INFORMATION NOTICE REGARDING THE PROTECTION AND PROCESSING OF PERSONAL DATA

This information notice regarding the protection and processing of personal data has been prepared by POŞETSAN AMBALAJ SAN VE TİC A.Ş in accordance with the Personal Data Protection Law No. 6698 (“KVKK”) to inform you that your personal data and those of third parties, which we request from you and are shared with us, will be processed and stored by us within the limits set by the legislation, in a manner related to, limited, and proportionate to the purpose of processing, as explained below, in our capacity as Data Controller.

Data Controller

In accordance with the Personal Data Protection Law, your personal data will be collected and processed by the COMPANY as the data controller within the scope explained below.

Collection, Processing, and Purpose of Personal Data

Your personal data obtained during the commercial activities conducted by our Company will be processed within the conditions and purposes of personal data processing stated in Articles 5 and 6 of the Law, limited to the purposes of planning, conducting, and managing correctly the Company’s human resources policies, commercial partnerships, management and communication activities, and strategies in compliance with the law and the purpose of the Law; enabling data subjects to benefit from the products and services of the Company in the best way; customizing and offering them according to their demands, needs, and requests; ensuring the highest level of data security; improving the provided services and correcting arising errors; communicating with data subjects who send requests and complaints and managing those requests and complaints; event management; providing legally required information to authorized institutions; creating and tracking visitor records.

Method and Legal Basis for Collecting Personal Data

Personal data are obtained through all kinds of verbal, written, electronic means; by technical and other methods; and via various channels such as call centers, the Company’s website, mobile applications, in order to provide the products and services offered by our Company within the legal framework and to fully and correctly fulfill the contractual and legal obligations of our Company. Personal data collected on this legal basis are processed by the Company or data processors appointed by the Company within the scope of the personal data processing conditions and purposes set forth in Articles 5 and 6 of the Personal Data Protection Law (KVKK).

Rights of the Personal Data Owner as per Article 11

In accordance with Article 10 of the Law, the COMPANY informs you of your rights; provides guidance on how to exercise these rights; and implements all necessary internal procedures, administrative, and technical arrangements. According to Article 11 of the Law, individuals whose personal data are processed have the following rights:

  • To learn whether their personal data have been processed,
  • To request information if their personal data have been processed,
  • To learn the purpose of processing personal data and whether these data are used accordingly,
  • To know the third parties domestically or abroad to whom personal data have been transferred,
  • To request correction of their personal data if they are processed incompletely or incorrectly, and to request that this correction be notified to third parties to whom the data have been transferred,
  • To request deletion or destruction of personal data, even if processed in accordance with the Law and other relevant legislation, when the reasons requiring processing no longer exist, and to request that this be notified to third parties to whom the data have been transferred,
  • To object to any result against themselves arising from the analysis of the processed data exclusively through automated systems,
  • To claim compensation in case of damage due to unlawful processing of personal data.

You can submit your request to exercise the above rights in writing or by other methods determined by the Personal Data Protection Board to the COMPANY. Within your written application, you should include your identity verification information and explanations regarding the rights you wish to exercise as per Article 11 of the Law. You can deliver your request personally to the address:
Ç.O.S.B İSMETPAŞA MAH. 5. SOKAK NO.5 KAPAKLI/TEKİRDAĞ
Alternatively, you may sign your request with your “secure electronic signature” under the Electronic Signature Law No. 5070 and send the electronically signed form via registered electronic mail to posetsan@hs02.kep.tr, or send it via notary or other methods specified in the KVKK.

Situations Where Consent Is Not Required

In accordance with Article 5, Paragraph 2 of the Personal Data Protection Law No. 6698, the COMPANY has the right to process personal data without obtaining explicit consent from the individual if one of the following conditions is met:

  • Explicitly stipulated by laws,
  • Necessary for the protection of the life or physical integrity of the person who cannot express consent due to actual impossibility or whose consent is not legally valid, or for another person,
  • Processing of personal data of the parties to a contract is necessary, provided it is directly related to the establishment or performance of the contract,
  • Necessary for the COMPANY, as the data controller, to fulfill its legal obligations,
  • Made public by the data subject,
  • Processing of data is necessary for the establishment, exercise, or protection of a right,
  • Processing is necessary for the legitimate interests of the COMPANY as the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.