Bahca Food Agriculture and Livestock Industry Inc. / Eren Manti / Mantioli Data Protection Policy

General Information about the Personal Data Protection Law

The Law on the Protection of Personal Data No. 6698 (hereinafter referred to as the PDPL) was adopted on March 24, 2016, and published in the Official Gazette dated April 7, 2016, with the number 29677. Some parts of the PDPL were in effect on the publication date, while others came into effect on October 7, 2016.

Information as the Data Controller

In accordance with Law No. 6698 PDPL and as the Data Controller, your personal data may be recorded, stored, updated, disclosed/transferred to third parties, classified, and processed in the ways specified on this page, in line with the legislation.

How Your Personal Data Can Be Processed

In accordance with Law No. 6698 PDPL, your personal data shared with our company may be processed by us in whole or in part, automatically or non-automatically, within the framework of being a part of any data recording system, recorded, stored, modified, rearranged, and, in short, processed in any way as defined by the PDPL. Any process on the data within the scope of the PDPL is considered as "processing of personal data."

Purposes and Legal Bases of Processing Your Personal Data

The personal data you share may be processed:

• To perform the requirements of the services provided to our customers in line with the contract, technological requirements, and to improve the products and services offered.
• To record the information of the data subject for the identification of the transaction owner in accordance with the Electronic Commerce Regulation published in the Official Gazette dated 26.08.2015 and numbered 29457, the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce, published in the Official Gazette dated 27.11.2014 and numbered 29188, and other relevant legislation based on the laws on the regulation of electronic commerce, consumer protection, and distance contracts.
• To regulate all records and documents required for payment systems, electronic contracts, or paper-based transactions in the Banking and Electronic Payment fields, to comply with information storage, reporting, and notification obligations required by legislation and other authorities.
• In matters related to public safety and legal disputes, to provide information to public prosecutors, courts, and relevant public officials in case of a request and as required by legislation.

Your data will be processed in accordance with Law No. 6698 PDPL and related secondary regulations. Information about third parties to whom your personal data may be transferred: Your personal data shared with our company may be transferred to persons/institutions such as IdeaSoft Software Industry and Trade Inc., which provides our company's e-commerce infrastructure, suppliers, cargo companies, and other individuals and institutions domestically/internationally, which provide services as Data Processors and with whom services are obtained in cooperation.

How Your Personal Data is Collected

Your personal data is collected:

• Through forms on our company's website and mobile applications, including information such as name, surname, ID number, address, telephone, work or personal email address; data collected through preferences on pages where login is made with a username and password, IP records of transactions performed, cookie data collected by the browser, and navigation time and details, location data.
• Verbally, in writing, or electronically through channels such as our sales and marketing department employees, our branches, our suppliers, other sales channels, paper forms, business cards, digital marketing, and call center.
• In addition, data obtained indirectly from various channels, such as websites, blogs, contests, surveys, games, campaigns, and similar (micro) websites, and data obtained from social media, such as reading or clicking movements in e-newsletters, publicly available profile and data from social media platforms, can be processed and collected.

Personal Data Obtained Before the PDPL Came Into Effect

Personal data obtained legally before the effective date of the PDPL on April 7, 2016, such as membership, electronic consent for communication, product/service purchase, and other lawful methods, are processed and stored in accordance with the conditions and provisions specified in this document.

Transfer of Your Personal Data Abroad

Your personal data collected by any of the methods mentioned above may be transferred to service providers abroad in accordance with the PDPL and for the purposes of the contract and in compliance with the legislation, provided that it remains within the scope of the PDPL and in countries where sufficient protection is ensured, accredited by the Personal Data Protection Board.

Storage and Protection of Personal Data

Your personal data will be kept confidential in the database and systems of our company in accordance with Article 12 of the PDPL; it will not be shared with third parties in any way other than legal obligations and regulations specified in this document. Our company is obliged to prevent the unlawful processing of personal data, prevent unauthorized access, and take software measures such as access management and physical security measures in accordance with Article 12 of the PDPL. In case of learning that personal data is obtained by others through illegal means, the situation will be immediately reported to the Personal Data Protection Board in accordance with legal regulations.

Updating and Maintaining the Accuracy of Personal Data

In accordance with Article 4 of the PDPL, our company has the obligation to keep your personal data accurate and up-to-date. In this context, our customers are required to share or update their accurate and up-to-date data through the website/mobile application to fulfill the obligations arising from the current legislation.

Rights of the Data Subject under Law No. 6698 PDPL

According to Article 11 of Law No. 6698 PDPL, which entered into force on October 7, 2016, the rights of the Data Subject are as follows: The Data Subject, by applying to our company (data controller), has the right to:

1. Learn whether personal data is processed;
2. Request information if personal data has been processed;
3. Learn the purpose of processing personal data and whether they are used appropriately for their purpose;
4. Know the third parties to whom personal data is transferred, whether domestically or abroad;
5. Request the correction of personal data if it is incomplete or incorrectly processed;
6. Request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the PDPL;
7. If personal data is corrected, deleted, or destroyed, request that these transactions be notified to third parties to whom personal data has been transferred;
8. Object to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems;
9. If personal data is processed unlawfully and causes damage, demand the compensation of the damage.

Bahca Food Agriculture and Livestock Industry Inc. / Eren Manti / Mantioli, with a registration number of 317280-5 at the Istanbul Chamber of Commerce, MERSIS number 0131-1225-6670-0002, located at Zümrütevler Mahallesi Seher Sokak No:8 Maltepe/Istanbul, is the Data Controller within the scope of the PDPL. A Data Controller Representative appointed by our company will be announced in the Data Controllers Registry and on the internet address where this document is located when the legal infrastructure is provided. Data Subjects can direct their questions, opinions, or requests to any of the following communication channels:

Email: info@bahcagida.com

Phone: 0532 156 40 40

Fax: -