TUNAM UNLU MAMÜLLER SANAYİ VE TİCARET ANONİM ŞİRKETİ
CUSTOMER INFORMATION FORM FOR PERSONAL DATA PROCESSING
This Information Form has been developed by Tunam Unlu Mamüller Sanayi ve Ticaret Anonim Şirketi (the “Company”), acting as the data controller, in accordance with the information obligation under Article 10 of the Personal Data Protection Law No. 6698 (“KVKK”) and the applicable legal legislation. Our Company may process your personal data in accordance with the provisions of the KVKK and within the scope specified in this Information Form.
Detailed information on the protection, storage and destruction of your personal data by our Company is included in our Personal Data Processing, Protection and Privacy Policy and Personal Data Storage and Destruction Policy, which can be accessed at www.paynagrup.com.
1. Identity of the Data Controller
The identity and contact details of our Company, which is the data controller in accordance with the KVKK, are as follows:
Title: Tunam Unlu Mamüller Sanayi ve Ticaret Anonim Şirketi
Mersis No: 0862026535200010
Address: Şerifali Mahallesi Atabek Sok. Dilim Börek Apt. No: 11 A Ümraniye/İstanbul
E-mail: kvkk@paynagrup.com
2. Categories of Processed Personal Data
In accordance with the KVKK and applicable legislation, the categories of personal data that may be processed by our Company within the scope of the purposes specified in this Information Form and legal reasons are as follows:
Credentials (name and surname)
Contact Details (contact address, ordering address, telephone number (mobile phone), e-mail address.
Customer Transaction Data (ordering details, requests for product and/or services, shopping details, and call center records)
Financial Data ((credit card information and/or bank account information in case of a refund)
Visual and Audio Recordings (In case of shooting/filming for our customers for the purpose of conducting promotional and advertising activities on social media, websites, news sites, etc., our customers will be informed and their explicit consent will be obtained. After obtaining the expressed informed consent of our customers, the relevant image or video recordings may be published on our Company's social media, website and/or news sites for the purpose of advertising and promoting our Company and our brands.)
Physical Space Security (indoor and outdoor camera footages of visits of customers and visitors to our Company’s head office and Company branches)
Transaction Security (IP address information, website login and logout data).
Risk Management (if it is a sole proprietorship, data processed to manage commercial, technical and administrative risks)
Other Data (any contracts and protocols that set out the legal relationship between our Company and our customers, such as sales contracts, order forms, order requests, and order confirmations)
3. Objectives for Processing Your Personal Data
In accordance with the principles set out in the KVKK and the requirements for personal data processing in articles 5 and 6 of the KVKK, your personal data may be processed for the purposes of selling, presenting and/or monitoring products and/or services, performance of commercial and/or operational activities carried out by our Company and carrying out related business processes, Receiving and evaluating suggestions for improving our business processes, carrying out product and/or service sales processes, carrying out communication activities, carrying out informative and promotional activities for our products and services, creating membership records and operating membership accounts upon your request, evaluation of requests and complaints, carrying out payment processes, conducting accounting and financial transactions, management of events and/or organizations, planning and/or execution of campaigns, promotions and/or publicity processes, receiving requests to participate in campaigns, planning and executing customer relations management processes, planning and execution of customer satisfaction activities, carrying out activities aimed at customer satisfaction and experience, carrying out advertising and/or promotional and marketing activities in digital and other media, carrying out sales activities related to other products provided by our Company, carrying out marketing processes of products and services, planning the processes of creating and/or enhancing loyalty to the products and/or services provided by our Company, performance of draw/survey activities, sending commercial electronic messages (short messages/SMS) to your preferred contact information for advertising, promotion, campaign and similar purposes regarding our Company's trademarks Musluoğlu Baklava, Dilim Börek, Payna Baklava and all other trademarks, carrying out information security processes, performance of auditing and reporting activities, carrying out audit and ethical activities, providing information/ documents to authorized persons or organizations in accordance with legal obligations as well as execution of any official correspondence, managing and executing contract processes, following up and carrying out legal affairs, using as evidence in possible disputes, ensuring compliance with the storage obligations arising from the legislation, verification and inspections, responding to applications of relevant persons in accordance with the legislation, ensuring that data is kept accurate and up-to-date, storing personal data for the general statute of limitations, and ensuring physical space security (the “Objectives”).
4. Methods and Legal Reasons for Collecting Your Personal Data
Your personal data may be collected by our Company through automatic or non-automatic means via our company's websites, our corporate social media accounts, our WhatsApp account, our dealers, our franchise businesses, our sales locations, printed forms, telephones/call centers, e-mails, communications made through notary publics and/or mail, customer interviews, discussions conducted during the conclusion of a contract, processes and methods carried out verbally, in writing or through electronic media and physical means.
Your personal data may be processed without your express consent based on legal reasons, such as the “circumstances that are clearly set forth by laws” as described in article 5 of the Law, and where “it is mandatory for the data controller to fulfill its legal obligations”, “it is required to process the personal data of the parties to a contract, provided that it is directly related to the establishment or performance of that contract”, “it is necessary to process the data for the establishment, exercise or protection of a right”, and “processing of data is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the related person”. Your personal data may be transferred to judicial authorities or relevant official authorities upon request for the resolution of legal disputes or in accordance with the applicable legislation.
If you provide an express consent, such express consent may be processed based on the legal reasons for the purposes of: i) use of your identity, contact and customer transaction data to promote our Company's products, services and brands, planning and/or execution of advertising and/or promotion and/or marketing activities in digital and/or other media, planning and/or execution of activities aimed at customer satisfaction and/or experience, planning and/or execution of marketing processes for products and/or services, planning and/or execution of promotional activities, planning the processes of creating and/or enhancing loyalty to the products and/or services provided by our company, providing you with general and special offers, informing you about advertisements and campaigns, and planning and/or execution of draw/survey activities, and ii) sending promotions, advertisements, campaigns, surveys, draws, gifts and congratulations relating to Dilim Börek and Musluoğlu Baklava trademarks and all other trademarks of our Company to your preferred contact details, transmission of commercial electronic messages (short messages/SMS) for similar purposes.
5. Parties to which your personal data is transferred and the purposes of transfer
Your personal data collected may be transferred to our dealers, franchise businesses, branches, business partners, suppliers, Payna Group companies located in the country, to the consultants from whom we receive services, who process personal data on behalf of our Company and who are located in the country, to service providers who provide technical services regarding information technology infrastructure and cookies, to our counsellors and advisers within the framework of confidentiality obligations in order to follow the legal processes, and to legally authorized public/private institutions and organizations for the achievement of the foregoing Objectives, for the legitimate interest, for our business units to carry out the necessary activities to ensure that our customers benefit from the products and services provided by our Company, including sales and marketing activities of our products and services in accordance with the requirements for personal data processing set out in articles 8 and 9 of the KVKK. Your personal data is not transferred abroad by our Company, however, if the data is located in the cloud or on servers of foreign origin, instant transfer of data to foreign countries may occur.
Any transfer of personal data other than for the Objectives listed above shall not be performed without your explicit consent.
6. Your Rights as a Personal Data Subject and Means to Apply to Our Company
In accordance with Article 11 of the KVKK, the rights that you have in your personal data provided our Company are listed below:
a. To find out whether personal data has been processed,
b. To request information on processing if the personal data has been processed,
c. To find out the purpose of processing personal data and whether they are used in accordance with the intended purpose,
d. To know the third parties to whom the personal data has been transferred, either in the country or abroad,
e. To request correction of personal data if it is processed incompletely or incorrectly,
f. To request the deletion or destruction of personal data in case there are no longer reasons requiring processing, even though it has been processed in accordance with the provisions of the KVKK and other applicable laws,
g. To request that the actions carried out pursuant to paragraphs (e) and (f) be notified to third parties to whom personal data has been transferred,
h. To raise an objection to the occurrence of a result against the person by analyzing the processed data exclusively through automatic systems,
i. To request compensation for damages if you have suffered damages due to unlawful processing of personal data.
With respect to your rights listed above, you may submit your application to our Company by completing the “Related Person Application Form” on our website “www.paynagrup.com" by using the secure electronic signature, mobile signature, or (if applicable) the e-mail address previously provided to our Company and registered in our systems to send an e-mail to kvkk@paynagrup.com.
by sending an electronic mail to tunamunlu@hs02.kep.tr, which is our registered electronic mail address, or iii) by personally visiting our head office at the address of Şerifali Mahallesi Atabek Sk. Dilim Börek Apt. No: 11 A Ümraniye/İstanbul, or by making a notification through a notary public.
Depending on the nature of your request, your application will be concluded free of charge as soon as possible but in any case within thirty days; however, if the process requires an additional cost, you may be charged a fee according to the tariff determined by the Personal Data Protection Board.
As the data controller, we may accept or reject your request by explaining the reason and provide our response in writing or electronically. If your request in your application is accepted, an action will be taken by our Company as required. If your application is caused by an error on our part as the data controller, the fee will be refunded to you if it was collected for your application.