We attach great importance to ensuring the security of the personal data you provide, whether through our website or by other means. The "Personal Data Protection Law No. 6698" has come into force. We would like to inform you about the provisions of this law and some definitions stated within it:
Personal Data: Any information relating to an identified or identifiable natural person.
Processing of Personal Data: Any operation performed on personal data, whether or not by automated means, such as collection, recording, storage, protection, alteration, rearrangement, disclosure, transmission, transfer, accessibility, classification, or prevention of its use.
Data Processor: A natural or legal person who processes personal data on behalf of the data controller, based on the authorization given.
Data Recording System: A system in which personal data is structured and processed according to certain criteria.
Data Controller: A natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.
1. Purpose of Personal Data Protection and Consent Form and the Position of Our Company as the Data Controller
In terms of personal data related to our e-commerce site customers, our company is the "data controller" as defined under the Personal Data Protection Law No. 6698 ("Law"). The purpose of this Personal Data Protection and Consent Form is to inform customers about the personal data processing activities carried out by our e-commerce site under this Law and to obtain their explicit consent for the purposes mentioned in Section 3 below.
2. Purpose of Processing Personal Data of Customers
Personal data of customers are processed within the framework of the conditions and purposes specified in Articles 5 and 6 of the Law as follows:
- To carry out the necessary work by relevant business units to enable individuals to benefit from the products and services offered by our e-commerce site and to carry out related business processes.
- To conduct the necessary work and related business processes to carry out the commercial activities of our e-commerce site.
- To plan and implement the commercial and/or business strategies of our e-commerce site.
- To ensure the legal, technical, and commercial-security of individuals in business relationships with our e-commerce site and to offer and promote products and services to these individuals based on their preferences, usage habits, and needs.
- To establish potential claims and receivables.
- To provide information to authorized institutions as required by law.
- To create and track visitor records.
- To fulfill obligations arising from the Consumer Protection Law, the Retail Trade Regulation Law, and other legal regulations through channels such as our branches, call centers, subsidiaries, websites, and social media pages, among others.
- To provide better services to customers, offer various advantages, inform them about sales, marketing, promotions, campaigns, terms and conditions, surveys, and customer satisfaction research, speed up the purchasing process, and manage orders and deliveries.
- To create campaigns for customers, carry out cross-selling activities, and identify target audiences.
- To monitor customer activities and implement activities to enhance the user experience, develop our website and mobile applications, and personalize them based on customer needs.
- To carry out direct and indirect marketing, personalized marketing, and remarketing activities, as well as segmentation, targeting, analysis, and internal reporting related to customers.
- To plan and implement customer satisfaction activities and customer relationship management processes.
3. Personal Data to Be Processed Based on the Customer’s Explicit Consent and Purposes of Processing
In cases where the conditions specified in Articles 5/2 and 6/3 of the Law are not met, the explicit consent of the customers is required for processing their personal data by our e-commerce site.
4. Transfer of Personal Data of Customers
The personal data of customers may be shared with the following parties within the framework of the conditions and purposes specified in Articles 8 and 9 of the Law:
- Company officials, affiliates, business partners, suppliers, shareholders, and public or private institutions authorized by law.
- Payment institutions for identity verification, in accordance with the framework agreement and regulations regarding the prevention of money laundering and financing of terrorism.
- Personal data may also be transferred to third parties within the country or abroad in compliance with the conditions specified in the Law.
5. Method and Legal Grounds for Collecting Personal Data
Personal data is collected electronically from customers. Personal data collected for the legal reasons mentioned above may be processed and transferred in accordance with the purposes outlined in Articles 5 and 6 of the Law and this Personal Data Protection Notice.
6. Retention Periods for Personal Data
Our e-commerce site retains personal data for the periods specified in relevant laws and regulations. If no period is specified in the relevant legislation, the personal data will be processed for as long as necessary to fulfill the purpose for which it was collected and then deleted, destroyed, or anonymized.
When the purpose of data processing ceases and the retention periods under applicable laws or our company's policies are concluded, personal data will only be retained for legal disputes or to assert rights related to the data.
7. Rights of the Data Subject (Customer)
Under Article 11 of the Law, data subjects have the following rights:
- To learn whether personal data is being processed and if so, to request information regarding such processing,
- To request information about personal data if it is being processed,
- To learn the purpose of processing personal data and whether the data is being used for its intended purpose,
- To know the third parties to whom personal data is transferred, whether in the country or abroad,
- To request correction of personal data if it is incomplete or incorrect, and to request that the correction be communicated to third parties to whom the data has been transferred,
- To request the deletion or destruction of personal data if the reasons for processing no longer exist, in accordance with the provisions of the Law and other relevant legislation, and to request that this be communicated to third parties to whom the data has been transferred,
- To object to the processing of personal data by automated decision-making systems that produce results that affect the individual, especially if these results are detrimental,
- To request compensation for damages arising from unlawful processing of personal data.
Requests related to the exercise of these rights can be submitted by data subjects through the channels provided by our e-commerce site in accordance with the Personal Data Protection Law No. 6698. We will evaluate and conclude these requests within 30 days.