Data Protection Policy

General Information about the Personal Data Protection Law

The Law on Protection of Personal Data No. 6698 (hereinafter referred to as KVKK) was adopted on March 24, 2016, and published in the Official Gazette No. 29677 dated April 7, 2016. Some parts of the KVKK came into force on the publication date, and some on October 7, 2016.

Information as Data Controller

In accordance with Law No. 6698 on KVKK and as the Data Controller, your personal data will be processed within the framework described on this page; it will be recorded, stored, updated, disclosed/transferred to third parties when permitted by law, classified, and processed in the ways specified in the KVKK.

How Your Personal Data May Be Processed

In accordance with Law No. 6698 on KVKK, your personal data shared with our Company may be processed wholly or partly, automatically or non-automatically, by being obtained, recorded, stored, modified, reorganized, in short, processed by us in any way that processes data, either as part of an automated data recording system or not. Any process carried out on data within the scope of the KVKK is considered as "processing of personal data."

Purposes and Legal Bases for Processing Your Personal Data

The personal data you share are processed:

To fulfill the requirements of the services we provide to our customers, in accordance with the contract and technological requirements, and to improve the products and services we offer;
For the identification of the transaction owner's information within the scope of the Law on Electronic Commerce Regulation No. 6563, the Law on the Protection of Consumers No. 6502, and the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette No. 29457 dated 26.08.2015, and the Distance Contracts Regulation published in the Official Gazette No. 29188 dated 27.11.2014, and other relevant legislation;
For mandatory payment systems in Banking and Electronic Payment fields, to prepare all records and documents that will be the basis for transactions in electronic contracts or paper form; to comply with the obligations to store, report, and inform as required by legislation and other authorities;
For public safety issues and legal disputes, to provide information to prosecutors, courts, and relevant public officials upon request and as required by legislation;

Your personal data will be processed in accordance with Law No. 6698 on KVKK and related secondary regulations. Information about third parties or organizations to which your personal data may be transferred

For the purposes mentioned above, the individuals/organizations to whom/which your personal data shared with our Company may be transferred include, primarily, IdeaSoft Software Industry and Trade Inc., which provides the e-commerce infrastructure of our Company, as well as suppliers, cargo companies, and other individuals and organizations related to the services provided. These individuals/organizations may include service providers or collaborating partner organizations, domestic/foreign organizations, and other third parties.

How Your Personal Data Is Collected

Your personal data:

Through forms on our Company's website and mobile applications, including information such as name, surname, national ID number, address, telephone, work or private email address; and data collected by the browser, such as user preferences on pages accessed with username and password, IP records of transactions, and browsing time and details, as well as location data;
Verbally, in writing, or electronically through channels such as our sales and marketing department employees, our branches, our suppliers, other sales channels, paper forms, business cards, digital marketing, and call centers;
In physical or virtual environments, face-to-face or remotely, orally or in writing or electronically, from individuals who share their personal data for the purpose of establishing a commercial relationship with our Company, applying for a job, submitting a bid, and through other means such as business cards, resumes (CVs), and submitting bids;
Also, data obtained indirectly from various channels such as websites, blogs, contests, surveys, games, campaigns, and similar (micro) websites, and from social media platforms, email newsletter reading or clicking activities, data provided by public databases, publicly shared profiles and data from social media platforms, may be processed and collected.

Your Personal Data Obtained Before the Enforcement of the KVKK

Prior to the effective date of the KVKK, your personal data lawfully obtained through membership, electronic consent, product/service purchases, and other means is also processed and stored in accordance with the terms and conditions specified in this document.

Transfer of Your Personal Data Abroad

Your personal data collected by any of the methods mentioned above may be transferred abroad, subject to the KVKK, for processing in Turkey or abroad, to service providers located abroad (accredited by the Personal Data Protection Board and providing adequate protection for personal data).

Storage and Protection of Your Personal Data

Your personal data will be kept confidential in the database and systems of our Company in accordance with Article 12 of the KVKK; they will not be shared with any third parties except as required by legal obligations and regulations specified in this document. Our Company is obliged to take software measures such as preventing the unlawful processing of personal data, preventing unauthorized access, access management, and physical security measures to prevent unauthorized access to the systems and databases where your personal data is stored, as required by Article 12 of the KVKK. If it is learned that personal data has been obtained by illegal means, the situation will be immediately reported to the Personal Data Protection Board in accordance with legal regulations and in writing.

Keeping Your Personal Data Up-to-Date and Accurate

Our Company has the obligation to keep your personal data accurate and up-to-date in accordance with Article 4 of the KVKK. In this context, our Customers are required to share or update their correct and up-to-date data through the website/mobile application or other channels of our Company in order to fulfill the legal obligations and comply with the existing legislation.

Rights of the Personal Data Subject under Law No. 6698 on KVKK

According to Article 11 of Law No. 6698 on KVKK, which entered into force on October 7, 2016, the rights of the Personal Data Subject after this date are as follows:

The Personal Data Subject may apply to our Company (data controller) and request to:
Learn whether personal data is processed;
Request information if personal data has been processed;
Learn the purpose of processing personal data and whether they are used appropriately for their purpose;
Know the third parties to whom personal data is transferred domestically or abroad;
Request correction of personal data if it is incomplete or incorrectly processed;
Request deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK;
Request notification of the correction, deletion, or destruction processes of personal data to third parties to whom personal data has been transferred, if any;
Object to the emergence of a result against the individual by analyzing the processed data exclusively through automated systems;
Request compensation if personal data is processed unlawfully and results in damage.

All Pages