Personal Data Protection Law

Information as Data Controller

In accordance with the Law No. 6698 on the Protection of Personal Data (KVKK) and as the Data Controller, your personal data will be recorded, stored, updated, disclosed/transferred to third parties when permitted by the legislation, classified, and processed in the manners specified in this document.

How Your Personal Data Can be Processed

Your shared personal data will be processed within the framework of this page to fulfill the requirements of the services we provide to our customers, comply with the contract and technological requirements, and improve the products and services we offer;

To identify the information of the data subject, such as identity, address, and other necessary information, to be recorded based on the Law on Regulation of Electronic Commerce No. 6563, Law on Consumer Protection No. 6502, the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette No. 29457 dated 26.08.2015, the Distance Contracts Regulation published in the Official Gazette No. 29188 dated 27.11.2014, and other relevant legislation;

To organize mandatory payment systems, electronic contracts, or records and documents that will serve as a basis for processing in electronic or paper format; to comply with the information storage, reporting, and notification obligations stipulated by the legislation and other authorities;

To provide information to prosecutors, courts, and relevant public officials upon request and in legal disputes related to public security; in accordance with Law No. 6698 on the Protection of Personal Data (KVKK) and related secondary regulations. Third parties or organizations to which your personal data may be transferred The persons/organizations to whom your personal data shared with our Company can be transferred for the purposes mentioned above are, primarily IdeaSoft Software Ind. and Trade Inc., the provider of our e-commerce infrastructure, suppliers, shipping companies, and other individuals and organizations related to the services we provide, program partner organizations that are obtained services with the Data Processor status, domestic/foreign organizations, and other third parties.

Method of Collecting Personal Data

Your personal data can be processed and collected through forms on our Company's website and mobile applications, including information such as name, surname, address, phone number, preferences on pages accessed by username and password, IP records of transactions, cookie data collected by the browser, browsing duration and details, location data; verbally, in writing or electronically through our Sales and Marketing department employees, our branches, our suppliers, other sales channels, paper forms, business cards, digital marketing, and call center channels; in a physical or virtual environment, face-to-face or remotely, verbally or in writing or electronically; Also, data obtained indirectly from different channels, (micro) websites used for purposes such as website, blog, competition, survey, game, campaign, and similar; data obtained from open databases, publicly available profiles, and data on social media platforms; can be processed and collected.

Personal Data Obtained Before the Effective Date of KVKK

Your personal data obtained lawfully before the effective date of the Law No. 6698 on the Protection of Personal Data (KVKK), which is April 7, 2016, in membership, electronic message consent, product/service purchases, and other forms, are processed and preserved in compliance with the conditions and terms specified in this document.

Storage and Protection of Personal Data

Your personal data will be kept confidentially in the database and systems within our Company in accordance with Article 12 of the Law No. 6698 on the Protection of Personal Data (KVKK); they will not be shared with third parties in any way other than legal obligations and the regulations specified in this document. Our Company is obliged to take software measures such as access management, which prevent the unlawful processing of personal data, and physical security measures to prevent unauthorized access and to protect the systems and databases where personal data is hosted, in accordance with Article 12 of the Law No. 6698 on the Protection of Personal Data (KVKK). In case it is learned that personal data is obtained by others through illegal means, the situation will be immediately reported to the Personal Data Protection Board in accordance with the legal regulations and in writing.

Rights of the Data Subject under Law No. 6698 on the Protection of Personal Data (KVKK)

- In accordance with Article 11 of Law No. 6698 on the Protection of Personal Data (KVKK), which entered into force on October 7, 2016, the rights of the Data Subject after this date are as follows: The Data Subject can apply to our Company (data controller) regarding;

- Learning whether personal data is processed,

- Requesting information if personal data is processed,

- Learning the purpose of processing personal data and whether they are used in accordance with their purpose,

- Knowing the third parties to whom personal data is transferred domestically or abroad,

- Requesting the correction of personal data if it is incomplete or incorrectly processed,

- Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law No. 6698 on the Protection of Personal Data (KVKK),

- Requesting the notification of the operations carried out as a result of the correction, deletion, or destruction of personal data to third parties to whom personal data has been transferred,

- Objecting to the occurrence of a result against the Data Subject by analyzing the processed data solely through automated systems,

- Requesting compensation for damages in case of damage due to the unlawful processing of personal data.