Personal Data Protection
General Information on the Personal Data Protection Law The Personal Data Protection Law No. 6698 (hereafter referred to as "KVKK") was enacted on March 24, 2016, and published in the Official Gazette No. 29677 dated April 7, 2016. Part of KVKK entered into force on the date of publication, while other parts became effective on October 7, 2016.
Notification as Data Controller
As per KVKK No. 6698 and in our capacity as Data Controller, your personal data will be recorded, stored, updated, classified, disclosed/transferred to third parties when allowed by law, and processed according to the methods specified in KVKK.
How Your Personal Data May Be Processed Under KVKK No. 6698, your personal data shared with our Company can be fully or partially processed automatically or non-automatically as part of any data recording system, involving collection, recording, storage, modification, rearrangement, and other similar operations. All these operations on data are considered "processing personal data" under KVKK.
Purposes and Legal Basis for Processing Your Personal Data Your personal data may be processed for the following purposes:
-
To provide services to our customers according to the requirements of contracts and technology and to enhance our products and services;
-
To comply with the Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on Consumer Protection, Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce (Official Gazette No. 29457 dated August 26, 2015), Regulation on Distance Contracts (Official Gazette No. 29188 dated November 27, 2014), and other relevant legislation;
-
To fulfill obligations such as identification, address, and other necessary information for transaction owners;
-
To organize records and documents required for electronic payment systems, electronic or paper-based contracts;
-
To comply with information storage, reporting, and notification obligations required by law and authorities;
-
To provide information to prosecutors, courts, and relevant public officials upon request or as mandated by law, particularly in matters concerning public security and legal disputes; All these processes will comply with KVKK and related secondary regulations.
Third Parties or Organizations to Whom Your Personal Data May Be Transferred Your personal data may be transferred to third parties such as our e-commerce infrastructure provider (ikas Teknoloji A.Ş.), suppliers, cargo companies, business partners, service providers (Data Processors), domestic and international organizations, and other relevant third parties for the purposes stated above.
Collection Method of Your Personal Data Your personal data may be collected through:
-
Forms on our website and mobile applications, including personal details (name, surname, ID number, address, telephone, business/personal email), preferences on login pages, IP records of transactions, cookies, browsing duration/details, and location data;
-
Verbal, written, or electronic channels used by our sales and marketing teams, branches, suppliers, other sales channels, digital marketing platforms, call centers, printed forms, business cards;
-
Physical or virtual interactions for establishing business relationships, job applications, proposals (business cards, resumes, proposals);
-
Indirect sources such as websites, blogs, competitions, surveys, games, campaigns, social media platforms, public databases, and newsletter activities.
Personal Data Obtained Before KVKK Came into Force Personal data obtained lawfully before April 7, 2016 (KVKK’s effective date), such as memberships, electronic communication permissions, product/service purchases, are processed and preserved according to the terms and conditions specified herein.
International Transfer of Your Personal Data Your personal data collected through the methods outlined above may be transferred internationally (to countries accredited by the Personal Data Protection Board as offering adequate protection) in accordance with KVKK for processing or storage purposes consistent with contractual obligations.
Storage and Protection of Personal Data Your personal data will be stored confidentially in our Company's databases and systems as mandated by Article 12 of KVKK and will not be shared with third parties except as required by law or as specified herein. Our Company is responsible for implementing software and physical security measures to prevent unlawful processing and unauthorized access to personal data. Any unauthorized access to personal data will be promptly reported in writing to the Personal Data Protection Board.
Keeping Personal Data Accurate and Updated As per Article 4 of KVKK, our Company is obligated to keep your personal data accurate and current. Customers must provide accurate and updated information or update their details through our website/mobile application to fulfill legal obligations.
Rights of Personal Data Owners under KVKK No. 6698 According to Article 11 of KVKK effective from October 7, 2016, personal data owners have the right to:
-
Learn whether their personal data is processed;
-
Request information about processed personal data;
-
Learn the purpose of personal data processing and verify its use for intended purposes;
-
Know third parties to whom personal data is transferred domestically or internationally;
-
Request correction of personal data if processed incorrectly or incompletely;
-
Request deletion or destruction of personal data under Article 7 of KVKK;
-
Request notification of corrections, deletions, or destruction of personal data to third parties to whom data was transferred;
-
Object to results against themselves derived solely from automated data analysis;
-
Demand compensation for damages resulting from unlawful personal data processing.
Our Company ([Full Company Name]), registered at the Trade Registry Office ([Registry Number]), MERSİS No. ([MERSİS Number]), and located at ([Company Address]), is the Data Controller under KVKK. The Data Controller Representative appointed by our Company will be publicly announced on the Data Controllers Registry and our website when the legal infrastructure is established.
Personal Data Owners can direct questions, opinions, or requests via:
Email: [.........................]
Telephone: [.........................]
Fax: [.............................]