10. Domestic Transfer

As a rule, data processed with cookies can be transferred domestically if the Data Subject has explicit consent. Personal data may be transferred without the explicit consent of the Data Subject if there is a clear regulation in the legislation regarding the transfer of personal data. Personal data without the explicit consent of the Data Subject;

• If it is mandatory for the protection of the life or physical integrity of the personal data owner or someone else, and if the personal data owner is unable to disclose his consent due to actual impossibility or if his consent is not legally valid, it may be transferred to third parties.
• Personal data may be transferred to third parties if it is necessary to transfer personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract.
• If personal data transfer is mandatory for the Company to fulfill its legal obligation, personal data may be transferred to third parties.
• If personal data has been made public by the personal data owner, it may be transferred to third parties limited to the purpose of publicization.
• Personal data may be transferred to third parties if personal data transfer is mandatory for the establishment, exercise or protection of a right.
• Provided that it does not harm the fundamental rights and freedoms of the Data Subject, personal data may be transferred to third parties if it is mandatory for the legitimate interests of the Company.

11. Transfer Abroad

The Company transfers the personal data processed through cookies abroad only with the explicit consent of the Data Subject. The Company may also transfer the personal data of the Data Subjects abroad without explicit consent. In cases where the country or countries to which the personal data will be transferred (a) is one of the countries declared by the Board to have adequate protection or (b) if it is not one of the countries declared by the Board, permission has been obtained from the Board by obtaining a written commitment from the data controllers in the relevant foreign country providing adequate protection, personal data may be transferred abroad without explicit consent if one or more of the following conditions are present.

• If there is a clear regulation in the legislation regarding the transfer of personal data, it can be transferred abroad.
• If it is mandatory for the protection of the life or physical integrity of the personal data owner or someone else and if the personal data owner is unable to disclose his consent due to actual impossibility or if his consent is not legally valid, it may be transferred abroad.
• Personal data may be transferred abroad if it is necessary to transfer the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract without the explicit consent of the Data Subject.
• If personal data transfer is mandatory for the Company to fulfill its legal obligation, personal data may be transferred abroad.
• If personal data is publicized by the owner, it may be transferred abroad limited to the purpose of publicization.
• Personal data may be transferred abroad if personal data transfer is mandatory for the establishment, exercise or protection of a right.
• Personal data may be transferred to third parties without the explicit consent of the Data Subject, provided that it does not harm the fundamental rights and freedoms of the Data Subject, if personal data transfer is mandatory for the legitimate interests of the Company.
• The Company may transfer Special Categories of Personal Data abroad by taking the Explicit Consent of the Data Subject by applying administrative and technical measures and complying with the special measures taken by the Board. In order for the Company to transfer Special Categories of Personal Data abroad even without obtaining the Explicit Consent of the Data Subject, the country or countries to which the personal data will be transferred (a) must be one of the countries declared by the Board to have adequate protection or (b) if it is not one of the countries declared by the Board, permission must be obtained from the Board by obtaining a written commitment from the data controllers in the relevant foreign country providing adequate protection, and (c) one or more of the following conditions must be present.
• Sensitive Personal Data other than health and sexual life: The Company will be able to process Sensitive Personal Data other than health and sexual life without obtaining the explicit consent of the data subject if explicitly stipulated in the legislation.
• Sensitive Personal Data related to health and sexual life: can be processed by persons or authorized institutions and organizations under the obligation of confidentiality for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing, without seeking explicit consent.
• Method and Legal Grounds for Collecting Personal Data

During the use of cookies, the Company acts in accordance with the basic principles and the Law, as in its approach to personal data processing in general. The method and purposes of data collection with cookie technology are detailed in the light of the above articles. Personal data collected for these purposes and legal reasons can also be processed and transferred for the purposes specified in Articles 3.5, 4 and 6 of the Clarification Text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law.

• Rights of the Data Subject and Application to the Company
• Rights of the Relevant Person

The Data Subject has the right to apply to the Company regarding his/her personal data in the following matters;

• Learn whether personal data is being processed,
• Request information if their personal data has been processed,
• To learn the purpose of processing personal data and whether they are used for their intended purpose,
• To know the third parties to whom personal data is transferred domestically or abroad,
• To request correction of personal data in case of incomplete or incorrect processing,
• Request deletion or destruction of personal data,
• In the event that personal data is incomplete or incorrectly processed, to request that third parties to whom personal data is transferred be notified of the transactions regarding the correction and/or deletion or destruction of personal data,
• To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,
• In case of damage due to unlawful processing of personal data, to demand compensation for the damage.
• Application to the Company

The Company has prepared a Procedure in order to protect the rights of the Data Subject regulated in the Law and this Clarification Text and to fulfill its own obligations in this regard. In accordance with this Procedure, the Company shall make maximum effort to provide the information requested by the Data Subject by applying to the Company regarding the personal data of the Data Subject free of charge as soon as possible, within thirty days at the latest. If the transaction requires an additional cost, the fee in the tariff determined by the Board may be charged to the Data Subject. As a result of the examination of the request, the Company accepts the request or rejects it by explaining its reasoning and notifies its response to the Relevant Person in writing or electronically. If the request in the application is accepted, the Company shall fulfill the requirements of the request. In case the application is caused by the Company's error, the fee received shall be returned to the Relevant Person. The Relevant Persons may exercise their rights specified in Article 8.1. by filling out the application form at the contentus.net domain address and sending it to GurmeSoft Üçevler Mah Ertuğrul Cad No:85/13 Nilüfer/BURSA address via notary public, KEP or electronic mail with wet signature or delivering it to the same address in person or by proxy or [email protected] by sending it to the electronic mail address. Documents proving his/her identity, documents supporting the request, if any, in case the Relevant Person wishes to exercise this right through his/her attorney