Personal Data Protection Law (KVKK) Information Text

Personal Data Protection Law (KVKK) Information Text

We attach great importance to ensuring the security of your personal information that you provide to us, whether through using our website or through other means. The "Personal Data Protection Law" No. 6698 has entered into force. We would like to inform you about this legislation and some of the definitions specified within it:

Personal data: Any information relating to an identified or identifiable natural person,

Processing of Personal Data: Any operation performed on personal data, such as obtaining, recording, storing, preserving, modifying, reorganizing, disclosing, transferring, acquiring, making available, classifying, or preventing the use of data, whether wholly or partly automated or non-automated, provided that it is part of a data recording system.

Data processor: A natural or legal person who processes personal data on behalf of the data controller, based on the authority given by the data controller.

Data recording system: A recording system in which personal data is processed by structuring it according to specific criteria.

Data controller: Refers to the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.

1. Purpose of the Personal Data Protection and Consent Form and Our Company's Position as Data Controller:

Our online shopping site acts as the "data controller" under the Law No. 6698 on the Protection of Personal Data ("the Law") with respect to customers' personal data. This Personal Data Protection and Consent Text aims to inform customers about the personal data processing activities carried out by our online shopping site in accordance with the said Law and to obtain their explicit consent for the situations specified in Article 3 below.

2. Purpose of Processing Customers' Personal Data:

Customers' personal data is processed within the framework of the personal data processing conditions and purposes specified below and in Articles 5 and 6 of the Law. Customers' personal data includes:

• The necessary work to enable relevant individuals to benefit from the products and services offered by our shopping site must be carried out by the business units, and the relevant business processes must be executed.
• The necessary work is carried out by the relevant business units and the related business processes are executed in order to perform the commercial activities conducted by our e-commerce site.
• Planning and execution of the commercial and/or business strategies of our e-commerce website,
• Ensuring the legal, technical, and commercial-business security of individuals with whom our e-commerce site has a business relationship, and planning and executing the necessary activities to customize and recommend our products and services to individuals based on their preferences, usage habits, and needs.
• Establishment of potential rights and claims of the interested parties.
• Providing information to authorized institutions as required by law.
• Creating and tracking visitor records.
• Our company and, on behalf of our company, through our branches, call center, affiliated companies, or through our websites, social media pages, or any other channels, including but not limited to these, shall ensure compliance with obligations under the Law on Consumer Protection, the Law on Regulation of Retail Trade, and other relevant legislation.
• Providing better service to customers, offering various advantages, sales, marketing, information, providing information about promotions, informing about campaigns and their terms and conditions, conducting surveys and customer satisfaction research, facilitating and speeding up your purchasing processes, receiving and delivering your orders,
• Creating customer-focused campaigns, cross-selling, and identifying target audiences.
• Monitoring customer behavior to improve user experience, developing and personalizing the functionality of our e-commerce website and mobile application according to customer needs, conducting direct and indirect marketing, personalized marketing and remarketing activities, performing personalized segmentation, targeting, analysis and internal reporting activities, and conducting market research.
• Personal data may be processed and shared with the parties specified in this Personal Data Protection Text, in accordance with the Customer's consent, for purposes including the planning and execution of customer satisfaction activities, the planning and execution of customer relationship management processes, the planning and execution of sales and marketing processes of our e-commerce site's products and/or services, and the planning and execution of processes to create and/or increase loyalty to the products and/or services offered by our e-commerce site.

Our Shopping Site reserves the right to associate the behavior of users visiting the site, even if they are not members, with a cookie in their browser for the purpose of online behavioral advertising and marketing, and to define remarketing lists based on metrics such as the number of pages viewed, visit duration, and goal completion. Subsequently, targeted advertising content may be shown to this user on the site or on other sites in the Display Network, based on their interests. During the process of directing users to our Shopping Site via Google AFS ads, Google may place cookies on or read existing cookies in users' browsers, or use web beacons to collect information.

3. Personal Data to be Processed with the Explicit Consent of Customers and the Purposes of Processing:

For the following situations where the personal data processing conditions stipulated in Articles 5/2 and 6/3 of the Law cannot be met, our shopping site requires the explicit consent of customers to process their personal data.

4. Transfer of Customers' Personal Data:

Personal data belonging to customers may be shared with company officials, our affiliates, business partners, suppliers, shareholders, legally authorized public institutions and private institutions within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, including: conducting the necessary work by business units to enable individuals to benefit from the products and services offered by our shopping site and executing the relevant business processes; conducting the necessary work by relevant business units for the realization of the commercial activities carried out by our shopping site and executing the related business processes; planning and executing the commercial and/or business strategies of our shopping site; ensuring the legal, technical and commercial-business security of our shopping site and relevant individuals with whom our shopping site has a business relationship; and planning and executing the necessary activities to customize and recommend the products and services offered by our shopping site to individuals according to their preferences, usage habits and needs.

The user's name and contact information may be shared with payment institutions for identity verification purposes in accordance with the framework agreement that the user will approve during the payment process and the Regulation on Measures Regarding the Prevention of Money Laundering and Financing of Terrorism, published in the Official Gazette dated January 9, 2008, and numbered 26751.

Our online shopping site may transfer personal data to third parties within Turkey, as well as abroad, for the purposes stated above, provided that the conditions stipulated in Law No. 6698 are met.

5. Method and Legal Basis for the Collection of Personal Data:

Personal data is collected from customers electronically. Personal data collected for the legal reasons stated above may be processed and transferred for the purposes specified in Articles 5 and 6 of the Law and in this Personal Data Protection Text.

 

6. Retention Periods for Personal Data

Our online store stores personal data for the periods specified in relevant laws and regulations, if required by those laws and regulations.

If the legislation does not specify a retention period for personal data, personal data is processed for a period necessary for the activity carried out by our Shopping Site in relation to processing that data, in accordance with our Shopping Site's practices and the customs of its business life, after which it is deleted, destroyed, or anonymized.

If the purpose for processing personal data has ended, and the retention periods determined by the relevant legislation and our Shopping Site have also expired, personal data may only be retained for the purpose of serving as evidence in possible legal disputes, or for asserting or defending a related right based on the personal data. The retention periods are determined based on the statute of limitations for asserting the aforementioned right, as well as examples from previous requests made to our Shopping Site on the same issues, even after the statute of limitations has expired. In this case, the stored personal data is not accessed for any other purpose and is only accessed when it is necessary to use it in the relevant legal dispute. After the aforementioned period expires, the personal data is deleted, destroyed, or anonymized.

 

7. Rights of Customers as Data Subjects:

In accordance with Article 11 of the Law, data subjects have the right to: (i) learn whether their personal data is being processed; (ii) request information regarding the processing of their personal data if it has been processed; (iii) learn the purpose of the processing of their personal data and whether it is being used in accordance with its purpose; (iv) know the third parties to whom their personal data has been transferred, domestically or abroad; (v) request the correction of their personal data if it is incomplete or inaccurate, and request that this action be notified to the third parties to whom the personal data has been transferred; (vi) request the deletion or destruction of their personal data if the reasons requiring its processing have ceased to exist, even if it has been processed in accordance with the Law and other relevant laws, and request that this action be notified to the third parties to whom the personal data has been transferred; (vii) object to a result that is detrimental to them arising from the analysis of processed data exclusively through automated systems; and (viii) demand compensation for damages if they suffer harm due to the unlawful processing of their personal data.

Requests regarding the exercise of these rights may be submitted by personal data owners to our Shopping Site through the methods specified in Law No. 6698. Our Shopping Site will evaluate these requests and finalize them within 30 days.

The information contained in this form may be subject to change in accordance with legal and technological developments.