Privacy Policy

Informative Text

We, as Saray Bisküvi A.S. (“Company”), show maximum sensitivity for the security of your personal data. Under this awareness, we, as the Company, attach great importance to preserve and process in compliance with the Law No. 6698 on the Protection of Personal Data (“PDP Law”) all kinds of personal data belonging to all the persons associated with the Company, including the persons making use of our products and services. As a requirement of this responsibility, we, in the capacity of “Data Controller” as defined in the PDP Law, process your personal data within the limits ordered by the legislation and as explained below.  

1. Collection, processing and processing purposes of personal data

Your personal data may vary depending on the services provided by our Company and the commercial activities performed by our Company. However, your personal data may be collected verbally, in writing or electronically by our Company’s units and offices, Group Companies, web site, social media channels, mobile applications and by similar ways, by automatic means or otherwise than by automatic means. Your personal data may be formed, updated and processed as long as you make use of the products and services provided by our Company and our Group Companies.  

In addition, your personal data may be processed when you use our web page or our call center in order to make use of the services provided by the Company or our Group Companies and when you visit our Company or our web site and when you attend any trainings, seminars, courses or similar events and activities organized by our Company.   

Your personal data collected will, within the conditions for and purposes of personal data processing as specified in the Articles 5 and 6 of the PDP Law, be processed in order that our business units carry out any works and studies necessary to avail you of the products and services provided by our Company and our Group Companies; in order that the products and services provided by our Company and our Group Companies are customized and offered to you depending on your admirations, habits of use and your needs; in order to ensure the legal and commercial security of our Company, our Group Companies and any persons that have business relationships with our Company (administrative operations for any communications carried out by our Company, to ensure physical security, safety and inspection of any locations pertaining to the Company, evaluation/complaint management processes concerning any customers of the Group Companies, reputation research processes, effectiveness management, legal compliance process, financial affairs etc.) and in order to ensure that our Company’s commercial and business strategies are determined and implemented and that our Company’s human resources policies are pursued. 

2. To whom and for what purpose the processed personal data may be transferred

Your personal data collected may, within the framework of the conditions for and purposes of personal data processing as specified in the Articles 8 and 9 of the PDP Law, be transferred to our business partners, our suppliers, the Group Companies, our shareholders, any legally authorized public institutions and natural persons in order that our business units carry out any works and studies necessary to avail you of the products and services provided by our Company and our Group Companies; in order that the products and services provided by our Company and our Group Companies are customized and offered to you depending on your admirations, habits of use and your needs; in order to ensure the legal and commercial security of our Company, our Group Companies and any persons that have business relationships with our Company (administrative operations for any communications carried out by our Company, to ensure physical security, safety and inspection of any locations pertaining to the Company, evaluation/complaint management processes concerning any such business partners/customers/suppliers (their officials or employees), reputation research processes, effectiveness management, legal compliance process, financial affairs etc.) and in order to ensure that our Company’s commercial and business strategies are determined and implemented and that our Company’s human resources policies are pursued. 

3. Methods of and legal causes for collection of personal data

Your personal data will be obtained in any verbal, written or electronic environment, in line with the foregoing purposes, to the end that the products and services of our Company can be provided within the determined legal framework and that, within this scope, our Company can fulfill accurately, correctly and fully the requirements of its responsibilities arising from contracts, agreements and laws. Your personal data, collected for these legal causes, may also be processed and transferred for the purposes stated in the paragraphs (1) and (2) of this text,  within the scope of the conditions for and purposes of personal data processing as specified in the Articles 5 and 6 of the PDP Law.  

4. Personal data subjects’ rights listed in the Article 11 of the PDP Law

In the event that you, as the personal data subjects, communicate to our Company your requests concerning your rights by the below means set out in this Informative Text; our Company shall free of charge conclude such request in no later thirty days, depending on the nature of such request. However, in case a fee is stipulated by the Board of Protection of Personal data, our Company shall collect such fee as determined in the relevant tariff.  In this context, personal data subjects have the right to:  

• Learn whether or not their personal data have been processed;

• Request for relevant information, if their personal data have been processed;

• Learn the purpose of the processing of the personal data and whether or not these data are used in compliance with the purpose;

• Know the third parties, in the country or abroad, to whom their personal data have been transferred;

• Request for correction if their personal data have been processed incompletely or inaccurately and request that the operation, performed in this context, be informed and notified to the third parties to whom their personal data have been transferred;

• Despite their personal data have been processed in compliance with the provisions of the PDP Law and the other relevant laws, in the case of disappearance of the reasons requiring the processing of the personal data, request for deletion or destruction of their personal data and request that the operation, performed in this context, be informed and notified to the third parties to whom their personal data have been transferred;

• Object to occurrence of any result that is to his/her detriment by means of analysis of the personal data exclusively through automated systems; and

• Claim compensation of his/her damages, in case the personal data subject suffers damages due to the unlawfully processing of his/her personal data.

As per the Article 13/1 of the PDP Law, you may communicate to our Company your requests for the exercise of your above-listed rights, in writing or by other means designated by the Board of Protection of Personal Data. Since the Board of Protection of Personal Data has not designated any means yet, you must communicate to our Company your application in written form as per the PDP Law.