[Company Name / Brand] Personal Data Policy

General information about the Personal Data Law

Law No. 6698 on the Protection of Personal Data (hereinafter referred to as KVKK) was adopted on March 24, 2016, and published in the Official Gazette No. 29677 dated April 7, 2016. Part of the KVKK came into force on the date of publication, while another part became effective on October 7, 2016.

Information as the data controller

In accordance with Law No. 6698 KVKK and as the Data Controller, your personal data will be recorded, stored, updated, disclosed/transferred to third parties where permitted by legislation, classified, and processed in the ways specified in the KVKK as explained on this page.

How your personal data may be processed

Under Law No. 6698 KVKK, the personal data you share with our Company may be processed by us by being obtained wholly or partially through automatic means or by non-automatic means as part of any data recording system, recorded, stored, altered, reorganized, in short, subject to any operation performed on the data. Any operation performed on data within the scope of KVKK is considered "processing of personal data."

Purposes and legal grounds for processing your personal data

The personal data you share will be processed,

• To fulfill the requirements of the services we provide to our customers, appropriately in line with the contract and technological necessities, and to improve the products and services offered;
  
  
• For recording identity, address, and other necessary information to identify the transaction owner under the Law No. 6563 on Regulation of Electronic Commerce, Law No. 6502 on Consumer Protection, the Regulation on Electronic Trade Service Providers and Intermediary Service Providers published in the Official Gazette No. 29457 dated 26.08.2015 based on these regulations, the Distance Contracts Regulation published in the Official Gazette No. 29188 dated 27.11.2014, and other relevant legislation;
  
  
• To organize all records and documents that will form the basis of transactions in payment systems, electronic contracts, or paper mediums mandatory in banking and electronic payment areas; to comply with information retention, reporting, and notification obligations stipulated by legislation and other authorities;
  
  
• To provide information to public prosecutors, courts, and related public officials upon request and as required by law in matters related to public security and legal disputes;

in compliance with Law No. 6698 KVKK and related secondary regulations. Information about third parties or organizations to which your personal data may be transferred For the purposes stated above, the persons/organizations to whom your personal data shared with our Company may be transferred include, primarily, IdeaSoft Software Industry and Trade Inc., which provides e-commerce infrastructure for our Company, suppliers, cargo companies, and other persons and organizations related to the services provided, program partner organizations we cooperate with and from which we take services as Data Processors, domestic/international organizations, and other third parties.

How your personal data is collected

Your personal data,

• In the form of information such as name, surname, Turkish ID number, address, phone, business or personal email address via forms on our Company's website and mobile applications; preferences on pages accessed by username and password, IP logs of conducted transactions, cookie data collected by the browser, browsing duration and details, location data;


• Verbally, in writing, or electronically through our sales and marketing department employees, branches, suppliers, other sales channels, paper forms, business cards, digital marketing, and call center channels;


• Physically or virtually obtained from persons sharing their personal data for purposes such as establishing commercial relations with our Company, job applications, submitting offers, business cards, resumes (CVs), and other means either face-to-face or remotely, verbally or in writing or electronically;


• Additionally, data obtained indirectly through various channels such as websites, blogs, contests, surveys, games, campaigns, and similar micro-websites, data from social media, e-newsletter reading or clicking activities, data offered by publicly available databases, profiles and data shared openly on social media platforms; these can be processed and collected.

Your personal data obtained before the entry into force of the KVKK

The personal data obtained lawfully before the effective date of KVKK, April 7, 2016, through membership, electronic communication permission, product/service purchasing, or other means, is also processed and preserved in accordance with the terms and conditions arranged in this document.

Transfer of your personal data abroad

Your personal data collected by any of the above-mentioned methods, processed in Turkey or processed abroad to be stored, will be transferred to service intermediaries abroad (those accredited by the Personal Data Protection Board and having sufficient protection for personal data) in accordance with the KVKK and contract purposes.

Storage and protection of personal data

Your personal data will be kept confidential in the databases and systems held by our Company as required by article 12 of KVKK; it will not be shared with third parties except for legal obligations and the arrangements specified in this document. Our Company is obliged to take software measures such as access management and physical security measures to prevent unlawful processing of personal data and unauthorized access to systems and databases containing personal data within the scope of article 12 of KVKK. In case it is learned that personal data has been obtained illegally by others, this situation will be immediately reported in writing to the Personal Data Protection Board in accordance with legal regulations.

Keeping personal data accurate and up to date

Our Company has the obligation to keep your personal data accurate and up to date in accordance with article 4 of the KVKK. In this context, our customers need to share accurate and up-to-date data or update it via the website/mobile application for our Company to fulfill its legal obligations arising from the current legislation.

Rights of the personal data owner under Law No. 6698 KVKK

Article 11 of Law No. 6698 KVKK has come into force on October 7, 2016, and according to the relevant article, the rights of the Personal Data Owner from that date on are as follows: The Personal Data Owner may apply to our Company (data controller) regarding themselves to;

1. Learn whether personal data is being processed,
2. If personal data has been processed, request information about this,
3. Learn the purpose of personal data processing and whether it is used in accordance with its purpose,
4. Know the third parties to whom personal data has been transferred domestically or abroad,
5. Request correction of personal data if it is incomplete or inaccurately processed,
6. Request deletion or destruction of personal data within the framework of the conditions stipulated in article 7 of KVKK,
7. Request that the transactions regarding correction, deletion, or destruction be notified to the third parties to whom the personal data has been transferred,
8. Object to the emergence of a result against the person by analyzing the processed data exclusively through automated systems,
9. Request compensation for damages in case of unlawful processing of personal data,