SANPELLEGRINO İNTERNET SİTESİ GERİ BİLDİRİM FORMU ARACILIĞIYLA

KİŞİSEL VERİLERİN İŞLENMESİNE İLİŞKİN AYDINLATMA METNİ

As Nestlé Türkiye Gıda Sanayi A.Ş. ("Nestlé" or the "Company"), we process your personal data as a data controller in the processes where you contact us through the contact form on our website at https://www.sanpellegrino.com/tr/ address ("Website").

We aim to inform you about your personal data processed with this clarification text and your rights under the Personal Data Protection Law No. 6698 ("Law").

Your Processed Personal Data, Purposes and Legal Reasons for Processing Your Personal Data

Article 5 of the Law. Article regulates the legal grounds for the processing of personal data. Below we provide you with information about which of your personal data is processed, for what purposes and on what legal grounds:

Processed Personal Data	Data Processing Purposes	Legal Basis for Data Processing
Request/complaint content (your requests, comments and opinions and other data contained in the message content) Transaction Security (IP address information, website access logs, log records of filling and sending forms)	Execution of company / product / service loyalty processes Receiving and concluding your complaints, requests and suggestions, Examination and audit of our business activities.	Law art. 5/2 (f) Provided that it does not harm the fundamental rights and freedoms of the data subject, data processing is mandatory for the legitimate interests of the data controller.
Fulfillment of our legal obligations in cases where authorized institutions or organizations request our Company or we are required to notify these institutions.	Law art. 5/2 (ç) Data processing is mandatory for the data controller to fulfill its legal obligation.
To protect and exercise our rights in case of a possible dispute and to carry out legal processes.	Law art. 5/2 (e) Data processing is mandatory for the establishment, exercise or protection of a right.
Within the scope of the above-mentioned purposes, your personal data will be used with the Group Companies for the purposes of using common systems and applications with the Group Companies, obtaining the support of the Group Companies in the execution of our business processes, ensuring compliance with the policies and rules of the Group Companies, and carrying out audit and reporting activities in this context; sharing with suppliers for the purpose of purchasing products/services from third parties located abroad (for example, companies providing information technology infrastructure support).	Law art.9/1 Explicit consent of the person concerned.

Third Parties Sharing Your Personal Data and Purposes of Sharing

We share your personal data specified in the heading "A. Processed Personal Data, Purposes of Processing Your Personal Data and Legal Reasons" with the following parties for the following purposes:

Purpose of Sharing	Shared Side
Fulfillment of our legal obligations in cases where authorized institutions or organizations request our Company or we are required to notify these institutions.	Authorized Institutions and Organizations
Obtaining product/service support from suppliers and business partners in order to fulfill the purposes specified in the heading "A. Purposes and Legal Reasons for Processing Your Personal Data". If you provide your explicit consent, we also work with Group Companies abroad for the purposes of using common systems and applications with Group Companies, obtaining the support of Group Companies in the execution of our business processes, ensuring compliance with the policies and rules of Group Companies, and carrying out audit and reporting activities in this context; Sharing data with suppliers for the purpose of purchasing products/services from third parties located abroad (for example, companies providing information technology infrastructure support).	Domestic and International Suppliers, Business Partners and Nestlé Group Companies

When sharing your personal data with third parties, compliance with Articles 8 and 9 of the Law is ensured.

Personal Data Collection Methods

Your personal data is collected automatically and partially by automatic methods by filling out the contact form on our website.

Rights of the Relevant Person

Article 11 of the Law regulates the "rights of the person concerned". All natural persons whose personal data are processed by Nestlé have the right to apply to our Company in accordance with the Law and to exercise their legal rights listed in the Law.

When applying to our Company to exercise your rights, you can choose one of the following methods:

You can send an e-mail with your requests to tuketici.hizmetleri@tr.nestle.com e-mail address using the e-mail address registered in our systems.
You can send it by mail to Maslak Mahallesi Büyükdere Cadde No: 255/601 Sarıyer Istanbul.
You can send your requests to nestle.hukuk@hs03.kep.tr KEP address by using a registered electronic mail (KEP) address and a secure electronic signature or mobile signature.
Additional methods for exercising your rights are also specified in the Communiqué on the Procedures and Principles of Application to the Data Controller. If you wish, you can also choose one of the methods specified in this Communiqué.