Data Privacy

ZENITH TANZİM SERGİLEME ÜRETİM SANAYİ VE TİCARET ANONİM ŞİRKETİ

PERSONAL DATA PROCESSING DISCLOSURE STATEMENT


As ZENITH TANZİM SERGİLEME ÜRETİM SANAYİ VE TİCARET ANONİM ŞİRKETİ (“Company”), we attach utmost importance to the protection of your personal data in accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”), as well as the Law No. 5651, the Law No. 6563 on the Regulation of Electronic Commerce, the Turkish Penal Code No. 5237, and other applicable legislation.

Within this framework, the Company processes certain personal data for the purposes of fulfilling its legal obligations, conducting its business activities, and providing you with more effective and secure services.

The personal data processed may include, but is not limited to: full name, contact information (telephone number, e-mail address, postal address), gender information, and, where membership is carried out through social media accounts, information permitted to be shared by the relevant platforms, as well as all other personal data lawfully obtained.

Your personal data is processed and stored in secure, non-public environments, based on your explicit consent or other legal grounds stipulated under the Law, and limited to the purposes specified in this Disclosure Statement.

PURPOSES OF PROCESSING PERSONAL DATA

Your personal data may vary depending on the nature of the products and services provided by the Company and may be collected verbally, in writing or electronically through automatic or non-automatic means, via the Company’s departments, offices, website, social media channels, mobile applications and similar platforms.

Your personal data may be updated and processed for as long as you benefit from the products and services offered by the Company and, where applicable, its Group Companies. In addition, your personal data may be processed when you contact our call centers, visit our website, or participate in training sessions, seminars, promotional events or other organizations organized by the Company.

The collected personal data is processed for the following purposes:

  • Conducting the necessary operational processes to enable you to benefit from products and services;

  • Customizing and presenting products and services according to your usage habits and needs;

  • Ensuring the legal and commercial security of the Company and the persons with whom the Company maintains business relations (including communication activities, physical security of premises, audit processes, complaint and request management, reputation research, legal compliance processes, financial affairs, etc.);

  • Planning and implementing the Company’s commercial and business strategies;

  • Carrying out human resources policies and processes.

Your personal data is processed within the framework of the data processing conditions set forth in Articles 5 and 6 of the KVKK and limited to the purposes specified above. The collected information is not used for any commercial purpose beyond the scope of the Company’s activities and is not sold to third parties.

TRANSFER OF PERSONAL DATA

Your personal data may be transferred, limited to the realization of the purposes stated above, to:

  • Our business partners and suppliers,

  • Group Companies,

  • Company officials and shareholders,

  • Legally authorized public institutions and organizations and private persons,

in accordance with Articles 8 and 9 of the KVKK.

In addition, your personal data may be shared with official authorities upon request of authorized public institutions such as the Banking Regulation and Supervision Agency (BDDK), the Capital Markets Board (SPK), and the Central Bank of the Republic of Türkiye (TCMB), within the framework of the Banking Law, Payment Services and Electronic Money legislation and other applicable regulations.

Where your explicit consent is obtained, your personal data may also be shared with our domestic and/or international affiliates, institutions with which we cooperate, banks, logistics/cargo companies and third-party service providers.

METHOD AND LEGAL BASIS FOR COLLECTING PERSONAL DATA

Your personal data is collected verbally, in writing or electronically for the purposes of providing the products and services offered by the Company within the legal framework and fulfilling contractual and statutory obligations fully and accurately.

Personal data obtained within this scope may be processed and transferred pursuant to the legal grounds set forth in Articles 5 and 6 of the KVKK.

YOUR RIGHTS AS A DATA SUBJECT

Pursuant to Article 11 of the KVKK, as a data subject, you have the right to:

  • Learn whether your personal data is processed;

  • Request information if your personal data has been processed;

  • Learn the purpose of processing and whether it is used in accordance with its purpose;

  • Know the third parties to whom your personal data is transferred domestically or abroad;

  • Request correction of incomplete or inaccurate personal data;

  • Request deletion, destruction or anonymization of personal data;

  • Request notification of such correction, deletion or destruction to third parties to whom the personal data has been transferred;

  • Object to the occurrence of a result against you by analyzing processed data exclusively through automated systems;

  • Request compensation for damages in case of unlawful processing of personal data.

APPLICATION METHODS

You may submit your requests regarding the above-mentioned rights:

  • Through a notary public or via our Registered Electronic Mail (KEP) address;

  • By applying in person with documents verifying your identity and the relevant application form.

KEP Address: zenithtanzim@hs03.kep.tr