CUSTOMER INFORMATION NOTICE
NALA INFORMATION NOTICE REGARDING THE PROCESSING OF PERSONAL DATA
IDENTITY OF THE DATA CONTROLLER
Pursuant to the Personal Data Protection Law No. 6698 (“KVKK” or the “Law”), your personal data may be processed by NALA TEKSTİL SANAYİ VE TİCARET LİMİTED ŞİRKETİ (the “Company”) in its capacity as “Data Controller”, within the scope set out below.
PURPOSE AND LEGAL BASIS OF PROCESSING YOUR PERSONAL DATA
Your personal data falling within the categories of identity, contact, customer transaction, finance, transaction security, and visual and audio recording information are processed in accordance with the KVKK and secondary legislation, for the purposes and on the legal bases outlined below.
-
On the legal basis of “explicitly stipulated in the laws” set out in Article 5/2 (a) of the KVKK, your personal data will be processed for the purposes of fulfilling the obligations and exercising the rights of our Company arising in particular from the Turkish Commercial Code and the Tax Procedure Law, drawing up statutory declarations and notifications, and complying with other legal requirements to which the Company is subject.
-
On the legal basis of “establishment, exercise or protection of a right” set out in Article 5/2 (e) of the KVKK, your personal data will be processed for the purposes of serving as evidence in possible disputes, and obtaining legal advice and technical support.
-
On the legal basis of “establishment or performance of a contract” set out in Article 5/2 (c) of the KVKK, your personal data will be processed for the purposes of carrying out payment and collection transactions under the distance sales contract to which you are a party, performing the contract, fulfilling the parties’ obligations, ensuring the continuation of the contractual relationship, conducting goods/services sales processes, and carrying out finance and accounting activities.
-
On the legal basis of “it is necessary for the data controller to fulfil its legal obligation” set out in Article 5/2 (ç) of the KVKK, your personal data will be processed for the purposes of drawing up statutory declarations and notifications, complying with statutory retention periods stipulated in the legislation to which the Company is subject, fulfilling other obligations set out in the applicable legislation, and responding to the requests of courts and public authorities that are legally authorised to request information, as well as other legal obligations.
-
On the legal basis of “legitimate interests of the data controller” set out in Article 5/2 (f) of the KVKK, your personal data may be processed for the purposes of ensuring customer satisfaction and conducting quality standards processes, carrying out internal operational activities of the Company, conducting internal audit and investigation activities, ensuring commercial security, and backing up and storing data in order to keep your personal data in a secure manner.
METHOD OF COLLECTING PERSONAL DATA
Your personal data are collected by our Company electronically through the forms available on our website.
TRANSFER OF YOUR PERSONAL DATA
The personal data collected may be transferred within the framework of the conditions for processing personal data set out in Articles 8 and 9 of the KVKK.
-
On the legal basis of “establishment and performance of a contract” set out in Article 5/2 (c) of the KVKK, your personal data may be transferred to the relevant bank for the necessary payment and collection transactions and, where payment and collection are made by credit/debit card, to the service provider used for such transactions; and to courier companies for the purpose of delivering the products you have purchased to you.
-
On the legal basis of “it is mandatory for the data controller to fulfil its legal obligation” set out in Article 5/2 (ç) of the KVKK, your personal data may be transferred, where necessary, to courts and public institutions and organisations that are legally authorised to request information.
-
On the legal basis of “it is necessary for the establishment, exercise or protection of a right” set out in Article 5/2 (e) of the KVKK, your personal data may be transferred to law firms and other consultants for the purposes of serving as evidence in possible disputes, obtaining legal advice and technical support, ensuring the implementation of the contract and monitoring whether the parties comply with their obligations.
-
On the legal basis of “legitimate interests of the data controller” set out in Article 5/2 (f) of the KVKK, your personal data may be transferred to group companies for the purposes of carrying out finance and accounting activities and management activities.
-
On the legal basis of “explicit consent” set out in Article 9/1 of the KVKK, your personal data may be transferred to data storage and/or cloud service providers whose servers are located abroad, for the purposes of managing storage and archiving processes and benefitting from cloud and e-mail services.
RETENTION OF YOUR PERSONAL DATA
Your personal data are retained based on one of the data processing conditions specified in Article 5 of the KVKK and in compliance with the general principles set out in Article 4 of the KVKK, in particular for the period stipulated in the relevant legislation or required for the purposes of processing. Retention periods specified in our Retention and Destruction Policy, which has been drawn up in accordance with Article 7 of the KVKK, are taken into account, and your personal data are destroyed within the relevant destruction period.
YOUR RIGHTS IN RELATION TO YOUR PERSONAL DATA
As a data subject, you have the right to:
-
Learn whether your personal data are being processed,
-
Request information if your personal data have been processed,
-
Learn the purpose of processing your personal data and whether they are used in accordance with that purpose,
-
Know the third parties in Turkey or abroad to whom your personal data are transferred,
-
Request rectification of your personal data if they are incomplete or inaccurately processed, and request that the third parties to whom your personal data have been transferred be informed of such rectification,
-
Request the deletion or destruction of your personal data if the reasons requiring their processing cease to exist, even though they have been processed in accordance with the KVKK and other relevant legislation, and request that the third parties to whom your personal data have been transferred be informed of such deletion or destruction,
-
Object to the occurrence of a result to your detriment by means of analysis of the processed data exclusively through automated systems,
-
Request compensation for damage arising from the unlawful processing of your personal data.
APPLICATION TO THE DATA CONTROLLER
As personal data subjects, if you submit your requests concerning your rights to the Company in writing or by using the methods set out in the Communiqué on the Principles and Procedures for the Request to the Data Controller (https://www.resmigazete.gov.tr/eskiler/2018/03/20180310-6.htm), in accordance with Article 13/1 of the KVKK, our Company will conclude your request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, a fee may be charged by the Company in accordance with the tariff determined by the Personal Data Protection Authority.
In order to exercise your rights listed above, you may complete the application form available on our website, and send a signed hard copy to our address, deliver it in person, or send it via notary public, together with the information and documents necessary to identify you and with a clear indication of which of the rights set out in Article 11 of the KVKK you wish to exercise.
The contact details of our Company are as follows:
Company Name: NALA TEKSTİL SANAYİ VE TİCARET LİMİTED ŞİRKETİ
Address: Nisbetiye Mh. Aydın Sk. Büyük Hanlı B Blok. No:3B D:2 Beşiktaş / İstanbul
Telephone: 0530 279 80 30
E-mail: info@nalaactivewear.com