Privacy Policy

[Company Name / Brand]  Personal Data Policy

General Information on the Law on Personal Data

The Law on the Protection of Personal Data No. 6698 (hereinafter referred to as KVKK) was adopted on March 24, 2016, and published in the Official Gazette dated April 7, 2016, numbered 29677. Some parts of the KVKK came into force on the date of publication, while others came into force on October 7, 2016.

Information as a Data Controller

In accordance with KVKK No. 6698 and as the Data Controller, your personal data will be recorded, stored, updated, disclosed/transferred to third parties when permitted by law, classified, and processed in the ways listed in the KVKK, as described on this page.

How your personal data may be processed

In accordance with KVKK No. 6698, your personal data shared with our Company may be processed by us, fully or partially, automatically, or by non-automatic means provided that it is part of any data recording system, by obtaining, recording, storing, modifying, reorganizing, in short, by subjecting it to any operation performed on the data. Any operation performed on data within the scope of KVKK is considered "processing of personal data."

Purposes and legal grounds for processing your personal data

The personal data you share is processed:

• To fulfill the requirements of the services we provide to our customers, in accordance with the contract and technology, and to improve our products and services;
  
  
• To record identity, address, and other necessary information to identify the transaction owner within the scope of the Law on Regulation of Electronic Commerce No. 6563, the Law on Consumer Protection No. 6502, and the Regulation on Service Providers and Intermediate Service Providers in Electronic Commerce published in the Official Gazette dated 26.08.2015, numbered 29457, and the Regulation on Distance Contracts published in the Official Gazette dated 27.11.2014, numbered 29188, and other relevant legislation;
  
  
• To arrange all records and documents that will form the basis for processing in payment systems, electronic contracts, or paper format, which are mandatory in the banking and electronic payment field; to comply with information storage, reporting, and notification obligations stipulated by legislation and other authorities;
  
  
• To provide information to prosecutor's offices, courts, and relevant public officials when requested and required by legislation, in matters related to public safety and legal disputes.

It will be processed in accordance with KVKK No. 6698 and relevant secondary regulations. Information on third parties or organizations to which your personal data may be transferred For the purposes stated above, the persons / organizations to whom your personal data shared with our Company may be transferred are; primarily IdeaSoft Yazılım San. ve Tic. A.Ş., which provides our Company's e-commerce infrastructure, and individuals and organizations related to the services provided, such as suppliers and cargo companies, program partner organizations with whom we cooperate and/or receive service as Data Processors to carry out our activities, domestic/international organizations, and other third parties.

Method of collecting your personal data

Your personal data is collected:

• Through forms on our Company's website and mobile applications, such as name, surname, Turkish ID number, address, phone, business or private e-mail address; preferences on pages accessed using a username and password, IP records of transactions performed, cookie data collected by the browser, and data containing navigation time and details, location data;

• Through our sales and marketing department employees, branches, suppliers, other sales channels, paper forms, business cards, digital marketing, and call centers, verbally, in writing, or electronically;

• From individuals who share their personal data for purposes such as establishing a commercial relationship with our Company, applying for a job, making an offer, through business cards, resumes (CVs), making offers, and other means, in a physical or virtual environment, face-to-face or remotely, verbally or in writing or electronically;

• Additionally, data indirectly obtained from different channels, data obtained from (micro) websites and social media used for purposes such as websites, blogs, contests, surveys, games, campaigns, and similar, e-newsletter reading or clicking actions, data provided by publicly available databases, and publicly shared profile and data from social media platforms; can be processed and collected.

Your personal data obtained before the KVKK came into force

Your personal data legally obtained through membership, electronic communication consent, product/service purchases, and other forms before April 7, 2016, the effective date of the KVKK, is also processed and stored in accordance with the terms and conditions set forth in this document.

Transfer of your personal data abroad

Your personal data collected by any of the methods listed above, to be processed in Turkey or processed and stored outside Turkey, may also be transferred to service providers abroad (to countries accredited by the Personal Data Board and where sufficient protection for personal data exists), provided that it remains within the scope of the KVKK and in accordance with the purposes of the contract.

Storage and Protection of Personal Data

Your personal data will be stored confidentially in the Company's database and systems in accordance with Article 12 of the KVKK; it will not be shared with third parties under any circumstances, except for legal obligations and the regulations specified in this document. Our Company is obliged to prevent the unlawful processing of personal data, prevent unauthorized access to the systems and databases where your personal data is stored, and take software measures such as access management and physical security measures, in accordance with Article 12 of the KVKK. If it is learned that personal data has been obtained by others through illegal means, the situation will be immediately reported to the Personal Data Protection Board in accordance with legal regulations and in writing.

Keeping personal data up-to-date and accurate

In accordance with Article 4 of the KVKK, our Company has an obligation to keep your personal data accurate and up-to-date. In this context, our Customers must share their accurate and up-to-date data or update it via the website / mobile application for our Company to fulfill its obligations arising from the current legislation.

Rights of the personal data owner under KVKK No. 6698

Article 11 of KVKK No. 6698 came into force on October 7, 2016, and in accordance with the relevant article, the rights of the Personal Data Owner after this date are as follows: The Personal Data Owner, by applying to our Company (data controller), regarding themselves;

1. To learn whether personal data is being processed,
2. To request information if personal data has been processed,
3. To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
4. To know the third parties to whom personal data is transferred domestically or abroad,
5. To request the correction of personal data if it is incomplete or incorrectly processed,
6. To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,
7. To request that the third parties to whom personal data has been transferred be notified of the operations of correction, deletion, or destruction of personal data,
8. To object to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems,
9. To demand compensation for damages incurred due to unlawful processing of personal data.