KVKK Politikası
General information on the Personal Data Protection Law
Personal Data Protection Law No. 6698 (hereinafter "KVKK") was adopted on 24 March 2016 and published in Official Gazette No. 29677 dated 7 April 2016. Part of the KVKK entered into force on the date of publication and part on 7 October 2016.
Information as data controller
Under KVKK No. 6698 and in our capacity as Data Controller, your personal data will be recorded, stored, updated, disclosed/transferred to third parties where permitted by legislation, classified and processed in the ways listed in the KVKK, within the framework described on this page.
How your personal data may be processed
Under KVKK No. 6698, the personal data you share with our Company may be processed by us, wholly or partially, by automatic means or by non-automatic means provided that it is part of a data recording system, by being obtained, recorded, stored, changed or reorganised; in short, by being subject to any operation performed on the data. Any operation performed on data within the scope of the KVKK is considered "processing of personal data".
Purposes and legal grounds for processing your personal data
The personal data you share will be processed in accordance with KVKK No. 6698 and related secondary regulations:
to carry out the services we provide to our customers in line with the requirements of the contract and technology, and to improve our products and services;
to record identity, address and other necessary information to identify the transaction owner under Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on Consumer Protection, the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in Official Gazette No. 29457 dated 26.08.2015, the Distance Contracts Regulation published in Official Gazette No. 29188 dated 27.11.2014 and other related legislation;
to prepare all records and documents forming the basis of transactions in payment systems, electronic contracts or on paper required in banking and electronic payments, and to comply with the information storage, reporting and notification obligations required by legislation and other authorities;
to provide information to prosecutors, courts and relevant public officials upon request and as required by legislation in matters of public security and legal disputes.
Information on third parties or organisations to which your personal data may be transferred: for the purposes above, the persons/organisations to which the personal data you share with our Company may be transferred are, in particular, Agesoft Yazılım San. ve Tic. A.Ş., which provides our e-commerce infrastructure, as well as persons and organisations related to the services offered such as suppliers and shipping companies, program partner organisations with which we cooperate and from which we receive services to carry out our activities and/or as Data Processor, domestic/foreign organisations and other third parties.
How your personal data is collected
Your personal data may be processed and collected:
through forms on our Company's website and mobile applications, as information such as name, surname, Turkish ID number, address, telephone, business or private e-mail address; as preferences on pages accessed with a username and password, IP records of transactions, cookie data collected by the browser, data including browsing duration and details, and location data;
verbally, in writing or electronically through our sales and marketing staff, branches, suppliers, other sales channels, paper forms, business cards, digital marketing and call centre channels;
in physical or virtual environments, face to face or remotely, verbally, in writing or electronically, from persons who share their personal data via business cards, CVs, offers and other means in order to establish a business relationship with our Company, apply for a job or submit an offer;
and from data obtained indirectly through different channels, from (micro) websites used for purposes such as websites, blogs, competitions, surveys, games and campaigns and from social media, from e-newsletter reading or click activity, data offered by public databases, and profiles and data open to sharing on social media platforms.
Personal data obtained before the KVKK entered into force
Your personal data lawfully obtained before 7 April 2016, the effective date of the KVKK, through membership, electronic message consent, product/service purchases and other means, is also processed and kept in accordance with the terms and conditions set out in this document.
Transfer of your personal data abroad
Your personal data collected by any of the methods listed above, to be processed in Türkiye or processed and kept outside Türkiye, may also be transferred to service intermediaries abroad (in countries accredited by the Personal Data Protection Board as providing adequate protection of personal data),within the scope of the KVKK and in line with the purposes of the contract.
Storage and protection of personal data
Your personal data will be kept confidential in the database and systems of our Company in accordance with Article 12 of the KVKK and will not be shared with third parties in any way except for legal obligations and the arrangements specified in this document. Under Article 12 of the KVKK, our Company is obliged to prevent the unlawful processing of personal data in the systems and databases where it is hosted, to prevent access by unauthorised persons, and to take software measures such as access management and physical security measures. If it is learned that personal data has been obtained by others through unlawful means, the situation will be reported immediately, in writing and in accordance with the law, to the Personal Data Protection Board.
Keeping personal data accurate and up to date
Under Article 4 of the KVKK, our Company is obliged to keep your personal data accurate and up to date. For our Company to fulfil its obligations under current legislation, our Customers need to share accurate and up-to-date data or update it via the website/mobile application.
Rights of the data subject under KVKK No. 6698
Article 11 of KVKK No. 6698 entered into force on 7 October 2016, and under this article the rights of the Data Subject after this date are as follows. By applying to our Company (data controller),the Data Subject has the right to:
learn whether their personal data is processed,
request information if their personal data has been processed,
learn the purpose of processing and whether the data is used in line with its purpose,
know the third parties in Türkiye or abroad to whom the personal data is transferred,
request correction if the personal data is incomplete or incorrectly processed,
request deletion or destruction of the personal data under the conditions set out in Article 7 of the KVKK,
request that the correction, deletion or destruction of personal data be notified to third parties to whom the data has been transferred,
object to a result against them arising from analysis of the processed data exclusively by automated systems,
claim compensation if they suffer damage due to unlawful processing of personal data.
