Personal Data Policy
General Information about the Personal Data Law
The Law on Protection of Personal Data numbered 6698 (hereinafter referred to as the PDPL) was adopted on March 24, 2016, and published in the Official Gazette numbered 29677 dated April 7, 2016. Part of the PDPL came into force on the date of publication, and the rest came into force on October 7, 2016.
Information as Data Controller
In accordance with the Law No. 6698 on Personal Data Protection and as the Data Controller, your personal data will be processed within the framework described on this page; it will be recorded, stored, updated, disclosed/transferred to third parties when permitted by the legislation, classified, and processed in the ways specified in the PDPL.
How your Personal Data may be Processed
In accordance with the PDPL No. 6698, your personal data shared with our company may be processed by us in whole or in part, automatically or non-automatically, recorded, stored, modified, reorganized, in short, processed in any way regarding the processing of personal data, either as part of any data recording system or not.
Purposes and Legal Grounds for Processing your Personal Data
The personal data you share,
To fulfill the requirements of the services we provide to our customers, in accordance with the contract and technological requirements, to improve the products and services we offer;
To record the identity, address, and other necessary information of the data owner for the determination of the transaction subject to the Electronic Commerce Regulation published in the Official Gazette dated 26.08.2015 and numbered 29457 based on the Law No. 6563 on the Regulation of Electronic Commerce, the Law No. 6502 on Consumer Protection, and the Distance Contracts Regulation published in the Official Gazette dated 27.11.2014 and numbered 29188, and other relevant legislation;
To prepare mandatory payment systems, electronic contracts, or all records and documents based on transactions in paper or electronic form for banking and electronic payment fields, and to comply with information storage, reporting, and information obligations stipulated by regulations and other authorities;
For matters related to public security and legal disputes, and upon request and as required by law, to provide information to public prosecutors, courts, and relevant public officials;
It will be processed in accordance with the PDPL No. 6698 and related secondary regulations. Information about third parties or institutions to which your Personal Data may be transferred For the purposes stated above, the personal data you share with our company may be transferred to individuals / organizations such as IdeaSoft Software Industry and Trade Inc., which provides our company's e-commerce infrastructure, suppliers, cargo companies, and other third parties, domestically / abroad, institutions, and organizations as well as other third parties.
Methods of Collecting your Personal Data
Your personal data,
Through forms on our company's website and mobile applications, such as name, surname, ID number, address, telephone, business or private email address; through user name and password used to log in to pages, preferences on pages, IP records of transactions, cookie data collected by the browser, browsing time, and details;
Verbally, in writing, or electronically through sales and marketing department employees, our branches, our suppliers, other sales channels, paper forms, business cards, digital marketing, and call center channels;
From individuals who share their personal data for the purpose of establishing a commercial relationship with our company, making job applications, offering quotations, using business cards, resumes (CVs), offering quotations, and similar ways, physically or virtually, face to face or remotely, verbally or in writing or electronically;
Moreover, indirectly collected from different channels, from (micro) websites used for purposes such as website, blog, competition, survey, game, campaign, and similar, from social media, from e-newsletter reading or clicking movements, data provided by public databases, from publicly available profiles and data on social media platforms; can be processed and collected.
Personal Data obtained before the PDPL came into force
Before the effective date of the PDPL, April 7, 2016, personal data obtained lawfully, such as membership, electronic consent, product/service purchase, and in other ways, is processed and maintained in accordance with the terms and conditions set forth in this document.
Transfer of your Personal Data Abroad
Your personal data collected through any of the methods mentioned above may be transferred abroad, within the scope of the PDPL, and for the purposes of the contract, provided that it is within the framework of the Law and to countries where there is sufficient protection of personal data (accredited by the Personal Data Protection Board).
Storage and Protection of Personal Data
Your personal data will be kept confidentially in the database and systems of our company, and will not be shared with third parties except as required by legal obligations and the regulations specified in this document. Our company is obliged to take software measures such as access management and physical security measures to prevent the unlawful processing of personal data, to prevent unauthorized access, and to fulfill its legal obligations specified in Article 12 of the PDPL. If it is learned that personal data is obtained by illegal means, the situation will be reported to the Personal Data Protection Board immediately, in accordance with the legal regulations and in writing.
Keeping your Personal Data Up-to-date and Accurate
In accordance with Article 4 of the PDPL, our company is obliged to keep your personal data accurate and up-to-date. In this context, our customers are required to share or update their correct and up-to-date data via the website/mobile application or other communication channels to enable our company to fulfill its legal obligations.
Rights of the Data Subject under the PDPL No. 6698
As per Article 11 of the PDPL No. 6698, as of October 7, 2016, the rights of the Data Subject (individuals whose personal data is processed) are as follows: The Data Subject may apply to our company (data controller) and request;
To learn whether personal data is processed,
If personal data is processed, to request information regarding this,
To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
To know the third parties to whom personal data are transferred, whether domestically or abroad,
If personal data is incomplete or incorrectly processed, to request their correction,
Pursuant to Article 7 of the PDPL, within the scope of certain conditions, to request the deletion or destruction of personal data,
If personal data are corrected, deleted, or destroyed, to request that these transactions be notified to third parties to whom personal data have been transferred;
To object to the emergence of a result against the individual by analyzing the processed data exclusively through automated systems,
To request compensation in case of damage due to the unlawful processing of personal data.
[...], registered at the [..................] Chamber of Commerce under the number [...], with a MERSIS number of [...], located at [.......................................................................], is the Data Controller under the PDPL. When the legal infrastructure is provided, the Data Controller Representative to be appointed by our company will be announced in the Data Controllers Registry and on the website where this document is located. Data Subjects can direct their questions, opinions, or requests to any of the following communication channels:
Email: [.........................]
Phone: [.........................]
Fax: [.............................]