Personal Data Protection Notice

In accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK"), TAKVA Uluslararası Sertifikasyon Eğitim ve Bilişim Hizmetleri Limited Şirketi ("TAKVA"), as data controller, informs you that your personal data are processed within the framework explained below.

1. Data Controller

Company: TAKVA ULUSLARARASI SERTİFİKASYON EĞİTİM VE BİLİŞİM HİZMETLERİ LİMİTED ŞİRKETİ
Address: İsmet Kaptan Mah. Gazi Bulvarı No: 90, Çankaya İş Merkezi, Door No: 607, Konak / İzmir, Türkiye
E-mail: info@takvacert.com
Phone: +90 554 433 60 66

2. Categories of Personal Data Processed

• Identity: name, surname, title; Turkish ID number where required for training certificates
• Contact: phone number, e-mail address, address, company details
• Customer transactions: application, offer, contract, audit, certificate and product scope information; request, complaint, appeal and survey records
• Professional experience and training: CVs, qualifications and assignments of auditors and experts; training, exam and certificate records of trainees
• Finance: invoice and payment information
• Visual records: photographs of training and audit activities (where necessary)
• Transaction security: IP address, browser information, system login and activity logs

3. Purposes of Processing

• Receiving and evaluating halal certification applications and carrying out offer and contract processes
• Planning and conducting audits, making certification decisions, and issuing and verifying certificates
• Meeting the requirements of accreditation and approval bodies (HAK, JAKIM and relevant foreign authorities) and the relevant standards (OIC/SMIIC 2, ISO/IEC 17065, etc.)
• Planning trainings, conducting exams and issuing training certificates
• Evaluating complaints, appeals, suggestions and satisfaction surveys
• Responding to your requests and questions and carrying out information and communication activities
• Carrying out invoicing, accounting and financial transactions
• Ensuring information security and fulfilling legal obligations

4. Collection Method and Legal Grounds

Your personal data are collected by automatic or partially automatic means through the application and contact forms on our website, the client portal, e-mail, telephone, printed forms, and audit and training activities.

These data are processed on the legal grounds set out in Article 5 of the KVKK — being directly related to the establishment or performance of a contract, compliance with a legal obligation of the data controller, the establishment, exercise or protection of a right and the legitimate interests of the data controller, provided that your fundamental rights and freedoms are not harmed — and, where none of these grounds apply, on the basis of your explicit consent.

5. Transfer of Personal Data

For the purposes above and in accordance with Articles 8 and 9 of the KVKK, your personal data may be transferred to the following groups of recipients:

• The Halal Accreditation Agency (HAK) and authorised public institutions
• Competent halal authorities and approval bodies of the countries where the certificate is to be valid (e.g. JAKIM – Malaysia, the Qatar Ministry of Public Health), only to the extent required by the certification service
• Assigned auditors, technical experts and Islamic affairs experts
• Suppliers from whom we receive laboratory, hosting, e-mail and software services
• Business partners providing legal, financial advisory and audit services

Transfers abroad are carried out within the conditions and safeguards set out in Article 9 of the KVKK. For issued halal certificates, the company name, certificate number, scope and validity information are publicly available through the QR code and verification page so that the certificate can be verified.

6. Retention Period

Your personal data are kept for as long as necessary for the purpose for which they are processed and for the retention periods set out in the relevant legislation and accreditation rules; after these periods expire, they are deleted, destroyed or anonymised.

7. Your Rights under Article 11 of the KVKK

As a data subject, you have the right to:

• learn whether your personal data are processed;
• request information if they have been processed;
• learn the purpose of processing and whether the data are used in line with that purpose;
• know the third parties to whom your data are transferred in Türkiye or abroad;
• request correction if they are incomplete or inaccurate;
• request deletion or destruction within the conditions of Article 7 of the KVKK;
• request that correction, deletion or destruction be notified to third parties to whom the data have been transferred;
• object to a result against you arising from the analysis of the data exclusively through automated systems;
• claim compensation for damages arising from unlawful processing.

8. How to Apply

In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, you can submit your requests in writing to our address above together with information identifying you, or send them to info@takvacert.com from the e-mail address you have previously notified to us and that is registered in our system. Your application will be concluded free of charge within 30 days at the latest, depending on its nature.

For details on the use of our website, please see our Privacy Policy.

Last updated: November 6, 2026