As the Soft Drinks Association (Meşrubatçılar Derneği, “MEDER” or the “Association”), we provide this notice under the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform, to explain how we process your personal data through the website mesrubatcilar.org (the “Site”). In case of any discrepancy, the Turkish version prevails.
1. Data controller
Meşrubatçılar Derneği (MEDER)
Mustafa Kemal Mah. Dumlupınar Bulvarı Tepe Prime A Blok No: 266, Asma Kat D.No: 18, 06510 Çankaya / Ankara, Türkiye
Email: mesrubatcilar@mesrubatcilar.org
Registered electronic mail (KEP): mesrubatcilardernegi@hs06.kep.tr
2. Personal data processed, purposes and legal grounds
| Activity | Personal data | Purpose | Legal ground |
|---|---|---|---|
| Contact form and email correspondence | Identity (name and surname), contact details (email address; phone number if you share it), request details (subject and message) | Receiving, assessing and answering your questions and requests; handling press and partnership enquiries | KVKK Art. 5(2)(f): the Association’s legitimate interest, provided it does not harm your fundamental rights and freedoms |
| Secure operation of the Site | Transaction security data (IP address, browser and device information, access date and time, server logs) | Ensuring information security and the technical operation of the Site, preventing misuse, complying with legal obligations | KVKK Art. 5(2)(ç): legal obligation; Art. 5(2)(f): legitimate interest |
| Strictly necessary cookies | Language preference and cookie consent choices | Running the Site and remembering your language and cookie preferences | KVKK Art. 5(2)(f): legitimate interest |
| Analytics cookies (Google Analytics) | Internet usage data (pages visited, time on site, device and browser information, approximate location, online identifiers) | Measuring how the Site is used and improving our content and services | KVKK Art. 5(1): your explicit consent (given in the cookie preferences panel) |
| Map (Google Maps) | IP address and internet usage data | Showing the Association’s address on a map on the Contact page | KVKK Art. 5(1): your explicit consent (the map only loads if you consent) |
We do not request special categories of personal data through the Site. Please do not share such data via the contact form or email.
3. How we collect personal data
We collect your personal data electronically, by automatic or partly automatic means, through the contact form on the Site, email correspondence, cookies and similar technologies.
4. Transfers of personal data
Within Türkiye: limited to the purposes above, your personal data may be transferred under KVKK Art. 8 to the suppliers that provide hosting, maintenance and email services for the Site (as data processors, to the extent required for their services) and, where there is a legal request or obligation, to competent public authorities and courts.
Abroad: if you consent to analytics cookies and the map service, the data collected through these services is transferred to servers abroad operated by the service provider Google (Google Ireland Limited / Google LLC). Transfers abroad are carried out in accordance with the procedures and conditions set out in KVKK Art. 9.
5. Retention
Data related to contact requests is kept for 2 years after the request is concluded; security logs are kept for the period required by applicable legislation. Cookie lifetimes are listed in our Cookie Policy. At the end of these periods, data is erased, destroyed or anonymised in accordance with the Regulation on the Erasure, Destruction or Anonymisation of Personal Data.
6. Your rights
Under Article 11 of the KVKK, you may apply to the Association to:
- learn whether your personal data is processed,
- request information about the processing,
- learn the purpose of the processing and whether the data is used in line with that purpose,
- know the third parties in Türkiye or abroad to whom your data is transferred,
- request correction of incomplete or inaccurate data,
- request erasure or destruction of your data under the conditions in KVKK Art. 7,
- request that corrections, erasures or destructions are notified to third parties to whom the data was transferred,
- object to a result against you arising from analysis of your data exclusively by automated systems,
- claim compensation for damage arising from unlawful processing.
You can withdraw your consent at any time using the “Cookie preferences” link at the bottom of the Site.
7. How to apply
In line with the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send your request in writing to the address above, to our KEP address, by email signed with a secure electronic or mobile signature, or from an email address you have previously provided to the Association and that is registered in our records, to mesrubatcilar@mesrubatcilar.org. Your application must include your name and surname, your signature for written applications, your Turkish ID number (for foreign nationals, nationality and passport or ID number), your residential or business address for notifications, your email address and phone number if any, and the subject of your request.
Requests are concluded free of charge as soon as possible and within 30 days at the latest; if the process requires an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board. If your application is rejected, you find our answer insufficient, or we do not answer in time, you may file a complaint with the Personal Data Protection Board under KVKK Art. 14.