Data Protection Law Information

General Information about the Personal Data Protection Law

The Personal Data Protection Law No. 6698 (referred to as KVKK) was adopted on March 24, 2016, and published in the Official Gazette No. 29677 on April 7, 2016. Parts of the KVKK came into effect on the publication date, while others became effective on October 7, 2016.

Information as the Data Controller

In accordance with KVKK and acting as the Data Controller, your personal data may be processed as outlined in this document. Your personal data may be recorded, stored, updated, disclosed/transferred to third parties under conditions permitted by legislation, classified, and processed in ways specified by the KVKK.

Processing Methods of Personal Data

In accordance with KVKK, your personal data shared with our company may be processed, whether wholly or partially, automatically or non-automatically, by being obtained, recorded, stored, modified, reorganized, or, in short, processed in any way deemed fit by us. Any processing carried out on data is considered "processing of personal data" within the scope of KVKK.

Purposes and Legal Grounds for Processing Your Personal Data

The personal data you share will be processed in compliance with KVKK and relevant secondary regulations for the following purposes:

  • To fulfill the requirements of the services provided to our customers, in accordance with the contract and technological requirements,
  • To record identity, address, and other necessary information to identify the information owner in transactions based on the laws and regulations such as the Law on Regulation of Electronic Commerce No. 6563, Consumer Protection Law No. 6502, Electronic Commerce Service Providers and Intermediary Service Providers Regulation published in the Official Gazette No. 29457 dated August 26, 2015, Distance Contracts Regulation published in the Official Gazette No. 29188 dated November 27, 2014, and other related legislation,
  • To organize all records and documents required for mandatory payment systems, electronic contracts, or paper-based transactions in the Banking and Electronic Payment field, and to comply with information storage, reporting, and notification obligations stipulated by legislation and other authorities,
  • To provide information to public prosecutors, courts, and relevant public officials in matters related to public safety and legal disputes, upon request and in accordance with the legislation.

Information about Third Parties to Whom Your Personal Data May Be Transferred

For the purposes mentioned above, your personal data shared with our company may be transferred to individuals/organizations such as IdeaSoft Software Industry and Trade Inc., which provides our company's e-commerce infrastructure, suppliers, logistics companies, and other persons and entities, both domestically and abroad, with whom we collaborate and from whom we receive services, or as Data Processors.

Method of Collecting Your Personal Data

Your personal data may be collected through forms on our company's website and mobile applications, including information such as name, surname, Turkish Identification Number, address, phone, work or private email address; preferences on pages accessed using a username and password, IP records of transactions, cookie data collected by the browser, and navigation duration and details. Your personal data may also be obtained verbally, in writing, or electronically through various channels such as our sales and marketing department employees, branches, suppliers, other sales channels, paper forms, business cards, digital marketing, and call centers.

Additionally, data obtained indirectly from various channels such as websites, blogs, contests, surveys, games, campaigns, and similar (micro) websites used for various purposes; reading or clicking movements in e-newsletters; data provided by public databases; and profile and data open to sharing from social media platforms may be processed and collected.

Personal Data Obtained Before the Enforcement of KVKK

Personal data obtained legally before the enforcement date of KVKK, such as membership, electronic communication consent, product/service purchase, and other legal means, are processed and kept in accordance with the conditions specified in this document.

Transfer of Personal Data Abroad

Your personal data collected through the methods mentioned above may be transferred abroad through any of the listed methods, while still remaining within the scope of KVKK and in accordance with the purposes of the contract, to service providers located abroad (accredited by the Personal Data Protection Board and ensuring adequate protection of personal data).

Storage and Protection of Personal Data

Your personal data will be kept confidentially in databases and systems in accordance with Article 12 of KVKK. The data will not be shared with third parties except as required by legal obligations and regulations specified in this document. Our company is obliged to take software measures such as access management and physical security measures to prevent the unlawful processing of personal data, prevent unauthorized access, and ensure the security of systems and databases containing personal data. If it is learned that personal data has been obtained by others through illegal means, the situation will be immediately reported to the Personal Data Protection Board in accordance with legal regulations.

Keeping Personal Data Up-to-Date and Accurate

Our company is obliged to keep your personal data accurate and up-to-date in accordance with Article 4 of KVKK. In this context, customers are required to share accurate and up-to-date information or update it through the website/mobile application to enable our company to fulfill its legal obligations.

Rights of Personal Data Owners under KVKK No. 6698

In accordance with Article 11 of KVKK, as of October 7, 2016, Personal Data Owners have the following rights concerning their personal data:

  1. Learning whether personal data is processed,
  2. Requesting information if personal data has been processed,
  3. Learning the purpose of the processing of personal data and whether they are used appropriately for their purpose,
  4. Knowing the third parties to whom personal data is transferred domestically or abroad,
  5. Requesting correction if personal data is incomplete or incorrectly processed,
  6. Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of KVKK,
  7. Requesting notification to third parties to whom personal data has been transferred, in case of correction, deletion, or destruction of personal data,
  8. Objecting to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems,
  9. Requesting compensation for damages in case of damage due to the illegal processing of personal data.

Personal Data Owners can direct their questions, opinions, or requests to the following communication channels: