Privacy Policy

INFORMATION TEXT ON THE LAW ON PROTECTION OF PERSONAL DATA

CLS Trade as the data controller within the scope of both the Constitution of the Republic of Turkey and the Law No. 6698 on the Protection of Personal Data (“GDPR” or “Law”) and secondary regulations, we hereby provide the following information within the framework of our obligation to enlighten you, with the awareness that the protection of personal data we process is a fundamental right:

1. Personal Data We Process and Processing Purposes

As CLS Trade, we process customer transaction data containing identity and contact information of our customers to whom we provide our products and services, identity and contact information of the employees/representatives/contact persons of the supplier companies whose services we benefit from for the purpose of conducting and developing our commercial activities; limitedly for the purposes of carrying out contract processes, monitoring customer relations and marketing processes, fulfilling the operational, production, sales, and monitoring processes of the services we offer, we process and keep them in digital and physical environments of our Company. These personal data are deleted/destroyed or anonymized by one of the deletion/destruction or anonymization procedures in accordance with the GDPR and relevant legislation and our Company’s storage and destruction policy when the reasons requiring their processing cease to exist. Additionally, these data are processed for the purpose of providing and tracking our product/service sales services, conducting financial and accounting affairs, managing customer relations, following up on requests and complaints, providing newsletter subscriptions to you if you give your explicit consent, sending campaign and promotional notifications, fulfilling the obligations specified in the laws we are subject to, particularly in Turkish Law on Consumer Protection No. 6502 and the Distance Contracts Regulation, and conducting and developing our Company’s commercial activities.

2. To Whom and for What Purposes Personal Data Can be Transferred

Personal data of the data subjects mentioned in the first article of this disclosure statement may be transferred to authorized public institutions and organizations, service providers and business partners within the framework of the processing purposes listed in the same article and limited to these purposes, provided that sufficient measures are taken in accordance with the fundamental principles of security and confidentiality specified in the GDPR.

3. Method and Legal Basis of Collection of Personal Data

Personal data processed within our Company, based on the legal grounds set forth in Article 5 of the Law, are collected through oral and written notifications made by relevant persons to our Company, by automatic or non-automatic means, provided that it is necessary for the establishment or performance of a contract directly related to the parties to the contract, that it is mandatory for the legitimate interests of the data controller provided that it does not harm the fundamental rights and freedoms of the relevant person, that it is mandatory for the data controller to fulfill its legal obligation, and if necessary, based on explicit consent legal grounds.

4. Rights of the Relevant Person Regarding the Protection of Personal Data

You can apply for your requests within the scope of Article 11 of the Law regulating the rights of the relevant person to our Company’s address located at Oruçreis, Giyimkent, Vadi Cd. No: 214, Esenler/İstanbul in writing in person or via registered letter with return receipt requested through a notary, or if you have an individual registered electronic mail (KEP) address, by using our Company’s above-mentioned address or by using the electronic mail address info@clstrade.com, which has been previously notified by you and registered in our system, with a secure electronic signature or mobile signature. Our Company will resolve such requests within the shortest time possible and no later than thirty days, in accordance with the Procedures and Principles for Data Controllers’ Application to Data Controller Communique.