[Company Name / Brand] Personal Data Policy
General information about the Personal Data Law
The Personal Data Protection Law No. 6698 (hereinafter referred to as the KVKK) was accepted on March 24, 2016 and published in the Official Gazette No. 29677 dated April 7, 2016. Some parts of the KVKK entered into force on the date of publication, while others entered into force on October 7, 2016.
Information as a data controller
In accordance with the KVKK No. 6698 and as a Data Controller, your personal data will be recorded, stored, updated, disclosed / transferred to third parties where permitted by the legislation, classified and processed in the ways listed in the KVKK within the framework explained on this page.
How your personal data may be processed
According to the KVKK numbered 6698, the personal data you share with our Company may be processed by us, in whole or in part, automatically or non-automatically, provided that it is part of any data recording system, by obtaining, recording, storing, changing, rearranging, in short, by any kind of operation performed on the data. Within the scope of KVKK, any transaction performed on data is considered as “processing of personal data”.
Purposes and legal reasons for processing your personal data
Personal data you share,
In order to fulfill the requirements of the services we provide to our customers in accordance with the requirements of the contract and technology, and to improve our offered products and services;
Within the scope of Law No. 6563 on Regulation of Electronic Commerce, Law No. 6502 on Protection of Consumers and the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette No. 29457 dated 26.08.2015, which was prepared based on these regulations, the Distance Contracts Regulation published in the Official Gazette No. 29188 dated 27.11.2014 and other relevant legislation, to record the identity, address and other necessary information to determine the information of the transaction owner;
To prepare all records and documents that will form the basis of the transaction in payment systems, electronic contracts or paper media that are mandatory in the field of Banking and Electronic Payment; to comply with the information storage, reporting and information obligations stipulated by the legislation and other authorities;
In order to provide information to prosecutors, courts and relevant public officials upon request and in cases of legal disputes related to public security;
It will be processed in accordance with the KVKK numbered 6698 and relevant secondary regulations. Information about third parties or organizations to which your personal data may be transferred For the purposes specified above, the persons/organizations to which your personal data that you share with our Company may be transferred are; primarily IdeaSoft Yazılım San. ve Tic. A.Ş., which provides our Company’s e-commerce infrastructure, suppliers, persons and organizations related to the services provided such as cargo companies, program partner organizations that we cooperate with in order to carry out our activities and/or receive services as Data Processors, domestic/international organizations and other 3rd parties.
How your personal data is collected
Your personal data,
With information such as name, surname, Turkish identity number, address, telephone, business or private e-mail address through the forms on our Company’s website and mobile applications; preferences on pages accessed using username and password, IP records of transactions performed, cookie data collected by the browser, and data including browsing duration and details, location data;
Orally, in writing or electronically through our sales and marketing department employees, branches, suppliers, other sales channels, paper forms, business cards, digital marketing and call center channels;
In a physical or virtual environment, face to face or distant, verbally or in writing or electronically from persons who share their personal data with our company for purposes such as establishing a commercial relationship, applying for a job, making an offer, etc. through business cards, resumes (CVs), making an offer, and other means;
In addition, data obtained indirectly from different channels, from websites, blogs, competitions, surveys, games, campaigns and similar purposes (micro) websites and social media, e-bulletin reading or clicking movements, data provided by public databases, profiles and data open to sharing from social media platforms; can be processed and collected.
Your personal data obtained before the KVKK came into force
Your personal data obtained in accordance with the law before the effective date of the KVKK, April 7, 2016, through membership, electronic message permission, product / service purchase and other means, are also processed and stored in accordance with the terms and conditions set forth in this document.
Transfer of your personal data abroad
Your personal data collected by any of the methods listed above, to be processed in Turkey or to be processed and stored outside Turkey, may also be transferred to service intermediaries located abroad (to countries accredited by the Personal Data Board and with sufficient protection in terms of the protection of personal data) provided that it remains within the scope of the KVKK and in accordance with the contractual purposes.
Storage and protection of personal data
Your personal data will be kept confidential in the database and systems of our Company in accordance with Article 12 of the KVKK; it will not be shared with third parties in any way except for legal obligations and the regulations specified in this document. Our Company is obliged to prevent the unlawful processing of personal data, to prevent access by unauthorized persons, to take software measures such as access management and physical security measures in the systems and databases where your personal data is stored in accordance with Article 12 of the KVKK. If it is learned that personal data has been obtained by others through illegal means, the situation will be reported immediately, in accordance with the legal regulation and in writing to the Personal Data Protection Board.
Keeping personal data up-to-date and accurate
According to Article 4 of the KVKK, our Company is obliged to keep your personal data accurate and up-to-date. In this context, in order for our Company to fulfill its obligations arising from the current legislation, our Customers must share their accurate and up-to-date data or update it via the website / mobile application.
Rights of the personal data owner pursuant to KVKK No. 6698
Article 11 of KVKK No. 6698 entered into force on October 07, 2016 and, in accordance with the relevant article, the rights of the Personal Data Owner after this date are as follows: The Personal Data Owner may apply to our Company (data controller) and request;
To learn whether personal data is processed,
To request information about personal data if it has been processed,
To learn the purpose of processing personal data and whether it is used in accordance with its purpose,
To know the third parties to whom personal data is transferred domestically or abroad,
To request correction of personal data if it is processed incompletely or incorrectly,
To request deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,
To request notification of these transactions to third parties to whom personal data is transferred in the event of correction, deletion or destruction of personal data,
To object to the emergence of a result against the person by exclusively analyzing the processed data through automatic systems,
To request compensation for the damages incurred due to the unlawful processing of personal data,
[Company full title], registered in the registry number of [……………………..] of the [………………] Chamber of Commerce, with the number [……………………………] MERSİS, located at [………………………………………………………………], is the Data Controller within the scope of the KVKK. The Data Controller Representative to be appointed by our company will be announced in the Data Controllers Registry and on the internet address where this document is located when the legal infrastructure is provided. Personal Data Owners may direct their questions, opinions or requests to any of the following communication channels:
E-mail:
Phone:
