General information about the Personal Data Law

The Law on Protection of Personal Data No. 6698 (hereinafter referred to as KVKK) was adopted on March 24, 2016 and published in the Official Gazette No. 29677 on April 7, 2016. Some of the KVKK entered into force on the date of publication, and some on October 7, 2016.

Information as a data controller

In accordance with the KVKK No. 6698 and in the capacity of Data Controller, your personal data will be recorded, stored, updated, disclosed to third parties, classified and processed in the ways listed in the KVKK, where the legislation allows.

How your personal data is processed

In accordance with KVKK No. 6698, your personal data that you share with our Company may be obtained, recorded, stored, changed, rearranged by non-automatic means, in whole or in part, automatically, or provided that it is part of any data recording system, in short, it may be processed by us as the subject of any kind of processing performed on the data. Any operation performed on the data within the scope of KVKK is considered as "processing of personal data".

Purposes of processing your personal data and legal reasons

The personal data you share will be processed in accordance with the KVKK No. 6698 and related secondary regulations for the following purposes.

• In order to fulfill the requirements of the services we provide to our customers in accordance with the requirements of the contract and technology, and to improve our products and services;
   
• Identity to determine the information of the transaction owner within the scope of the Law No. 6563 on the Regulation of Electronic Commerce, the Law on the Protection of Consumers No. 6502 and the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in RG No. 29457 dated 26.08.2015, the Regulation on Distance Contracts published in RG No. 29188 dated 27.11.2014 and other relevant legislation,  to save the address and other necessary information;
   
• To regulate all records and documents that will be the basis of payment systems, electronic contracts or paper transactions, which are mandatory in the field of Banking and Electronic Payment, and to comply with the information storage, reporting and information obligations stipulated by the legislation and other authorities;
   
• In order to provide information to prosecutors' offices, courts and relevant public officials on matters of public security and legal disputes, upon request and in accordance with the legislation.

Informing about the third parties or organizations to which your personal data can be transferred For the purposes stated above, the persons / organizations to which your personal data that you shared with our company can be transferred are as follows:

  especially IdeaSoft Yazılım San ve Tic A.Ş, which provides the e-commerce infrastructure of our company; Persons and organizations related to the services provided such as suppliers, cargo companies, program partner organizations, domestic / international organizations and other 3rd parties that we cooperate with to carry out our activities and / or in the capacity of Data Processor.

How your personal data is collected

Your personal data can be processed and collected as follows:

• With information such as name, surname, TR identity number, address, telephone, business or private e-mail address through the forms on our company's website and mobile applications; In the form of location data, data including preferences on the pages logged in using the user name and password, IP records of the transactions performed, cookie data collected by the browser, and browsing time and details;

• Verbal, written or electronic media through channels such as our sales and marketing department employees, branches, suppliers, other sales channels, forms on paper, business cards, digital marketing and call center;

• For purposes such as establishing a commercial relationship with our company, applying for a job, bidding, business card, resume (cv), bidding and other means taken from people who share their personal data, in a physical or virtual environment, face-to-face or distanced, verbally or in written or electronic media;

• In addition, data obtained from (micro) websites and social media obtained indirectly from different channels, used for website, blog, competition, survey, game, campaign and similar purposes, e-newsletter reading or clicking movements, data provided by public databases, profiles and data open to sharing from social media platforms. 

Your personal data obtained before the entry into force of the KVKK

Your personal data, which were obtained in accordance with the law in terms of membership, electronic message permission, product / service purchase and other forms before the effective date of KVKK, 7 April 2016, are also processed and preserved in accordance with the terms and conditions set forth in this document.

Transfer of your personal data abroad

Your personal data collected by any of the above-mentioned methods to be processed and stored in Turkey or to be processed and stored outside of Turkey may also be transferred to service intermediaries located abroad (to countries accredited by the Personal Data Board and where there is adequate protection for the protection of personal data), provided that they remain within the scope of KVKK and in accordance with the purposes of the contract.

Storage and protection of personal data

Your personal data will be kept confidential in the database and systems of our Company in accordance with Article 12 of the KVKK, and will not be shared with third parties in any way, except for legal obligations and the regulations specified in this document. Our company is obliged to prevent the illegal processing of personal data in accordance with Article 12 of the KVKK, to prevent unauthorized access to the systems and databases where your personal data is stored, to take software and physical security measures such as access management. If it is learned that personal data has been obtained by others illegally, the situation will be reported to the Personal Data Protection Board immediately, in accordance with the legal regulation and in writing.

Keeping personal data up-to-date and accurate

Pursuant to Article 4 of the KVKK, our company has an obligation to keep your personal data accurate and up-to-date. In this context, in order for our Company to fulfill its obligations arising from the current legislation, our Customers are required to share accurate and up-to-date data or update it via the website / mobile application.

Rights of personal data owner in accordance with KVKK No. 6698

Article 11 of the KVKK No. 6698 entered into force on 07 October 2016, and in accordance with the relevant article, the rights of the Personal Data Owner after this date are as follows: The Personal Data Owner has the following rights regarding himself by applying to our Company (data controller).
 

1. Learning whether personal data is processed or not,
2. Requesting information on personal data if it has been processed,
3. To learn the purpose of processing personal data and whether they are used in accordance with the purpose,
4. Knowing the third parties to whom personal data is transferred in the country or abroad,
5. Requesting correction of personal data in case of incomplete or incorrect processing,
6. Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,
7. Requesting the notification of the third parties to whom personal data has been transferred, in case of correction, deletion or destruction of personal data,
8. Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
9. To request the compensation of the damage in case of loss due to unlawful processing of personal data,

[Company full title], registered in [................]  Chamber of Commerce's [................]  registry number, with MERSIS number [................] , and located in [................] , is the Data Controller within the scope of KVKK.

The Data Controller Representative to be appointed by our company will be announced in the Data Controllers Registry and the internet address where this document is located, when the legal infrastructure is provided. Personal Data Owners can direct their questions, opinions or requests to any of the following communication channels:

E.mail: [.........................]

Phone: [.........................]

Fax: [.............................]