Personal Data Protection Notice

Dear customer, as Reigna Gıda Anonim Şirketi ("Reigna Bakliyat" or the "Company"), we would like to inform you about how your personal data is obtained, processed and transferred, how long it is processed, and the rights you have regarding your personal data.

At Reigna Bakliyat we treat the security of your personal data with the utmost care, and we carry out our activities with the security of your personal data as a top priority.

Under Turkish Personal Data Protection Law No. 6698 ("KVKK") and related regulations, any information that identifies you or makes you identifiable, including special categories of personal data, is considered personal data. It is processed by Reigna Bakliyat as the data controller within the scope described below and within the limits set by law.

"Processing of personal data" means any operation performed on data, such as obtaining, recording, storing, preserving, altering, rearranging, disclosing, transferring, taking over, making available, classifying or preventing the use of the data.

1. How we obtain your personal data

Your personal data is obtained electronically or physically when you contact us through the contact form on our website, by email, by phone or on WhatsApp, during quotation, ordering and sales processes, when you apply for a job or start work with us, or under an employment contract. This includes the information you provide to Reigna Bakliyat yourself or that must be provided under applicable law, as well as invoice, payment, shipping and address details passed to Reigna Bakliyat.

2. Purposes, retention period and legal grounds

Your personal data is processed to fulfil our legal and administrative obligations; to respond to your quote and order requests; to establish a contract or employment relationship with our Company and perform our obligations under it; to communicate with you; to ensure and improve coordination, cooperation and efficiency within and between our departments; to resolve existing or future legal disputes; to answer your requests and questions; to keep our website, other electronic systems and physical premises secure; to inform you of changes in legislation or in the rules and policies adopted by our Company, or to send you other relevant notices; and to pursue our legitimate interests, such as investigating, detecting and preventing breaches of contract or law and reporting them to the relevant administrative or judicial authorities. Your personal data is not shared for commercial purposes with any other person or organisation in Türkiye or abroad without your explicit consent.

While the main basis for this processing is your explicit consent, under Article 5 of the KVKK Reigna Bakliyat may also process your data without your explicit consent where:

• processing is expressly provided for by law,
• obtaining consent is actually impossible, but processing is necessary to protect the life or physical integrity of you or another person,
• processing is directly related to the formation or performance of a contract to which Reigna Bakliyat is a party,
• processing is necessary for Reigna Bakliyat to comply with its legal obligations,
• the personal data has been made public by you,
• processing is necessary to establish, exercise or protect a right,
• processing is necessary for the legitimate interests of Reigna Bakliyat, provided that it does not harm your fundamental rights and freedoms.

Special categories of personal data are processed only with your explicit consent, where processing is expressly provided for by law, or in the other cases listed in Article 6 of the KVKK.

Your personal data is generally processed for as long as your relationship with Reigna Bakliyat continues. After that relationship ends, unless another period is required by law or you request otherwise, it is kept for 10 years, the general statute of limitations. When these periods expire, your personal data is deleted, destroyed or anonymised. However, if there is a dispute or legal proceedings between us, the relevant personal data will be kept and processed for as long as the dispute or proceedings continue.

3. Transfer of your personal data

Your personal data may be transferred, in accordance with Articles 8 and 9 of the KVKK and within legal limits, to administrative and official authorities where required by law; to third parties from whom we obtain services to run our business; to domestic and foreign institutions and organisations we cooperate with; to domestic, foreign and international organisations from which we receive services, support or consultancy, or with which we are project or programme partners; to third parties supporting us in logistics, security and information technology; to subcontractors; and to independent audit firms. These transfers serve to ensure legal and commercial security, to keep electronic and physical environments secure and to meet legal requirements.

Provided that the necessary security measures are taken and the legal conditions are met, Reigna Bakliyat may transfer, process and store your personal data on servers, hosting providers, cloud computing services and similar electronic environments used for storage, archiving and IT support, located in Türkiye or abroad, in particular in European Union countries, the United States, the United Kingdom and OECD countries.

4. Security measures

Keeping your personal data secure, whether held physically or digitally, and preventing it from being unlawfully processed or accessed, is one of our top priorities. To this end, taking into account possible risks of breach and damage, and within the limits of cost and effectiveness, Reigna Bakliyat takes all necessary administrative and technical measures, including but not limited to confidentiality agreements with staff, a defined authorisation hierarchy, internal policies and procedures, encryption, protection against viruses and malware, secure data transfer methods such as SFTP and HTTPS, and firewalls. If a data breach occurs despite these measures, it is reported to the persons concerned and to the Personal Data Protection Board as soon as possible, as required by law.

5. Your rights regarding your personal data

Under Article 11 of the KVKK, by applying to our Company you have the right to:

1. learn whether your personal data is processed,
2. request information if it has been processed,
3. learn the purpose of processing and whether the data is used in line with that purpose,
4. know the third parties in Türkiye or abroad to whom it has been transferred,
5. request correction if it is incomplete or inaccurate,
6. request its deletion or destruction once the reasons requiring its processing no longer exist,
7. request that the actions taken under items 5 and 6 be notified to the third parties to whom it has been transferred,
8. object to a result against you arising from analysis exclusively by automated systems,
9. claim compensation if you suffer damage because your data was processed unlawfully.

6. How to apply

You may send requests concerning the rights listed in Section 5, together with documents proving your identity, in person or through a notary to our address at Evren Mah. Atatürk Blv. No: 37 A, Akdeniz, Mersin, Türkiye, or by email to export@reignabakliyat.com from the email address you previously provided to our Company and that is registered in our system. You may also request our "Information Request Form" from the same address.

Your request will be answered free of charge as soon as possible and within thirty (30) days at the latest, depending on its nature. However, if the process involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board.