PERSONAL DATA EXPLICIT CONSENT STATEMENT

As NALA (“Company”), acting in the capacity of data controller as defined under the Law No. 6698 on the Protection of Personal Data (“KVKK” or the “Law”), we attach great importance to the security of the personal data we process. For this reason, we would like to inform you regarding the processing of your personal data.

PURPOSES AND LEGAL GROUNDS FOR PROCESSING YOUR PERSONAL DATA

Your personal data collected within the categories of identity, contact and transaction security are processed in accordance with the KVKK and secondary legislation, for the purposes and on the legal grounds set out below:

Legal Obligations
Your personal data may be processed, transferred and retained for the period stipulated in the relevant legislation or required for the purposes of processing, where any provision of the legislation to which the Company is subject so requires, on the legal basis set out in Article 5/2 (ç) of the KVKK.

Resolution of Disputes
On the legal basis of “establishment, exercise or protection of a right” set out in Article 5/2 (e) of the KVKK, your personal data are processed in order to demonstrate that transactions have been carried out in compliance with the law, to prove that legal obligations have been fulfilled, and to ensure the resolution of disputes, and may be shared with the relevant judicial and administrative authorities.

Improvement of Services and Customer Satisfaction
On the legal basis of legitimate interests as set out in Article 5/2 (f) of the KVKK, your personal data are processed for the purposes of evaluating your complaints and suggestions, taking actions to increase customer satisfaction and service quality, improving services and carrying out activities based on customer satisfaction and communication purposes.

Sending of Commercial Electronic Messages
On the basis of your commercial electronic communication consent obtained through physical or digital channels and relying on the legal ground of explicit consent set out in Article 5/1 of the KVKK, the Company may process your personal data for the purposes of sending commercial electronic messages containing promotions, communications, advertisements, marketing, sales and campaign information relating to any products and services. Your personal data are retained for as long as your commercial communication permission remains valid and, after such permission is withdrawn, for the periods stipulated in the legislation and for reasonable periods.

TRANSFER OF YOUR PERSONAL DATA

Your personal data may be transferred, within the framework of the conditions specified in Articles 8 and 9 of the KVKK, to:

  • Service providers of the Company located abroad, for the purposes of providing electronic or physical storage services or systems and ensuring the sending of commercial electronic messages, on the legal basis of explicit consent as set out in Article 9/1 of the KVKK; and

  • Competent public institutions and organisations, where necessary for the fulfilment of legal obligations, on the legal basis set out in Article 5/2 (ç) of the KVKK.

METHOD OF COLLECTING YOUR PERSONAL DATA

Within the scope of the services provided by the Company to you and for the data processing purposes set out above, your personal data may be collected by the Company in electronic form via registration forms on the website.

YOUR RIGHTS AS A DATA SUBJECT

As a data subject, you may apply to the Company and exercise the following rights:

  • To learn whether your personal data are being processed,

  • To request information if your personal data have been processed,

  • To learn the purpose of processing your personal data and whether they are used in accordance with that purpose,

  • To know the third parties in Turkey or abroad to whom your personal data are transferred,

  • To request the rectification of your personal data if they are incomplete or inaccurately processed, and to request that the third parties to whom your personal data have been transferred be informed of such rectification,

  • To request the deletion or destruction of your personal data where the reasons requiring their processing no longer exist, even though they have been processed in accordance with the KVKK and other relevant legislation, and to request that the third parties to whom your personal data have been transferred be informed of such deletion or destruction,

  • To object to the occurrence of a result to your detriment by means of analysis of the processed data exclusively through automated systems,

  • To request compensation for damage in the event that you suffer damage due to the unlawful processing of your personal data.

APPLICATION TO THE DATA CONTROLLER

As personal data subjects, if you submit your requests concerning your rights to the Company in writing or by using the methods set out in the Communiqué on the Principles and Procedures for the Request to the Data Controller (https://www.resmigazete.gov.tr/eskiler/2018/03/20180310-6.htm), in accordance with Article 13/1 of the KVKK, our Company will conclude your request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, a fee may be charged by the Company in accordance with the tariff determined by the Personal Data Protection Authority.

To exercise your rights listed above, you may complete the application form available on our website and send a signed hard copy to our address, deliver it in person, or send it via notary public, together with the information and documents necessary to identify you and with a clear indication of which of the rights set out in Article 11 of the KVKK you wish to exercise.

The contact details of our Company are as follows:

Title: NALA TEKSTİL SANAYİ VE TİCARET LİMİTED ŞİRKETİ
Address: Nisbetiye Mh. Aydın Sk. Büyük Hanlı B Blok. No:3B D:2 Beşiktaş / İstanbul
Telephone: 0530 279 80 30
E-mail Address: info@nalaactivewear.com