Supply chain manager/employee text

INFORMATION TEXT FOR SUPPLIER REPRESENTATIVES AND EMPLOYEES BASED ON PERSONAL DATA PROTECTION LAW NO. 6698

Information Responsible: Kiğılı Giyim Trade Joint Stock Company
Address: Aeropark Yenisehir Mah. Osmanli Boulevard No:11/B 34912 – Kurtköy – Pendik / Istanbul

This Information Text has been prepared by Kiğılı Giyim Ticaret Anonim Şirketi (“ Kiğılı ”) to inform you about the processing, storage and transfer of your personal data during the services provided to you within the framework of the Law No. 6698 on the Protection of Personal Data (“ KVKK ”) and related legislation.
Our company's personal data protection policies https://www.abdullahkigili.com is located at.


METHOD OF COLLECTION, LEGAL BASIS AND PURPOSES OF PROCESSING OF PERSONAL DATA

Our company obtains the following personal information of the relevant persons in paper or electronic forms , through the person's declaration , supplier information and official channels.

Your personal data will be processed for the following purposes and legal grounds, within the terms and conditions set out in Articles 5 and 6 of the GDPR:


Table 1 – Data Category, Legal Basis and Purpose of Processing

Data Category Legal Basis Processing Purpose
Identity (Personal information) - The processing of personal data relating to the parties is necessary, provided that it is directly related to the conclusion or performance of the contract (Article 5, paragraph 2(c) of the GDPR)
- Data processing is necessary for the establishment, exercise or protection of a right (Article 5, paragraph 2(e) of the GDPR)
- Conducting emergency management
- Implementation of activities in accordance with the legislation
- Ensuring physical space security
- Execution of tasks and assignments
- Conducting communication activities
- Execution and control of work activities
- Management of storage and archiving processes
- Conducting contract processes
- Ensuring operational security of the data controller
- Providing information to authorized persons and government agencies
Contact (Contact) - Directly related to the formation or performance of the contract (Art. 5 f.2(c) of the CCPR)
- Data processing is necessary for the establishment, exercise or protection of a right (Article 5, paragraph 2(e) of the GDPR)
- Implementation of activities in accordance with the legislation
- Conducting communication activities
- Execution and control of work activities
- Management of storage and archiving processes
- Conducting contract processes
- Ensuring operational security of the data controller
- Providing information to authorized persons and government agencies
Operational Security - Necessary for the data controller to fulfill its legal obligation (Article 5, paragraph 2(d) of the Data Protection Act) - Implementation of information security processes
- Access permissions management
- Conducting activities in accordance with the legislation
- Carrying out storage and archiving activities
Professional Experience (Professional Experience) - Directly related to the formation or performance of the contract (Art. 5 f.2(c) of the CCPR)
- Data processing is necessary for the establishment, exercise or protection of a right (Article 5, paragraph 2(e) of the GDPR)
- Implementation of activities in accordance with the legislation
- Managing task execution processes
- Execution and control of work activities
- Carrying out storage and archiving activities
- Conducting contract processes
- Providing information to authorized persons and government agencies

PARTIES TO WHOM PERSONAL DATA IS TRANSFERRED AND PURPOSES OF TRANSFER

Your personal data may be transferred to the following third parties and for the relevant purposes in accordance with Articles 8 and 9 of the GDPR:

Third Party Data Categories Legal Basis of Transfer
Business Partners, Affiliates, Group Companies and Suppliers Identity, Communication, Operational Security, Professional Experience - Necessary for the data controller to fulfill its legal obligation (Article 5, paragraph 2(d) of the Data Protection Act)
- Data processing is necessary for the establishment, exercise or protection of a right (Article 5, paragraph 2(e) of the GDPR)
- Processing is necessary for the legitimate interests of the data controller, provided that it does not overshadow the fundamental rights and freedoms of the data subject (Article 5(2)(f) of the GDPR)
State Institutions and Organizations Identity, Communication, Operational Security, Professional Experience - Necessary for the data controller to fulfill its legal obligation (Article 5, paragraph 2(d) of the Data Protection Act)
- Data processing is necessary for the establishment, exercise or protection of a right (Article 5, paragraph 2(e) of the GDPR)
Individuals and Legal Entities (private organizations) Identity, Communication, Operational Security, Professional Experience - Necessary for the data controller to fulfill its legal obligation (Article 5, paragraph 2(d) of the Data Protection Act)
- Data processing is necessary for the establishment, exercise or protection of a right (Article 5, paragraph 2(e) of the GDPR)

RIGHTS OF THE PERSONAL DATA HOLDER UNDER ARTICLE 11 OF LAW NO. 6698

You can send us your requests and requests regarding your personal data through the "Related Person Request Form" by one of the following methods:

  1. By sending it by mail to the address: Aeropark Yenişehir Mah. Osmanlı Bulvarı No:11/B 34912 – Kurtköy – Pendik / Istanbul, signed and with a copy of your ID card ,

  2. By applying in person to the Kiğılı Giyim Ticaret A.Ş. office with a valid identity document ,

  3. Signed with a mobile signature or secure electronic signature kvkk@kigili.com.tr by sending an email to,

  4. From your Registered Electronic Mail (KEP) address 0562003566100015@hs02.kep.tr by sending to the address,

  5. From your email address registered in the company system : kvkk@kigili.com.tr by sending an email to.


Application rules:

According to the “ Instructions on the Rules and Principles of Appeals to the Data Controller ”, the appeal must contain the following information:

  • Name, surname and signature (if the application is in writing),

  • TC ID number (passport number for a foreign citizen),

  • Residential or work address,

  • Email and phone number (if available),

  • Subject of the application and supporting information.

The application must be written clearly and precisely , and the requested right must be clearly stated.
If applying on behalf of another person, an official power of attorney must be submitted.
The application must include identity and address information and must be accompanied by identification documents .
Applications made by unauthorized persons are not accepted.

Your application will be responded to within 30 days from the date it is received by us.
If your application is rejected, a reasoned response will be provided to you via email or mail.


KHILI CLOTHING TRADING COMPANY ANONYMOUS
(Information Officer)