INFORMATION NOTICE ON
THE PROTECTION AND PROCESSING
OF PERSONAL DATA 

This Information Notice on the Protection and Processing of Personal Data (“Information Notice”) has been prepared by Stern Ingredients Turkey Gıda Sanayi ve Ticaret A.Ş. (“Stern Ingredients Turkey”) for the purpose of informing data subjects about the processing of their personal data within the scope of the Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”), which entered into force upon its publication in the Official Gazette dated 07 April 2016 and numbered 29677, and the relevant secondary legislation.

The personal data protection policies implemented by Stern Ingredients Turkey are available at: https://sterningredients.com.tr/KVKK/

 

1. Identity of the Data Controller

Your personal data is processed by the data controller:

Stern Ingredients Turkey Gıda Sanayi ve Ticaret A.Ş.

Address: 10006/1 Sokak No:24/O Atatürk Organize Sanayi Bölgesi 35620 Çiğli/İzmir

Phone: 0232 325 20 01

KEP: [ sterningredients@hs01.kep.tr]

 

2. Purposes of Processing Personal Data

Your personal data are processed for the purposes of ensuring uninterrupted access to our website, maintaining the secure and stable operation of the website, improving the user experience, evaluating website traffic and interactions through cookies and analytical tools, sending informational content and managing the subscription process in the event that you subscribe to the newsletter, responding to the requests and inquiries you submit via the contact form, evaluating your applications and conducting communication processes, and carrying out recruitment processes based on the career/resume information transmitted to us via İŞKUR, digital job search platforms, and human resources companies.

 

3. What Personal Data Are Processed by Stern Ingredients Turkey?

Within the scope of the services we provide to you, we process your personal data listed below:

Personal Data Category	Processed Data
Identity Data	Name, surname, date of birth, Turkish ID/passport number (if any), signature, nationality
Contact Data	Telephone number, e-mail address, KEP address, business address, residential address
Customer/Supplier Transaction Data	Order information, purchase/data records, quotations, contract information, invoice and payment details
Website Usage Data	IP address, login–logout date/time information, cookie records, browser/device information used, referring URL
Transaction Security Data	Log records, access records, system security and technical monitoring data
Human Resources Data (Candidate & Employee)	Resume/CV information, education and professional experience, references, interview notes, identity/contact/performance data
Request / Complaint Management Data	Messages, requests, notes, e-mail contents submitted via the contact form, job title, company name

 

Career Data Obtained from Third Parties	Your resume, career, and application information transmitted to us via platforms such as LinkedIn, Kariyer.net, İŞKUR, and human resources companies, etc.
Marketing Data (Where Explicit Consent Is Obtained)	Newsletter subscription, your preference information, campaign/event communication information

 

4. Method and Legal Basis for the Collection of Personal Data

Your personal data are collected during the use of the services provided by Stern Ingredients Turkey and the execution of company processes; through your visiting our website, completing contact forms, contacting us via e-mail and telephone, performance of quotation–order–invoicing transactions, operation of customer and supplier processes, receipt of your human resources applications, execution of contract processes, system records, and the use of cookies and similar technologies, by automatic or partially automatic methods in electronic environments, as well as in physical environments through physical applications and commercial documents. Your personal data obtained is stored securely in digital systems and is processed based on the data processing conditions set out in Articles 5 and 6 of the Personal Data Protection Law No. 6698 (“KVKK”).

 

In this context;

• Based on the reason that it is directly related to the establishment or performance of a contract (KVKK Article 5/2-c); for the purpose of conducting offer, order, delivery, purchase, customer and supplier processes, providing products and services, operating communication processes and conducting employee/candidate transactions,
• Based on the reason that the data controller fulfills its legal obligations (KVKK Article 5/2 ç); for the purpose of carrying out mandatory notifications required by tax, accounting, archiving, storage and legislation,
• Based on the necessity for the establishment, exercise, or protection of a right (KVKK Article 5/2-e); for the purpose of carrying out requests, complaints, disputes, and legal processes,
• Based on the necessity within the scope of the legitimate interest of the data controller (KVKK Article 5/2-f); for the purpose of ensuring information systems security, preventing misuse, improving operational processes, maintaining logs and technical records, and conducting reporting and internal audit activities,
• Based on the fact that the personal data has been made public by the data subject (KVKK Article 5/2-d); for the purpose of processing the information you have publicly shared only in accordance with the purpose of your disclosure,
• If you have given your explicit consent (KVKK Article 5/1); for the purpose of data processing activities carried out within the scope of marketing and promotional communications, commercial electronic messages, and analytical cookies,
• If you have given your explicit consent regarding your special categories of personal data (KVKK Article 6/3); for the purpose of processing the information you voluntarily provide only within the scope of necessary processes

your personal data is processed. Processing activities based on explicit consent will cease immediately if you withdraw your consent; the relevant data will be deleted, destroyed, or anonymized.

 

5. Parties to Whom Personal Data May Be Transferred and Purpose of Transfer

Your personal data may be transferred to the following parties and for the purposes specified below, in accordance with Articles 8 and 9 of the Personal Data Protection Law No. 6698:

Recipient of Data Transfer / Service Provider	Purpose of Data Transfer
Group Companies (Stern-Wywiol Gruppe)	Conducting intra-group operations, coordination of order–procurement processes, and management of financial and administrative processes.
Cloudflare, Inc.	Website security, DNS management, content delivery network (CDN), server load balancing, and traffic protection. (Stern-Wywiol politische explicitly uses Cloudflare)
Google Analytics (Google LLC)	Website performance analysis, visitor statistics, user behavior analyses, and website improvements.
Matomo (Self-Hosted veya SaaS Analytics)	Analysis of anonymous/pseudonym website usage, statistical reporting, and improvement of user experience.
Web hosting and IT infrastructure providers (e.g. server hosting companies)	Website hosting, data storage, system management, security, and maintenance services.
External service providers / technical suppliers (IT support, software providers, cybersecurity firms)	Operation of systems, maintenance, data security, and operational support services
Logistics, warehousing, and distribution companies	Delivery of orders, shipment of products, and execution of supply chain processes.
Accounting, finance, independent audit, and consultancy firms	Fulfillment of legal obligations, internal/external audits, financial reporting, and compliance processes.
Legal advisors and attorneys	Management of disputes, follow-up of legal claims, and protection of legal rights.
Authorized public institutions and organizations	Notifications and documents requested by tax authorities, social security institutions, law enforcement agencies, supervisory authorities, and courts.
Authorized representatives of customer and supplier companies	Execution of commercial relationships, order–invoice–delivery processes, and contract management.
Third parties to whom data are transferred subject to explicit consent (e.g. advertising/communication agencies)	Marketing, campaign management, information, and commercial electronic communication processes (only with explicit consent).

 

6. Transfer of Your Personal Data Abroad

In accordance with Article 9 of the Law No. 6698 on the Protection of Personal Data, your personal data may be transferred abroad for the purposes stated below, provided that one of the personal data processing conditions set forth in the KVKK (Law on the Protection of Personal Data) is met and the procedures for transferring data abroad determined by the Board are complied with.

In this context, your personal data may be transferred to:

• Stern-Wywiol Gruppe’s foreign subsidiaries for the purpose of ensuring intra-group coordination, managing order and supply processes, and carrying out financial and operational management,
• Cloudflare, Inc., a cloud service and content delivery network (CDN) provider, for the purpose of routing website traffic, providing security solutions, and operating the technical infrastructure,
• Google Analytics (Google LLC), for the purpose of processing visitor statistics and site performance data within the scope of analysis services provided,
• Matomo, for the purpose of evaluating website usage through analysis and reporting tools,
• IT infrastructure, server hosting, security, system management, and maintenance services provided by foreign service providers for the purpose of operating the technical infrastructure,
• Reporting, auditing, financial transactions, or requests from official institutions that are mandatory within the scope of international activities.

In data transfers based on explicit consent, you can withdraw your explicit consent at any time; in this case, the relevant data transfers will be stopped immediately.

 

7. What Are Your Rights Regarding Your Personal Data?

Pursuant to Article 11 of the Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”), you have the following rights:

• To learn whether your personal data are processed,
• To request information if your personal data have been processed,
• To learn the purpose of the processing of your personal data and whether such data are used in accordance with their purpose,
• To know the third parties to whom your personal data are transferred domestically or abroad,
• To request the correction of your personal data if they are processed incompletely or inaccurately,
• To request the deletion or destruction of your personal data within the scope of Article 7 of KVKK,
• To request that the correction, deletion, or destruction of your personal data be notified to third parties to whom the personal data have been transferred,
• To object to the occurrence of a result against you arising from the analysis of your personal data exclusively through automated systems,
• To request compensation for damages in the event that you suffer damage due to the unlawful processing of your personal data.

 

8. How Can You Use Your Rights Regarding Your Personal Data?

You may submit your applications and requests regarding your personal data to Stern Ingredients Turkey Gıda Sanayi ve Ticaret A.Ş. by completing the Data Subject Application Form and using one of the following methods:

• By sending your wet-signed petition together with a copy of your identity document by e-mail to info@sterningredients.com.tr,
• By applying in person at the above address with a valid identity document,
• By signing with a mobile signature or secure electronic signature and sending an e-mail to info@sterningredients.com.tr,
• By sending to the registered electronic mail (KEP) address sterningredients@hs01.kep.tr using a registered electronic mail (KEP) address, secure electronic signature, or mobile signature.

Pursuant to the Communiqué on the Procedures and Principles of Application to the Data Controller, the following information must be included in the application:

• Name and Surname,
• Signature in written applications,
• Turkish ID number (passport number or identity number for foreign nationals),
• Residential or workplace address for notification purposes,
• If available, electronic mail address, telephone and fax number for notification purposes,
• Subject of the request.

 

The data subject, in the application to be submitted for the purpose of using the rights specified above, must clearly and comprehensibly state the matter requested and attach the information and documents supporting the request subject to the application. The application must relate solely to the personal data of the applicant; if any action is to be carried out on behalf of another person, the applicant must be specifically authorized in this regard and such authorization must be documented by a power of attorney. The submission of identity-verifying documents together with the application is mandatory. Requests submitted by unauthorized third parties on behalf of another person shall not be taken into consideration. Stern Ingredients Turkey shall evaluate your application regarding your personal data and finalize it as soon as possible and no later than within thirty (30) days, depending on the nature of the request. In the event that your application is rejected, a reasoned response of rejection shall be notified to you via the communication channel specified in your application (post, e-mail, or Registered Electronic Mail (KEP)).

 

9. Information Regarding This Information Notice

This Information Notice may be updated from time to time to reflect changes in the processes related to the processing of personal data, regulatory updates, and new practices that may arise in Stern Ingredients Turkey’s services. All updates will be made available to users on the Stern Ingredients Turkey website, along with their effective dates. You can always access the current version of the Information Notice on our website.

 

Click here for the Application Form.