Meşpa Packaging Personal Data Policy

This personal data policy has been prepared by Meşpa Ambalaj to explain the purposes for which personal data obtained through the website, orders, membership, communication, and sales processes is processed, to whom it may be transferred, how it is protected, and the rights of data owners. Meşpa Ambalaj adheres to the Law No. 6698 on the Protection of Personal Data and related legislation in the processing of personal data.

Within the scope of the personal data policy , personal data is processed in accordance with the law and principles of fairness, accurately and, where necessary, up-to-date, for specific, clear and legitimate purposes, in a manner that is relevant to the purpose for which it is processed, limited and proportionate. Data is retained for the period stipulated in the relevant legislation or for the period necessary for the purpose of processing.

Personal Data Collected

Within the scope of the personal data policy , name, surname, telephone number, email address, delivery and billing address, order and payment transaction information, customer transaction records, request and complaint information, IP address, device and browser information, cookie records, and website usage data may be processed. It is essential that unnecessary personal data is not requested unless required by legislation or the nature of the process.

Purposes of Processing Personal Data

The personal data policy covers the following purposes: conducting membership transactions, receiving and delivering orders, providing products and services, providing after-sales support, resolving customer requests, managing invoicing and accounting processes, processing payments, ensuring information security, fulfilling legal obligations, and responding to requests from authorized institutions.

Within the scope of the personal data policy , marketing, campaign, e-newsletter or commercial electronic communication activities are carried out only under the conditions permitted by the relevant legislation. In processes requiring explicit consent, consent is obtained separately; the information text and explicit consent are presented independently.

Methods and Legal Grounds for Collecting Personal Data

Within the scope of the personal data policy , data may be collected through Meşpa Ambalaj's website, membership and order forms, contact forms, call and messaging channels, e-mail, social media, sales channels, shipping and delivery processes, cookies, and similar electronic or physical channels.

Personal data is processed based on legal grounds stipulated in the KVKK (Law on Protection of Personal Data), such as the establishment or performance of a contract, the fulfillment of the data controller's legal obligations, the establishment, exercise or protection of a right, the legitimate interests of the data controller, and, where necessary, explicit consent. The personal data policy is based on the principle of separately evaluating the appropriate legal ground for each data processing activity. It is the data controller's responsibility to inform data subjects when their personal data is being processed.

Transfer of Personal Data

Within the scope of the personal data policy , personal data may be transferred to cargo and logistics companies for the execution of order and delivery processes, to payment institutions and banks for payment processing, to service providers for the operation of e-commerce infrastructure, to suppliers from whom information technology and hosting services are obtained, to consultants within the scope of financial and legal obligations, and to authorized public institutions to the extent necessary.

If Meşpa Ambalaj utilizes IdeaSoft services in its e-commerce infrastructure, the necessary data may be shared with IdeaSoft Yazılım San. ve Tic. A.Ş. for the purpose of providing the service, in accordance with the Personal Data Policy . Data minimization and purpose limitation principles are observed in each transfer.

Transfer of Personal Data Abroad

In cases where personal data needs to be transferred abroad within the scope of the personal data policy, Article 9 of the KVKK (Law on Protection of Personal Data) and related secondary regulations are taken into consideration. Transfers abroad are carried out based on legal requirements such as the existence of a decision of adequacy, the provision of appropriate safeguards, or the presence of one of the limited exceptional circumstances specified in the Law.

If hosting, analysis, communication, or similar services used within the scope of the personal data policy result in the transfer of data abroad, the legal basis for the transfer and the necessary safeguard mechanisms will be evaluated separately. If necessary, appropriate safeguard methods such as standard contracts published by the Personal Data Protection Board may be utilized.

Storage and Security of Personal Data

Appropriate technical and administrative measures are implemented to prevent the unlawful processing or access of data processed under the personal data policy and to ensure the preservation of data. These measures may include access authorizations, password and account security, record and log management, backup, network and system security, and personnel awareness.

In accordance with the personal data policy, personal data whose retention period has expired and for which there is no other legal reason requiring processing will be deleted, destroyed, or anonymized in accordance with the relevant legislation.

Cookies and Website Usage

The personal data policy also covers data processing activities carried out due to mandatory, performance, functionality, analysis, or advertising cookies used on the website. Where necessary, user preferences are collected regarding non-mandatory cookies, and these cookie preferences are presented in a manageable format.

Data Subject's Rights

Within the scope of the personal data policy , personal data owners have the right, pursuant to Article 11 of the KVKK (Law on Protection of Personal Data), to learn whether their personal data is being processed, to request information if it is being processed, to learn the purpose of the processing and whether it is being used in accordance with that purpose, to know the third parties to whom it has been transferred, to request the correction of incomplete or inaccurate data, to request its deletion or destruction when the conditions are met, to request that these actions be notified to the third parties to whom the data has been transferred, to object to a result that is detrimental to them as a result of analysis carried out by automated systems, and to request compensation for damages if they suffer harm due to processing contrary to the law.

Application Methods

Requests regarding the personal data policy can be submitted to Meşpa Ambalaj in accordance with Article 13 of the Personal Data Protection Law and the Communiqué on the Procedures and Principles for Applications to the Data Controller. Applications can be made in writing, along with information suitable for verifying the applicant's identity, or through other methods accepted by the legislation. The principles regarding the application procedure are regulated by the Personal Data Protection Authority.

Data Controller Information

Within the scope of the personal data policy, the data controller information is as follows:

Brand: Meşpa Packaging
Trade Name: MUSTAFA GUNAY
Address: MÜRSEL MAH. ROTA CAD. YAMAÇ SITESI E BLOK NO: 37 /5 MUDANYA/ BURSA
Email: mustafagunay@agunay.com
Phone: 05414594402
Commercial Registry Number: 427095662

This personal data policy may be updated in line with legislative changes or changes in Meşpa Ambalaj's personal data processing processes. The updated text will be effective from the date of its publication on the website.

The personal data policy may be updated in line with legislative changes or changes in Meşpa Ambalaj's personal data processing processes. Meşpa Ambalaj may amend the provisions of its personal data policy in accordance with current legislation and changes in data processing activities.

Users can follow updates to the personal data policy on this page. The updated text is effective from the date it is published on the website.