Proil is a PETROYAG GROUP company Special vegetable oil blends that act as carriers in personal care products and are used as massage oil bases.
Special vegetable oil blends that act as carriers in personal care products and are used as massage oil bases.
This Privacy Policy has been prepared by Proil Oleo ve Kimyasallar San.Tic A.Ş. (hereinafter referred to as “Proil Oleo” or the “Company”).
This Policy has been prepared to determine the data security and data privacy processes of Proil Oleo. The Company is committed to ensuring the security of all data kept, stored and processed in the information systems it uses, and keeps it under the highest level of confidentiality and security measures.
The Company's Privacy Notice and any related notice cover all data collected or transmitted through online or offline channels.
Proil Oleo acts as a data controller in accordance with the provisions of the Law No. 6698 on the Protection of Personal Data and other legislation on the protection of personal data. In this regard, personal data shall only be processed by the personnel of Proil Oleo who are authorized to provide services within the scope of Proil Oleo and to implement all kinds of confidentiality security procedures, the personnel mentioned in the confidentiality security authorization matrix, and the real/legal persons authorized by Proil Oleo by providing the condition of informing the data owners. For details, please click on the "Personal Data Protection and Processing Policy" link.
You consent to receive electronic messages about the promotion of services offered by Proil Oleo and its business partners, information about new products and services, legislative announcements and other matters that you may find interesting through your contact information within the framework of the communication permissions you have given during your communication with us regarding electronic messages and in all other Proil Oleo channels. In this regard, you may submit your request to Proil Oleo to suspend the transmission of messages sent to you through one or more communication channels.
Cookies are program components that can be found on your laptop, PC and mobile device that collect various data. Cookies are usually text files.
Thanks to these programs, the following data can be collected:
For details, please click on the Cookie Notice link.
Your personal data collected by automatic or non-automatic means during your visit to Proil Oleo's website and shared with Proil Oleo via contact form, e-mail and other electronic transactions will be used primarily to fulfill your requests and then to provide you with better service. In general, the purposes of use are as follows:
Please do not share your data that you do not want to be collected by the Company for the above purposes. Please note that if you do not provide this information, we will not be able to contact you, on the other hand, some of your data may be collected through cookies when you visit this site.
Proil Oleo is dedicated to protecting the confidentiality of your information and takes all necessary measures to ensure data security. However, information exchanges over the Internet are generally not very secure. Therefore, we recommend that you pay the necessary attention as a user when you exchange information through the Company's website. If you fail to do so, Proil Oleo cannot guarantee the security of your communications, personal and other information on the Site or against the interception of your information by third parties.
When such information is received by Proil Oleo, it is protected in accordance with security and confidentiality standards.
Your data is stored for the purposes listed above and only for as long as necessary for the needs of our business process or legal obligations.
Proil Oleo may transfer the personal information collected from you to countries other than the country in which such information is collected due to the use of the services of internet service providers, hosting companies, e-mail providers, domain providers (such as Microsoft 365). The data protection legislation applicable in these countries may differ from the legislation applicable in Türkiye.
Your data will be protected during transfer to other countries in accordance with applicable law as described in this Privacy Policy.
Proil Oleo does not intentionally ask children for their personal information under any circumstances. If it is found out that a person whose personal information has been collected is under the age of 13, this information is used to try to notify their parents immediately. This rule applies to those aged 16 and over under the European Union's General Data Protection Regulation (GDPR).
When developing new systems, Proil Oleo takes the most appropriate technological and organizational measures for confidentiality and makes the necessary improvements for the processing of personal data in accordance with the purpose.
The main purpose of this Personal Data Protection Policy (“Policy”) is to provide explanations on the personal data processing activities carried out by Proil Oleo (“Company”) in accordance with the law and the systems adopted for the protection of personal data, and to ensure transparency by informing the persons whose personal data are processed by our company within this scope.
This Policy is applied together with the relevant detailed data procedures in all activities carried out for the processing and protection of all personal data managed by the Company.
The Company also has different policies addressing the protection of personal data and ensuring information security in relation to specific business activities and functions. This Policy does not override the data protection terms in these different policies of the Company, unless they contain additional terms or demand higher standards for the protection of personal data.
The provisions of the relevant legislation in force regarding the processing and protection of personal data will be applied first; in case of any conflict between the relevant legislation and the provisions of this Policy, the provisions of the current legislation will prevail.
This Policy has been created in accordance with the rules and procedures stipulated in the KVKK and other relevant legislation for the protection of personal data. In this sense, the Data Controller is obliged to take all necessary technical and administrative measures, as he/she is obliged to prevent the unlawful processing and access of personal data and to ensure their preservation, in accordance with the KVKK. The Company has taken all relevant technical and administrative measures, including measures taken for the protection of special personal data; the content of the technical and administrative measures taken is detailed in the Personal Data Protection Legal Compliance Audit Report and D.17 Storage and Destruction Policy.
Personal data processed by the Company is processed in accordance with the relevant legislation (KVKK and/or GDPR). The Company's policies and procedures are implemented in parallel with the processing principles set out in the KVKK and relevant legislation. Whereas;
The Company informs the relevant persons when collecting personal data in accordance with the KVKK and other relevant legislation. In this context, the Company informs the relevant person about the purpose for which personal data will be processed, to whom and for what purposes the processed data may be transferred, the method of collecting personal data and the legal reason for collecting personal data.
The purposes for which personal data is processed by the Company are as follows:
To ensure that the Company can provide its services to its customers under the best conditions, to provide services reliably and uninterruptedly, to ensure Company security, to ensure customer satisfaction and reliability, to carry out transactions related to the services offered by the Company, to carry out and develop operations, to carry out promotion, marketing, advertising and campaign activities of the services offered by the Company, to fulfill contracts signed with customers, to carry out transactions requested by the relevant public institutions and organizations, to fulfill the Company's obligations arising from other relevant laws.
Except for the situations where the transfer of personal data to administrative and judicial institutions and organizations is required by the KVKK or the relevant legislation, the Company does not transfer personal data of the relevant persons to other persons without the explicit consent of the relevant person, unless the matters listed in Articles 5 and/or 6 of the KVKK are applicable.
The Company may transfer personal data to third parties in Türkiye by taking all security measures specified in the KVKK and relevant legislation and in accordance with the Law and/or contract.
The Company may transfer personal data abroad by taking the necessary security measures in accordance with the conditions stipulated in the KVKK and relevant legislation and by obtaining the explicit consent of the relevant person. For cases where the explicit consent of the relevant person is not required, the country to which the personal data will be transferred must have the status of a "safe country" and whether it provides adequate protection. For cases where the country to which data is transferred is not deemed to have safe country status by the Board, a data transfer protocol is signed with the Board's permission to ensure adequate protection.
Service providers and customers to whom data is/may be transferred abroad are legal entities/real persons originating from ….................
The Company may share personal data with relevant public institutions and organizations in accordance with the following legislation:
Personal data processing activities can be carried out in Proil Oleo service building in accordance with KVKK and other relevant legislation. Accordingly, in order to ensure security, there is a security camera monitoring in the corridors and entrances and exits of the service building(s); and a card pass system is available at the entrance system. The system used for guest entries has been determined in accordance with the Company's "Physical Security Procedure".
Access to records related to security measures recorded and stored in digital environment is provided by administrative affairs and technical department personnel, audit teams, general manager and managers directly subordinate to the general manager, who are under the obligation to protect confidentiality.
Natural persons whose personal data are processed by the Company may exercise the following rights regarding the processing of their personal data and the data recorded about them by applying to the Company at the address Tembelova Mevkii, Gençlik Cad, 32nd Sk. No:3014, Gebze/Kocaeli, or via the e-mail address …………..:
The company has created a data inventory as part of its approach to identify risks and opportunities throughout the KVKK and GDPR compliance process. The company's data inventory determines: