Website Visitor Privacy Notice

1Introduction and Purpose

This Privacy Notice has been prepared by Aksu Piliç Tarım Sanayi İç ve Dış Tic. A.Ş. (the "Company") to set out the procedures and principles regarding the processing of the personal data of users who visit the website it operates. The Company attaches the utmost importance to the privacy, security and protection of the personal data of users who visit its website, and by means of this notice fulfils its disclosure obligation arising from Article 10 of the Personal Data Protection Law No. 6698 (the "Law").

2Categories of Personal Data Processed

Depending on the actions you take during your visit to and use of our website, the data categories set out below are processed:

• Transaction Security Data: When you visit our website, your IP address, access logs (that is, your entry and exit times), connection duration, browser information, operating system information and internet service provider information are processed by automated means as a mandatory requirement of Law No. 5651 on the Regulation of Publications Made on the Internet.
• Identity and Contact Data: If you contact us via the telephone number or e-mail address on our site, contact details such as the name, e-mail address and telephone number you provide are processed.
• Request and Complaint Data: If you submit a request, complaint or suggestion to our Company, the content of your message, the subject of your request and any other personal information you choose to include in your message are processed.
• Cookie Data: If you give explicit consent to the use of analytical cookies, your navigation activity on the site, the pages you view, the time you spend on the site and your general usage statistics are processed.

3Purposes of Processing Personal Data

Your personal data is processed for the following purposes, in accordance with the general principles set out in Article 4 of the Law and within the conditions specified in Article 5:

• Information Security and Legal Compliance: Ensuring the security of the website, detecting and preventing cyber attacks, and fulfilling traffic log retention obligations arising from Law No. 5651.
• Communication and Request Management: Responding to the questions, requests and complaints you send us, carrying out communication activities and ensuring satisfaction.
• Legal Proceedings: Providing information to authorised persons, institutions and organisations and fulfilling the burden of proof in possible legal disputes.
• Analysis and Improvement: Where you have given explicit consent, the generation of site usage statistics and the improvement of the user experience.

4Data Collection Method and Legal Grounds

Your personal data is collected by partially automated means through the log records automatically kept by our servers during your visit to our website and through cookies, or when you contact us via the telephone number or e-mail address given on our site.

The data in question is processed on the basis of the following legal grounds set out in Article 5 of the Law:

• Expressly Provided for by Law: The obligation to retain traffic and log data pursuant to Law No. 5651 and related legislation.
• The Legitimate Interest of the Data Controller: The legitimate interest of our Company in ensuring security and managing the site, provided that it does not harm the fundamental rights and freedoms of the data subject.
• The Establishment or Performance of a Contract: The management of request, complaint and communication processes.
• Explicit Consent: Obtained via the Cookie Management Panel for the use of analytical cookies.

5Transfer of Personal Data

As a rule, your personal data is not shared with third parties. However, to a limited extent and for the purposes of fulfilling our legal obligations and providing the service;

• Legal Obligations: With competent judicial and administrative authorities for the purpose of resolving legal disputes or responding to legal requests,
• Service Providers: May be shared with our contracted technical service providers for the purpose of providing website infrastructure, hosting, maintenance and security services, with the necessary technical and administrative security measures in place and within the framework of confidentiality agreements.
• Transfer Abroad: If you give explicit consent to analytical cookies, the data processed through these cookies may be transferred to the servers of Google LLC, located abroad, on the basis of the safeguards provided for in Article 9 of the Law. If you do not give explicit consent, this transfer does not take place. Apart from this, no data is transferred abroad.

6Data Security

In order to prevent the unlawful processing of and unlawful access to your personal data and to ensure its retention, our Company takes all necessary technical and administrative measures, including secure socket layer encryption, firewalls, up-to-date anti-virus systems and authorisation matrices.

7Rights of the Data Subject

Data subjects may submit requests relating to their rights under Article 11 of the Law by completing the Data Controller Application Formor by the other methods specified in the Communiqué on the Procedures and Principles of Application to the Data Controller. Applications will be concluded as soon as possible and within thirty days at the latest, depending on the nature of the request.

For detailed information on the use of cookies, please see the Cookie Policy Notice.