LIGHTING TEXT

Fabcio website users, by completing the electronic membership form, are also enlightened by Fabcio Company, as the data controller, about the recording, processing, transfer, deletion, destruction and anonymization of their personal data transmitted to us through our website for the purposes described below.
This notification is made within the scope of the provisions of the data controller’s disclosure obligation, which is regulated in Article 10 of the Law on the Protection of Personal Data No. 6698.
Processing of Your Personal Data – Your personal data, the titles of which are listed below, are processed in accordance with the principles set forth in Article 4 of the KVKK, in the manner specified in the Personal Data Inventory and our Personal Data Protection Policy, in accordance with Article 5 of the KVKK.
Name
Surname
Mobile number
E-mail address
Address
Traffic Information
Turkish Identity Number
Bank / Credit Card Information
Billing Information
Collection Method of Your Personal Data: After the electronic membership form you have filled in on our website www.fabcio.com and your personal data that you have forwarded to us through our website are obtained, the personal data is recorded through the software that processes the database.

Personal Data Processing Purposes: ; In this context, your personal data is processed through special database software for the following purposes.

Execution of Information Security Processes
Execution of Activities in Compliance with the Legislation
Execution of Finance and Accounting Affairs
Execution of Company / Product / Service Loyalty Processes
Execution of Communication Activities
Execution / Supervision of Business Activities
Receiving and Evaluating Suggestions for Improvement of Business Processes
Conducting Business Continuity Ensuring Activities
Execution of Logistics Activities
Execution of Goods / Services Purchasing Processes, Sales Process, After-Sales Processes
Execution of Goods / Services Production and Operation Processes
Execution of Customer Relationship Management Processes
Execution of Activities for Customer Satisfaction
Execution of Storage and Archive Activities
Follow-up of Requests / Complaints
Execution of Supply Chain Management Processes
Ensuring the Security of Data Controller Operations
Providing Information to Authorized Persons, Institutions and Organizations
Management and execution of the company’s main activities
Fulfilling the contractual obligations of the Company,
Developing the services of the company and the website by analyzing the data
Execution of marketing and advertising activities
Legal Reasons for Processing Your Personal Data: Your Personal Data is processed for the following legal reasons:

Performance of the contract
Data processing is mandatory for the establishment, exercise or protection of a right
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
Forecasting in Laws (Law No. 5651, Tax Procedure Law, Law on Regulation of Electronic Commerce, Consumer Law and relevant legislation)
Transfer of your personal data Personal data regarding your company visit record may be transferred to the following persons and organizations.

Groups to which Data may be Transferred Explanation on Groups Purpose of Data Transfer Domestic / International Legal Reason(s)
Business Partner The parties that the data controller carries out commercial activities and has a commercial relationship with. The provisions of the contract containing the commercial activities subject to the business partnership.
Data transfer will be provided for the purpose of performance and only limited to this purpose.
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract

Obligatory for the data controller to fulfill its legal obligation

Suppliers are the parties that have a business relationship with the Data Controller based on the service contract and/or power of attorney agreement for service procurement within the scope of the Data Controller’s commercial activities. Data transfer will be provided for the performance of the contracts made for the provision of necessary services regarding the commercial activities of the data controller and only for this purpose. For example, customer relationship management company, financial advisors, lawyers.
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract

Obligatory for the data controller to fulfill its legal obligation

Data processing is mandatory for the establishment, exercise or protection of a right.

Shareholders Real or real persons who own shares (shares) in the Company of the data controller.

are legal persons. Data will be transferred to our shareholders within the scope of our obligations to provide information and similar obligations arising from the Commercial Code, the provisions of the Code of Obligations regarding Ordinary Company and the provisions of the relevant legislation, especially the provisions specific to each company type in the section of the Turkish Commercial Code titled Commercial Companies.
If it is domestic;

Clearly stipulated in laws (TTK, TCO and relevant legislation)

Obligatory for the data controller to fulfill its legal obligation

If abroad;

Open Consent

Authorized Public Institutions and Organizations These are public institutions and organizations that are authorized by the relevant legislation to request information and documents from the data controller and are also required to transfer in order for the Data Controller to fulfill their legal obligations. The Data Controller shall provide data transfer to Authorized Public Institutions and Organizations in order to fulfill their obligations regarding information and document sharing arising from the relevant legislation, as well as other legal obligations.
Explicitly stipulated in laws (Criminal Procedure Law, Labor Law, Law No. 5651, Tax Procedure Law, Law on Regulation of Electronic Commerce)

Obligatory for the data controller to fulfill its legal obligation

Data processing is mandatory for the establishment, exercise or protection of a right

Group companies, according to the definition in the Turkish Commercial Code, “Companies that are directly or indirectly affiliated with the controlling company form the group of companies together with it.”
Explicitly stipulated in laws (TCC and relevant legislation provisions)

It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract

Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Affiliates and subsidiaries Affiliates are companies in which the data controller has a share in the capital of another company. If the company has more than 50% of the voting rights of the company it is a partner of, the relationship between the company and the partner company creates a subsidiary, if the majority is not in the company, there is a simple affiliate relationship. Data transfer will be made in order to fulfill the obligations arising from the affiliate and subsidiary relationship.
Explicitly stipulated in laws (TCC and relevant legislation provisions)

It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract

Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Obligatory for the data controller to fulfill its legal obligation

The Party that provides the E-mail Server Service is the parties that have a business relationship with the Data Controller based on the service contract that the Data Controller has made within the scope of the E-mail server service purchase. Data transfer will be provided for the performance of the e-mail server service procurement contract concluded between the data controller and the party providing the server service and only for this purpose.
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

stipulated in laws

Obligatory for the data controller to fulfill its legal obligation

IT Server Service Provider Parties are the parties that have a business relationship with the Data Controller based on the service contract signed by the Data Controller within the scope of IT server service procurement. Data transfer will be provided for the performance of the e-mail server service procurement contract concluded between the data controller and the party providing the server service and only for this purpose.
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

stipulated in laws

Obligatory for the data controller to fulfill its legal obligation

Your Rights – To the extent that your data is processed by the Company and the Company processes your data as a data controller, you have the following rights in terms of your personal data:

Learning whether any of your personal data has been processed;
Requesting information regarding the processing activities of your personal data;
Learning the purposes of processing your personal data;
If personal data has been transferred to third parties in the country or abroad, learning these persons;
Requesting correction of personal data if it is incomplete or incorrectly processed;
The disappearance of the reasons requiring the processing of personal data or the legal basis or legitimate basis of the Company to process the said data.

requesting the deletion or destruction of personal data in the absence of interest;
Requesting the Company to ensure that third parties, also authorized by the Company, who process personal data respect your rights under this section;
Objecting to adverse results that may arise as a result of processing personal data through automated systems
To request compensation for the damage if you suffer damage due to the unlawful processing of your personal data.
Application to Data Controller – You can send your requests within the scope of Article 11 of the Law, which regulates the rights of the person concerned, in writing to the physical address of our Company in accordance with the “Communiqué on the Procedures and Principles of Application to a Data Controller” or to our company’s electronic mail address where your membership is confirmed.

Data Controller Disclosure – As the COMPANY, whose detailed corporate information is published below, we will use your personal data as Data Controller in accordance with the relevant legislation in accordance with the Law on Protection of Personal Data No. 6698.