Fazla – USER CLARIFICATION TEXT

USER CLARIFICATION TEXT ON THE PROTECTION OF PERSONAL DATA IN ACCORDANCE WITH THE PROTECTION OF PERSONAL DATA LAW (THE “PPDL”)

Fazla Gıda Anonim Şİrketi (“Fazla Gıda” or the “Company“), which has been established in Turkey, as the data controller; adopted a set of fundamental rules  as per the Protection on Personal Data Law (the “PPDL“) in order to protect the confidentiality of all personal data belong to you, our esteemed users of www.fazla.com (the “Website”)/Mobile Application. Fazla Gıda aims to protect the proper trust of the users in the corporate by acting in accordance with such fundamental rules. In accordance with Article 10 of the PPDL, this clarification text has been prepared in order to inform you on the purpose, scope, durations and other issues that may affect you regarding the processing of your personal data.

We kindly inform you that your personal data;

  • shall be recorded, stored, retained, rearranged within the framework of the purpose that requires processing and in connection with such purpose, in a limited and proportionate manner,
  • by maintaining the accuracy and the most up-to-date state of personal data as you notify or as notified us,
  • and the same shall be shared with the institutions authorized to request such personal data by law, and shall be transmitted, transferred to third parties, classified under conditions stipulated by the PPDL and shall be processed in other manners listed in the PPDL. 
  1. Personal Data Collection Method and Its Legal Reason

Your personal data is collected by the Company through channels such as e-mail, the relevant websites and mobile applications, electronically via social media accounts that you allow the Company to access and via the call center channel or physically by mail/cargo.

Your personal data; can be processed, within the services provided by the Company as a service provider; upon the explicit consent of the person concerned in order to fulfill its legal obligations, for reasons directly related to the establishment and performance of the agreement, for reasons stipulated in the law and due to the legitimate interest of the Company and in other situations. In this context, your personal data can be collected by the Company; upon your approval that you have submitted verbally, in writing or electronically during the service request, at the time of the conclusion of the agreement or later on and by registering information to register a user on the internet, or by making a request or complaint to the Company. 

The Company complies with its obligations to take all kinds of necessary technical and administrative precautions to prevent illegal processing of personal data, to prevent illegal access to such data, and to ensure the appropriate level of security in order to retain such data.

2.Processing of Personal Data and Processing Purposes

Your personal data are collected by our Company through different channels and on the basis of legal reasons to comply with the legislation and Company policies in order to carry out our activities. Your collected personal data shall be processed by Fazla Gıda in accordance with the fundamental principles stipulated by the PPDL and within the conditions and purposes of processing personal data specified under Articles 5 and 6 of the PPDL, in line with the following purposes and in a limited and proportionate to these.

The following personal data, which is provided by the users themselves, can be processed by the Company:

  • Identity and Contact Information: Name, surname, telephone, address, e-mail address
  • User Information, User Transaction Information and Financial Information: Membership information, membership ID number, data regarding the date and time of getting benefit from the Company services, your reasons for contacting the Company, the terms that you use while searching on the Website and your filtering preferences, your points and comments, invoice and payment information, balance information (data such as invoices sent to the user and receipt samples for payments made by users, invoice number, invoice amount, invoice date.)
  • Location Information: Specific or approximate location information on your location, such as GPS data, that we have obtained during your use of services of the Company.
  • Transaction Security Information: Membership information, password information
  • Marketing Information: Reports and evaluations reflecting your habits and likes, targeting information, cookie records, etc. information
  • Request/Complaint Management Information: Requests and complaints that you made on the Website and comments that you shared on the Website
  • Risk Management Information: IP address
  • Health Information: Your allergy to certain foods
3. To Whom and for What Purposes the Processed Personal Data Shall be Transferred

Your personal data collected can be transferred; by Fazla Gıda in accordance with the fundamental principles stipulated by the PPDL and within the personal data processing conditions and purposes specified in Articles 8 and 9 of the PPDL; to our business partners, suppliers, shareholders, legally authorized public institutions and private persons, for the following purposes:

  • Carrying out the necessary work and carrying out activities in this direction by the business units of our Company in order to conduct the commercial activities of Fazla Gıda in accordance with the legislation and Company policies;
  • Determining, planning and implementing the short, medium and long term commercial policies of Fazla Gıda;
  • Ensuring the commercial and legal safety of Fazla Gıda and the real persons with whom business relations are involved;
  • Protection of Fazla Gıda’s commercial reputation and the trust that it developed.
4. Personal Data Retention Period

Our Company retains personal data in the circumstances where stipulated in the relevant laws and legislations, for the period stated in these legislations. 

If the purpose of processing the personal data has disappeared; and the retention period determined by the relevant legislation and the Company is also about to expire; the personal data can be retained only for the purpose of the constitution of evidence in potential legal disputes, or of their usage in order to claim on related rights linked to personal data, or of execution of statement of defense.

In such a case, the retained personal data are not accessible for any other purpose and can be accessed only when it is required to use the same in the related legal dispute. Once the mentioned period herein has also expired, personal data is erased, destructed or anonymized. In the conditions specified in the relevant legislation or stated in this Clarification Text, the Company undertakes to take all kinds of necessary technical and administrative precautions and to have audits made to ensure the appropriate level of security in order to;

  • prevent the illegal processing of personal data,
  • prevent the illegal access to personal data and 
  • retain personal data.
5.Erasure, Deletion and Destruction of Personal Data

Your personal data retained under the scope of law shall be retained; for the maximum period specified in the relevant legislation or required for the purpose for which they are processed, and in any case, for the legal statute of limitation. Although the personal data has been processed in accordance with the provisions of the relevant law as regulated under Article 138 of the Turkish Criminal Code and Article 7 of the Protection of Personal Data Law, in case the reasons for processing have disappeared, the personal data shall be erased, destructed or anonymized ex officio or upon your request under the conditions specified by the Regulation on the Erasure, Destruction or Anonymization of Personal Data published in the Official Gazette numbered 30224 and dated 28.10.2017.

6.Rights of Personal Data Owner

If you, as the personal data owners, submit your requests regarding your rights to our Company, the Company shall conclude it free of charge as soon as possible and within thirty (30) days at the latest, depending on the nature of the request. However, if the process requires an additional cost, the Company shall charge the fee stated in the tariff determined by the Personal Data Protection Board. In this context, the personal data owners have the following rights:

  • To learn as to whether personal data has been processed,
  • To request the relevant information if her/his personal data has been processed,
  • To learn the purpose of the processing of her/his personal data and as to whether those has been used for intended purpose,
  • To learn the third parties to whom her/his personal data has been transferred within Turkey or abroad,
  • To request rectification in case the personal data has been processed incompletely or inaccurately and to request notification of the process performed within this context to third parties to whom the personal data has been transferred,
  • To request the erasure or destruction of the personal data which has been processed under the provisions of the Law and other related laws, upon the disappearance of reasons which require its process and the notification of the process performed within this context to third persons to whom the personal data has been transferred, 
  • To object to the emergence of a result against the person her/himself due to analyzing the processed data exclusively through automated systems,

To request their damages to be remedied if the persons concerned are damaged due to illegal processing of personal data.

You are required to make and submit your application in matters related to the processing of your personal data to the Company by filling in the application form on the Company’s website, in writing or by using your registered electronic mail (REM) address, secure electronic signature, mobile signature or your electronic mail address that you have previously notified to us and is included in our records. According to the nature of your request and your application method, the Company may ask for additional verification (such as sending a message to or calling your registered telephone number) in order to determine as to whether the application belongs to you and thus to protect your rights. For instance, if you apply through your e-mail address registered in the Company, we may contact you by using another communication method registered in the Company and ask for confirmation as to whether the application belongs to you.

CONTACT INFORMATION

Fazla Gıda Anonim Şirketi 

Central Registration System (Mersis) No: 0385074242800014

Contact Link: [email protected]

Address: Levent Mahallesi, Gazeteci Ümit Deniz Sk. No:11, 34330 Beşiktaş/İstanbul