At Kmu Mehmet Usta RESTAURANT, we respect the privacy of your personal data and prioritize data security, and this is among our company’s priorities. For the purpose of processing and protecting this personal data, we adhere to the principles of collecting, processing, and protecting the personal data of our customers, potential customers, website users, employees, job candidates, former employees of Kmu Mehmet Usta RESTAURANT, interns, company shareholders, company officials, business partners, group company employees, and visitors, in accordance with the regulations stipulated in Law No. 6698 on the Protection of Personal Data.
Therefore, we recommend that you carefully read this text, which explains how we process your personal data, with whom we share it, and how you can exercise your rights.
All personal data belonging to all individuals affiliated with Kmu Mehmet Usta RESTAURANT, including those who utilize our services, may be recorded, stored, updated, and processed for specific, explicit, and legitimate purposes in accordance with Law No. 6698 on the Protection of Personal Data, provided that it complies with the law and the principle of integrity. These data may be processed and shared with third parties, as permitted by law, for as long as your relationship with our company continues.
As Kmu Mehmet Usta RESTAURANT, as defined in the Law on the Protection of Personal Data, as the “Data Controller,” we determine the information we obtain from you within the scope of our relationship with you.
DEFINITIONS
In this disclosure text, the following are defined:
Personal Data: Any information relating to an identified or identifiable natural person.
Processing of Personal Data: Any operation performed on personal data, such as obtaining, recording, storing, preserving, altering, reorganizing, disclosing, transferring, acquiring, making available, classifying, or preventing the use of personal data, whether fully or partially by automatic means, or non-automated means provided that it is part of any data recording system.
Personal Data Protection Law No. 6698 “KVKK”: Personal Data Protection Law No. 6698, which entered into force upon publication in the Official Gazette on April 7, 2016.
Institution: Personal Data Protection Authority
Board: Personal Data Protection Board
Data Processor: The natural or legal person who processes personal data on behalf of the data controller based on the authorization granted by the data controller.
Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.
Relevant Person: The natural person whose personal data is processed.
Contact Person: The person who provides contact with the institution and the relevant persons. The contact person is not the representative of the Data Controller. The contact person is not authorized to act on behalf of the Data Controller but is the person to whom requests from the Institution are communicated. (They are not the authority to evaluate questions and requests from Data Subjects; they are merely the contact person.)
DATA CONTROLLER
Data Controller: Kmu Mehmet Usta RESTAURANT.
Address: Yukarı, Nevşehir Ürgüp Yolu D:172, 50240 Uçhisar/Nevşehir Merkez/Nevşehir
Phone: (0384) 214 10 01
Email: kardeslermehmetusta@gmail.com
APPLICATION
As Kmu Mehmet Usta RESTAURANT, we prioritize the safeguarding, collection, processing, transfer, and destruction of personal data held by us concerning our customers, potential customers, website users, employees, prospective employees, former employees, interns, company shareholders, company officials, business partners, group company employees, visitors, and third parties, in accordance with the Constitution of the Republic of Turkey, international agreements to which our country is a party, and relevant legislation, particularly Law No. 6698 on the Protection of Personal Data.
Within this framework, we may process the personal data you share with us in accordance with Article 6698 of the Personal Data Protection Law, in a manner limited, relevant, and proportionate to our activities and purposes. We may transfer, store, use, and classify your personal data for profiling purposes to third parties, both domestically and internationally, in accordance with Article 4, 5, and 6 of the Personal Data Protection Law.
Purpose of Processing Your Personal Data
Pursuant to Articles 4, 5, and 6 of the Personal Data Protection Law, your personal data may be processed:
In cases explicitly provided for by law, in connection with the establishment or performance of a contract, in order to fulfill our legal obligations, as necessary for the establishment, exercise, or protection of a right, for our legitimate interests, or provided that it is made public by you (the relevant persons), or with your explicit consent if the processing conditions are not met. Furthermore, all processed personal data:
- Comply with the law and the principle of honesty,
- Accurate and up-to-date,
- For specific, clear, and legitimate purposes,
- Related to the purpose for which they are processed, limited, and proportionate,
Your personal data will be retained for the period stipulated in relevant legislation or as long as necessary for the purpose for which it is processed.
Your personal data may be processed by our company for the following purposes, without compromising our quality:
- Conducting occupational health and safety activities
- Planning and monitoring work with business partners, dealers, or suppliers
- Creating and maintaining customer records
- Managing customer relationships and monitoring corporate governance activities
- Managing and monitoring customer requests and complaints
- Ensuring business continuity
- Following contract processes
- Following and executing legal processes and communication processes with official institutions
- Ensuring legal and commercial security
- Developing and improving the services offered by our company
- Determining and implementing commercial and business strategies
- Conducting market research
- Planning and organizing activities to ensure and/or increase loyalty to products and services
- Maintaining business and operations
- Executing sales and purchasing processes
- Fulfilling warranty obligations
- Establishing contractual processes such as sales and after-sales support with you, our customers, executing and monitoring all necessary transactions, executing contract processes, and planning and executing sales-related operational processes
- Keeping informed about customer-based developments Creating and updating productivity reports,
- Planning and organizing activities to ensure and/or increase loyalty to products and services,
- Executing company activities and procedures,
- Performing financial and accounting transactions,
- Executing financial, accounting, and financial transactions, including sales-related invoicing activities, and performing risk management,
- Executing internal audit processes,
- Fulfilling notification obligations to relevant/authorized public institutions,
- Executing job and internship application and evaluation processes,
- Creating workplace personnel files and conducting on-the-job processes,
- Executing Human Resources processes,
- Fulfilling obligations arising from employment contracts and legislation for employees,
- Executing Training Activities,
- Executing Physical Security Processes,
- Planning Information Security Processes, Creating and Managing Information Technology Infrastructure,
- Performing Risk Management,
- For Logging Activities.
The Method and Legal Basis for Collecting Your Personal Data
Your personal data may be collected verbally, in writing, or electronically, for the purposes and within the scope specified above, through fully or partially automated means, or non-automated means provided that they are part of any data recording system.
As part of our commercial processes, we collect your personal data verbally, in writing, or electronically through various methods, including contact forms, trade fair events, business cards, supplier information request forms, other commercial documents, payment information and documents, negotiable instruments, employee and intern candidate application forms, CVs, emails, websites, various contracts, mobile applications, consumer complaint forms, and from our customers, suppliers, and other third parties.
We collect your personal data in accordance with Article 5/2-c of the Personal Data Protection Law (KVKK) – for the establishment and fulfillment of a contract; Article 5/2-ç of the Personal Data Protection Law (KVKK) – to fulfill our legal obligations; 5/2-f – We process your data within the scope of the legitimate interests of our company or with your explicit consent, for the purposes specified above.
Transfer of Your Personal Data
Your personal data may be transferred to authorized public institutions and organizations, including Kmu Mehmet Usta RESTAURANT, for the purposes listed above, provided that data security measures are in place, including data protection, preventing unauthorized access, and preventing unlawful processing. This data may be shared with Kmu Mehmet Usta RESTAURANT, and shall be jointly responsible for the following:
In accordance with legal obligations and needs, authorized public institutions and organizations; intermediary financial institutions for assessing financial risks; independent audit firms for conducting audits; institutions providing intermediary/agency services for business travel and organization events and trade fairs; our business partners, suppliers, shareholders, local/international organizations from which we receive support in our business processes; subsidiaries and/or domestic/international organizations from which we directly/indirectly collaborate under relevant contracts to carry out Kmu Mehmet Usta RESTAURANT’s activities; and other third parties.
Data Storage and Deletion
Legislation requires that relevant personal data be stored for specific periods. Therefore, it is our company’s responsibility to store personal data in accordance with the legislation and for the required period. These retention periods are defined in detail on a data-by-data basis in the prepared personal data inventory. Personal data is stored for the period stipulated by legislation or required by its purpose. Data is stored physically or electronically. Necessary security measures have been taken for the storage and preservation of data, and our company has provided a secure environment. Personal data that has expired will be destroyed within six months (deletion/destruction/anonymization).
Your Rights as a Data Subject
Within the framework of Article 11 of KVKK No. 6698
- You have the right to learn whether your personal data has been processed,
- To request information about your personal data if it has been processed,
- To learn the purpose of processing your personal data and whether it is being used in accordance with its intended purpose,
- To know the third parties to whom your personal data has been transferred, whether domestically or internationally,
- To request correction of your personal data if it has been processed incompletely or inaccurately,
- To request the deletion or destruction of your personal data within the framework of the conditions stipulated in the Personal Data Protection Law (KVKK),
- To request the correction of incomplete or inaccurate data and the deletion or destruction of your personal data, and to request notification of this to third parties to whom your personal data has been transferred,
- To object to the analysis of processed data exclusively through automated systems, leading to a detrimental outcome,
- To request compensation for any damages you have suffered due to the unlawful processing of your personal data.
- You can exercise these rights by submitting a petition containing your request or by filling out the Information Request Form at www.kmumehmetusta.com; It must include the applicant’s identity and address information (documents proving your identity must be attached).
- The matter you are requesting must be personally relevant.
- If you are acting on behalf of someone else, you must be specifically authorized to do so, and your authority must be documented.
You can submit your request clearly and understandably;
in writing to our company’s address: “Yukarı, Nevşehir Ürgüp Yolu D:172, 50240 Uçhisar/Nevşehir Merkez/Nevşehir” or by sending an email from the email address registered in our system. Depending on the nature of your request, we will process it as soon as possible (within 30 days at the latest) free of charge or in accordance with the terms of the fee schedule determined by the Personal Data Protection Board.
As the relevant person, in accordance with Article 14 of Law No. 6698 on the Protection of Personal Data, if your application is rejected, the response is deemed inadequate, or the application is not responded to within the timeframe, you may file a complaint with the Board within thirty days from the date you learn of the response or, in any case, with the individual’s consent, within sixty days from the date of the application.
According to Article 28/2 of Law No. 6698 on the Protection of Personal Data; Personal data subjects cannot assert their other rights, except for the right to claim compensation for damages, in the following cases:
The processing of personal data is necessary for the prevention of crime or criminal investigation.
The processing of personal data made public by the data subject.
The processing of personal data is necessary for the performance of supervisory or regulatory duties, or for disciplinary investigations or prosecutions, by authorized public institutions and organizations, or professional organizations with public institution status, based on the authority granted by law.
The processing of personal data is necessary to protect the economic and financial interests of the State regarding budgetary, tax, and financial matters.
OTHER MATTERS
In the processes covered by this Information Notice on the Protection and Processing of Personal Data, the relevant legal regulations in force regarding the processing and protection of personal data shall be applied with priority.
The Information Notice is published on the website “www.kmukapadokya.com/en” and made available to relevant persons. In order to comply with changing conditions and legislation, changes and updates may be made to the Information Text and will be made available to relevant persons through the above-mentioned website.