Information Notice on the Protection of Personal Data
(GDPR & KVKK Privacy Notice)
GİTEKS KONFEKSİYON SAN. ve TİC. A.Ş. (“Giteks”) takes the highest level of technical and administrative security measures to ensure that your personal data is collected, stored, and shared in accordance with the law and to protect your privacy.
Our purpose is to inform you in the most transparent manner, in accordance with Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and relevant provisions of the General Data Protection Regulation (“GDPR”), about the methods of collecting your personal data, purposes of processing, parties with whom the data may be shared, legal grounds, and your rights.
a) Data Controller
Pursuant to the Turkish Personal Data Protection Law No. 6698 (“Law No. 6698”), your personal data may be collected and processed by GİTEKS KONFEKSİYON SAN. ve TİC. A.Ş. (“Giteks”), acting as the data controller, within the scope described below.
b) Purposes of Processing Personal Data
Giteks may collect personal data belonging to its customers, employees, potential customers, job applicants, business partners, and suppliers, including but not limited to identity information, contact information, customer information, customer transaction data, transaction security data, legal transaction and compliance data, and sales and marketing data.
Provided that it complies with the applicable legislation and is not limited to the purposes listed below, your personal data may be processed for the following purposes:
- Enabling the provision of Giteks’ products and services; pricing and invoicing of products; sales of products and services; execution and follow-up of requested transactions related to purchased and/or used products and services; delivery, installation, maintenance, repair, and after-sales services,
- Planning and execution of customs operations, production and/or operational processes, supply chain management, and customer relationship management processes,
- Planning and execution of call center, reception services, defective product returns, maintenance and repair services, on-site repair services, and customer information services,
- Planning and execution of consultancy, maintenance, support, and reporting services,
- Fulfillment of our obligations towards you; preparation of records and documents; compliance with local and international legal regulations regarding data retention, reporting, notification, tax, and other legal obligations,
- Conducting sales and marketing activities aimed at improving product and service quality, including personalized promotions, advertisements, campaigns, discounts, benefits, pricing, advantages, and related communications,
- Communication regarding information technology requirements, system infrastructure, and IT support services, and providing necessary information regarding such services and products,
- Conducting traffic measurement, statistical analysis, segmentation/profiling, and CRM activities for sales and marketing purposes,
- Measuring and improving customer satisfaction, managing complaints, obtaining opinions and suggestions regarding new products and services, receiving error/issue notifications, and informing you regarding your requests and complaints,
- Receiving orders, processing payments, cooperating with third-party logistics providers for delivery, recommending products and services that may be of interest to you, online behavioral advertising and marketing, customer portfolio management, service quality measurement and improvement, communication, optimization, audit, risk management and control, promotion, analysis, interest determination, scoring, profiling, marketing, sales, advertising, and communication activities,
- Comparative product and/or service offers, modeling, development or improvement of existing or new products, and use of personal data within the scope of the activities stated in Giteks’ articles of association and relevant legislation,
- Compliance with information retention, reporting, and notification obligations imposed by official authorities; fulfillment of contractual requirements; and performance of legal obligations to which Giteks is subject,
- Determination and implementation of Giteks’ commercial and business strategies, including management of financial operations, communication, market research, social responsibility activities, procurement operations (requests, offers, evaluations, orders, budgeting, contracts), internal systems and application management, and legal operations,
- Use in crowdsourcing activities for communication, assignment, and payment processes,
- Reviewing, evaluating, and responding to requests received from official authorities or from you.
Personal data is processed within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698.
c) Parties to Whom Personal Data May Be Transferred and Purposes of Transfer
Your collected personal data may be transferred, limited to the purposes stated above, to:
- Giteks’ business partners, shareholders, and affiliates,
- Persons or organizations permitted under applicable legislation, including the Tax Procedure Law, Social Security legislation, Court of Accounts, Anti-Money Laundering legislation, Turkish Commercial Code, Code of Obligations, and other relevant laws,
- Legally authorized public institutions and organizations, administrative and judicial authorities,
- Overseas companies and affiliates,
- Consultants, auditors, lawyers, and other third parties from whom services are obtained,
- Real or legal persons with whom we cooperate for product/service comparison, analysis, evaluation, advertising, and fulfillment of the above-mentioned purposes; program partner institutions; institutions contracted for sending communications; and cargo companies responsible for product delivery,
in accordance with Articles 8 and 9 of Law No. 6698 and relevant GDPR provisions.
d) Method and Legal Basis for Collecting Personal Data
Your personal data may be collected verbally, in writing, or electronically through various channels, including but not limited to Giteks, contracted websites, institutions to which we provide or receive support services, real and/or legal persons with whom transactions are conducted under legislation or contracts, dealers, SMS and email communications, IVR systems, our website and mobile applications, call centers, and social media accounts.
Personal data is collected and processed by Giteks for the purposes stated above, within the framework of applicable legislation and for the performance of contracts.
e) Rights of the Data Subject Under Article 11 of Law No. 6698
As a data subject, you may submit your requests regarding your rights using the methods described below. Giteks will finalize your request as soon as possible and no later than thirty (30) days, depending on the nature of the request.
Within this scope, data subjects have the right to:
- Learn whether personal data is processed,
- Request information if personal data has been processed,
- Learn the purpose of processing personal data and whether it is used in accordance with its purpose,
- Know the third parties to whom personal data is transferred domestically or abroad,
- Request correction of incomplete or inaccurate personal data and request notification of such correction to third parties to whom the data has been transferred,
- Request deletion or destruction of personal data if the reasons for processing no longer exist and request notification of such action to third parties,
- Object to the occurrence of a result against the individual by analyzing processed data exclusively through automated systems,
- Request compensation for damages arising from unlawful processing of personal data.
Requests must be submitted in Turkish, in writing, or via registered electronic mail (KEP), secure electronic signature, mobile signature, or the email address previously provided to and registered in Giteks’ system, in accordance with Article 13 of Law No. 6698 and the Communiqué on the Procedures and Principles of Application to the Data Controller dated 10.03.2018 and numbered 30356.
Applications must include:
- Name, surname, and signature (if submitted in writing),
- Turkish ID number (for Turkish citizens) or nationality, passport number, or ID number (for foreigners),
- Residential or business address for notification,
- Email address, telephone, and fax number (if any),
- Subject of the request,
along with relevant supporting documents, if applicable.
Written applications may be submitted to:
Ayazağa Mah. Kemerburgaz Cad. Vadi Koru D Blok No: 10 D, 34396 Sarıyer / İstanbul, Türkiye
Email applications may be sent to: info@giteks.com.tr
