Privacy Policy and GDPR

Privacy Policy and GDPR

Information on Privacy and Protection of Personal Data

DİREN HOLDİNG A.Ş. (Diren) attaches maximum importance to protecting the fundamental rights and freedoms of individuals, particularly the privacy of private life as regulated in Article 20 of the Constitution. In this framework, it takes care to protect and process personal data in accordance with the law and acts with this understanding in all its planning and activities.

Information regarding the conditions for processing and transferring personal data generated or shared during the use of DİREN HOLDİNG A.Ş. websites, in accordance with the Law on the Protection of Personal Data No. 6698, is presented below.

All natural persons whose Personal Data is processed by DİREN HOLDİNG A.Ş.

This policy covers all of the following companies, which are subsidiaries of DİREN HOLDİNG A.Ş.:

  • Semes Gıda San. ve Tic. Ltd. Şti.
  • Dimes Gıda San. ve Tic. A.Ş.
  • Nobel Pazarlama LTD. ŞTİ.
  • Kazova Vasfi Diren Tarım İşlt. San. ve Tic. A.Ş.

Definitions

Website: The website located at the address “www.semes.com.tr
Law: The Law on the Protection of Personal Data No. 6698.
Personal Data: Any information relating to an identified or identifiable natural person.
Cookies: Small text files sent to the Online Visitor by servers via browsers. Cookies can track the Online Visitor’s navigation information and usage history on the Website for the purposes of providing special services to the Online Visitor, increasing service quality, improving page content, and offering promotion and marketing suggestions; in this context, they can reside on the Online Visitor’s device for a determined period.
Online Visitor / Data Subject: All natural persons accessing the Website. They are included within the Visitor person group in relevant company policies.
Board: The Personal Data Protection Board.
Server Log Files: Files where the Internet Protocol (IP) address assigned by the Internet Service Provider (ISP) is recorded along with the time of the visit to the site and the page information visited. They can be used to calculate site usage levels, determine problems with site servers, and block visitors who do not comply with the terms of service.
Pixel Tags: A system used to create aggregate statistics about site usage and activity.
Hosting Provider: Refers to natural or legal persons who provide or operate systems that host services and content in the internet environment.

Processed Personal Data

Depending on the Online Visitor’s access to the Website and the transactions performed on the Website, the processed personal data are presented below:

For Online Visitors visiting the Website:

  • Transaction Security Information (IP address, site traffic information)
  • Marketing Information (cookie records)

For Online Visitors filling out forms on the Website:

  • Identity Information (name, surname)
  • Contact Information (e-mail address, phone number, etc.)

Method and Legal Reason for Collecting Personal Data

Personal data is collected through fully automated (cookies, server log files, pixel tags, etc.) or partially automated (filling out various forms, sending resumes, etc.) methods, to be stored for the period necessary for the processing purpose.

Personal data is processed based on the explicit consent of the Online Visitor. However, personal data may also be processed without seeking explicit consent based on one of the legal reasons stipulated in Article 5, Paragraph 2 of the Law: (i) being expressly provided for by the laws, (ii) being mandatory for the data controller to fulfill its legal obligation, (iii) being mandatory for data processing for the establishment, exercise, or protection of a right, (iv) being mandatory for data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Purposes of Processing Personal Data

Personal data is processed depending on the transactions performed by the Online Visitor on the Website, in cases expressly provided for in laws or within the framework of other conditions specified in Article 5, Paragraph 2 of the Law;

  • In case the forms under the Contact heading are filled out; for the purpose of conducting/auditing business activities, tracking requests/complaints, and conducting communication activities in this scope,
  • In case the forms under the Career heading are filled out or a resume is sent; for the purpose of conducting the application processes of employee/intern candidates,
  • For the purpose of conducting information security processes regarding "Site traffic information" (Furthermore, the Hosting Provider has an obligation to record and store site traffic information pursuant to Law No. 5651 and other legislation),
  • Information obtained via Cookies is processed for the purposes of conducting marketing analysis processes, conducting advertising/campaign/promotion processes, and conducting information security processes.

The processing of personal data for the purpose of sending commercial electronic messages is subject to the explicit consent of the Online Visitor.

Third-party cookies may also be used on the Website along with cookies that are mandatory for the operation and security of the site. The Online Visitor may choose not to accept cookies or to receive a warning by changing their browser settings. When the use of cookies is stopped, certain functions of the Website may not work properly.

Information on how to manage (and disable) cookies in some commonly used browsers can be found at the following links:

To Whom and For What Purpose Processed Personal Data May Be Transferred

In the presence of one of the conditions in Article 5, Paragraph 2 of the Law, personal data may be transferred to DİREN HOLDİNG A.Ş. group companies, subsidiaries, affiliates, business partners, and authorized public institutions and organizations, limited to the purposes specified in the fourth article of this text, within the framework of the conditions specified in Articles 8 and 9 of the Law, provided that necessary security measures are taken.

In the absence of one of the conditions in Article 5, Paragraph 2 of the Law, the transfer of Personal Data is subject to the explicit consent of the Online Visitor.

Rights of the Data Subject Pursuant to Article 11 of the Law

DİREN HOLDİNG A.Ş. informs the data subject (personal data owner) of their rights pursuant to Article 10 of the Law; provides guidance on how to exercise such rights, and carries out the necessary internal functioning, administrative, and technical arrangements for all these.

Pursuant to Article 11 of the Law, personal data owners have the right to;

  • Learn whether their personal data is processed,
  • Request information if their personal data has been processed,
  • Learn the purpose of processing their personal data and whether they are used in accordance with their purpose,
  • Know the third parties to whom their personal data is transferred domestically or abroad,
  • >Request rectification of their personal data if it is incomplete or incorrectly processed,
  • Request the deletion or destruction of their personal data within the framework of the conditions stipulated in Article 7 of the Law,
  • Request notification of the operations made pursuant to subparagraphs (d) and (e) of Article 11 of the Law (rectification and destruction of data) to third parties to whom personal data has been transferred,
  • Object to the occurrence of a result against themselves by analyzing the processed data exclusively through automated systems,
  • Demand compensation for the damage in case they suffer damage due to the unlawful processing of their personal data.

Requests and applications regarding the implementation of the Law can be submitted in writing by filling out the Personal Data Owner Application Form and depositing it personally to the address “Emek Mah. Sıvat Cad. No:4 Sancaktepe / İSTANBUL”, or sent via Notary Public, or transmitted electronically by using a registered electronic mail (KEP) address, secure electronic signature, or mobile signature.

Requests and applications may also be transmitted to the KEP address of DİREN HOLDİNG A.Ş. and Group Companies included in the attachment, if there is an electronic mail address previously notified to DİREN HOLDİNG A.Ş. by the personal data owner and registered in DİREN HOLDİNG A.Ş.’s system.

In requests and applications, it is mandatory to include:

  • Name, surname, and if the application is written, signature,
  • For Turkish Republic citizens, T.C. identity number; for foreigners, nationality,
    passport number, or identity number if available,
  • Residential or workplace address for notification,
  • Electronic mail address, telephone, and fax number for notification, if available,
  • Subject of the request.

DİREN HOLDİNG A.Ş. concludes the requests in the application free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction in question requires an additional cost, the fee in the tariff determined by the Board may be charged.

DİREN HOLDİNG A.Ş. may accept the request or reject it by explaining its reasoning and notifies the relevant person of its response in writing or electronically. In case the request in the application is accepted, DİREN HOLDİNG A.Ş. fulfills the requirement as soon as possible and informs the relevant person. In case the application arises from the error of DİREN HOLDİNG A.Ş., the fee collected is refunded to the relevant person.

In cases where the application is rejected, the response given is found insufficient, or the application is not answered in due time; the relevant person has the right to file a complaint to the Board within thirty days from the date of learning the response and in any case within sixty days from the date of application.

Security of Data

DİREN HOLDİNG A.Ş. is obliged to take all necessary administrative and technical measures to prevent the unlawful processing of personal data and unlawful access to personal data, to ensure the preservation of personal data, and to ensure the appropriate security level.

In case of redirection to other sites or applications via the website, DİREN HOLDİNG A.Ş. does not have information regarding the compliance of the redirected sites and applications with the legislation on the protection of personal data and is not under any responsibility regarding their privacy policies and contents.

The Online Visitor declares that by using the Website, they have read all the conditions written in this information text and have been enlightened about the processing of their personal data.