[Company Name / Brand] Personal Data Policy
General Information Regarding the Personal Data Protection Law

The Personal Data Protection Law No. 6698 (hereinafter referred to as KVKK) was adopted on March 24, 2016, and published in the Official Gazette No. 29677 dated April 7, 2016. Part of the KVKK came into effect on the date of publication, and part of it came into effect on October 7, 2016.

Information in the capacity of data controller

In accordance with KVKK No. 6698 and in the capacity of Data Controller, your personal data will be recorded, stored, updated, disclosed/transferred to third parties in cases permitted by legislation, classified, and processed in the ways listed in the KVKK, within the framework explained on this page.

How your personal data may be processed

In accordance with the Personal Data Protection Law No. 6698, your personal data shared with our Company may be processed by us by being obtained, recorded, stored, modified, reorganized, in short, by being subject to any kind of processing performed on the data, either fully or partially, automatically, or by non-automatic means, provided that it is part of a data recording system. Any processing of data within the scope of the KVKK is considered “processing of personal data.”

The purposes and legal grounds for processing your personal data

The personal data you share is processed

To fulfill the requirements of the services we provide to our customers, in accordance with the terms of the contract and technological requirements, and to improve the products and services we offer;
Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on the Protection of Consumers, and the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette dated 26.08.2015 and numbered 29457, which was prepared based on these regulations, The Regulation on Distance Contracts published in the Official Gazette dated November 27, 2014, numbered 29188, and other relevant legislation, to record the identity, address, and other necessary information to identify the transaction owner;
To organize all records and documents that will serve as the basis for payment systems, electronic contracts, or paper-based transactions, which are mandatory in the field of banking and electronic payments; to comply with the information storage, reporting, and notification obligations required by legislation and other authorities;
To provide information to prosecutors, courts, and relevant public officials upon request and as required by legislation in matters related to public safety and legal disputes;

Your personal data will be processed in accordance with the Personal Data Protection Law No. 6698 and related secondary regulations. Information about third parties or organizations to whom your personal data may be transferred For the purposes stated above, the individuals/organizations to whom your personal data shared with our Company may be transferred are as follows: primarily IdeaSoft Yazılım San. ve Tic. A.Ş., which provides our Company’s e-commerce infrastructure, as well as persons and organizations related to the services provided, such as suppliers and shipping companies, program partner organizations with which we collaborate and from which we receive services in order to carry out our activities and/or in the capacity of Data Processors, domestic/foreign organizations, and other third parties.

How your personal data is collected

Your personal data is collected

Through forms on our company’s website and mobile applications, including information such as your first name, last name, Turkish ID number, address, telephone number, and work or personal email address; through preferences on pages accessed using your username and password, IP records of transactions performed, data collected by your browser such as cookies, browsing duration and details, and location data;
Our sales and marketing department employees, branches, suppliers, other sales channels, paper forms, business cards, digital marketing, and call centers collect data verbally, in writing, or electronically.
From individuals who share their personal data in a physical or virtual environment, face-to-face or remotely, verbally or in writing or electronically, for purposes such as establishing a business relationship with our company, applying for a job, or submitting a bid, by means of business cards, resumes (CVs), bids, and other means;
Furthermore, data obtained indirectly through various channels, such as data obtained from (micro) websites used for purposes such as websites, blogs, competitions, surveys, games, campaigns, and similar purposes, and from social media; e-newsletter reading or clicking movements; data provided by publicly available databases; and publicly shared profiles and data from social media platforms; may be processed and collected.

Your personal data obtained before the KVKK came into effect

Your personal data obtained in accordance with the law before April 7, 2016, the effective date of the KVKK, through membership, electronic communication consent, product/service purchase, and other means, is processed and stored in accordance with the terms and conditions set forth in this document.

Transfer of your personal data abroad

Your personal data collected by any of the methods listed above, whether processed in Turkey or processed and stored outside Turkey, may be transferred to service providers located abroad (in countries accredited by the Personal Data Protection Board and deemed to provide adequate protection for personal data), provided that such transfer remains within the scope of the KVKK and is in accordance with the purposes of the contract.

Storage and protection of personal data

Your personal data will be stored confidentially in the databases and systems of our Company in accordance with Article 12 of the KVKK; it will not be shared with third parties in any way except for legal obligations and the regulations specified in this document. Our company is obligated to prevent the unlawful processing of your personal data, to prevent access by unauthorized persons, and to take software measures such as access management and physical security measures in accordance with Article 12 of the KVKK. If it is learned that personal data has been obtained by others through illegal means, the situation will be reported immediately, in writing, and in accordance with legal regulations to the Personal Data Protection Board.

Keeping personal data up-to-date and accurate

In accordance with Article 4 of the KVKK, our Company is obliged to keep your personal data accurate and up-to-date. In this context, in order for our Company to fulfill its obligations arising from the legislation in force, our Customers are required to share their accurate and up-to-date data or update it via the website/mobile application.

Rights of the data subject under the Personal Data Protection Law No. 6698

Article 11 of the Personal Data Protection Law No. 6698 entered into force on October 7, 2016. Pursuant to the relevant article, the rights of the Data Subject after this date are as follows: The Data Subject may apply to our Company (data controller) to:

Whether their personal data has been processed,
If their personal data has been processed, to request information about it,
To learn the purpose of processing their personal data and whether it is being used for its intended purpose,
To know the third parties to whom their personal data has been transferred within or outside the country,
To request the correction of their personal data if it has been processed incompletely or incorrectly,
Requesting the deletion or destruction of personal data within the framework of the conditions set forth in Article 7 of the KVKK,
Requesting that third parties to whom personal data has been transferred be notified of any rectification, erasure, or destruction of personal data,
Objecting to the analysis of processed data exclusively through automated systems resulting in a negative outcome for the individual,
To request compensation for damages incurred due to the unlawful processing of personal data,

has the right to. […………….] Chamber of Commerce, registered under [……………………..] registration number, [………………………..] MERSIS number, located at [……………………………………………………………..] address, is the Data Controller within the scope of the KVKK. The Data Controller Representative appointed by our company will be announced in the Data Controllers Registry and on the website address of this document when the legal infrastructure is provided. Data Subjects may direct their questions, opinions, or requests to any of the following communication channels:
E-mail: […………………….]
Phone: […………………….]
Fax: [………………………..]