GENERAL INFORMATION ABOUT THE PERSONAL DATA PROTECTION LAW

The Personal Data Protection Law No. 6698 (hereinafter referred to as PDPL) was adopted on March 24, 2016, and published in the Official Gazette No. 29677 dated April 7, 2016. Part of the PDPL came into effect on the publication date, while another part came into effect on October 7, 2016.

INFORMATION AS DATA CONTROLLER

Pursuant to PDPL No. 6698 and as Data Controller, your personal data will be recorded, stored, updated, disclosed/transferred to third parties where permitted by legislation, classified, and processed in ways listed in PDPL within the framework explained on this page.

HOW YOUR PERSONAL DATA MAY BE PROCESSED

Pursuant to PDPL No. 6698, the personal data you share with our Company may be processed by us through being obtained, recorded, stored, modified, reorganized, in short, through any operation performed on the data, either fully or partially, automatically or non-automatically as part of any data recording system.

PURPOSES AND LEGAL GROUNDS FOR PROCESSING YOUR PERSONAL DATA

The personal data you share will be processed in accordance with PDPL No. 6698 and related secondary regulations for the following purposes:

• To perform the requirements of services we provide to our customers in accordance with contractual and technological requirements, and to improve our products and services offered;
• To record identity, address, and other necessary information to identify the transaction owner under Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on Consumer Protection, and related regulations;
• To arrange all records and documents that will serve as the basis for processing in banking and electronic payment areas, mandatory payment systems, electronic or paper contracts; to comply with information storage, reporting, and notification obligations required by legislation and other authorities;
• To provide information to prosecutors, courts, and relevant public officials when requested and required by law regarding public security matters and legal disputes;

Will be processed in accordance with PDPL No. 6698 and related secondary regulations.

HOW YOUR PERSONAL DATA IS COLLECTED

Your personal data can be processed and collected:

• Through forms on our company website and mobile applications, including information such as name, surname, ID number, address, phone, business or personal email address; data including IP records of transactions made using username and password, cookie data collected by the browser, browsing duration and details, location data;
• Verbally, in writing, or electronically through our sales and marketing department employees, branches, suppliers, other sales channels, paper forms, business cards, digital marketing, and call center channels;
• From individuals who share their personal data through business cards, resumes (CV), proposals, and other means for purposes such as establishing business relationships, job applications, or submitting proposals, whether physically or virtually, face-to-face or remotely, verbally, in writing, or electronically;
• From data obtained indirectly through different channels, websites, blogs, contests, surveys, games, campaigns and similar purpose (micro) websites and social media, e-newsletter reading or clicking actions, data provided by public databases, publicly available profile and data from social media platforms;

can be processed and collected.

YOUR PERSONAL DATA OBTAINED BEFORE PDPL CAME INTO EFFECT

Your personal data that was legally obtained before April 7, 2016, the effective date of PDPL, through membership, electronic communication permission, product/service purchase, and other means, is also processed and maintained in accordance with the terms and conditions set forth in this document.

TRANSFER OF YOUR PERSONAL DATA ABROAD

Your personal data collected through any of the above methods, whether processed in Turkey or processed and stored outside Turkey, may be transferred to service intermediaries located abroad (in countries accredited by the Personal Data Protection Board and having adequate protection for personal data) in accordance with PDPL and contractual purposes.

STORAGE AND PROTECTION OF PERSONAL DATA

Your personal data will be stored confidentially in our Company's database and systems in accordance with Article 12 of PDPL; it will not be shared with third parties except for legal obligations and regulations stated in this document. Our Company is obligated under Article 12 of PDPL to take software measures such as access management and physical security measures to prevent unlawful processing of personal data, prevent unauthorized access, and protect the systems and databases containing your personal data. If it is learned that personal data has been obtained by others through illegal means, the situation will be immediately reported to the Personal Data Protection Board in writing in accordance with legal regulations.

KEEPING PERSONAL DATA CURRENT AND ACCURATE

Pursuant to Article 4 of PDPL, our Company has the obligation to keep your personal data accurate and current. In this context, our Customers need to share accurate and current data or update it through the website/mobile application so that our Company can fulfill its obligations arising from current legislation.

RIGHTS OF THE PERSONAL DATA OWNER UNDER PDPL NO. 6698

Article 11 of PDPL No. 6698 came into effect on October 7, 2016, and pursuant to the relevant article, the rights of the Personal Data Owner after this date are as follows: The Personal Data Owner has the right to apply to our Company (data controller) and:

1. Learn whether personal data is being processed,
2. Request information if personal data has been processed,
3. Learn the purpose of processing personal data and whether they are used in accordance with their purpose,
4. Know the third parties to whom personal data is transferred domestically or abroad,
5. Request correction if personal data is processed incompletely or inaccurately,
6. Request deletion or destruction of personal data within the framework of conditions stipulated in Article 7 of PDPL,
7. Request notification of correction, deletion, destruction operations to third parties to whom personal data has been transferred,
8. Object to the emergence of a result against themselves through analysis of processed data exclusively by automatic systems,
9. Request compensation for damages if they suffer damage due to unlawful processing of personal data,

has these rights.

Baray Textile Industry and Trade Ltd. Co., located at Yedieylül Mh. Ekoten Cd. No:9/8 Torbalı / İzmir, registered with İzmir Chamber of Commerce under number ....., with MERSIS number ....., is the Data Controller under PDPL. The Data Controller Representative to be appointed by our Company will be announced in the Data Controllers Registry and at this internet address when the legal infrastructure is provided.

Personal Data Owners can direct their questions, opinions, or requests through any of the following communication channels:

Email: [email protected]

Phone: +905541751063