KVKK Privacy Notice
Under Law No. 6698 on the Protection of Personal Data (“KVKK”), your personal data is processed by the data controller whose details are given below.
1. Data Controller
Biosmyrna Gıda Sanayi ve Ticaret A.Ş.
Kazım Karabekir Mah. Bekir Saydam Cad. B6 Blok No:104B6 İç Kapı No:17
Torbalı, İzmir — TÜRKİYE
Email: info@biosmyrna.com
Telephone: +90 232 502 61 60
Website: https://www.biosmyrna.com
As Biosmyrna Gıda Sanayi ve Ticaret A.Ş. (“Biosmyrna” or the “Company”), we care about the protection of your personal data and take care to process it in accordance with KVKK No. 6698, the related secondary legislation and the decisions of the Personal Data Protection Board.
2. Personal Data Processed
On our website, personal data is collected only through forms that you complete. The site has no membership, account creation, payment, newsletter or comment features.
There are four forms on the site, and which data is processed depends on the form you complete:
- Quick quotation form: name and surname, email address, telephone number, company and country, the products you are interested in, and the message you write.
- Detailed quotation form: name and surname, company name, country, email address, telephone number, the products you request, the certification standard you request, and the message you write.
- Call-back form: name and surname, telephone number, company information, and your preferred time and language.
- Job application form: name and surname, email address, telephone number, city of residence, the position or field you are applying for, education, professional experience, your cover letter and the CV file you upload.
In addition, a strictly necessary session cookie is used for the operation and security of the site. Details are explained in the Cookie Policy and Cookie Notice.
What is not collected. The site does not record visitors’ IP addresses in its own records, does not create profiles, does not use any cookies for advertising and does not request photographs, audio or video recordings in job applications. Visit statistics are measured with Google Analytics only with your explicit consent; details are in the Cookie Policy.
Due to the nature of internet infrastructure, connection information may appear in the server’s own technical access logs; these logs are kept as part of the hosting service and are used only for security and technical operation.
3. Purposes of Processing Personal Data
Depending on the nature of the form you complete, your personal data is processed for the following purposes:
- receiving and responding to information, questions, requests and applications sent through the website,
- contacting you about the products and services you request,
- conducting quotations, sales, sourcing and commercial relationships,
- assessing job applications and conducting human resources processes,
- ensuring the security of the website and preventing misuse,
- resolving technical problems and operating systems,
- fulfilling legal obligations and responding to requests from authorised public institutions and organisations,
- establishing, exercising or protecting a right and conducting legal proceedings.
- With your explicit consent, measuring the website’s visit statistics in aggregate and improving the site.
Your personal data is processed only for the purposes stated here and only to the extent necessary for these purposes. No personal data that is not connected to a specific, explicit and legitimate purpose is processed.
4. Legal Grounds for Processing Personal Data
Your personal data is processed on the basis of whichever of the conditions set out in Article 5 of the KVKK is appropriate to the processing activity carried out:
- Quotation and call-back requests: being directly related to the establishment or performance of a contract (KVKK Art. 5/2-c) and the legitimate interest of the data controller (KVKK Art. 5/2-f).
- Assessment of job applications: being directly related to the establishment of a contract (KVKK Art. 5/2-c) and the legitimate interest of the data controller (KVKK Art. 5/2-f).
- Retention in the candidate pool: only your explicit consent (KVKK Art. 5/1). This consent is obtained in a separate box, is not pre-ticked and is not a condition of the application.
- Security and technical operation of the site: the legitimate interest of the data controller (KVKK Art. 5/2-f).
- Fulfilment of legal obligations and requests from public authorities: being expressly provided for by law and the fulfilment of a legal obligation (KVKK Art. 5/2-a and Art. 5/2-ç).
- Legal disputes: being necessary for the establishment, exercise or protection of a right (KVKK Art. 5/2-e).
- Measuring visit statistics (analytics cookies): only your explicit consent (KVKK Art. 5/1). This consent is obtained separately in the cookie banner and may be withdrawn at any time.
Explicit consent is obtained only for the two activities expressly stated above (retention in the candidate pool and analytics cookies); it is not used as a general legal basis for other processing activities.
5. Special Categories of Personal Data
No form on our website asks for or requests special categories of personal data (such as health, criminal convictions, biometric or genetic data, religion, sect, philosophical belief, or membership of associations, foundations or trade unions).
You are advised not to share such data of your own accord. If, nevertheless, the information or documents you send contain special categories of personal data, this data is processed only where the conditions set out in Article 6 of the KVKK are met and only to the extent of the processing purpose.
6. Method of Collecting Personal Data
Your personal data is collected electronically, by non-automated or partially automated means, through:
- the quotation, call-back and job application forms on the website,
- the CV file you upload with a job application,
- communication you establish by email and telephone,
- the session cookie that is strictly necessary for the operation of the site.
- Google Analytics cookies, with your explicit consent
7. Transfer of Personal Data
Your personal data may be transferred to the following groups of recipients to the extent required by the purpose of processing and in accordance with the conditions set out in the KVKK:
- authorised Biosmyrna employees responsible for assessing your request or application,
- the hosting service provider of the server on which the website is hosted and the email service provider — solely for the technical provision of the service,
- professional advisers from whom we receive legal, financial advisory and audit services — only to the extent required by the relevant service,
- legally authorised public institutions and organisations.
- With your explicit consent, to the analytics service provider (Google) for measuring visit statistics.
Our website does not use advertising networks, customer relationship software, external application systems or similar third-party services; therefore no transfer is made to such recipients. Google Analytics, used for visit statistics, works only with your explicit consent.
8. Transfer of Personal Data Abroad
All resources required for the website to work, including fonts, are served from our own server; the site has no font service, content delivery network or security verification (CAPTCHA) service of foreign origin. Only if you give explicit consent to analytics cookies is data relating to visit statistics processed by Google on servers abroad via Google Analytics.
The servers on which the hosting and email services are run are located in Türkiye.
Unless you give explicit consent to analytics cookies, your personal data is not transferred abroad. This transfer is carried out in accordance with the conditions laid down in Article 9 of the KVKK.
Should a transfer abroad take place, it will be carried out in accordance with the KVKK provisions on transfers of data abroad and by applying the necessary legal mechanisms.
9. Retention Period of Personal Data
Your personal data is kept for as long as necessary for the purpose for which it is processed, without prejudice to the retention periods set out in the relevant legislation.
Our retention periods:
- Quotation and call-back requests: 1 year from the date the request is received
- Job applications: 1 year from the date of application
- Candidate pool records: 1 year from the date explicit consent is given
- Server and security logs: 1 year
When the purpose of processing no longer applies and the periods set out in the relevant legislation have expired, your personal data is deleted, destroyed or anonymised in accordance with the KVKK and the related legislation.
10. Security of Personal Data
Technical and administrative measures are taken to ensure an appropriate level of security in order to prevent the unlawful processing of personal data and unlawful access to it, and to ensure its safekeeping. The technical measures actually applied on the website are:
- forgery (CSRF) protection with a session key for form submissions,
- multi-layered checks against automated bot submissions (hidden trap field, signed timestamp, submission rate limit),
- server-side validation and sanitisation of each field separately,
- checks on both the extension and the content of uploaded CV files, and a size limit,
- keeping CV files in a secure directory from which they cannot be downloaded by typing an internet address,
- not publishing application and request records; keeping them only in the administration panel accessible to authorised users,
- session security verification.
To ensure that visitor data does not go to external services, no security verification (CAPTCHA) service is used on the website.
11. Rights of the Data Subject
As a data subject, under Article 11 of the KVKK you have the right to:
- learn whether your personal data is being processed,
- request information about it if your personal data has been processed,
- learn the purpose of processing your personal data and whether it is used in accordance with that purpose,
- know the third parties in Türkiye or abroad to whom your personal data has been transferred,
- request the correction of your personal data if it has been processed incompletely or incorrectly,
- request the deletion or destruction of your personal data within the framework of the conditions set out in Article 7 of the KVKK,
- request that the third parties to whom your personal data has been transferred be notified of any correction, deletion or destruction of your personal data,
- object to a result arising against you from the analysis of the processed data exclusively by automated systems,
- request compensation for damage if you suffer damage as a result of the unlawful processing of your personal data.
12. Application Method
You can submit your requests under the KVKK through the following channels, in accordance with the procedures and principles set out in the relevant legislation:
Postal address:
Kazım Karabekir Mah. Bekir Saydam Cad. B6 Blok No:104B6 İç Kapı No:17
Torbalı, İzmir — TÜRKİYE
Email: info@biosmyrna.com
Registered electronic mail (KEP): biosmyrna@hs01.kep.tr
Details of the application procedure are explained in the “KVKK Data Subject Application Procedure” text.
Your applications are assessed within the time limits set out in the KVKK and the related legislation. Identity verification and security checks appropriate to the nature of the request may be applied in order to finalise the application.
13. About Explicit Consent
The information obligation and the obtaining of explicit consent are handled separately. On our website, explicit consent is obtained for two activities: retention in the candidate pool and analytics cookies. Consent for the candidate pool is presented in a separate, unticked box in the application form; if it is not given, your application is still assessed. Consent for analytics cookies is obtained in the cookie banner; not giving it does not affect your use of the website, and it can be withdrawn at any time via the “Cookie preferences” link at the bottom of the page.
The privacy notice acknowledgement box in the forms confirms that you have read the text and is not, on its own, a declaration of explicit consent.
14. Cookies and Similar Technologies
Our website uses a necessary session cookie for the operation and security of the site and, only with your explicit consent, Google Analytics cookies that measure visit statistics. No cookies are used for advertising or retargeting.
Information such as your theme preference and quotation list is kept only in your own device’s browser storage and is not sent to our servers.
For detailed information, please see the Cookie Policy and Cookie Notice.
15. Job Applications
The processing of candidates’ personal data in job applications made through the website is explained separately in the “Job Application Privacy Notice”.
For activities requiring explicit consent, such as retention in the candidate pool, the necessary explicit consent process is carried out separately and assessed under the “Candidate Pool Explicit Consent Form”.
16. Updates
Biosmyrna may update this Privacy Notice due to changes in its activities, the technologies it uses, its services or the relevant legislation. The updated text takes effect from the date it is published on the website, and the current version of the text is always published in an accessible way on the website.
Biosmyrna Gıda Sanayi ve Ticaret A.Ş.
Kazım Karabekir Mah. Bekir Saydam Cad. B6 Blok No:104B6 İç Kapı No:17
Torbalı, İzmir — TÜRKİYE
Email: info@biosmyrna.com
Telephone: +90 232 502 61 60
Website: https://www.biosmyrna.com