PERSONAL DATA PROTECTION (KVKK) AND GDPR PRIVACY POLICY

1. Identity of the Data Controller

In accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the European Union General Data Protection Regulation ("GDPR"), your personal data may be processed by ETKO Ekolojik Tarım Kontrol Organizasyonu LTD ŞTİ ("Company") functioning as the Data Controller, within the scope described below.

Data Controller: ETKO Ekolojik Tarım Kontrol Organizasyonu LTD ŞTİ

Mersis No: 0381023693100017

Address: Kazımdirik Mahallesi 160 Sokak No:13 Daire:3 Bornova/Izmir, Türkiye

2. Purpose of Processing Personal Data

Your collected personal data (identity, contact, transaction security data, etc.) is processed for the purposes of enabling you to benefit from the certification, control, and consultancy services provided by our Company; fulfilling your requests; allowing you to communicate via our website; fulfilling our legal obligations, and improving our service quality.

3. To Whom and For What Purpose Processed Data May Be Transferred

Within the limits stipulated by legal regulations, your personal data may be transferred to our business partners, suppliers, legally authorized public institutions and organizations to carry out our activities, and to our legal advisors to resolve legal disputes, in accordance with Articles 8 and 9 of the KVKK and GDPR requirements.

4. Method and Legal Basis for Collecting Personal Data

Your personal data is collected through contact forms on our website, email correspondence, and other electronic media. This data is processed based on the legal grounds set forth in KVKK Article 5/2 and GDPR Article 6, including: "it is necessary for the performance of a contract", "it is necessary for compliance with a legal obligation to which the data controller is subject", and "it is necessary for the purposes of the legitimate interests pursued by the data controller, provided that such interests are not overridden by the fundamental rights and freedoms of the data subject."

5. Rights of the Data Subject (Under KVKK Article 11 and GDPR)

As a personal data owner, you have the right to:

Learn whether your personal data is being processed,
Request information if your personal data has been processed,
Learn the purpose of processing and whether they are used in accordance with their purpose,
Know the third parties to whom personal data is transferred locally or abroad,
Request correction if incomplete or inaccurately processed (and exercise the "Right to be Forgotten" under GDPR),
Request deletion or destruction of personal data under the conditions stipulated by KVKK and GDPR,
Object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems,
Request compensation for the damage arising from the unlawful processing of your personal data.

6. Contact

You can submit your requests regarding your rights in writing to our Company address specified above or to our Company's official email address. Depending on the nature of your request, it will be concluded free of charge as soon as possible and within thirty (30) days at the latest.