• 0

 

PERSONAL DATA POLICY


General Information About the Personal Data Protection Law

The Law on the Protection of Personal Data No. 6698 (hereinafter referred to as KVKK) was adopted on March 24, 2016, and published in the Official Gazette dated April 7, 2016, numbered 29677. Some parts of the KVKK came into force on the date of publication, while others came into force on October 7, 2016.

Information as the Data Controller

In accordance with the KVKK No. 6698 and in the capacity of Data Controller, your personal data may be recorded, stored, updated, disclosed/transferred to third parties in cases permitted by the legislation, classified, and processed in the ways listed in the KVKK, as outlined on this page.

How Your Personal Data May Be Processed

In accordance with the KVKK No. 6698, your personal data shared with our Company may be processed by being obtained wholly or partially, automatically, or by non-automatic means provided that it is part of any data recording system; by being recorded, stored, altered, reorganized—in short, subjected to any kind of processing performed on data. Any activity performed on data within the scope of the KVKK is considered "processing of personal data".

Purposes and Legal Reasons for Processing Your Personal Data

The personal data you share will be processed for the following purposes:

  • To fulfill the requirements of the services we provide to our customers in accordance with contractual and technological needs, and to improve the products and services offered;
  • To record identity, address, and other necessary information to identify the transaction owner within the scope of Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on the Protection of Consumers, and the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette No. 29457 dated 26.08.2015, the Distance Contracts Regulation published in the Official Gazette No. 29188 dated 27.11.2014, and other related legislation;
  • To organize all necessary records and documents in the field of Banking and Electronic Payments, either in electronic or paper format, which are required for transactions, and to comply with obligations of information retention, reporting, and informing as stipulated by the legislation and other authorities;
  • To provide information to public prosecutors, courts, and relevant public officials upon request and in accordance with the legislation regarding matters related to public security and legal disputes;

will be processed in compliance with the KVKK No. 6698 and the related secondary regulations. Information regarding the third parties or institutions to which your personal data may be transferred: For the purposes mentioned above, the third parties/institutions to which your personal data shared with our Company may be transferred include, primarily Ticimax (which provides our Company's e-commerce infrastructure), suppliers, shipping companies, and other individuals and institutions related to the services provided; organizations we cooperate with or receive services from as Data Processors, domestic/international institutions, and other third parties.

How Your Personal Data is Collected

Your personal data may be collected through the following methods:

  • Via forms on our company’s website and mobile applications, such as name, surname, national ID number, address, phone number, business or personal email address; data including preferences on pages accessed using a username and password, IP records of the performed transactions, cookie data collected by the browser, browsing time and details, and location data;
  • Verbally, in writing, or electronically through our sales and marketing staff, branches, suppliers, other sales channels, paper forms, business cards, digital marketing, and call center channels;
  • From individuals who share their personal data with our Company for purposes such as establishing a commercial relationship, applying for a job, or submitting an offer—via business cards, résumés (CVs), offers, etc.—in physical or virtual environments, face-to-face or remotely, verbally, in writing or electronically;
  • Indirectly from different channels, such as websites, blogs, contests, surveys, games, campaigns, and similar microsites and social media; data obtained from e-newsletter reading or click behavior, public databases, and publicly shared profiles and data on social media platforms may also be collected and processed.

Personal Data Obtained Before the KVKK Came Into Force

Your personal data, which was lawfully obtained before April 7, 2016, the effective date of the KVKK—through membership, electronic communication permissions, product/service purchases, and other legal means—is processed and stored in accordance with the terms and conditions set out in this document.

Transfer of Your Personal Data Abroad

Your personal data collected by any of the methods listed above, whether processed in Turkey or processed and stored abroad, may be transferred—within the scope of KVKK and in accordance with contractual purposes—to service providers located in foreign countries (which are accredited by the Personal Data Protection Board and where adequate protection is ensured).

Storage and Protection of Personal Data

Your personal data will be stored confidentially in the databases and systems of our Company, in accordance with Article 12 of the KVKK; and will not be shared with third parties under any circumstances other than legal obligations and the regulations stated in this document. Our Company is obliged under Article 12 of the KVKK to prevent unlawful processing of personal data, to prevent unauthorized access, and to implement access management and similar software and physical security measures to ensure data protection. In the event that personal data is unlawfully obtained by others, the situation will be immediately reported in writing to the Personal Data Protection Board in compliance with legal regulations.

Keeping Personal Data Accurate and Up-to-Date

In accordance with Article 4 of the KVKK, our Company is obliged to keep your personal data accurate and up-to-date. Therefore, our Customers are required to provide accurate and current data or update it via the website or mobile application, so that our Company can fulfill its legal obligations.

Rights of the Personal Data Owner Under Law No. 6698

Article 11 of Law No. 6698 came into force on October 7, 2016. According to this article, the rights of the Personal Data Owner after this date are as follows: The Personal Data Owner may apply to our Company (the data controller) and request the following in relation to themselves:

To learn whether personal data is being processed,
If processed, to request information regarding such processing,
To learn the purpose of processing and whether data is used in accordance with that purpose,
To know the third parties to whom personal data is transferred domestically or abroad,
To request correction of personal data if it is incomplete or inaccurate,
To request deletion or destruction of personal data within the framework of the conditions set forth in Article 7 of the KVKK,
To request that correction, deletion, or destruction of personal data be notified to third parties to whom the data has been transferred,
To object to any result against themselves arising from analysis of personal data exclusively by automated systems,
To request compensation in case of damage due to unlawful processing of personal data,

These rights are granted under the law. ... Holding a tax number, KLEA, located at CUMHURİYET MAH. KOYTÜR 2 CAD. KOYTÜR 2 B3 BLOK NO: 4 D İÇ KAPI NO: 28 MEZİTLİ/ MERSİN, is the Data Controller within the scope of KVKK. The Data Controller Representative to be appointed by our Company will be announced in the Data Controllers Registry and on the website where this document is published once the legal infrastructure is established. Personal Data Owners may submit their questions, opinions, or requests through any of the communication channels below:

Email: [...]

Phone: [...]

Fax: [...]