JK MAĞAZACILIK TEKSTIL SANAYI VE TICARET ANONIM ŞIRKETI

CLARIFICATION TEXT ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

1. General Description

Within the scope of the Law, personal data includes all kinds of data relating to an identified or identifiable natural person. Sensitive Personal Data, which is a special type of personal data, refers to race, ethnic origin, political opinion, philosophical belief, religion, sect, other beliefs, appearance and dress, association, foundation or union membership, health, sexual life, criminal conviction and security measures, biometric and genetic data.

Processing of personal data refers to all kinds of operations performed on personal data such as obtaining, recording, storing, preserving, modifying, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data by fully or partially automatic means or by non-automatic means provided that it is part of any data recording system.

2. Data Controller

Your personal data may be processed by JK Mağazacılık Tekstil Sanayi ve Ticaret Anonim Şirketi (“Data Controller”) as the data controller within the scope described below in accordance with the Personal Data Protection Law No. 6698 (“Law”).

3. Collection of Personal Data, Legal Reason and Purposes of Processing

Your personal data may be collected verbally, in writing or electronically by automatic or non-automatic means, verbally, in writing or electronically in accordance with the Law, although it may vary depending on the service provided by the Data Controller and the commercial activities of the Data Controller.

Your collected personal data may be processed by JK Mağazacılık Tekstil Sanayi ve Ticaret Anonim Şirketi for the following purposes in accordance with the basic principles stipulated in the Law and within the personal data processing conditions (legal reasons) specified in Articles 5 and 6 of the Law and shown below. You can review what your personal data are, how they are collected, what personal data may be subject to processing by us and the details of the purposes of processing this data in the tables below.

A. GROUPS OF PERSONS

Purposes of Collection and Processing of Personal Data (Person Groups)

Method of Obtaining Data

Purposes of Processing Personal Data

Supplier Officer

Parent / Guardian / Representative

Shareholder/Partner

Employee

Product or Service Recipient

Supplier Employee

Potential Product or Service Buyer

Visitor

Employee Candidate

Intern

Original Document

Software Program - Domestic

Computer Environment

Information Technologies Data Recording System

Form - Document

Execution of Goods / Service Procurement Processes

Execution / Supervision of Business Activities

Execution of Risk Management Processes

Execution of Management Activities

Execution of Activities in Compliance with the Legislation

Execution of Communication Activities

Execution of Contract Processes

Execution of Goods / Service Sales Processes

Execution of Information Security Processes

Receiving and Evaluating Suggestions for Improvement of Business Processes

Organization and Event Management

Execution of Goods / Services Production and Operation Processes

Execution of Finance and Accounting Affairs

Follow-up and Execution of Legal Affairs

Execution of Customer Relationship Management Processes

Providing Information to Authorized Persons, Institutions and Organizations

Tracking Requests / Complaints

Execution of Emergency Management Processes

Conducting Audit / Ethics Activities

Execution of Access Authorizations

Conducting Internal Audit / Investigation / Intelligence Activities

Execution of Business Continuity Ensuring Activities

Ensuring the Security of Movable Property and Resources

Execution of Fringe Benefits and Benefits Processes for Employees

Execution of Occupational Health / Safety Activities

Planning Human Resources Processes

Execution of Supply Chain Management Processes

Ensuring Physical Space Security

Creating and Tracking Visitor Records

Execution of Social Responsibility and Civil Society Activities

Conducting Training Activities

Execution of Goods / Services After Sales Support Services

Fulfillment of Obligations Arising from Employment Contract and Legislation for Employees

Execution of Logistics Activities

Execution of Employee Satisfaction and Loyalty Processes

Execution of Assignment Processes

Ensuring the Security of Data Controller Operations

Execution of Company / Product / Service Loyalty Processes

Conducting Marketing Analysis Studies

Execution of Strategic Planning Activities

Execution of Performance Evaluation Processes

Execution of Wage Policy

Execution of Employee Candidate Application Processes

Execution of Employee Candidate / Intern / Student Selection and Placement Processes

Execution of Termination Procedures

Execution of Personnel Attendance Control System

Execution of Human Resources Processes

Execution of Advertising / Campaign / Promotion Processes

Execution of Activities for Customer Satisfaction

Execution of Marketing Processes of Products / Services

Legal grounds

Contract Signing

Fulfillment of Legal Obligation

Legitimate Interests of the Data Controller

Foreseen in Laws

Establishment, Exercise or Protection of a Right

Obtaining Explicit Consent

Publicization by the Relevant Person

Protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning, management and financing of health services

B. OTHER GROUPS OF PERSONS

Purposes of Collection and Processing of Personal Data (Person Groups)

Method of Obtaining Data

Purposes of Processing Personal Data

Public Official

Distributor

Website Visitors

Party to Litigation, Enforcement Case

Doctor

Occupational Health and Safety Specialist

Workplace Physician

Employee Relative

Original Document

Software Program - Domestic

Computer Environment

Information Technologies Data Recording System

Form - Document

Execution of Activities in Compliance with the Legislation

Providing Information to Authorized Persons, Institutions and Organizations

Execution / Supervision of Business Activities

Execution of Business Continuity Ensuring Activities

Execution of Management Activities

Execution of Goods / Service Sales Processes

Execution of Goods / Services Production and Operation Processes

Execution of Information Security Processes

Monitoring and Execution of Legal Affairs

Fulfillment of Employment Contract and Regulatory Obligations for Employees

Execution of Occupational Health / Safety Activities

Execution of Employee Candidate Application Processes

Execution of Employee Satisfaction and Loyalty Processes

Execution of Employee Benefits and Benefits Processes

Legal grounds

Fulfillment of Legal Obligation

Foreseen in Laws

Legitimate Interests of the Data Controller

Establishment, exercise or protection of a right

Contract Signing

Protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning, management and financing of health services

4. Parties to whom Your Personal Data is Transferred and Purposes of Transfer

Your personal data may be transferred by the Data Controller, in accordance with the basic principles stipulated in the Law and within the personal data transfer conditions specified in Articles 8 and 9 of the Law, to the domestic and foreign recipient groups listed below for the purposes specified, limited to the purpose listed above.

A. GROUPS OF PERSONS

Parties to whom Personal Data are Transferred and Purposes of Transfer

Transferred Parties

PERSON GROUPS

DOMESTIC

FOREIGN

Supplier Officer

Parent / Guardian / Representative

Shareholder/Partner

Employee

Product or Service Recipient

Supplier Employee

Potential Product or Service Buyer

Visitor

Employee Candidate

Intern

Authorized Public Institutions and Organizations

Suppliers

Natural Persons or Private Law Legal Entities

Shareholders

Natural Persons or Private Law Legal Entities

Suppliers

Other - Customer

Authorized Public Institutions and Organizations

Business Partners

Purpose of Transfer of Personal Data

DOMESTIC

FOREIGN

Legal Obligation

Court Order

Contract

Information

Operational Operations

Administration Request

Monitoring the Legal Affairs and Transactions of the Data Controller

Transmission to Data Processors

Contract

Operational Transactions

Legal Obligation

Commercial Purpose

Legal grounds

DOMESTIC

FOREIGN

Legal Regulation

Being mandatory for the fulfillment of obligations and commitments

Existence of a Contract

Explicit Consent Existence

Existence of other processing conditions arising from the law

Legitimate Interest of the Data Controller

Open Consent

B. OTHER GROUPS OF PERSONS

Parties to whom Personal Data are Transferred and Purposes of Transfer

Transferred Parties

PERSON GROUPS

DOMESTIC

FOREIGN

 

Public Official

Distributor

Website Visitors

Party to Lawsuit, Enforcement Case

Doctor

Occupational Health and Safety Specialist

Workplace Physician

Employee Relative

Authorized Public Institutions and Organizations

Suppliers

Natural Persons or Private Law Legal Entities

Authorized Public Institutions and Organizations

Natural Persons or Private Law Legal Entities

 

Purpose of Transfer of Personal Data

DOMESTIC

FOREIGN

Legal Obligation

Administration Request

Monitoring the Legal Affairs and Transactions of the Data Controller

Legal Obligation

Legal grounds

DOMESTIC

FOREIGN

Being mandatory for the fulfillment of obligations and commitments

Existence of other processing conditions arising from the law

Legal Regulation

Open Consent

5. Your Rights as a Personal Data Owner under Article 11 of the Law

Pursuant to Article 11 of the Law, we hereby inform you that you have the following rights as data subjects

  • Learn whether your personal data is being processed,
  • Request information if your personal data has been processed,
  • To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
  • To know the third parties to whom your personal data is transferred domestically or abroad,
  • To request correction of your personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom your personal data has been transferred,
  • To request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear, although it has been processed in accordance with the provisions of the Law and other relevant laws, and to request notification of the transaction made within this scope to third parties to whom your personal data has been transferred,
  • To object if a result arises against you by analyzing the processed data exclusively through automated systems,
  • To demand the compensation of the damage in case you suffer damage due to unlawful processing of your personal data.

If you submit your requests regarding your rights to us by the methods we have specified below, the request will be finalized free of charge as soon as possible and within thirty days at the latest, depending on its nature.

In order to exercise your rights, after filling in and signing the relevant person/data subject application/request form, a sample of which is available at www.jimmykey.com or which you can physically obtain from the Data Controller address, this application form or your original signed petition that you have organized to exercise your rights;

  • Yedi Eylül Mh. Celal Umur Cd. No: 6/E Torbalı/İZMİR address (Data Controller address) secretariat by hand with documents identifying your identity,
  • It can be sent to our address above through a notary public or by registered mail with return receipt requested,
  • If you have a kep address, you can send it to[email protected] with a secure electronic signature.

Thank you for reading the clarification text.

JK Mağazacılık Tekstil Sanayi ve Ticaret Anonim Şirketi