1. Identity of the Data Controller:

As Aslı Mağazacılık ve Unlu Mamuller Üretim Anonim Şirketi (“ASLI” or “Company”), we show utmost sensitivity regarding the security and confidentiality of your personal data. With this awareness and as the data controller under the Law on the Protection of Personal Data No. 6698 (“KVKK” or “Law”), we would like to inform you about how your data is processed and with whom and under what circumstances it may be shared in order to ensure that we can act in accordance with the Law regarding the personal data we obtain.

2. Processing of Personal Data and Purposes of Processing

Your Personal Data is processed by our Company to ensure that services are provided in the best possible way. In this context,

During your visit to our website, the following data is collected.

Your Identity Information: Name, Surname,

Your Contact Data                     : Email address, phone number.

If you become a member, the data listed below is collected.

Your Identity Data: Name, surname, gender, date of birth,

Your Contact Data                     : Email address, phone number.

Professional Experience                   : Profession, Education Status              

Your data is processed limited to the purposes listed below.

• Fulfilling our obligations arising from the legislation to which our company is subject,
• Fulfilling information and reporting obligations when requested by official and/or administrative authorities,
• Ensuring that e-commerce activities are carried out in accordance with the relevant legislation,
• Providing services in e-commerce contracts and improving the quality of these services, performing the company's sales, after-sales support and marketing activities, preparing demand forecasts, performing balancing and reconciliation market transactions,
• To carry out the necessary studies to customize the products and services offered by our Company and its affiliates according to the tastes, usage habits and needs of personal data owners and to recommend them to personal data owners, to use them within the scope of profiling/segmentation studies, data enrichment, market research studies, to offer special discounts, promotions and campaigns to employees of the Company and its affiliates and to inform them about them.
• Ensuring legal and commercial security,
• Management of regulation and compliance and legal processes,
• Auditing of company activities by relevant institutions,
• Maintaining relations with public institutions and other organizations,
• Conducting and executing occupational health and safety, customer relations and call center processes,
• Carrying out support services, responsibilities, customer satisfaction, and corporate communication activities,
• Planning and execution of corporate sustainability, corporate governance, strategic planning and information security processes,
• Preparation of applications,
• Carrying out financial operations and monitoring financial matters,
• Responding to consumer complaints,
• Carrying out lawsuits and enforcement proceedings to which our company is a party,
• Carrying out consultancy, business partnership, purchasing and sales transactions,

Your personal data is used and processed by the COMPANY, the data controller, in a serious confidentiality within the framework and supervision of the GDPR, for the purpose of serving you. While processing your data, the COMPANY complies with the law and the rule of honesty, and takes care to ensure that the data is accurate, not used outside the scope of processing, processed for legitimate purposes, kept up-to-date and stored for a reasonable period of time required for the intended purpose.

3. To Whom and For What Purposes Do We Transfer Your Personal Data?

Your personal data may be shared with the parties that need to be shared due to the nature of the activities we carry out within the scope of the applications to be made to increase the quality of the service we offer to you, to the extent permitted by the legislation and required by our business processes, with the parties and legally authorized official authorities, institutions and organizations permitted by the relevant legislation and not limited to those listed, with relevant public legal entities, organizations with whom we have a dominant - affiliated company relationship, our domestic partners - affiliates, banks and financial institutions, organizations from which we receive services, cooperate and are program partners in order to carry out our activities, within the framework of the personal data processing conditions and purposes specified in Article 8 of the GDPR. These data are processed for the period required by our electricity supply activities within the framework of our policies and procedures determined in accordance with the Regulation on the Deletion, Destruction or Anonymization of Personal Data, and are deleted when you no longer have a relationship with the COMPANY and there is no reasonable or legal requirement or compliance.

4. What is the Method and Legal Reason for Collecting Your Personal Data?

Your personal data may be collected from the verbal or written information you provide to our Company, our e-mail address, website, customer transaction centers, customer service centers, social media accounts, dealers, official institutions and organizations, applications and software used within the scope of Company activities, by automatic or non-automatic methods, based on and limited to the legal reasons specified in Article 5 of the Law, such as being explicitly provided for in the laws, establishing, exercising or protecting a right, establishing or performing a contract, the legal obligation of the data controller, the legitimate interest of the data controller and your explicit consent, in accordance with the purposes explained in Article 2 of this Disclosure Text and the basic principles stipulated in the Law.

5. Your Rights Regarding the Protection of Personal Data

You may exercise the following rights regarding the processing of your personal data by making a written request to our Company. Requests submitted within this scope will be finalized within thirty days.

As the personal data owner, in accordance with Article 11 of the Personal Data Protection Law;

• To learn whether your personal data is being processed,
• Request information regarding your personal data if it has been processed,
• To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
• Knowing the third parties to whom your personal data is transferred, either domestically or abroad,
• Request correction of your personal data if it is processed incompletely or incorrectly,
• Requesting the deletion or destruction of your personal data, even if it has been processed in accordance with the provisions of the Personal Data Protection Law and other relevant laws, if the reasons requiring processing are eliminated,
• To request that third parties to whom your personal data has been transferred be notified of the correction, deletion or destruction of your personal data,
• To object to a result that is to your detriment as a result of your processed data being analyzed exclusively through automated systems,
• We would like to inform you that you have the right to demand compensation for damages in case you suffer damages due to the unlawful processing of your personal data.

In order to exercise these rights stipulated in Article 11 of Law No. 6698, you must submit your petition containing your request and documents proving your identity in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller” to our company;

-In writing to the address Erikli Pınar Trench Area Y.Dudullu OSB Mah. 1st Cad.No:4 Inner Door:1 Ümraniye/İstanbul

-You can forward it to our company's e-mail address info@asli.com.tr.

In line with the request submitted, your application will be answered correctly and within the legal period, free of charge. If the transaction requires an additional cost, the transaction will be carried out in accordance with Article 7 titled fee of the “Communiqué on the Procedures and Principles of Application to the Data Controller”.

Requests and notifications coming from outside the specified channels will not be taken into consideration. In accordance with Article 7 of the Communiqué, if our company responds to your application in writing, no fee is charged for up to ten pages. If the request is rejected, the reason(s) for rejection will be justified in writing or electronically.

6. Changes to Data Privacy Principles

In case of any changes in the legislation, necessary announcements will be made on our website https://asli.com.tr/ and our Company reserves the right to make changes in its policies and procedures regarding personal data to ensure compliance with the changes in legislation.

Our employees can visit https://kariyerim.eksim.com.tr/kvkk/aydinlatma-metni for detailed information.

Best regards,