As Baypınar Unlu Mamülleri (“Baypınar” or the “Company”), we care about the security of the personal data of people who visit the baypinar.com website (the “Site”) and use its contact and franchise application forms. This notice has been prepared to inform you, in our capacity as data controller, under Law No. 6698 on the Protection of Personal Data (“KVKK”) and related legislation.
1. Data Controller
- Company: Baypınar Unlu Mamülleri
- Address: Fevziçakmak Mah. Özlem Cad. No: 22/E, 42050 Karatay / Konya, Türkiye
- Phone: +90 332 351 39 00
- E-mail: [email protected]
2. Personal Data Processed
- Contact form: name and surname, e-mail address, subject and content of the message.
- Franchise application form: name and surname, e-mail address, phone number, age and address.
- Transaction security details: IP address and date and time of the form submission. The IP address is used for a short period to prevent misuse and automated (bot) submissions.
Please do not include special categories of personal data (health, religion, ethnic origin, etc.) in optional fields or in your message.
3. Purposes of Processing
- Reviewing and responding to the questions, requests, suggestions and complaints you send through the contact form,
- Evaluating your franchise application, arranging a meeting with you and carrying out the application process,
- Keeping the Site and its forms secure and preventing misuse and unsolicited (spam) submissions,
- Fulfilling legal obligations and responding to lawful requests from authorised institutions.
4. Legal Grounds and Method of Collection
Your personal data is collected electronically when you fill in the forms on the Site and is processed on the following legal grounds set out in Article 5(2) of the KVKK:
- (c) it is directly related to the conclusion or performance of a contract (evaluating a franchise application),
- (ç) it is necessary for the data controller to fulfil its legal obligations,
- (f) it is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (responding to your request, keeping the Site secure).
5. Transfer of Personal Data
Your personal data may be transferred to the following recipients, limited to and in proportion with the purposes above:
- E-mail delivery service providers used to forward form submissions to our Company by e-mail,
- The server and IT service providers hosting the Site,
- Authorised public institutions and judicial authorities, upon request.
The servers of the e-mail delivery service provider may be located abroad. In that case, your personal data is transferred abroad in accordance with the conditions and procedures set out in Article 9 of the KVKK.
6. Retention Period and Security
Information sent through the contact form is retained for 2 (two) years after your request has been concluded, and franchise application information is retained for 2 (two) years after the application has been concluded; if a franchise agreement is signed, the retention periods in the relevant legislation apply. IP address records used to prevent misuse are deleted within a short time (at most a few days). At the end of these periods your personal data is deleted, destroyed or anonymised. Technical and administrative measures such as encrypted communication (SSL/TLS) and access authorisation are taken to keep your data secure.
7. Cookies and Third-Party Services
The Site does not use advertising or marketing cookies and does not track visitors. Some pages use third-party services to display content: Google Fonts for typefaces, OpenStreetMap for the sales points map and Google Maps for the location map on the contact page. To deliver content to your browser, these services may process technical information such as your IP address on their own servers; Google Maps may use its own cookies. Their data processing is subject to the privacy policies of the respective providers.
8. Rights of the Data Subject
Under Article 11 of the KVKK, you have the right to apply to our Company to:
- Find out whether your personal data is being processed and, if so, request information about it,
- Find out the purpose of processing and whether the data is used in line with that purpose,
- Know the third parties, in Türkiye or abroad, to whom the data is transferred,
- Request correction if the data is incomplete or inaccurate,
- Request deletion or destruction of the data under the conditions set out in Article 7 of the KVKK,
- Request that any correction, deletion or destruction be notified to the third parties to whom the data was transferred,
- Object to a result against you arising from the analysis of the data exclusively by automated systems,
- Claim compensation for damage suffered due to unlawful processing.
9. How to Apply
You may submit requests regarding your rights, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, in writing together with information that identifies you, to Fevziçakmak Mah. Özlem Cad. No: 22/E, 42050 Karatay / Konya, Türkiye, or by e-mail to [email protected]. Applications are concluded free of charge within 30 (thirty) days at the latest, depending on the nature of the request.