Personal Data Protection and Privacy Policy

Your personal data is important to us. Necessary measures are taken to ensure the appropriate level of security in accordance with the relevant legislation to prevent the unlawful use of your personal data and to ensure its protection.

Under the provisions of the Personal Data Protection Law No. 6698 (“KVKK” or “the Law”), any information that identifies or can identify you is defined as personal data. Sensitive personal data is defined in KVKK as data related to race, ethnicity, political opinions, philosophical beliefs, religion, sect, or other beliefs, dress, membership in associations, foundations, or trade unions, health, sexual life, criminal convictions, and security measures, as well as biometric and genetic data.

This Clarification Text (“Clarification Text”) has been prepared in accordance with our commitment as the data controller, Sultançiftliği Tarım İşletmeleri A. Ş. (“the Company”), to inform individuals about the collection, processing, transfer, protection, and security of personal data in compliance with KVKK and related secondary legislation.

We would like to emphasize that we show maximum sensitivity to the confidentiality and security of your personal data and that all necessary technical and administrative security measures have been taken to protect this data.

Data Controller

The entity with the activity address located at Çamurdere Mevkii Cad. No.71C Alipaşa Mah. Silivri Istanbul (……….), in its capacity as Data Controller, may process your personal data for the purposes outlined below, and may transfer it to third parties, where permitted by law, and/or within the limits of the purpose for which it is processed.

Your personal data will be processed in accordance with the principles of legality, accuracy, up-to-dateness when necessary, specificity, transparency, and legitimacy, and will be retained for the period required by relevant legislation or the purpose for which it was processed.

Methods of Collecting Personal Data

Your personal data may be collected through automated or non-automated methods, in accordance with the fundamental principles outlined in the KVKK, based on our commercial activities, through our Company’s website, social media platforms, and/or verbally, in writing, or electronically during your visit to our website.

Processing of Personal Data and Purposes of Processing

In its capacity as Data Controller, our Company may process your personal data within the scope and for the legal reasons outlined below.

• Identity Information (name, surname, Turkish ID number)
• Contact Information (address, mobile phone, email)
• Shopping Information (purchase date, time, quantity, content, payment method, payment details, invoice information, etc.)
• Other personal data you provide through requests, suggestions, and complaints
• Behavioral and digital trace data obtained via cookies when using our website

As the data controller, our Company will process your personal data in accordance with Articles 5 and 6 of KVKK for the following purposes: to provide requested products and services to customers/users, to deliver orders to specified addresses, to fulfill contractual obligations, to plan and execute commercial activities, to maintain customer records, to conduct campaigns, sweepstakes, and announcements, to carry out communication activities, to offer our services, to manage data security processes, to issue invoices under current legislation, to share content on social media accounts, to comply with legal obligations, and for various marketing and customer relationship management activities.

Transfer of Personal Data

Our Company, in order to achieve the data processing purposes mentioned above and within the scope of the specified purposes, may transfer personal data, in accordance with Article 8 of KVKK, under security and confidentiality principles, to our business partners, contractual institutions, service providers, consultants, shareholders, suppliers, and public authorities with a legal obligation to request such data, both domestically and abroad.

Our Company may also transfer personal data to solution partners and service providers who assist with services such as hosting, software, IT technologies, cookie records, etc., in accordance with Article 9 of KVKK.

Rights of Personal Data Owners

Personal data owners have the following rights under Article 11 of the KVKK:

• To learn whether their personal data is being processed and which data is being processed.
• To request information about the purpose of data processing.
• To know third parties to whom personal data is transferred domestically or internationally.
• To request correction of inaccurate or incomplete personal data.
• To request the deletion or destruction of personal data.
• To request that the corrections or deletions be communicated to third parties to whom the personal data has been transferred.
• To object to decisions made solely on the basis of automated processing that results in adverse consequences for them.
• To request compensation for any damages caused by the unlawful processing of their personal data.

Procedure for Application to the Data Controller

Personal data owners may submit their requests under Article 11 of the KVKK:

• In writing, by providing proof of identity (e.g., ID card, driver’s license, passport) and submitting it in person or via email to (info@malvaculture.com).

Applications must include:

• Name and surname of the data subject, signature if written
• For Turkish citizens, the Turkish ID number; for foreigners, nationality, passport number, or any available identity number
• The address for notification or work address
• Email, phone, or fax numbers (if applicable)
• The subject of the request and relevant documents

Applications will be processed within 30 days. If additional fees are required for processing, the applicable fee may be requested from the applicant according to the Personal Data Protection Board’s pricing.