KVKK Disclosure Statement
At Nilky İçecek ve Gıda San ve Tic. AŞ. ("Nilky"), we show utmost sensitivity to the security of your personal data. With this awareness, we attach great importance to the processing and preservation of all personal data of all individuals associated with our company, including those who benefit from our products and services, in accordance with the Personal Data Protection Law No. 6698 ("KVKK"). With a full understanding of this responsibility, as the "Data Controller" as defined in the KVKK, we process your personal data as explained below and within the limits mandated by law. This Clarification Text has been prepared to inform you about the methods of collecting, processing, using, transferring, and deleting your personal data within the framework of Article 10 titled "Obligation of the Data Controller to Inform" and Article 11 titled "Rights of the Data Subject" of the KVKK.
- Data Controller
In accordance with the KVKK, your personal data collected online through our website www.nilky.co and virtually through our company; as the data controller, it may be processed by Nilky, located at "Esentepe Mah. Talatpaşa Cad. No:5 İç Kapı:1 Şişli / İstanbul", within the scope described below.
- Your Personal Data Processed by Nilky
According to Article 6 of KVKK No. 6698, titled "Conditions for Processing Special Categories of Personal Data", special categories of personal data include data related to individuals' race, ethnic origin, political opinions, philosophical beliefs, religion, sect or other beliefs, dress and attire, membership in associations, foundations or unions, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data. As a rule, the processing of special categories of personal data without the explicit consent of the data subject is prohibited. Our company does not process or collect special categories of personal data. We kindly ask you to approach this matter with sensitivity and not share your special categories of personal data through our website. We inform you that if you share your special categories of personal data through our website, we will immediately destroy them in accordance with our policy. Your credit and bank card information is not stored on our company servers. All transactions are carried out between the bank and your computer through our website interface.
Your personal data processed by our company is listed below.
|
Data Subject |
Data Category |
Data Types |
|
Online Customer |
|
|
|
Visitor |
Physical Space Security |
CCTV Camera Records |
|
Online Customer and Visitor |
Transaction Security |
Transaction security data, browser information, IP Address, Website Login, Logout and Navigation Information, Log Records, Internet Password Information, etc. |
- For What Purpose Personal Data Will Be Processed
As a Customer/Visitor/Online Visitor, your personal data is processed for the purposes of fulfilling your requests within the scope of the sales contract and/or service, fulfilling our obligations and commitments arising from law and relevant legislation, enabling you to shop through the website, carrying out goods and service supply processes, fulfilling our obligations arising from the distance sales contract or the service you will receive, carrying out post-service/sales support services, carrying out storage and archiving services, carrying out customer relationship management processes, carrying out activities for customer satisfaction, carrying out contract processes, tracking requests/complaints, carrying out marketing processes of products/services, providing information to authorized persons, institutions and organizations, recording images of open areas within the workplace to ensure the physical security of the workplace, contacting you if necessary regarding your shopping, sharing with contracted cargo companies for the performance of the contract, managing interactive customer programs, carrying out marketing activities to inform about campaigns, and communicating for marketing and advertising purposes, sharing on social media or website, establishing, protecting and exercising rights, and collecting statistical information.
Nilky may use your personal information in the field of advertising and marketing by converting it into statistical information. However, these statistics will not contain personally identifiable information about you.
- Processing Based on Grounds of Lawfulness
www.nilky.co Your name, surname, address, e-mail, phone number, and other contact information will be processed within the framework of orders you place through or services you directly receive from our company. This processing is based on legal reasons arising from the Turkish Code of Obligations, Turkish Commercial Code, consumer and tax legislation, and is carried out in accordance with KVKK Article 5/2 (a), (c), (ç), and (e) respectively, due to legal requirements, being directly necessary for the establishment or performance of a contract, being necessary for our company as the data controller to fulfill its legal obligations, and being necessary for the company to establish, exercise, and protect its rights. Our company does not process or collect special categories of personal data.
Camera recordings taken at the company address are processed based on the provision of KVKK Article 5/2 (f), due to the necessity of protecting the legitimate interests of our company for security reasons.
The aforementioned processing based on grounds of lawfulness is not subject to your consent. Therefore, we inform you that you do not have the right to request the deletion or destruction of your personal data until the end of the retention periods required by the work and the law.
- Data Processing Based on Explicit Consent
Our company processes your name, surname, email address, mobile phone number, address information, and photo and video recordings for the purposes of informing you about new products and campaigns, carrying out advertising and marketing activities, personalizing the services offered to you, and conducting market research, but only based on your explicit consent in accordance with Article 5/1 of the KVKK.
Our company may transfer your Personal Data to its suppliers to receive advertising and marketing services for products and services. This transfer is based on your explicit consent in accordance with Article 8/1 of the KVKK.
You can always withdraw your explicit consent regarding the processing of your personal data for advertising and marketing purposes and its transfer to third parties. If you withdraw your consent, your personal data will not be used for contacting you and carrying out marketing activities. In this context, your phone numbers will be deleted, destroyed, or anonymized by our company after you withdraw your consent.
- To Whom and For What Purpose the Processed Personal Data May Be Transferred
Transfer Not Based on Explicit Consent. Your Personal Data may be transferred to our suppliers and business partners, public institutions and organizations, SGK, tax offices, banks, relevant units within the company, law enforcement and security forces as required by our company's legal responsibilities and obligations, judicial institutions and the Turkish Statistical Institute and relevant public institutions and organizations, law firms and lawyers in case of legal dispute, financial advisors, sworn financial advisors, and financial advisory and audit companies for the purpose of financial auditing and fulfilling legal obligations, for the purposes of carrying out goods and service supply processes, delivering requested products and performing services, and processing payments.
In addition, if there is a complete or partial transfer of the company or its assets, it may be transferred to the acquiring natural and legal persons.
Your personal data is transferred to the third parties mentioned above within the country without your explicit consent, in connection with the purposes for which they are processed, limited and proportionate, when it is mandatory by law in accordance with Article 5/2(a) by reference to Article 8/2(a) of the KVKK, and/or when it is mandatory for the performance of the contract in accordance with Article 5/2(c), for the purpose of fulfilling legal obligations in accordance with Article 5/2(ç), and when it is necessary for our company to establish, protect, and exercise its rights in accordance with Article 5/2(e).
Transfer Based on Explicit Consent. Personal data of customers, such as identity and contact information, may be transferred to our company's suppliers/third parties based on explicit consent in accordance with Article 8/1 of the KVKK, for the purposes of personalizing the services offered, carrying out goods and service supply processes, providing advertising and marketing services, informing about new products, campaigns, and promotions, carrying out marketing activities, conducting market research, and establishing communication with you. Data subjects may withdraw their consent to the transfer of their personal data to third parties for marketing purposes at any time.
Your personal data is not transferred to third parties abroad in any way.
- Method of Personal Data Collection and Legal Reason
Your personal data is collected by our company through technical and procedural methods executed on different channels such as websites and mobile applications, automatically or non-automatically, in written or electronic form; within the framework of legal reasons that arise and are executed based on relevant legislation, contracts, requests, commercial practices, and rules of honesty that find application in introducing and offering our services to you using these channels and carrying out our activities within this framework. Your personal data collected for this legal reason can be processed and transferred for the purposes specified in this Clarification Text within the scope of the personal data processing conditions and purposes specified in Article 5 of the KVKK.
Customer personal data is processed based on the legal reasons of "explicit consent of the data subject", "explicitly stipulated in laws", "necessity of processing personal data belonging to the parties of a contract, provided that it is directly related to the establishment or performance of a contract", "necessity for the data controller to fulfill its legal obligation", and "necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject", as stated in Article 5 of the KVKK, by obtaining it from the individual or a third party through physical or electronic means, written or verbal data transfer tools.
Visitor personal data is recorded and processed through security cameras within our service office, based on the legal reason of "necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject", as stated in Article 5 of the KVKK.
Online Visitor personal data is processed based on the legal reasons of "explicitly stipulated in laws" and "necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject", as stated in Article 5 of the KVKK and Law No. 5651 on Regulation of Publications Made on the Internet and Combating Crimes Committed Through These Publications.
- Protection and Deletion of Personal Data
Our company is obliged to take all physical, technical, and administrative measures to prevent unlawful processing of your personal data, unlawful access to your personal data, and to ensure the preservation of your personal data, and takes these measures to the maximum extent possible. Your personal data will be deleted, destroyed, or anonymized in accordance with the law, unless you request its deletion.
- Rights of the Personal Data Subject under Article 11 of Law No. 6698
As personal data owners, if you submit your requests regarding your rights to us, we will finalize the request as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the fee determined by the Personal Data Protection Board will be charged.
As the data subject, you have the right, in accordance with the applicable legislation, to (a) request information on whether your personal data is being processed and how it is being processed (Art. 11/(a), (b)), (b) learn the purpose of processing and whether it is used appropriately for its purpose (Art. 11/c), (c) know the third parties to whom it has been transferred (Art. 11/ç), (d) request its rectification (Art. 11/d), (e) request the erasure of your personal data when the reasons requiring its processing cease to exist (Art. 7, Art. 11/e), (f) request that third parties to whom your personal data has been transferred be notified of the rectification and erasure (Art. 11/f), (g) object to the results obtained from its analysis (Art. 11/g), (h) request the restriction of its processing (Art. 7), (ı) request compensation for damages incurred due to unlawful processing (Art. 11/ğ).
Pursuant to paragraph 1 of Article 13 of the KVKK, you may submit your request regarding the exercise of the rights specified above to us in writing. In this context, the channels and procedures through which you can submit your application in writing within the scope of Article 11 of the KVKK are explained below:
To exercise your rights mentioned above, you can personally deliver your request, containing the necessary information to identify your identity and your explanations regarding the right you wish to exercise among the rights specified in Article 11 of the KVKK, to the address “Esentepe Mah. Talatpaşa Cad. No:5 İç Kapı:1 Şişli / İstanbul” with identity-proving documents, using the application form available at www.nilky.co , or send it via a notary public or other methods specified in the KVKK.
In addition, you can send it to info@nilky.co using your registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the electronic mail address you previously notified us of and which is registered in our systems, in accordance with Article 5 of the "Communiqué on the Procedures and Principles of Application to the Data Controller."
Right to Complain to the Personal Data Protection Board
To exercise your right to complain to the Board (KVKK Article 13, 14, 15)
Board: Personal Data Protection Board
Address: Nasuh Akar Mah. Ziyabey Cad. 1407. Sok. No: 4 06520 Balgat-Çankaya/ Ankara,
Phone: +90 312 216 5000
Website: Please contact us at http://www.kvkk.gov.tr/.
“YOU CAN ACCESS THE DATA CONTROLLER APPLICATION FORM HERE”