object to any negative consequence that you face due to the fact that your personal data have been exclusively analysed through automated systems;
i. Demand to be indemnified in case you suffer a loss resulting from the fact that your personal data have been processed illegally.
You can forward your requests within this scope to us in writing or by using the registered electronic mail (KEP) address, secure electronic signature, mobile signature or the e-mail address that has been previously notified to us and registered in our system. You can also use the "Application Form to the Data Supervisor" provided on our website for your applications.
Your application shall be finalised free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request.
7. Conditions for Deletion, Destruction and Anonymisation of Personal Data
TERRA stores the personal data detailed above for the periods stipulated by the Law on the Regulation of Electronic Commerce numbered 6563, the Law on Consumer Protection numbered 6502, the Turkish Code of Obligations numbered 6098, the Tax Procedure Law numbered 3475 and other relevant legislation and/or for the periods that are required by the purpose of processing. Once these periods expire, your personal data shall be either deleted, destroyed or anonymised in accordance with the provisions of the Regulation on Deletion, Destruction or Anonymisation of Personal Data.
The deletion of personal data by TERRA refers to the process of making personal data inaccessible and non-reusable by any means for the users concerned. TERRA establishes and implements an access authorisation and control matrix at user level to achieve this. Necessary precautions are also taken by our company for the fulfilment of the deletion process in the database.
The destruction of personal data by TERRA refers to the process of making personal data inaccessible, unretrievable and non-reusable by anyone under any circumstances.
The anonymisation of personal data by TERRA refers to the process of making personal data impossible to be associated with an identified or identifiable natural person under any circumstances, not even if the personal data can be matched with other data.
Data Supervisor: TERRA ORGANİK TARIM KOZMETİK SAN. VE TİC. A.Ş.
Address: Halaskargazi Mah. Rumeli Cad. Kaya Ap. Blok No:9B Şişli İstanbul
E-Mail: [email protected]