Kmu Mehmet Usta RESTAURANT respects the privacy of your personal data and attaches great importance to data security, which is one of our company’s priorities. For the purpose of processing and protecting this personal data, we adopt the principles of collecting, processing, and protecting the personal data of our customers, potential customers, website users, employees, job applicants, former employees of Kmu Mehmet Usta RESTAURANT, interns, company shareholders, company officials, business partners, group company employees, and visitors in accordance with the regulations set forth in the Personal Data Protection Law No. 6698. processing, and protecting the personal data of our customers, potential customers, website users, employees, job applicants, former employees of Kmu Mehmet Usta RESTAURANT, interns, company shareholders, company officials, business partners, group company employees, and visitors in accordance with the provisions of the Personal Data Protection Law No. 6698.
Therefore, we recommend that you carefully read this text, which explains how we process your personal data, with whom we share it, and how you can exercise your rights.
All personal data belonging to individuals associated with Kmu Mehmet Usta RESTAURANT, including those who benefit from our services, may be recorded, stored, and updated in accordance with the Personal Data Protection Law No. 6698, provided that it is lawful and in accordance with the principle of good faith, for specific, clear, and legitimate purposes. updated, and processed within the framework permitted by legislation for as long as your relationship with our company continues, and may be shared with third parties.
As Kmu Mehmet Usta RESTAURANT, as defined in the Personal Data Protection Law, we determine the information we obtain from you within the scope of our relationship with you in our capacity as the “Data Controller”.
DEFINITIONS
The following terms used in this privacy notice:
Personal Data: Any information relating to an identified or identifiable natural person,
Processing of Personal Data: Any operation performed on data, such as obtaining, recording, storing, preserving, modifying, reorganizing, disclosing, transferring, acquiring, making available, classifying, or preventing the use of personal data, whether fully or partially automated or non-automated, provided that it is part of a data recording system.
Personal Data Protection Law No. 6698 “KVKK”: The Personal Data Protection Law No. 6698, which entered into force upon its publication in the Official Gazette on April 7, 2016.
Authority: Personal Data Protection Authority
Board: Personal Data Protection Board,
Data Processor: A natural or legal person who processes personal data on behalf of the data controller based on the authority granted by the data controller,
Data Controller: A natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system.
Data Subject: The natural person whose personal data is processed,
Contact Person: The person who facilitates communication with the Authority and relevant persons. The contact person is not a representative of the Data Controller. The contact person does not have the authority to act on behalf of the Data Controller and is the person to whom requests from the Authority are communicated. (They are not the authority for evaluating questions and requests from Data Owners, but only serve as a liaison.)
DATA CONTROLLER
Data Controller: Kmu Mehmet Usta RESTAURANT.
Address: Ethemoğlu Suit, Taşpazar Neighborhood, 40 Mt. lik Yol Üzeri, 854 Sokak No:7 Altı, 68100 Aksaray Merkez/Aksaray
Phone: (0382) 502 50 00
Email: kardeslermehmetusta@gmail.com
APPLICATION
As Kmu Mehmet Usta RESTAURANT;
Regarding our customers, potential customers, website users, employees, job applicants, former employees of Kmu Mehmet Usta RESTAURANT, interns, company shareholders, company officials, business partners, group company employees, visitors, and third parties, we take seriously the protection, collection, processing, transfer, and destruction of personal data in our possession within the framework of the Constitution of the Republic of Turkey, international agreements to which our country is a party, and relevant legislation, primarily Law No. 6698 on the Protection of Personal Data.
In this context, we may process, transfer to third parties within and outside Turkey, store, use for profiling, and classify the personal data you share with us in accordance with Law No. 6698 on the Protection of Personal Data, in a manner that is limited, relevant, and proportionate to our activities and purposes.
Purpose of Processing Your Personal Data
In accordance with Articles 4, 5, and 6 of Law No. 6698 on the Protection of Personal Data, your personal data may be processed for the following purposes:
In cases expressly provided for by law, for the establishment or performance of a contract, to fulfill our legal obligations, where necessary for the establishment, exercise, or protection of a right, for our legitimate interests, or with your explicit consent (or that of the relevant persons) if it has been made public, provided that there are no processing conditions. Furthermore, all your personal data processed shall be:
- Lawful and fair,
- Accurate and up-to-date,
- Processed for specified, explicit, and legitimate purposes,
- Relevant, limited, and proportionate to the purposes for which they are processed,
They will be retained for the period specified in the relevant legislation or for as long as necessary for the purpose for which they are processed.
Your personal data may be processed by our company for the following purposes without compromising our quality:
- Conducting occupational health and safety activities
- Planning and monitoring work carried out with business partners, dealers, or suppliers
- Creating and maintaining customer records
- Maintaining customer relations and monitoring corporate management activities,
- Managing and monitoring customer requests and complaints,
- Ensuring business continuity,
- Monitoring contract processes,
- Monitoring and executing legal processes and communication processes with official institutions,
- Ensuring legal and commercial security,
- Developing and improving the services offered by our company,
- Determining and implementing commercial and business strategies,
- Conducting market research,
- Planning and organizing activities aimed at ensuring and/or increasing loyalty to Products and Services,
- Maintaining business and operations,
- Conducting sales and purchasing processes,
- Fulfilling warranty obligations,
- Establishing contractual processes with you, our customers, such as sales and after-sales support, performing and following up on all necessary transactions, executing contractual processes, and planning and executing sales-related operational processes,
- Creating and updating efficiency reports by obtaining information about customer-based developments,
- Planning and organizing activities aimed at ensuring and/or increasing loyalty to Products and Services,
- Execution of company activities and procedures,
- Execution of financial and accounting transactions,
- Execution of financial, accounting, and financial transactions, including sales-related invoicing activities, and implementation of risk management,
- Execution of internal audit processes,
- Fulfillment of notification obligations to relevant/authorized public institutions,
- Execution of job and internship application and evaluation processes,
- Creation of workplace personnel files and execution of onboarding processes,
- Execution of human resources processes,
- Fulfillment of obligations arising from employment contracts and legislation for employees,
- Execution of training activities,
- Execution of physical security processes,
- Planning of information security processes, establishment and management of information technology infrastructure,
- Risk management,
- For logging activities.
Method and Legal Basis for Collecting Your Personal Data
Your personal data may be collected verbally, in writing, or electronically, either fully or partially automatically, or by non-automated means provided that it forms part of a data recording system, for the purposes and within the scope specified above.
Within the scope of commercial process execution activities; communication forms, fair organizations, business cards, supplier information request forms, other commercial documents, payment information and documents, valuable documents, employee and intern candidate application forms, resumes, e-mail, website, various contracts, mobile applications, consumer complaint forms, customers, suppliers, and other third parties outside our company.
We collect your personal data; KVKK Article 5/2-c – For the purpose of establishing and fulfilling a contract, KVKK Article 5/2-ç – To fulfill our legal obligations, KVKK Article 5/2-f – Within the scope of our company’s legitimate interests or with your explicit consent, we process your personal data for the purposes stated above.
Transfer of Your Personal Data
Your personal data will be processed in accordance with the Personal Data Protection Law (KVKK) and applicable legislation, taking data security measures such as data storage, prevention of unauthorized access, and prevention of unlawful processing, for the purposes listed above, jointly with Kmu Mehmet Usta RESTAURANT;
To authorized public institutions and organizations as required by legal obligations and needs, to intermediary financial institutions for the purpose of assessing financial risks, to independent audit firms for the purpose of conducting audit processes, to institutions providing intermediary/agency services in business trips, organizations, and exhibition processes, to our business partners, our suppliers, shareholders, and local/international organizations that support our business processes, affiliated companies and/or domestic/international organizations with which we collaborate to carry out activities as Kmu Mehmet Usta RESTAURANT, directly or indirectly, within the scope of relevant contracts, and other third parties.
Storage and Deletion of Data
Personal data must be stored for specific periods as required by law. Therefore, it is our company’s responsibility to store personal data in accordance with the law and for the required period. These storage periods are defined in detail on a data basis in the personal data inventory prepared. Personal data is retained for the period specified in the legislation or required for the purpose. Data is stored in physical or electronic environments. The necessary security measures have been taken for the storage and retention of data, and a secure environment has been provided by our company. Personal data whose retention period has expired is destroyed (deleted/erased/anonymized) at 6-month intervals.
Your Rights as the Data Subject
Under Article 11 of Law No. 6698 on the Protection of Personal Data
- The right to learn whether your personal data has been processed,
- The right to request information regarding the processing of your personal data,
- The right to learn the purpose of processing your personal data and whether it is being used for its intended purpose,
- The right to know the third parties to whom your personal data has been transferred within or outside the country,
- The right to request the correction of your personal data if it has been processed incompletely or incorrectly,
- Requesting the deletion or destruction of your personal data within the framework of the conditions stipulated in the KVKK legislation,
- When you request the correction of incomplete or incorrect data and the deletion or destruction of your personal data, requesting that this situation be reported to third parties to whom your personal data has been transferred,
- Object to a result that is detrimental to you arising from the analysis of processed data exclusively through automated systems,
- You have the right to request compensation for any damage you suffer due to the unlawful processing of personal data.
- To exercise these rights, you may submit a petition containing your request or fill out the Information Request Form at www.kmumehmetusta.com.
- The request must include the applicant’s identity and address information (documents proving your identity must be attached).
- The subject of your request must be related to you personally.
- If you are acting on behalf of someone else, you must be specifically authorized to do so and your authorization must be documented.
Please state your request clearly and concisely;
You can send your request in writing to our company’s address at “Ethemoğlu Suit, Taşpazar Mahallesi, 40 Mt. lik Yol Üzeri, 854 Sokak No:7 Altı, 68100 Aksaray Merkez/Aksaray” or via email from your email address registered in our system. Depending on the nature of your request under the above clause, your request will be processed free of charge as soon as possible (within 30 days at the latest) or according to the conditions set out in the fee schedule determined by the Personal Data Protection Board.
As the relevant person, pursuant to Article 14 of the Personal Data Protection Law No. 6698, in cases where the application is rejected, the response is found insufficient, or no response is given to the application within the specified time, you may file a complaint with the Board within thirty days from the date you learn of the response or, in any case, within sixty days from the date of application with the person’s consent.
Pursuant to Article 28/2 of Law No. 6698 on the Protection of Personal Data, in the following cases, personal data subjects cannot assert their other rights mentioned above, except for the right to request compensation for damages:
The processing of personal data is necessary for the prevention of a crime or for a criminal investigation.
Processing of personal data made public by the data subject themselves.
Processing of personal data is necessary for the performance of supervisory or regulatory tasks by public institutions and organizations authorized by law, or by professional organizations with public institution status, or for disciplinary investigation or prosecution.
Processing of personal data is necessary for the protection of the economic and financial interests of the State in relation to budget, tax, and financial matters.
OTHER MATTERS
The relevant legal regulations in force regarding the processing and protection of personal data shall be applied primarily in the processes covered by this Information Text on the Protection and Processing of Personal Data.
The Information Text is published on the website “www.kmumehmetusta.com” and made available to the relevant persons. Changes and updates may be made to the Information Text in order to comply with changing conditions and legislation, and may be made available to the relevant persons via the above-mentioned website.