Privacy and Cookies

Data Controller

Data Controller: Mix Kimyevi Ürünler A.Ş.

Address: Yedi Eylül Mahallesi Turhan Tezol Caddesi 5508. Sk. No:4 35860 Torbalı/İzmir Turkey

Phone: +90 539 840 6676 Website: mix7.com.tr Email: info@mix7.com.tr

Mersis No:

This information notice has been prepared and announced to inform our customers about the procedures and principles to be followed regarding the protection of their personal data during their relationship with our institution, in accordance with the Personal Data Protection Law No. 6698 (hereinafter referred to as the ‘GDPR’) and the Regulation on the Procedures and Principles for Fulfilling the Obligation of Disclosure (hereinafter referred to as the ‘Regulation’).

Article 10 of the GDPR

‘When personal data is obtained, the data controller or the person authorized by them is obliged to inform the relevant persons about the identity of the data controller and, if any, their representative, the purpose for which personal data will be processed, to whom and for what purpose the processed personal data may be transferred, the method and legal reason for collecting personal data, and other rights listed in Article 11.’

Basic Definitions in the Law

1-Personal Data: Any information relating to an identified or identifiable natural person, such as name, surname, parent's name, date of birth, national ID number, gender, marital status, identity card serial number, nationality information, passport details, job and title information.

2-Processing of Personal Data: Any operation performed on personal data, such as obtaining, recording, storing, preserving, altering, reorganizing, disclosing, transferring, taking over, making available, classifying, or preventing the use of such data, fully or partially by automated means or by non-automated means, provided that it is part of a data recording system.

3-Data Controller: The natural or legal person who determines the purposes and means of processing personal data, and is responsible for the establishment and management of the data recording system. In this context, the data controller is Mix Kimyevi Ürünler A.Ş., located at Yedi Eylül Mahallesi Turhan Tezol Caddesi 5508. Sk. No:4 35860 Torbalı/İzmir, Turkey.

4-Data Recording System (VERBIS): The recording system where personal data is processed in a structured way according to specific criteria.

5-Explicit Consent: Consent on a specific matter, based on information and expressed by free will.

6-The Board: Refers to the Personal Data Protection Board.

Personal Data of Customers

Our institution may process personal data of customers in accordance with the purposes and conditions of processing stated in this information notice. The personal data subject to processing are as follows:

1-Identity Data: Any information related to an identified or identifiable natural person.

2-Contact Data: Telephone number, email address, address information, internal communication information within the company (company phone number, internal phone number, corporate email address, registered email address).

3-Financial Data: Bank IBAN number, salary and details, debt information.

4-Visual and Auditory Data: Photograph and camera recordings of natural persons.

5-Other Data: Invoice-Promissory Note-Cheque Information, Order Information, purchase history, IP address information, website login-logout records, handwriting and signature, request-complaint information.

Purposes of Processing Personal Data by Mix Kimyevi Ürünler A.Ş.

In accordance with Article 10 of the GDPR and Article 5 of the Regulation, personal data of customers may be processed by our institution for the following purposes and in compliance with the conditions of processing stated in Article 4 of the GDPR:

1-To fulfill service obligations as per the service contract;

2-To ensure the legal and commercial security of individuals who are in a relationship with our institution;

3-To inform about changes in service terms;

4-To resolve customer complaints and to process data access or correction requests;

5-To prepare all records and documents that will form the basis for processing in electronic (internet/mobile, etc.) or paper environments;

6-To carry out contract processes within the framework of the Code of Obligations, Commercial Code, and all other relevant legislation;

7-To carry out contract processes, sponsorship activities;

8-To fulfill legal obligations and to exercise rights arising from the applicable legislation;

9-To provide information to authorized persons, institutions, and organizations;

10-To carry out emergency management processes;

11-To carry out communication activities;

12-To carry out accounting and finance processes;

13-To manage organization and event activities;

14-To carry out information security processes;

15-To carry out storage and archiving activities;

16-To ensure physical space security.

Method and Legal Reason for Collecting Personal Data

Personal data may be obtained directly from the relevant person, third parties, and legal authorities during the establishment of a legal relationship. In this context, personal data may be collected through contracts, emails, application forms, and other similar means, and in written, verbal, or electronic forms through written or verbal communication channels with our Company.

In accordance with Article 5 of the GDPR, personal data cannot be processed without the explicit consent of the relevant person. However, the law specifies exceptions where explicit consent is not required. These include cases where there is a clear provision in the law, where the processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of the contract, where it is necessary to fulfill the legal obligations of the company, where the relevant person has made their personal data public, where processing is necessary for the establishment, exercise, or protection of a right, and where processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person. In such cases, personal data may be processed by our company without explicit consent.

For Mix Kimyevi Ürünler A.Ş. to continue its activities, personal data may be processed within the framework of the conditions and purposes of processing personal data specified in Articles 5 and 6 of the GDPR, and in accordance with the principles and procedures stipulated by the relevant legislation, to achieve the purposes stated in this Information Notice and to fulfill legal obligations.

Recipients and Purposes of Personal Data Transfer

Personal data of customers may be transferred to third parties, in accordance with the data transfer and processing conditions specified in Articles 8 and 9 of the GDPR, to achieve the purposes listed above, provided that sufficient and effective measures are taken in accordance with the security and confidentiality principles stipulated by the legislation; these may include suppliers, shareholders, authorized dealers, private legal entities (such as audit, event and organization, legal, etc.), independent audit firms, financial institutions, domestic and foreign business partners, domestic and foreign companies providing storage, archiving, IT support (server, hosting, program, cloud computing), and legally authorized public institutions.

Retention Period of Personal Data

In accordance with the provisions of the GDPR, personal data processed for the purposes stated in this ‘Information Notice on the Processing of Personal Data’ will be deleted, destroyed, or anonymized by our institution when the purpose requiring the processing ceases to exist and/or the statute of limitations for which we are obliged to process your data expires, in accordance with the Personal Data Retention and Destruction Policy.

Rights of the Relevant Person

The relevant person has the right to learn whether their personal data is being processed, to request information about the processing if their personal data has been processed, to learn the purpose of processing personal data and whether they are used in accordance with this purpose, to know the third parties to whom personal data is transferred in the country or abroad, to request the correction of personal data if it is incomplete or incorrectly processed, to request the deletion or destruction of personal data even if it has been processed in accordance with the provisions of the GDPR and other relevant laws, to request notification of the correction, deletion, or destruction of personal data to third parties to whom the data has been transferred, to object to the processing of personal data solely through automated systems that lead to a result against the person, and to request the compensation of damages if the person suffers damage due to the unlawful processing of personal data.