At Grand Halı Tekstil San. Tic. A.Ş. ("Grand Halı") we treat the security of your personal data with the utmost care. Accordingly, we attach great importance to processing and retaining all personal data belonging to everyone connected with Grand Halı — including those who use our products and services — in accordance with Law No. 6698 on the Protection of Personal Data (the "Law"), the secondary legislation enacted and to be enacted under it (regulations, communiqués, circulars) and the binding decisions taken and to be taken by the Personal Data Protection Board. Fully conscious of that responsibility, and in the capacity of "Data Controller" as defined in the Law, we process your personal data as explained below and within the limits prescribed by legislation.
Data controller
Under the Law, the data controller is Grand Halı Tekstil San. Tic. A.Ş., registered with the Gaziantep Trade Registry under number 20682, MERSİS number 0411040311200030, with its registered office at 4th Organised Industrial Zone, 83413 Street No. 2, Başpınar, Gaziantep, Türkiye.
Purposes of processing
Your personal data is processed to inform you of products, services and campaigns on request; to provide the products and services you request; to plan and follow sales, marketing and promotion processes; to create and manage customer records; to carry out accounting operations including invoicing; to deliver sales and after-sales support, to follow, assess and conclude the necessary transactions, to carry out risk assessment, to run contractual processes and to plan and execute operational processes; to verify your details so that no party suffers loss of rights in commercial transactions; to meet our duty to act as a prudent merchant; to inform you of strategic and administrative decisions; to assess customer requests and complaints; to manage customer relations, set marketing strategy and produce statistics where required; to carry out business development and develop new strategies; to run contractual processes and to pursue legal claims and proceedings; to ensure your safety and to monitor visits should you visit our head office, branches or production facilities; to plan information security processes and to build and manage IT infrastructure; to secure the legal and commercial safety of Grand Halı and of those in a business relationship with it; to plan and follow work carried out with business partners, dealers or suppliers; to follow and conduct communication with official bodies; to create and update performance reports from customer-based developments; to conduct market research and to plan and organise activities that build or increase loyalty to our products and services; and to organise and follow certain events. Processing is carried out in accordance with Articles 5 and 6 of the Law, lawfully and in good faith, and always connected with, limited to and proportionate to these purposes.
Method of collection and legal basis
Your personal data is collected by our operational departments, our head office, the offices and services through which we provide products and services, and by natural or legal persons authorised as data processors by Grand Halı — by e-mail, telephone, the website, various contracts, paper forms and records — by automated and non-automated means, verbally, in writing or electronically. In this context we process the personal data of the contact persons of the customers with whom we have a business relationship — full name, national identity number, signature, business address, mobile telephone number, e-mail address and position — pursuant to Article 5(1)(a), (c), (ç), (e) and (f) of the Law, on the legal basis of the legitimate interests of Grand Halı, provided this does not harm the fundamental rights and freedoms of the data subject.
Your rights as a data subject
You may at any time apply to Grand Halı to: learn whether your personal data is processed, the purpose of processing and whether it is used in accordance with that purpose, and request information where it has been processed; learn the third parties in Türkiye and abroad with whom your data has been shared in accordance with the Law; request correction where you believe your data has been processed incompletely or incorrectly; request erasure or destruction of your personal data within the conditions set out in Article 7 of the Law; request that these requests be notified to the third parties to whom your data has been transferred; object to a result adverse to you arising from analysis of your data by automated systems; and claim compensation where you have suffered loss because your data has been recorded or used unlawfully.
How to apply
Where your application requires additional cost, the fee set out in the Communiqué on the Procedures and Principles of Application to the Data Controller, issued by the Personal Data Protection Board, will apply. Where a written response is provided, no fee is charged for the first 10 pages; a processing fee of 1 TL applies to each page beyond 10. Where the response is provided on a recording medium such as a CD or flash drive, the cost of that medium is charged. Requests contained in your application will be concluded as soon as possible and within 30 days at the latest. Applications must be submitted to Grand Halı in writing and in Turkish.
Application methods
You may apply either by completing the Data Subject Application Form and delivering a wet-signed copy in person or by notary to 4th Organised Industrial Zone, 83413 Street No. 2, Başpınar, Gaziantep, Türkiye; or by completing the form, signing it with your secure electronic signature or mobile signature under Electronic Signature Law No. 5070, and sending the signed form to Grand Halı’s registered electronic mail (KEP) address, or from an e-mail address previously notified to and recorded with Grand Halı.
Mandatory elements of an application
Your application must state the matter clearly and comprehensibly, must concern you personally, and — if you are acting on behalf of another — must be accompanied by a notarised special power of attorney. Under the Communiqué on the Procedures and Principles of Application to the Data Controller, applications must contain full name, signature, national identity number, residential or business address, e-mail address, telephone and fax number, and the subject of the request. Applications lacking these elements will be rejected.
Right to amend
Grand Halı reserves the right at all times to amend this notice for reasons arising from the Law, from secondary legislation and from Board decisions. Amendments and the current text take effect immediately as of the date on which they are notified to you.