General Data Protection Regulation

Aktül Kağıt Üretim Pazarlama A.Ş. takes all possible highest-level security measures in order to ensure that your personal data are collected, stored and shared in accordance with the law and to protect your privacy.

Our aim is; in accordance with Article 10 of the Law No. 6698 on the Protection of Personal Data and in line with your satisfaction, to inform you in the most transparent manner possible regarding the methods of collection of your personal data, the purposes of processing, the persons with whom they are shared, the legal reasons and your rights.

a) Data Controller

Pursuant to the Law No. 6698 on the Protection of Personal Data (“Law No. 6698”), your personal data may be collected and processed by … A.Ş. (“COMPANY”) as the data controller within the scope explained below.

b) Purposes for Which Personal Data Will Be Processed

The COMPANY may collect personal data in categories such as identity information, contact information, customer information, customer transaction information, transaction security information, legal transaction and compliance information, and marketing and sales information from parties including but not limited to its customers, employees, prospective customers, employee candidates, business partners, website and store visitors, and suppliers.

Your collected personal data will be processed within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698, for the following purposes:

To offer the COMPANY's products and services to you, fulfill our obligations to you, prepare records and documents, and comply with information retention, reporting, disclosure, tax, and other obligations stipulated by local and international legal regulations.

To present customized advertising, campaigns, advantages, and other benefits for sales and marketing activities aimed at improving the quality of services and products.

To communicate for the purposes of IT requirements, the systemic structure, the necessity of IT support services received, and transferring necessary information to you regarding these services and products.

To conduct traffic measurement, statistical analyses, Segmentation/profiling, and CRM studies for sales and marketing activities.

To measure and increase customer satisfaction, manage complaints, receive your opinions and suggestions regarding new services and products, receive your problem/error notifications, and provide you with information regarding products, services, complaints, and requests.

To manage your membership related to online sales, receive your orders, perform your payment transactions, cooperate with third parties for logistics and ensure product shipment, recommend products and services that may be of interest to you, online behavioral advertising and marketing, customer portfolio management, measuring and improving service quality, communication, optimization, auditing, risk management and control, promotion, analysis, interest determination, scoring, profiling, marketing, sales, advertising, and communication.

To be used in all kinds of products and services to be offered to you within the scope of the law and relevant legislation governing the businesses written in the COMPANY's articles of association, which are subject to your disclosure of personal data to the COMPANY, comparative product and/or service offer, modeling, current or new product studies and/or developments.

To comply with the information retention, reporting, and disclosure obligations stipulated by official institutions, fulfill the requirements of contracts, and perform the legal obligations of the COMPANY regarding benefiting from these services.

In line with the purpose of determining and implementing the COMPANY's commercial and business strategies:

to manage financial operations, communication, market research and social responsibility activities, purchasing operations (demand, offer, evaluation, order, budgeting, contract), internal system and application management operations, and legal operations carried out by the COMPANY.

To examine, evaluate, and respond to requests from official authorities or from you.

c) To Whom and for What Purpose the Processed Personal Data May Be Transferred

Your collected personal data may be transferred, limited to the realization of the purposes stated above, to:

The COMPANY's business partners, shareholders, and affiliates,

Persons or organizations permitted by the provisions of the Turkish Commercial Code, Turkish Code of Obligations, and other legislation,

Legally authorized public institutions and organizations, administrative bodies, and legal authorities,

Real or legal persons from whom we receive services or cooperate with for product/service comparison, analysis, evaluation, advertising, and the realization of the purposes specified above, program partner institutions and organizations, institutions with which we have agreements for sending communications to our customers, and cargo companies that deliver orders placed from our online store, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698.

ç) Method and Legal Basis for Personal Data Collection

Your personal data is collected orally, in writing, or electronically through channels such as our stores, website and mobile application, call centers, social media accounts, and other channels that may be established/formed in the future, primarily:

The collection is limited to the existence of legal bases such as the performance of the contract, being clearly stipulated in the law, your personal data being made public by you, being mandatory for the establishment, use, or protection of a right to be granted to you; and being mandatory for the COMPANY to fulfill its legitimate interests and legal obligations, provided that it does not harm your fundamental rights and freedoms, within the framework of legal legislation and for the purposes stated above by the COMPANY.

d) Rights of the Personal Data Subject Enumerated in Article 11 of Law No. 6698

If you, as personal data subjects, submit your requests regarding your rights to the COMPANY through the methods regulated below, the COMPANY will conclude the request as soon as possible and within thirty days at the latest, depending on the nature of the request. No fee will be charged for answers up to ten pages. A transaction fee of 1 TL will be charged for each page over ten pages. If the answer to the application is provided in a recording medium such as a CD or flash drive, the fee that may be requested by our COMPANY will not exceed the cost of the recording medium. In this context, personal data subjects have the right to:

Learn whether their personal data is processed,

Request information regarding the processing if their personal data has been processed,

Learn the purpose of processing personal data and whether they are used in accordance with their purpose,

Know the third parties, domestic or abroad, to whom personal data is transferred,

Request the rectification of incomplete or incorrectly processed personal data and request that the transaction carried out in this context be notified to third parties to whom the personal data has been transferred,

Request the erasure or destruction of personal data in the event that the reasons requiring its processing have ceased to exist, despite being processed in accordance with the provisions of Law No. 6698 and other relevant laws, and request that the transaction carried out in this context be notified to third parties to whom the personal data has been transferred,

Object to the emergence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,

Request compensation for damages in case of suffering damage due to the unlawful processing of personal data.

Your request regarding the use of the rights mentioned above must be submitted in Turkish and in writing, in accordance with the first paragraph of Article 13 of Law No. 6698 and the Communiqué on the Procedures and Principles for Application to the Data Controller, dated 10.03.2018 and numbered 30356, or by using a registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the electronic mail address previously notified to the COMPANY and registered in our system. The COMPANY reserves the right to verify your identity before responding.

In your application:

Your name, surname, and signature if the application is written,

For Turkish citizens, your T.R. identity number, or if you are a foreigner, your nationality, passport number, or identity number if any,

Your residential or business address for notification purposes,

Your electronic mail address, telephone, and fax number for notification purposes, if any,

The subject of your request, must be included, and information and documents related to the subject, if any, must also be attached to the application.

You can submit your written applications, by attaching the necessary documents, to the address of the data controller, Aktül Kağıt Üretim Pazarlama A.Ş. Beylik Yerleri Mevkii Gözgöz Mah. Pamukova/Sakarya. The application form can be accessed here.

You can submit your applications via e-mail to the address info@aktulkagit.com.tr or to the Registered Electronic Mail address aktulkagit@hs01.kep.tr.

Depending on the nature of your request, the information and documents must be provided completely and accurately to us. If the requested information and documents are not provided properly, disruptions may occur in the complete and qualified execution of the investigations to be carried out by the COMPANY based on your request. In this case, the COMPANY declares that it reserves its legal rights. Therefore, your application must be sent completely and include the requested information and documents according to the nature of your request.