GENERAL WEBSITE DATA PROTECTION STATEMENT 

As BC INTERNATIONAL GIDA TİCARET ANONİM ŞİRKETİ (TIN: 1601712928) (“BC International” or “Company), we pay the utmost attention to the security of your personal data. With this awareness, we give a particular importance to process and preserve the personal data of the natural persons whom we interact in accordance with the Law no. 6698 (“PDPL” or “the Law”), secondary legislations (regulation, declaration etc.) and binding resolutions of Personal Data Protection Board.  

As a result of our sense of responsibility, we as the “Data Controller”, process your personal data considering legal limitations and purposes mentioned below; by providing all necessary technical and administrative measures to ensure the appropriate level of security, to prevent unlawful processing of personal data and unlawful access to personal data and to ensure the protection of personal data.

This Data Protection Statement aims to announce the personal data of the relevant persons/data owners with whom BC International has contacted while performing the main area of activity on the website in full compliance with the principle of transparency, and within this text, the Data Protection Statement is made regarding the personal data processing activities within the scope of the Company’s main activity and business operations.

1. Identity of the Data Controller

BC International is a global manufacturer of nutritional meal kits for development, with many years of experience in providing localized solutions to the global nutrition challenge, while investing in research and development to build products that meet international standards. 

As a manufacturer committed to nutritious products, BC International recognizes the important role it plays in promoting social responsibility and sustainability, producing accessible, sustainable, innovative and high-quality products to help end malnutrition in areas of need. Centered on a commitment to empowering communities through sustainable solutions, BC International carefully selects suppliers and partners to ensure that products are not only effective and safe, but also socially, economically and environmentally responsible.

2. Purposes of Personal Data Processing

Your personal data shall be collected and processed by the Company within the limits specified in the Law, in a limited and measured manner in accordance with the law, in good faith and always related to the following purposes of;

• Carrying out the necessary activities by Company’s business departments to conduct commercial operations of the Company in compliance with legislation and Company policies and conducting activities in this direction,
• Determining, planning and performing Company’s short-, medium- and long-term business policies,
• Managing customer relations, corporate communications and data security processes,
• Ensuring commercial and legal security of legal and real persons who are in a business relation with the Company,
• Execution of goods/service sales processes,
• Conducting business and business sustainability activities,
• Execution of goods and services production & operation processes,
• Observing national and international compliance in business processes,
• Ensuring the security of data controller’s operations and carrying out the process of risk management.

3. Personal Data Collection Methods and Legal Reasons 

Your personal data transmitted by you in directly oral, written or electronic media are processed by the Company with automatic, semi-automatic and non-automatic methods under condition of being part of a data recording system by means website or similar applications and software. 

In this context, the general personal data classified below are processed based on the legal reasons stated in Article 5/2 of the Law.

While creating the classification below, both the execution of the Company’s business processes, and the execution of the Company’s website activities have been taken into consideration and the necessary Data Protection Statements and/or consent notifications regarding each process and operation of the Company are notified to the relevant groups of people/data subjects in the form of a layered Data Protection Statement or separately through various means.

	Category	Type	Cause of Action for Processing
1.	Identification	Name, surname, birth date and place, Turkish ID number and Signature, license plate	Processed for the following cause of actions stated in Article 5/2 of the Law; a) if it is expressly provided for by the laws, c) if the processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract, ç) if it is necessary for compliance with a legal obligation to which the data controller is subject, d) if the personal data have been made public by the data subject himself/herself.
2.	Contact Information	Address, e-mail, telephone number.
3.	Customer Services	Invoice, promissory note, cheque details, order and request information	Processed for the following cause of actions stated in Article 5/2 of the Law; a) if it is expressly provided for by the laws, c) if the processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract, ç) if it is necessary for compliance with a legal obligation to which the data controller is subject.
4.	Transaction Safety	MAC address information, website login-exit information	Processed for the following cause of actions stated in Article 5/2/ of the Law; ; a) if it is expressly provided for by the laws, f) if the processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
5.	Risk Management	Data processed to manage commercial, technical, and administrative risks
6.	Finance	Balance sheet data, financial performance, credit and risk data, asset information, credit payment details, IBAN and card information	Processed for the following cause of actions stated in Article 5/2 of the Law; a) if it is expressly provided for by the laws, c) if the processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract, ç) if it is necessary for compliance with a legal obligation to which the data controller is subject.

In line with your demand, the purpose of processing each personal data category and data type will be detailed and communicated to you through the personal data inventory kept within the Company. All Data Protection Statements specific to the website processes can be accessed under the PDPL heading on our website.

4. Transfer of Personal Data and Purposes of the Transfer

In order to fulfill the above-mentioned purposes and to ensure the uninterrupted execution of the Company’s commercial operations and business processes, your personal data may be transferred to the specified below, by taking all necessary technical and administrative measures for data security; in accordance with the cause of action of your explicit consent in Article 8/1 domestically, if deemed necessary, in accordance with the transfer methods to abroad specified in Article 9, if deemed necessary, and in accordance with the cause of action specified in Article 8/2/a of the Law, which indicates processing of your personal data if it is expressly provided for by the laws, if it is necessary for compliance with a legal obligation to which the data controller is subject, if data processing is necessary for the establishment, exercise or protection of any right and for legitimate interests of data controller without violating fundamental rights and freedoms of data subject.

• Legally authorized public institutions and organizations, judicial and administrative authorities,
• Legal entities and natural persons under private law permitted by other legislations,
• Private and public institutions and organizations authorized to audit the Company,
• To business partners from whom services are received or with whom the Company cooperates for the execution and development of the Company’s activities,
• To suppliers of the Company only, when necessary,

In this regard, you can withdraw the explicit consent you have given for the transfer at any time and consult with the Company’s officials. The relevant data protection statements and explicit consent statements are notified to the data subjects in the form of gradual disclosure or in various means specific to the Company’s processes and activities.  

5. Rights of the Data Subjects Under the Law

You may apply to BC International at any time and request to exercise your rights arising from the Article 11 of the PDPL. “a) to learn whether your personal data has been processed, b) to demand for information if your personal data have been processed, c) to learn the purpose of the processing of your personal data and whether these personal data are used in compliance with the purpose, ç) to know the third parties to whom your personal data are transferred in country or abroad, d) to request the rectification of the incomplete or inaccurate data e) to request the erasure or destruction of your personal data under the conditions referred to in Article 7, f) to request reporting of the operations carried out pursuant to sub-paragraphs (d) and (e) to third parties to whom your personal data have been transferred, g) to object to the occurrence of a result against the person himself/herself by analyzing the data processed solely through automated systems, ğ) to claim compensation for the damage arising from the unlawful processing of your personal data”. You may submit your requests regarding your rights and the enforcement of the Law by filling and signing out the application form that you can obtain from us or from the www.bcinternational.com.tr; 

• Send it with wet-ink signature to “Ömer Avni Mah. İnönü Caddesi Devres Han No: 50/3 Gümüşsuyu, 34427 Beyoğlu–İSTANBUL” via notary public, by registered mail with return receipt requested at your discretion for ease of proof or by your personal application,
• By sending an e-mail to [email protected] using the e-mail address notified to the Company by you and registered in the Company system.

As the personal data owner, in the application you will make to exercise your rights mentioned above and which contains the explanations regarding the right you have request to exercise; the requested matter needs to be clear and understandable, the subject needs to be related to yourself and in case you are acting on behalf of someone else, you will need to submit your special power of attorney certified by the notary in this regard.

In accordance with the “Communiqué on The Principles and Procedures for the Request to Data Controller”, it is mandatory to include name-surname, signature, Turkish Identification (“ID”) number (for foreigners, nationality, passport number or ID number if any), residential or workplace address for notice, e-mail address, telephone and fax number and the subject of the request in your applications. Applications that do not fulfill such elements will be rejected by BC International or directed to the valid application channels. 

All registered or unregistered intellectual property rights such as title, business name, trademark, patent, logo, design, information and method contained in this Site belong to the site operator and owner company or the person signified and are under the protection of national and international law. Visiting this Site or utilizing the services on this Site does not give any rights to the intellectual property rights in question.

The information contained on the Site cannot be reproduced, published, copied, presented and/or transferred in any way. The whole or part of the Site cannot be used on any other website without permission.

All employees of BC International are equipped with awareness educations on the Law on the Personal Data Protection Law, periodically informed and have gained the notion of confidentiality. BC International acts with awareness and sensitivity in all activities carried out by the Company and throughout the life cycle of personal data within the Company.

BC International reserves the right to make changes in this Data Protection Statement, due to the Law, secondary legislations and committee resolutions. No prior notification is required prior to the updates to be made from time to time due to operational requirements and includes all services and products, pages, information and visual elements.

Each related person who visits the www.bcinternational.com.tr is deemed to have accepted the above-mentioned terms. 

This data protection statement was updated on 28.05.2025.