Turkish Personal Data Protection Law no. 6698  (KVKK)

“Pepino | Coffee – Patiserrie – Fruit – Cocktail” : Information Text for Persons Purchasing Products or Services under the Law No. 6698 on the Protection of Personal Data.

Identity of the Data Controller

“Pepino | Coffee – Patiserrie – Fruit – Cocktail” (Pepino – pepinococktail.com) acts as a data controller within the framework of the Law No. 6698 on the Protection of Personal Data (“Law”) regarding the personal data it processes in its activities. Pepino’s identity and contact information as the data controller are provided below.

Address	Oba Mh. Hayri Doğan Cd. No: 5BB 07400 Alanya/Antalya
Internet Address	pepinococktail.com
E-Mail Address	kvkk@pepinococktail.com
Phone Number	+90 533 978 49 88

A. Processed Personal Data, Purpose of Data Processing, Collection Method and Legal Reason for Processing

The legal reasons our company relies on during data processing are as follows:

• Existence of explicit consent (“Art. 5/1, Art. 6/2”).
• Explicitly provided for in the laws (“Art. 5/2-a”).
• It is mandatory for the protection of the life or physical integrity of the person who is unable to express his/her consent due to a de facto impossibility or whose consent is not legally valid (“Art. 5/2-b”).
• Provided that it is directly related to the establishment or performance of a contract, the processing of personal data belonging to the parties to the contract is necessary (“Art. 5/2-c”).
• It is mandatory for the data controller to fulfill his/her legal obligation (“Art. 5/2-ç”).
• It is made public by the relevant person (“Art. 5/2-d”).
• Data processing is mandatory for the establishment, exercise or protection of a right (“Art. 5/2-e”).
• Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person (“Art. 5/2-f”).

Purpose of Data Processing	Personal Data Processed	Conditions of Data Processing	Data Collection Methods
Order and Return Process	Name Surname TCKN Address Telephone Number	Art. 5/2-c, Art. 5/2-e, Art. 5/2-f.	Verbally from the relevant person and via e-mail (Non-automatic means)
Creation of Current Card	Name Surname Address TCKN E-Mail Telephone Number Title Bank Account Number Payment Amount	m. 5/2-f.	Verbally from the relevant person and via e-mail or form (Non-automatic means)
Online Sales-Individual Application	Name Surname E-Mail Cookie registration	m. 5/2-c. m. 5/1.	Through the internet page (Automatic and partially automatic means)
Online Sales-Individual Sales	Name Surname E-Mail Address Phone Number Cookie Registration	m. 5/2-c. m. 5/1.	Through the internet page (Automatic and partially automatic means)
Online Sales-Dealership Application	Name Surname E-Mail Phone Number TCKN Address Tax Office Tax Number Cookie Registration	m. 5/2-c. m. 5/1.	Through the internet page (Automatic and partially automatic means)
Proforma Approval Process	Name Surname Phone Number TCKN	m.5/2-c, m.5/2-f.	Proforma approval (Partially automatic means)
Execution of Invoice Transactions (e-Invoice and e-Archive Transactions)	Name Surname Address Invoice Detail TCKN Phone Number E-Mail Account Number Information	m.5/2-a, m.5/2-c, m.5/2-f.	Web via portal and software (Partially automatic and automatic means)
Execution of Collection Transactions	Name Surname Telephone Number Check Information Promissory Note TCKN Iban Number	m.5/2-c, m.5/2-f.	Physical means (Non-automatic means)
Contract Follow-up	Name Surname Signature	m.5/2-c.	Physical means (Non-automatic means)
Report Notification	Name Surname TCKN Invoice Amount	m.5/2-a, m.5/2-c, m.5/2-ç.	Through the system (Partially automatic means)
Execution of Enforcement Procedures	Name Surname TCKN Deed Mother-Father Name Place of Birth Date of Birth Vehicle Plate Enforcement File Number Signature	m.5/2-a, m.5/2-c, m.5/2-e, m.5/2-f.	Physically and via e-mail (Non-automatic means)

B. Transfer of Personal Data

Your processed personal data can be transferred for the above purposes and under the conditions determined by the KVKK:

Purpose of Data Transfer	Transferred Recipient Groups
For the purpose of performing invoice transactions	Transferred to relevant and authorized public institutions and organizations.
Payments can be made	Transferred to relevant banks.
For the purpose of following up case files, enforcement and mediation processes	Transferred to law firms, courts, mediation offices, enforcement offices, tax offices, relevant banks and authorized public institutions and organizations from which consultancy is received.
For the purpose of online sales management	Transferred to relevant supplier companies.
For the purpose of declaration transactions	Transferred to authorized public institutions and organizations (Revenue Administration).
For the purpose of receiving system – software service	Transferred to relevant supplier companies is transferred.
For the purpose of carrying out audit processes	It is transferred to the relevant and authorized public institutions and organizations.

C. Rights of the Relevant Person

Everyone has the following rights in accordance with Article 11 of the KVKK;

1. To learn whether personal data has been processed,
2. To request information if personal data has been processed,
3. To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
4. To know the third parties to whom personal data is transferred domestically or abroad,
5. To request correction of personal data if it is processed incompletely or incorrectly and to request notification of the transaction made in this context to third parties to whom personal data is transferred,
6. To request deletion or destruction of personal data if the reasons requiring processing are eliminated despite the fact that it has been processed in accordance with the provisions of the KVKK and other relevant laws and to request notification of the transaction made in this context to third parties to whom personal data is transferred,
7. To object to the emergence of a result against the person by analyzing the processed data exclusively through automated systems,
8. To request compensation for the damages incurred due to the processing of personal data in violation of the law requesting its elimination.

Everyone may submit their requests regarding these rights to our Company in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Requests will be evaluated and decided free of charge as soon as possible and ultimately within thirty (30) days at the latest. If the evaluation and decision-making process requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board will be taken as basis.