GUMMY WORLDS GENERAL DISCLOSURE TEXT
As Gummy Worlds Sağlık Ürünleri ve Gıda Sanayi Ticaret Anonim Şirketi, ensuring the security and confidentiality of your personal data is one of our top priorities. In this context, we show the highest level of sensitivity by taking all necessary measures to protect your personal data. With our clarification text you have read, we aim to inform you about the processing processes of your personal data.
1. DATA CONTROLLER
Our Company processes your personal data in the capacity of “Data Controller” defined in Article 3 of the Law No. 6698 on the Protection of Personal Data.
Gummy Worlds Sağlık Ürünleri ve Gıda Sanayi Ticaret Anonim Şirketi
Address: Akçaburgaz Mah. 153. Sk. No: 21 İç Kapı No:1 Esenyurt/İstanbul
Phone: 0212 912 66 96
E-Mail address: [email protected]
KEP address: [email protected]
2. PURPOSES AND LEGAL REASONS FOR PROCESSING PERSONAL DATA
We process your personal data in the categories of identity, communication, customer transaction, transaction security, finance, marketing, visual and auditory records, which we collect from you through digital forms you fill out on the internet, call center calls and physical forms you fill out through our representatives, for the purposes and legal reasons detailed below.
- Based on the reason that it is clearly stipulated in the laws (Art. 5/2-a of Law No. 6698); your data in the categories of identity, communication, transaction security and customer transactions,
- Execution of Activities in Accordance with the Legislation
- Follow-up and Execution of Legal Affairs
- Execution / Audit of Business Activities
- Execution of Goods / Service Sales Processes
- Execution of Risk Management Processes
- Execution of Storage and Archive Activities
- Providing Information to Authorized Persons, Institutions and Organizations
- Execution of Management Activities
purposes,
- Provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract (Art. 5/2-c of Law No. 6698). Based on reason 5/2-c); your data in the categories of identity, contact, customer transaction, transaction security, finance,
- Execution of Information Security Processes
- Execution of Activities in Compliance with Legislation
- Execution of Finance and Accounting
- Follow-up and Execution of Legal Affairs
- Execution of Communication Activities
- Execution / Audit of Business Activities
- Execution of Logistics Activities
- Execution of Goods / Services After Sales Support Services
- Execution of Goods / Services Sales Processes Execution of
- Execution of Goods / Service Production and Operation Processes
- Execution of Customer Relationship Management Processes
- Execution of Activities for Customer Satisfaction
- Execution of Storage and Archive Activities
- Execution of Contract Processes
- Execution of Wage Policy
- Ensuring the Security of Data Controller Operations
- Authorized Person, Providing Information to Institutions and Organizations
- Execution of Management Activities
purposes,
- Based on the reason that it is mandatory for the data controller to fulfill its legal obligation (Art. 5/2-ç of Law No. 6698); your data in the categories of identity, communication, customer transaction and finance,
- Execution of Information Security Processes
- Execution of Activities in Compliance with the Legislation
- Execution of Finance and Accounting Affairs
- Follow-up and Execution of Legal Affairs
- Execution of Goods / Service Sales Processes
- Execution of Risk Management Processes
- Execution of Storage and Archive Activities
- Execution of Contract Processes
- Execution of Wage Policy
- Ensuring the Security of Data Controller Operations
- Providing Information to Authorized Persons, Institutions and Organizations
- Execution of Management Activities
purposes,
- Your data in the categories of identity, communication, customer transaction, transaction security, visual and audio records, based on the reason that data processing is mandatory for the legitimate interests of the data controller (Art. 5/2-f of Law No. 6698), provided that it does not harm the fundamental rights and freedoms of the data subject,
- Execution of Activities in Compliance with the Legislation
- Execution of Company / Product / Services Commitment Processes
- Execution of Internal Audit / Investigation / Intelligence Activities
- Execution / Audit of Business Activities
- Receiving and Evaluating Suggestions for the Improvement of Business Processes
- Execution of Activities to Ensure Business Continuity
- Execution of Logistics Activities
- After Sales of Goods / Services Execution of Support Services
- Execution of Goods / Service Sales Processes
- Execution of Goods / Service Production and Operation Processes
- Execution of Customer Relationship Management Processes
- Execution of Activities for Customer Satisfaction
- Execution of Risk Management Processes
- Execution of Storage and Archive Activities
- Execution of Strategic Planning Activities
- Follow-up of Requests / Complaints
- Authorized Person, Providing Information to Institutions and Organizations
- Execution of Management Activities
purposes,
- Your data in the categories of identity, communication, customer transaction, transaction security, marketing, visual and auditory records based on explicit consent (Art. 5 of Law No. 6698) in case approval is given for advertising and marketing activities and campaign notifications,
- Execution of Company / Product / Service Loyalty Processes
- Execution of Communication Activities
- Execution of Business Continuity Activities
- Execution of Customer Relationship Management Processes
- Execution of Activities for Customer Satisfaction
- Execution of Marketing Analysis Studies
- Execution of Advertising / Campaign / Promotion Processes
- Execution of Risk Management Processes
- Execution of Strategic Planning Activities
- Follow-up of Demands / Complaints
- Execution of Wage Policy
- Execution of Marketing Processes of Products / Services
- Authorized Person, Providing Information to Institutions and Organizations
- Execution of Management Activities,
purposes.
processed by us.
3. TO WHOM AND FOR WHAT PURPOSE THE PROCESSED PERSONAL DATA MAY BE TRANSFERRED
We transfer your personal data that we process within the scope of our commercial activities and the provision of goods and services to Natural Persons and Private Legal Entities, our Group Companies and Authorized Public Institutions and Organizations for the following purposes.
- Your personal data in the categories of identity, communication, customer transaction, transaction security, finance, marketing, visual and audio records; Natural Persons and Private Legal Entities, Our Group Companies,
- Execution of Information Security Processes
- Execution of Activities in Compliance with Legislation
- Execution of Finance and Accounting
- Follow-up and Execution of Legal Affairs
- Execution of Communication Activities
- Execution / Audit of Business Activities
- Execution of Logistics Activities
- Execution of Goods / Services Procurement Processes
- Execution of Goods / Services After Sales Support Services
- Execution of Goods / Services Sales Processes
- Execution of Goods / Service Production and Operation Processes
- Execution of Customer Relationship Management Processes
- Execution of Activities for Customer Satisfaction
- Execution of Storage and Archive Activities Execution of Contract Processes
- Execution of Contract Processes
- Follow-up of Requests / Complaints
- Execution of Supply Chain Management Processes
- Execution of Wage Policy
- Ensuring the Security of Data Controller Operations
- Authorized Person, Providing Information to Institutions and Organizations
purposes,
- Your personal data in the categories of identity, communication, transaction security and finance; Authorized Public Institutions and Organizations,
- Execution of Activities in Compliance with the Legislation
- Execution of Financial and Accounting Affairs
- Follow-up and Execution of Legal Affairs
- Execution of Communication Activities
- Execution / Audit of Business Activities
- Execution of Storage and Archive Activities
- Execution of Contract Processes
- Providing Information to Authorized Persons, Institutions and Organizations,
purposes
- Your personal data in the categories of identity, communication, visual and auditory records; Publicly available on our website and social media environment,
- Execution of Company / Product / Services Loyalty Processes
- Execution of Communication Activities
- Execution / Supervision of Business Activities
- Execution of Customer Relationship Management Processes
- Execution of Activities for Customer Satisfaction
- Execution of Advertising / Campaign / Promotion Processes
- Execution of Storage and Archive Activities
- Execution of Marketing Processes of Products / Services
- Providing Information to Authorized Persons, Institutions and Organizations
purposes,
and within the framework of the personal data processing conditions specified above.
4. OUR METHODS OF COLLECTING PERSONAL DATA
- By automatic, partially automatic or non-automatic methods provided that it is part of any data recording system;
- Your personal data in the categories of identity, communication, customer transaction, transaction security, finance, marketing, visual and audio records are obtained from you by filling out physical forms, filling out forms on the internet, from the information and documents you provide in writing and physically, from the photographs taken, from the information you provide verbally through call center calls;
- Your personal data that we collect from you through Whatsapp and live support application and phone calls in the categories of identity, communication, customer transaction and transaction security are obtained legally. OUR COLLECTION METHODS
5. YOUR RIGHTS AS A PERSON CONCERNED
You can send your requests regarding your rights under Article 11 of the Law No. 6698 regulating the “rights of the data subject” and the application of the law to [email protected] or [email protected] in writing or by using the registered electronic mail (KEP) address or e-mail address registered in our system or in accordance with other application procedures stipulated in the Communiqué on Application Procedures and Principles to the Data Controller. In addition, you can access the necessary explanations and the application and information request form from our relevant unit you are in contact with. We will finalize your request free of charge as soon as possible and within 30 (thirty) days at the latest – up to ten pages – depending on its nature.