Law on the Protection of Personal Data

GİGİSFOOD GIDA RESTORAN SANAYİ VE TİCARET ANONİM ŞİRKETİ CLARIFICATION TEXT ON THE PROTECTION AND PROCESSING OF PERSONAL DATA AND PRIVACY POLICY

This Privacy Policy and Clarification Text sets out the principles regarding the processing of your personal data by GİGİSFOOD GIDA RESTORAN SANAYİ VE TİCARET ANONİM ŞİRKETİ (“Company”), acting as the data controller, in accordance with the Law on the Protection of Personal Data No. 6698 (the “Law”) and relevant legislation.

What is Personal Data?

Pursuant to Article 3 of the Law on the Protection of Personal Data No. 6698, personal data refers to any information relating to an identified or identifiable natural person. In our capacity as the data controller under the Law on the Protection of Personal Data No. 6698, we will record, store, update, process, and, where permitted by legislation, disclose and transfer your personal data in accordance with the law. Our explanations regarding our personal data management processes are presented in this text.

1. Data Controller and Representative

Your personal data is processed by the data controller GİGİSFOOD GIDA RESTORAN SANAYİ VE TİCARET ANONİM ŞİRKETİ in accordance with the requirements of current technology and via the methods specified below.

2. Clarification Text on the Processing of Personal Data

This “Clarification Text” is presented by our Company in our capacity as the Data Controller, pursuant to the Law on the Protection of Personal Data No. 6698 (“KVKK”), within the framework of Article 10 titled “Data Controller’s Obligation to Inform” and Article 11 titled “Rights of the Data Subject” as set forth in the KVKK; in order to inform you regarding the purposes for which your personal data will be processed, to whom and for what purposes your processed personal data may be transferred, the method and legal basis of collecting your personal data, and your other rights listed in Article 11 of the KVKK, and to obtain your consent on the following matters.

We place importance on protecting the confidentiality and security of the personal data you provide to us. Accordingly, we take necessary technical and administrative security measures to protect your personal data against unauthorized access, damage, loss, or disclosure.

3. Purposes and Legal Basis for Processing Personal Data

Your collected personal data may be transferred to our business partners, suppliers, shareholders, affiliates, legally authorized public institutions, and private individuals within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698 for the purposes of: carrying out the necessary work by our business units to enable you to benefit from the products and services offered by our Company; customizing the products and services offered by our Company according to your tastes, usage habits, and needs; ensuring the execution of our Company’s human resources policies; ensuring the follow-up and execution of customer satisfaction programs and internet applications; performing analytical and reporting applications, sales, and operation systems, and ensuring the legal and commercial security of our Company and those who have a business relationship with our Company; and determining and implementing our Company’s commercial and business strategies.

Furthermore, the benefits to be provided, electronic commercial communications, and notifications will be presented to you via channels such as telephone, text message, SMS, MMS, video, e-mail, and mail using your personal data. All your personal data and information regarding your transactions may be transferred to all kinds of applications and platforms that enable digital marketing in the internet environment for GİGİSFOOD GIDA RESTORAN SANAYİ VE TİCARET ANONİM ŞİRKETİ, market research companies, firms providing analytical data processing services, their branches, agencies, and franchises, as well as the infrastructure providers of these companies and other companies from which they receive services (such as shipping companies, call centers, consultants), and may be processed by these persons for the realization of the aforementioned purposes.

Your personal data may also be transferred between different platforms and your personal data on these platforms may be combined and processed.

4. Retention Period of Personal Data

The Company retains personal data only for the period specified in the relevant legislation or necessary for the purpose for which it is processed. In this context, we first determine whether a period is stipulated for the storage of personal data in the relevant legislation, and if a period is determined, we act in accordance with this period; if no period is determined, we store personal data for as long as is necessary for the purpose for which it is processed. At the end of the period or when the reasons requiring its processing disappear, personal data is deleted, destroyed, or anonymized.

5. Method and Legal Basis for Collecting Personal Data

Your personal data is collected by our Company within the scope of all services provided and the purposes stated above, through different channels and based on different legal grounds, in order to improve the products and services we offer and to conduct our commercial activities; it is collected verbally, in writing, or in electronic environments such as mobile applications, e-mail, text messages, and phone calls. Your personal data collected on this legal basis may also be processed and transferred for the purposes stated in clauses (b) and (c) of this Clarification Text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698.

6. Transfer / Sharing of Personal Data

Your Personal Data may be transferred within the framework of the conditions and purposes stated in Articles 8 and 9 of the KVK Law to alumni associations, Company officials, shareholders, employees, business partners, persons or 3rd parties from whom services are received, legal, financial, and tax consultants, auditors, consultants, organizations or individuals, all public companies and organizations authorized by law such as the Social Security Institution (SGK), ministries, judicial authorities, and/or abroad for the purposes of fulfilling the Company’s activities, determining and implementing strategies, and ensuring the execution of human resources policies. In case of transfer abroad, it is required that there is adequate protection in the foreign country where the personal data will be transferred; in the absence of adequate protection, compliance with the requirements for the data controllers in Turkey and the relevant foreign country to undertake adequate protection in writing and the existence of the Board’s permission will be ensured.

7. Methods of Application to the Data Processor and Data Controller

As personal data owners, you may convey your requests regarding your rights to our Company through the methods regulated below in this Clarification Text. In this context, as personal data owners, you have the right to;

a) Learn whether your personal data is being processed,

b) Request information if your personal data has been processed,

c) Learn the purpose of processing your personal data and whether it is used in accordance with its purpose,

d) Know the third parties to whom your personal data is transferred domestically or abroad,

e) Request correction of your personal data in case of incomplete or incorrect processing,

f) Request the deletion or destruction of your personal data,

g) Request notification of the operations performed pursuant to the correction, deletion, or destruction of your personal data to third parties to whom your personal data has been transferred,

h) Object to the emergence of a result against you due to the analysis of your personal data exclusively through automated systems, and

i) Request compensation for damages in case you suffer damage due to unlawful processing of your personal data.

Our Company concludes your requests free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, a fee may be charged. Our Company may accept the request and process it or reject the request in writing by explaining its reasoning.

Requests you make in this context must be in writing within the scope of the Law on the Protection of Personal Data No. 6698.

You can direct your information and application requests to us by clicking the Application Form.

You can also deliver it in person to the Company address, or send it via notary public or other methods specified in the KVKK. Applications received via other channels will not be accepted.

Explicit Consent Text

I have read and understood the GİGİSFOOD GIDA RESTORAN SANAYİ VE TİCARET ANONİM ŞİRKETİ Customer Personal Data Protection and Processing Clarification Text.

In this context, I consent to the processing of my personal data for the purpose of carrying out direct or indirect marketing activities, including the planning and execution of market research activities for the sale and marketing of products and services, marketing processes of products and services, activities aimed at customer satisfaction and experience, campaign, promotion, and advertising processes, and marketing processes of Gigi's products and services, and in this context, I consent to the sending of advertising, promotion, campaign, and similar commercial electronic messages to my contact information specified above and to the sharing of this data with third parties from whom the Company receives services, limited to this purpose.

You can unsubscribe easily and free of charge via the methods included in the electronic messages sent by www.gigis.com.tr and you can prevent the sending of commercial electronic messages to you at any time.