Data Controller This Privacy Notice (the “Notice”) aims to inform you, our valued website visitors, about the collection methods, processing purposes, legal reasons, and the parties to whom and purposes for which your personal data may be transferred, as well as your rights regarding your personal data, as per the obligation of disclosure outlined in Article 10 of the Law No. 6698 on the Protection of Personal Data (the “Law”), which we, Hf Su Ürünleri, are subject to.

Methods of Collecting Personal Data and Legal Grounds In the event you visit our website, data such as identity (name, surname), contact (email, phone), and your message and transaction security (IP address, traffic data, log records, etc.) provided through the “Contact” section’s “Write to Us” section are processed under the legal grounds stated in Article 5 of the Law, including the necessity of processing for the legitimate interests of the data controller, compliance with legal obligations, and not violating the fundamental rights and freedoms of the data subject. Additionally, you can review our Cookie Policy for details on cookies which are also considered personal data.

Purposes of Processing Personal Data Your personal data is processed for purposes such as tracking requests and complaints received from you, ensuring business continuity and customer satisfaction, conducting communication activities, and, if necessary, providing information to authorized public institutions and organizations, and will be retained for the maximum period required by the relevant legal provisions.

Transfer of Personal Data to Third Parties Your personal data is shared with third parties only for the purposes mentioned above, in accordance with Article 8 of the Law, and will not be shared with any other third parties.

Your Rights According to Article 11 of the Law, you have the right to:

• Learn whether your personal data is processed,
• Request information if your personal data has been processed,
• Learn the purpose of processing your personal data and whether it is used in accordance with that purpose,
• Know the third parties to whom your personal data has been transferred, both domestically and internationally,
• Request correction of incomplete or inaccurate personal data and to request that such correction be notified to third parties to whom the personal data has been transferred,
• Request deletion or destruction of your personal data when the reasons for processing no longer exist, and to request that such deletion or destruction be notified to third parties to whom the personal data has been transferred,
• Object to any result arising from the analysis of processed data solely through automated systems that is detrimental to the individual,
• Request compensation for damages incurred due to unlawful processing of personal data.

You can submit your requests regarding these rights by preparing an application in accordance with the Notification on the Principles and Procedures of Application to the Data Controller and sending it to us through the addresses provided below. Please verify the current application methods before making a request.