Pursuant to the Turkish Personal Data Protection Law No. 6698 ("KVKK"), your personal data shall be processed by our Company, acting in its capacity as the Data Controller, for business purposes, within the framework set out below, by being used, recorded, stored, updated, transferred and/or classified.

Within this scope, in accordance with the laws and regulations enacted for the protection of personal data and the fundamental rights and freedoms of individuals, particularly the right to privacy, our Company implements all necessary technical and administrative measures to ensure an appropriate level of security in order to prevent the unlawful processing of your personal data, prevent unlawful access thereto, and ensure its preservation.

Scope

This Policy applies to all natural persons whose personal data is processed by our Company. The categories of personal data processed by our Company in its capacity as the Data Controller include, without limitation:

- Name

- Surname

- Turkish Identification Number

- Address

- Telephone number

- E-mail address

- Signature

- Physical premises / security camera recordings

- Call centre / service quality voice recordings

- Bank account number

- Other similar personal data

Purposes and Legal Grounds for the Processing of Personal Data

- Carrying out the necessary activities, including but not limited to determining and implementing the Company's commercial and business strategies, conducting marketing activities, and carrying out business development and planning activities, in order to enable you and/or the institutions and organisations you represent to benefit from the products and services offered by our Company;

- Carrying out administrative operations relating to communication activities conducted by our Company;

- Ensuring the physical security and supervision of the premises used by our Company;

- Establishing relationships with business partners, customers and suppliers (their authorised representatives or employees);

- Ensuring the fulfilment of contractual obligations and financial reconciliation in relation to products and services provided together with our business partners, suppliers or other third parties;

- Implementing the Company's human resources policies;

- Processing requests submitted through the Company's call centre or website and/or;

- Enabling participation in training programmes, seminars or events organised by our Company.

Method of Collection and Retention of Personal Data

Your personal data shared with our Company may be collected verbally, in writing or electronically through automated or non-automated means via our offices, branches, call centre, website, social media platforms, mobile applications and similar channels. Your personal data shall be stored in electronic and/or physical media. The necessary business process designs and technical security infrastructure measures are implemented in order to prevent the personal data obtained and retained by our Company from being subject to unauthorised access, manipulation, loss or damage in the environments in which they are stored. Your personal data shall be processed solely for the purposes and within the scope notified to you, provided that all necessary information security measures are implemented, and shall be retained and processed for the statutory retention period or, where no such period is prescribed, for the period required by the purpose of processing. Upon expiry of such period, your personal data shall be removed from the Company's data records through deletion, destruction or anonymization.

Transfer of Personal Data

- Sunpet Ambalaj Sanayi ve Ticaret A.Ş., as well as the companies and representatives authorized by our Company to act on its behalf;

- Regulatory and supervisory authorities, and public institutions or organizations expressly authorized under the applicable legislation to request your personal data;

- Business partners, supplier and contractor companies, banks, credit risk and financial institutions, and other natural or legal persons within the scope of the purposes specified above;

- Tax consultants and similar advisors, persons, institutions and organizations involved in legal proceedings where required, auditors, third parties from whom we receive consultancy services, and, without limitation, other domestic third parties, business partners, service providers, and authorized persons and organizations for the purposes stated above.

Your Rights under Article 11 of the KVKK

- Learn whether your personal data is being processed;

- Request information if your personal data has been processed;

- Learn the purpose of processing and whether your personal data is used in accordance with such purpose;

- Learn the third parties within Türkiye to whom your personal data has been transferred;

- Request the correction of your personal data if it has been processed incompletely or inaccurately;

- Request the deletion or destruction of your personal data within the framework of the conditions stipulated under Article 7 of the KVKK;

- Request that the third parties to whom your personal data has been transferred be notified of the actions taken pursuant to the above-mentioned subparagraphs regarding correction, deletion or destruction;

- Object to any outcome that is to your detriment resulting exclusively from the analysis of your personal data through automated systems;

- Request compensation for damages in the event that you suffer damage due to the unlawful processing of your personal data.

Application Procedure

Pursuant to Article 13, paragraph 1 of the Turkish Personal Data Protection Law No. 6698 ("KVKK"), you may submit your application regarding the exercise of your rights specified above to our Company in writing or by any other method determined by the Personal Data Protection Board. To exercise your rights, you may review the Data Subject Rights and Application Procedures available on our website and submit your application to our Company by completing the Application Form.