KVKK Customer Privacy Notice

BÜLENT BÖREKÇİLİK CUSTOMER PRIVACY NOTICE ON THE PROCESSING AND RETENTION OF PERSONAL DATA PURSUANT TO PERSONAL DATA PROTECTION LAW NO. 6698 (“KVKK”)

Within the scope of the Personal Data Protection Law, as Joint Data Controller Group Companies BÜLENT UNLU MAMÜLLER PAZARLAMA SATIŞ ANONİM ŞİRKETİ and BÜLENT BÖREKÇİLİK İMALAT PAZARLAMA SANAYİ VE DIŞ TİCARET ANONİM ŞİRKETİ (hereinafter referred to as “Bülent Börekçilik” or the “Company”), we have prepared this Customer Personal Data Privacy Notice in order to inform You, our Valued Customers, about how we process your personal data. You may also click the “KVKK Policy” link to obtain detailed information about our “Personal Data Retention and Destruction Policy” and how we protect your personal data. For any questions regarding the protection and processing of your personal data, you may reach us at the e-mail address info@bulentborekcilik.com.

1. WHICH OF YOUR PERSONAL DATA DOES BÜLENT BÖREKÇİLİK PROCESS?

Within the scope of the service we provide to you, we process the following personal data:

Identity and Contact	Name-surname, customer ID, advertising ID/identity identifiers, gender, age, profile photo, mobile phone number, e-mail address, address
Finance	Information on payments and payment methods
Customer Transaction	Shopping/order history, order information, number of orders, application usage information, invoice information, request/complaint information
Location	Your location information

2. BY WHAT METHODS IS YOUR PERSONAL DATA COLLECTED?

We collect your personal data by automated and manual methods through our website, when you contact us via our contact numbers, or during your visits to our company.

3. FOR WHAT PURPOSES IS YOUR PERSONAL DATA PROCESSED?

As Bülent Börekçilik, we process your personal data only within Türkiye for the following purposes:

To fulfil our obligations in matters where we are legally obliged to do so (for details, you may review Personal Data Protection Law No. 6698),
To evaluate your applications so that you can benefit from our services and to submit price quotations in line with your requests,
To be able to contact You, our Valued Customers, and to ensure the continuity of our relationship,
To carry out the processes of receiving orders and payments and delivering orders,
To carry out communication between suppliers and our customers as Bülent Börekçilik,
To receive feedback and carry out evaluations for the improvement of our products/services,
To follow up and conclude your requests and complaints and to inform you in this regard,
To carry out our activities in accordance with the legislation in force,
To review and audit our business activities,
To carry out finance and accounting work relating to payments for your orders.

4. WHAT ARE THE LEGAL GROUNDS ON WHICH BÜLENT BÖREKÇİLİK RELIES WHEN PROCESSING YOUR PERSONAL DATA?

We process your personal data within the scope of the following legal grounds among those set out in Article 5, titled “Conditions for Processing Personal Data”, of Personal Data Protection Law No. 6698:

Legal Ground	Example of Personal Data Processing	Personal Data Processed in the Process
“Processing of personal data being necessary for the establishment or performance of the contract between you and Bülent Börekçilik.”	Receiving payment, confirming the order and delivering your product so that the products you ordered reach your address.	Name-surname, address, order and payment information.
“Processing of personal data for the establishment, exercise or protection of a right.”	Receiving and concluding your requests/complaints regarding your order upon delivery of your product.	Name-surname, customer ID, request/complaint information
“Processing of personal data in order to fulfil our legal obligations.”	Issuing an invoice as a result of your order.	Name-surname, address, invoice information.
“Processing of personal data being necessary for our legitimate interests.”	Offering you the stand, advertising and promotional products and other product options best suited to your preferences and interests.	Customer ID, preferences and interests regarding products.
“The data subject's consent to the processing of their location data.”	Matching the person and location so that product delivery can be made, an invoice can be issued in your name, the security of your order can be ensured and you can be contacted.	Name-surname, location (location information).

5. UNDER WHAT CONDITIONS IS YOUR PERSONAL DATA TRANSFERRED TO THIRD PARTIES?

Your personal data is transferred to the following domestic parties for the purposes stated below:

Bülent Börekçilik Distributors, Couriers, Shipping Companies and Suppliers	To carry out communication between distributors, couriers, shipping companies and suppliers and customers; to carry out customer order transactions; to inform distributors, couriers, shipping companies and suppliers of the address to which the order will be delivered.
Authorised Persons, Institutions or Organisations	To provide information to authorised persons, institutions or organisations, to fulfil our legal obligations, to conduct legal processes and to carry out our activities in accordance with the legislation.

6. WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA UNDER PERSONAL DATA PROTECTION LAW NO. 6698?

Your rights as a Data Subject are regulated in Article 11 of Personal Data Protection Law No. 6698 as follows: Within the framework of Article 11 of the Law, as the data subject you, solely with regard to yourself, or your attorney holding a power of attorney issued before a notary that expressly authorises them to apply for information, may at any time apply to our Company to:

Learn whether their personal data is being processed,
Request information if their personal data has been processed,
Learn the purpose of processing their personal data and whether it is used in accordance with its purpose,
Know the third parties to whom personal data is transferred in Türkiye or abroad,
Request the rectification of personal data if it has been processed incompletely or inaccurately,
Request the erasure or destruction of personal data,
Request that operations relating to the rectification, erasure or destruction of personal data be notified to third parties to whom the personal data has been transferred,
Object to the occurrence of a result against the person by analysing the processed data exclusively through automated systems,
Request compensation for damages in the event that you suffer damage due to the unlawful processing of personal data; you have these rights.

7. APPLICATION PROCESS REGARDING THE PROTECTION OF PERSONAL DATA

a. You May Submit Your Applications Regarding Your Personal Data Under Personal Data Protection Law No. 6698,

With your secure electronic or mobile signature, to our Company's e-mail address info@bulentborekcilik.com, or;
By registered mail with return receipt, together with your wet-signed application document containing your request for information or regarding your other rights listed in the Law and identity information identifying You, to the address Göztepe Mahallesi İnonü Caddesi No:122 Başkule Plaza Kat:17, 34218 Bağcılar, İstanbul, Türkiye, or;
By other methods specified in the Law and the relevant legislation, provided that your identity is verified.

b. The Information and Documents That Must Be Included in Your Application Pursuant to Paragraph 2 of Article 5 Are as Follows;

Name, surname and, if the application is in writing, a signature are mandatory.
For citizens of the Republic of Türkiye, the Turkish ID number, and for foreigners, nationality, passport number or, if any, identity number are mandatory.
The residential or business address for notification is mandatory.
If any, the e-mail address, telephone and fax number for notification are mandatory.
The subject of the request is mandatory.

If any of the information listed above is missing or if the Data Subject's request is not understood by the Company, the Data Subject's application may be rejected by our Company.

c. The Application Date Is Stated in Paragraphs 4 and 5 of Article 5 as Follows:

For written applications, the date on which the document is served on the data controller or its representative is the application date.
For applications made by other methods, the date on which the application reaches the data controller is the application date.

d. Is There Any Fee for the Application?

No fee other than the fees specified by law below may be charged for responding to your applications. According to Paragraph 1 of Article 7 of the Communiqué on the Procedures and Principles of Application to the Data Controller, “If the data subject's application is to be answered in writing, no fee shall be charged for up to ten pages. For each page above ten pages, a processing fee of 1 (One) Turkish Lira may be charged.” According to Paragraph 2 of Article 7 of the Communiqué on the Procedures and Principles of Application to the Data Controller, if the response to the application is given on a recording medium such as a CD or flash drive, the cost of the recording medium that may be requested by the data controller may be charged to you.

e. Response Time

In accordance with Article 13 of Law No. 6698, our Company will conclude application requests within 30 (thirty) days at the latest, provided that the request is clear and contains the necessary elements. If your request is rejected, the reason(s) for rejection will be justified in writing and sent to you by post or e-mail.

8. WHAT HAPPENS IF I READ THIS DOCUMENT ON BÜLENT BÖREKÇİLİK WEBSITES OR THROUGH SOCIAL MEDIA AND PLATFORMS?

If you approve this document on the internet or in a digital environment, by ticking the box providing the link that opens this text, you are deemed to have accepted that this document will have the same effect as if it had been wet-signed by you and that the Company's records will be taken as the basis.