I. IDENTITY OF THE DATA CONTROLLER

II. PURPOSES OF PROCESSING PERSONAL DATA

Your personal data is processed by Lutuf Mensucat A.Ş. as the data controller for the following purposes and in accordance with Articles 5 and 6 of the Law:

• Execution of Emergency Management Processes
• Execution of Employee Candidate / Intern / Student Selection and Placement Processes
• Execution of Storage and Archive Activities
• Foreign Personnel Work and Residence Permit Procedures
• Execution of Customer Relationship Management Processes
• Creation and Tracking of Visitor Records
• Execution of Application Processes for Employee Candidates
• Tracking of legal procedures of employees,
• Calculation of personnel expenses
• Making performance evaluations and determining wage policies
• Fulfillment of legal obligations specified in the KVKK
• Completing the recruitment process
• Determining the suitability of the candidate for the department and the relevance of the task to the unit
• Ensuring company and customer security
• Training and performance evaluations of employees
• Execution of financial processes (salary, bonus, etc.)
• Employment of new personnel, reviewing candidates, and identifying the new candidate to be employed
• Verifying how much the candidate overlaps with the position and recording their information for future confirmation
• Identification and security of visitors, supplier employees, and authorized persons coming to the company and its work areas
 
• For the purpose of identifying the authorized person and employee of the suppliers who have a commercial relationship with the company and due to the performance imposed by the commercial relationship
• Planning and/or execution of activities for ensuring the legal and technical security of our Company and the relevant persons in business relationship with our Company,
• Carrying out the necessary work for the relevant persons to benefit from the products and/or services offered by our Company and/or on behalf of our Company and managing the relevant business processes
• Improving, developing, diversifying our products and services, and offering alternatives to real/legal persons with whom we have a commercial relationship
• Identifying the needs of our customers, employees, employee candidates, and interns, fulfilling the obligations related to the contract, maintaining marketing activities, providing customer tracking, ensuring occupational safety and business continuity,
• Receiving, evaluating, and finalizing requests or complaints; performing internal control, audit, and internal/external reporting activities, and establishing and ensuring the security of information systems
• To raise and improve our service standards,
• For the purpose of determining and implementing our commercial business strategies
• For the purpose of full performance of the contracts to which our company is a party and controlling that the counter parties perform the contracts fully,
• To ensure the security of buildings belonging to employees, employee candidates, interns, customers, guests, and Lutuf Mensucat A.Ş. and to control entry-exit,
• Evaluating the recruitment processes of employee candidates, creating personnel files for employees, interns, and supplier employees, and maintaining Lutuf Mensucat A.Ş.'s human resources policies,
• To increase the morale and motivation, performance level, and satisfaction of the personnel working within our company, their interaction with each other and the company, and to ensure their loyalty to the company,
• For the purpose of carrying out the commercial purchasing transactions of the company,
• For the purpose of carrying out the corporate correspondence of the company,
• Coordination and execution of works and communication regarding the goods and services provided/to be provided to the company and quality control and evaluation of service/contract performance, providing communication between suppliers, business partners, external service providers, and customers

In addition to these, personal data will be processed for purposes such as performing our necessary quality and standard audits or fulfilling other obligations determined by laws and regulations. Your personal data may be created and processed by updating as long as your relationship with our Company continues.

III. TO WHOM AND FOR WHAT PURPOSE THE PROCESSED PERSONAL DATA CAN BE TRANSFERRED

Your collected personal data may be transferred to our business partners, suppliers, associated Companies, legally authorized public institutions, and private persons within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law. Your personal data will not be used for purposes other than those specified above and will not be shared with or transferred to irrelevant third parties except for legal obligations and official institutions/organizations.

IV. METHOD AND LEGAL REASON FOR COLLECTING PERSONAL DATA

Your personal data is obtained in any oral, written, or electronic medium, for the purpose of presenting the products and services we offer as Lutuf Mensucat A.Ş. within the determined legal framework and for Lutuf Mensucat A.Ş. to fulfill its responsibilities arising from the contract and the law completely and accurately in this scope. Your personal data collected for this legal reason can also be processed and transferred for the purposes specified in articles (b) and (c) of this text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law.

V. RIGHTS LISTED IN ARTICLE 11 OF THE PERSONAL DATA PROTECTION LAW

Personal data subjects may exercise their rights of application and complaint by applying to the Company and the Personal Data Protection Board.

Application: Personal data subjects must first apply to the Data Controller (Company) in order to exercise their rights. A complaint cannot be made to the Board without exhausting this path.

Complaint: In order for personal data subjects to apply for a complaint to the Personal Data Protection Board; the application must be rejected by the Data Controller (Company), the answer given must be found insufficient, or the application must not have been answered within 30 days. It is not possible for said persons to go to the Personal Data Protection Board directly without applying to the Company.

In this scope, personal data subjects have the right to;

• Learn whether personal data is processed,
• Request information if personal data has been processed,
• Learn the purpose of processing personal data and whether they are used in accordance with their purpose,
• Know the third parties to whom personal data is transferred domestically or abroad,
• Request correction of personal data if it is incomplete or incorrectly processed,
• Request the deletion or destruction of personal data within the framework of the conditions provided for in Article 7 of the Personal Data Protection Law,
 
• Request notification of the transactions made pursuant to subparagraphs (5) and (6) to third parties to whom personal data is transferred,
• Object to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems,
• Request compensation for the damage in case of loss due to unlawful processing of personal data.

In case you submit your requests regarding your rights to Lutuf Mensucat A.Ş. by the methods regulated below, it will finalize them within 30 days at the latest according to the nature of the request. However, if a fee is prescribed by the Personal Data Protection Board, the fee in the determined tariff will be charged.

Pursuant to the 1st paragraph of Article 13 of the Law, you may submit your requests regarding the exercise of your above-mentioned rights to Lutuf Mensucat A.Ş. in writing or by other methods determined by the Board. If new application methods are determined by the Personal Data Protection Board, these methods will be announced by us.

In this framework, applications to be made to Lutuf Mensucat A.Ş. in writing can be submitted by using the "Data Subject Application Form" published on our website https://www.lutufmensucat.com.tr/kvkk/kvkk_basvuru.pdf ;

By personally bringing a wet-signed copy of the form to Lutuf Mensucat A.Ş. address, by sending a notification via Notary, or by signing the application form with "secure electronic signature" defined in the Electronic Signature Law No. 5070 and sending it as an email to the Registered Electronic lutufmensucat@hs02.kep.tr address or by other methods to be determined by the KVKK Law.

In the said Data Subject Application Form; it is required that the matter you request is clear and understandable, the subject you request is related to your person, or if you are acting on behalf of someone else, you are specifically authorized in this regard and your authority is documented, also it contains identity and address information and documents certifying your identity are attached to the application.

You can reach the website of the Personal Data Protection Authority at https://kvkk.gov.tr for information about the Law and the relevant Legislation.

To get more detailed information; you can contact kvkk@lutufmensucat.com.tr or +90 (344) 236 44 80.