LOGO

PERSONAL DATA PROTECTION

POLICY

  • Lutuf Mensucat A.Ş. collects and processes personal data in compliance with the laws of Turkey and European Union Member States, in order to protect the fundamental rights and freedoms of individuals, especially the privacy of private life.
  • All our personal data processing activities are within the scope of our policy. These include the processing of personal and special quality personal data of customers, employees, suppliers, and business partners, and any data collected and processed by the organization from any source.
  • Lutuf Mensucat A.Ş. takes the necessary technical and administrative measures to ensure the appropriate level of security to prevent unlawful processing of the personal data it processes, to prevent unlawful access to the data, and to ensure the preservation of the data, and in this context, it performs or has the necessary audits performed.
  • Regarding the processing of personal data, it performs personal data processing activities in accordance with the law and honesty rules, accurately and when necessary up-to-date; by pursuing specific, clear, and legitimate purposes; in a manner connected, limited, and measured with the purpose.
  • Lutuf Mensucat A.Ş. preserves personal data for the period stipulated in the laws or required by the purpose of personal data processing.
  • Lutuf Mensucat A.Ş. clarifies personal data subjects and provides the necessary information in case personal data subjects request information.
  • Lutuf Mensucat A.Ş. acts in accordance with the regulations provided for the processing of special quality personal data and does not perform actions and activities without explicit consent except for the cases explicitly provided for in the laws.
  • Lutuf Mensucat A.Ş. acts in accordance with the regulations provided for in the law regarding the transfer of personal data.
  • As Lutuf Mensucat A.Ş., we continue our activities for the protection of personal data with traceable, measurable, and evaluable targets.
  • Lutuf Mensucat A.Ş. creates awareness for the protection of personal data for its internal and external parties and transfers its relevant obligations.
  • Lutuf Mensucat A.Ş. carries out trainings to develop technical and behavioral competencies in order to increase awareness for the protection of Personal Data.
  • Lutuf Mensucat A.Ş. manages personal data violations by evaluating the issue according to the disciplinary procedure and immediately informs the board authorities for criminal offenses and violations.
  • Lutuf Mensucat A.Ş. continuously monitors the confidentiality, integrity, up-to-dateness of data, and personal data access authorizations with process-based asset inventory and process-based risk assessment.
  • Lutuf Mensucat A.Ş. undertakes the implementation of applications for the Personal Data Protection Management System, managing it systematically, ensuring continuous improvement of the system, and allocating the resources needed by the system.