PERSONAL DATA PROTECTION LAW NO. 6698 (KVKK)

INFORMATION AND CLARIFICATION TEXT

As "TUFFY KİDS" , we take care to process and protect your personal data in accordance with the Personal Data Protection Law No. 6698 ("Law") and relevant legislation. Necessary technical and administrative measures are taken in accordance with the legislation we are subject to in order to prevent unlawful processing of personal data, prevent unlawful access to personal data, and ensure the protection and preservation of personal data.

www.tuffykids.com operated by our company Because you visit our website, fill out the forms containing personal data on our website, and contact our company, your personal data is processed in accordance with the principles specified in Article 4 of the Law. You can review our Privacy and Cookie Policy published on our website.

In accordance with Article 10 of the Law and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation; We inform you with this information text, which has been prepared to cover our employees, suppliers, business partners, customers who purchase products or services, potential product or service buyers and relevant third parties who visit our website.

1. DATA CONTROLLER:

In accordance with the Personal Data Protection Law No. 6698 ("Law"), your personal data is processed by Toman Tekstil Sanayi ve Ticaret Limited Şirketi ("TUFFY KİDS") as the "Data Controller" defined in Article 3 of the Law.

2.PURPOSE FOR WHICH PERSONAL DATA WILL BE PROCESSED:

Your personal data; It is processed for the following purposes in line with the principles set out in Articles 4, 5 and 6 of the Law.

·    Carrying out our company's corporate development activities and continuing advertising and marketing activities,

·    To maintain the company 's financial and accounting, administrative, legal and technical business processes, to make necessary notifications to the relevant public institutions and organizations in accordance with legal regulations, to fulfill legal obligations,

·    Ensuring customer satisfaction, maintaining customer demand and complaint processes,

·    Planning and executing human resources processes, fulfilling employment application processes, creating personnel files for employees, fulfilling financial obligations,

·    Making and ensuring the execution of contracts the company has made or will make with its customers, potential customers, business partners, suppliers, service providers, employees, consultants with whom it has legal relations, and relevant third parties,

·    The company's obligation to prove evidence in legal disputes with third parties, to ensure contact and communication with real and legal persons with whom the company has legal relations, to ensure the corporate quality of the company, to ensure the security of the relevant persons with whom it is in contact,

·    Maintaining the necessary processes for you to use our website regarding company activities and fill out the forms on our website,

·     Conducting sales transactions regarding products and services to relevant persons and organizations, monitoring sales transactions, performing bank transactions, performing payment processes with cheques, promissory notes, credit cards and other commercial payment instruments,

·     Ensuring the physical security of the company's buildings and annexes, controlling company building entrances and exits , employment contracts made with employees, ensuring attendance and control within the scope of the company's interest,

·     Carrying out and tracking the delivery of our products , managing the shipment process, customs procedures, and carrying out transactions related to the foreign trade process.

3. PROCESSED PERSONAL DATA:

Identity Information (For employees, employee candidates, interns; identification number, name, surname, place and date of birth, mother and father's name, spouse, child, family closeness information, marital status information, gender, identity on shared official identity documents information)

Contact Information (Phone number, fax number, contact address, e-mail address information of customers, suppliers, business partners, employees, employee candidates, interns and relevant third parties)

Personnel Information (In terms of employees, employment contract, education, diploma information, certificate information, SSI employment entry and exit declaration, dependents, spouse, child relationship information, family members' identity, population registration information , embezzlement certificate obtained according to the nature of the job, working document, resignation, termination, severance and notice pay slip, payroll information, SSI registration information, service record, CV information, leave information, personnel performance evaluation reports, work accident information, information in the job application form, reference information, military status information, bank account information, IBAN number information, personal information written on the job application form for employee candidates, personal information in the intern file )

Legal Transaction Information (For relevant persons who have legal contact with the Company; personal information in correspondence with judicial authorities, case and enforcement file information regarding mediators, labor courts and other courts, investigation information)

Customer, Supplier, Service Provider, Business Partner Transaction Information (Name, Surname of real persons, identification number, tax number, tax office, chamber registry information, address, location, e-mail information, telephone contact information, bank account information, check, Payment information such as promissory note, credit card, finance, invoice, delivery note, product order request information, authorization, signature circular, marketing, transaction security, risk management information, profession, duty, title information, visual photograph information on shared documents, personal information written on shared official identity documents, identity, contact, duty, profession and title information of legal entity officials and employees, visual and audio recording information, legal transaction and transaction security information)

Physical Space Security Information (Customers receiving products or services, potential customers, suppliers, service providers, business partners and legal entity representatives and employees, company partners, company employees, employee candidates, visitors and relevant third parties, in the company's buildings, parking lots and annexes. camera recording information received, workplace entry and exit registration information for employees),

Transaction Security Information (username and password information and log records information of the software, hardware and applications used by company representatives and employees)

Financial Information (For customers and suppliers; invoice, tax identification number, tax office , bank account number, IBAN number, credit card information, check, promissory note, mail order, payment, insurance policy, contract information, asset information, bank account information, current account information, financial information reported to public institutions and organizations, bank account information for employees and company shareholders, Iban number, declarations, other financial information).

Professional Experience Information (In terms of employees, employee candidates, interns, education, vocational courses, work experience information, diploma information, working life, reference information, in-service training information, certificates, professional qualification information, other professional information in the notified forms, company partners, duties, titles, professional information, record, expertise, training, diploma, certificate, qualification information in terms of customers, business partners, service supplier officials and employees, and representatives and personnel of public institutions and organizations).

Visual and Audio Records (In terms of the relevant person; photographic information on your completed, printed forms, diplomas, certificates, shared documents and official documents, photographs taken when necessary within the scope of job applications and company activities, shared photographs and images and recorded during call services audio sound recording information)

Health Information (Health status information written in the application forms for employees and employee candidates, interns, health reports for employees, general health report examinations, HES code, epidemic disease information, blood group information, laboratory tests, personal health and physical disability status information)

Information on Criminal Convictions and Security Measures (Criminal record, conviction, criminal status information for employees and employee candidates),

Biometric Data (Fingerprint recognition information received within the scope of the personnel attendance control system)

Information obtained through corporate communication services, your personal information obtained via e-mail, letter or other communication tools.

4. TO WHOM AND FOR WHAT PURPOSE PROCESSED PERSONAL DATA CAN BE TRANSFERRED:

Within the scope of this information text, your specified personal data; limited to the purposes specified in the second article; To our company representatives, business partners, customers, suppliers, service providers, employees' health information to the persons and organizations from which relevant health services are received and insurance companies, to banks, financial institutions in order to carry out the financial transactions of the relevant people, to install computer operating systems and computer programs used within our company, To software, hardware, informatics and technology companies in order to carry out maintenance and repair operations, and to transfer special personal data domestically, to real or private law legal entities, in cases stipulated by law, with the express consent of the relevant person, in legal disputes, upon request and in accordance with the legislation. It may be transferred to authorized public institutions and organizations, including prosecutors' offices, courts, enforcement offices, Tax Offices, SSI, for the purpose of request, limited to the personal data processing conditions and specified purposes specified in Article 8 of the Law.

5. DATA TRANSFER ABROAD:

4/2 of the KVK Law. In accordance with the principles set out in the article, by obtaining "Explicit Consent Texts" to be collected separately from the relevant persons whose data are processed, or in cases stipulated in Articles 5/2, 6/3 of the Law, without seeking explicit consent, in accordance with the rules in Article 9 of the Law, the Personal Data Protection Board (" After the foreign countries with sufficient protection to be determined by the Board) are declared, only to individuals and organizations resident in these countries, and for the countries where it is determined and declared that there is no sufficient protection, the data controllers in Turkey and the relevant foreign country have committed in writing to adequate protection. and can be transferred on a limited basis by obtaining the necessary permissions from the KVK Board in terms of the relevant transfer.

In this context, within the limits stipulated by Law No. 6698, by taking all necessary measures, personal information such as identity, contact and professional information of our employees will be transferred to our suppliers abroad, relevant persons and individuals, in order to carry out business activities and ensure communication, in accordance with the legislation and limited to the purpose of transfer. can be transferred to organizations.

6. METHOD AND LEGAL REASONS OF COLLECTING PERSONAL DATA:

Your personal data; Within the scope of company activities, limited to the stated purposes, verbally, in writing or electronically, filling out application forms, creating personnel files, arranging and executing contracts, accounting , processing financial information for the establishment and maintenance of financial and social rights, purchasing, marketing. , in whole or in part, by processing personal data received for the purpose of ensuring planning, quality and corporate development, by visiting the company buildings and extensions, the website, by calling our call services, by using the video camera recording system to ensure indoor and outdoor security in the company buildings and extensions . It is processed and collected by automatic or non-automatic means, provided that it is part of any data recording system .

Your personal data; Based on one or more of the conditions stated in the 2nd paragraph of Article 5 of the Law and written below; 5/1- "Obtaining explicit consent" of the Law when necessary, 5/2- a) "Explicitly foreseen in the law", c) "Processing personal data of the parties to the contract is necessary, provided that it is directly related to the establishment or execution of a contract." d) "It is mandatory for the data controller to fulfill its legal obligations", e) "It is mandatory to process data for the establishment, exercise or protection of a right", f) "It is not to harm the fundamental rights and freedoms of the relevant person Provided that data processing is mandatory for the legitimate interests of the data controller” and Article 6/3 of the Law. According to the article, it can only be processed without the explicit consent of the person concerned, by persons under the obligation of confidentiality or authorized institutions and organizations, for the purpose of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and their financing. Based on the reasons, it is processed, collected and transferred limited to the specified purposes in accordance with Articles 5 and 6 of the Law and Article 5/1-h of the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Notify.

7. RIGHTS OF PERSONAL DATA OWNER (RIGHT OF APPLICATION):

Your requests within the scope of Article 11 of the Personal Data Protection Law No. 6698 "regulating the rights of the relevant person"; in accordance with the provisions of the Communiqué on the Procedures and Principles of Application to the Data Controller, as the data controller. By applying in person to TOMAN TEKSTİL SANAYİ VE TİCARET LİMİTED ŞİRKETİ ("TUFFY KİDS"), Yunusemre Mahallesi Vişne Caddesi 5.Er Sokak No: 14 Yıldırım Bursa, in writing by filling out the APPLICATION FORM published on our website, or in writing at info@ tuffykids , our company's corporate e-mail address. You can send it by e-mail to .com or through a notary public.

Requests submitted to our company will be answered in writing or electronically, as soon as possible and within thirty days at the latest, depending on the nature of the request, in return for the processing fee determined in Article 7 of the Communiqué on the Procedures and Principles of Application to the Data Controller.

TOMAN TEXTILE INDUSTRY AND TRADE LIMITED COMPANY

Address: Yunusemre Mahallesi Vişne Caddesi 5.Er Sokak No: 14 Yıldırım Bursa

Email : info@ tuffykids.com

Web Page: www.tuffykids.com

Phone: +90 224 364 21 60

Fax : +90 224 364 31 16