KVKK Privacy Notice

1. Identity of the Data Controller

Under Law No. 6698 on the Protection of Personal Data ("KVKK"), the party acting as data controller for personal data obtained through this website (mcsarikayagida.com) or our other communication channels is as follows:

• Registered trade name: MCSARIKAYA GIDA LİMİTED ŞİRKETİ
• MERSİS No.: 0613083477300013
• Trade Registry No.: 972171-0 (Istanbul Trade Registry)
• Email: [email protected]
• KEP (registered email): [email protected]

MC Sarıkaya Gıda is established in Turkey and processes personal data in accordance with KVKK. This notice is provided in English for your convenience; the Turkish-language version is the legally governing text.

2. Personal Data Processed and Method of Collection

When you contact us through the contact form, the quote request form, or a career application (email), the following categories of personal data are processed by automated means, entered directly by you:

• Identity data: first name, last name
• Contact data: email address, phone number (if shared), company name
• Transaction security data: IP address and browser information (via technical logs)
• Request data: the message you submit; product, quantity, and target-country details of a quote request
• CV data: résumé content sent to us directly by email as part of a career application

For data collected through cookies and similar technologies on our site, see our Cookie Policy.

3. Purposes of Processing

• Evaluating and responding to your requests (quotes, information requests, contact form messages)
• Carrying out our export and trade processes, including quote and contract management
• Evaluating career applications
• Managing customer relationships and communication activities
• Ensuring the security and functionality of the website
• Fulfilling our legal obligations

4. Legal Basis for Processing

Your personal data is processed on the following legal bases set out in Article 5 of KVKK:

• Your explicit consent (given when you submit a form)
• Processing is directly related to the establishment or performance of a contract (quote and order processes)
• Processing is mandatory for us to fulfil our legal obligations
• Processing is necessary for our legitimate interests, provided this does not harm your fundamental rights and freedoms (responding to inquiries, maintaining site security)

5. Transfer of Personal Data

Your personal data may be shared, limited to the purpose of processing, with our hosting and email infrastructure providers, freight/logistics and customs partners involved in export operations, and authorised public authorities, where your explicit consent exists or as expressly permitted under Articles 8 and 9 of KVKK. Our hosting and email infrastructure providers are located abroad, and your data may accordingly be processed in line with Article 9 of KVKK and the international data protection safeguards applied by those providers (e.g. Standard Contractual Clauses). In addition, analytics and marketing cookies you enable via explicit consent (see our Cookie Policy) may be processed on servers located abroad by the third-party providers offering those services; this transfer relies on your explicit consent under Article 9 of KVKK.

6. Retention Period

Your personal data is retained for as long as required by the purpose of processing and applicable statutory limitation periods (generally up to 10 years under the Turkish Commercial Code, Tax Procedure Law, and related legislation), after which it is deleted, destroyed, or anonymised. CV data submitted with a career application is destroyed after a reasonable evaluation period if no suitable position is available.

7. Your Rights Under Article 11 of KVKK

By applying to us, you may exercise the following rights under Article 11 of KVKK:

• Learn whether your personal data is being processed
• Request information if your data has been processed
• Learn the purpose of processing and whether your data is used in accordance with that purpose
• Know the third parties, domestic or abroad, to whom your data is transferred
• Request correction of incomplete or inaccurate data
• Request deletion or destruction of your data under the conditions set out in Article 7 of KVKK
• Request that any correction, deletion, or destruction be notified to third parties to whom your data was transferred
• Object to a result that is to your detriment arising from analysis of your data exclusively through automated systems
• Claim compensation for damages arising from unlawful processing of your personal data

8. How to Apply

To exercise the rights listed above, you may send your request, together with documents verifying your identity, to [email protected] by email, via our registered email (KEP) address [email protected] with a secure electronic signature, or in writing to the address above. Your request will be concluded free of charge, depending on its nature, as soon as possible and within 30 days at the latest; where the process requires an additional cost, a fee may be charged in line with the tariff set by the Turkish Personal Data Protection Board. If your request is rejected, the response is found insufficient, or no response is given within the time limit, you have the right to lodge a complaint with the Turkish Personal Data Protection Board within thirty days of learning our response and, in any case, within sixty days of your original application.