Personal Data Protection Law General Information Text

KVKK GENERAL CLARIFICATION TEXT

Identity of the Data Controller As GNR MARKET, we show maximum sensitivity regarding the security and confidentiality of your personal data. With this awareness and in the capacity of data controller under the Law on Protection of Personal Data No. 6698 ("Law"), we present the following matters for your information within the scope of the obligation to inform in order to ensure that we act in accordance with the Law regarding the personal data we obtain:

Processing of Personal Data and Purposes of Processing Although it may vary regarding the service or commercial activity offered by Truz Collagen, personal data belonging to the data subjects specified below may be processed by our Company in order to ensure that services are provided in the best possible way. In this context; Identity, contact, signature, visual/audio, customer transaction, financial, physical space security, professional experience, risk management, vehicle license plate (e.g., shipment) information of real person merchants with whom we have a commercial business relationship, including transporters, seafarers, auditors, environmental officers, consultants, suppliers, business partners utilized by our Company, or employees/contact persons/partners/officials of legal entities that are customers/suppliers/business partners/beneficiaries of our Company's services; personal personnel information for subcontractor employees; and if you share them, your health data, criminal record, and also your religion and blood type information, which are among special categories of personal data and are included in identity documents, can be obtained indirectly through identity/driver's license copies. Additionally, passport information may also be obtained in order to organize ship entry-exit processes and guest travel processes.

The personal data specified above may be processed limited to the purposes of providing our products and services within the scope of our Company's activities, maintaining production and commercial activities in our company, carrying out strategic planning activities, tracking requests/complaints, tracking and carrying out legal affairs, carrying out supply chain management processes, ensuring the security of data controller operations, carrying out finance and accounting affairs, carrying out information security processes, receiving and evaluating suggestions for improving business processes, carrying out activities to ensure business continuity, carrying out logistics activities, carrying out service purchasing processes, carrying out after-sales support services, carrying out service sales processes, carrying out service production and operation processes, carrying out customer relationship management processes, carrying out activities aimed at customer satisfaction, organization and event management, carrying out contract processes, informing authorized persons, institutions and organizations, creating and tracking visitor records, carrying out investment processes, ensuring physical space security, fulfilling the requests of official institutions and organizations, carrying out communication activities, reporting, analysis, internal control, audit, emergency management, carrying out strategic planning activities, carrying out/auditing business activities, carrying out occupational health/safety activities, carrying out emergency management processes, carrying out storage and archive activities, ensuring the security of movable goods and resources, carrying out supply chain management processes, insurance claim processing process, subcontractor personnel file process, transportation, accommodation and visa process, association membership process, facility personnel file process, consultant service procurement process, free zone directorate personnel information sharing process, and ensuring compliance with relevant legislation and procedures.

To Whom and For What Purposes Processed Personal Data May Be Transferred Your collected personal data may be transferred to official institutions and organizations, auditors utilized by our Company, lawyers, banks and insurance companies, organized industrial zones, suppliers, and group companies (and databases shared with them) for the purposes of obtaining support services from group companies and with the systems of companies providing domestic and foreign information technology services with whom we cooperate, limited to the purposes explained in Article 2 of this Clarification Text and dependent on the reasons requiring transfer within the scope of the Law and relevant legislation.

Method and Legal Reason for Collecting Personal Data Your personal data may be collected by automated or non-automated methods, directly by you or through oral or written information transmitted via our website, our e-mail address, through applications and software used within the scope of Company activities, and through camera recordings, based on and limited to the legal reasons specified in Article 5 of the Law in accordance with the basic principles foreseen in the Law and the purposes explained in Article 2 of this Clarification Text: being clearly provided for in the laws, the legal obligation of the data controller, the establishment/performance of a contract, and the legitimate interest of the data controller.

Your Rights Regarding the Protection of Personal Data Within the framework of the legislation on the protection of personal data, you have the right to; learn whether your personal data is being processed, request information if it has been processed, learn the purpose of processing and whether it is used in accordance with this purpose, know the third parties to whom it is transferred domestically or abroad, request correction if it is incomplete or incorrectly processed and request notification of this to third parties to whom it has been transferred, request deletion or destruction if the conditions for processing no longer exist and request notification of this to third parties to whom it has been transferred, object to the emergence of a result against you by analyzing the processed data exclusively through automated systems, and demand compensation for the damage if you suffer damage due to unlawful processing.

You can submit your requests within the scope of Article 11 of the Law regulating the rights of the person concerned in accordance with the "Communique on Procedures and Principles for Application to the Data Controller"; Address: Address: 152 Evler Mahallesi 1. Yiğit Sokak No: 2 B Yıldırım / Bursa by personally applying with identity verification; or you can send your application to the e-mail address: info@truzcollagen.com.

Our Company will conclude the application requests as soon as possible and within 30 (thirty) days at the latest depending on the nature of the request, in accordance with Article 13 of the Law. In case the request is rejected, the reason(s) for rejection will be justified in writing or electronically.