Personal Data Protection Law
General Information on the Personal Data Protection Law
The Law on Protection of Personal Data No. 6698 (hereinafter referred to as the PDPL) was adopted on March 24, 2016, and published in the Official Gazette No. 29677 dated April 7, 2016. Some provisions of the PDPL came into effect on the publication date, while others came into effect on October 7, 2016. As the data controller, we inform you that your personal data will be recorded, stored, updated, disclosed/transferred to third parties in cases permitted by legislation, classified, and processed in the ways specified in the PDPL. According to the PDPL No. 6698, your personal data shared with our company may be processed by us in whole or in part, automatically or non-automatically, by being obtained, recorded, stored, modified, reorganized, and processed in any other way as part of any data recording system. Any kind of transaction performed on the data within the scope of the PDPL is considered as "processing of personal data."
The purposes and legal grounds for the processing of your personal data
The personal data you share is processed for the following purposes: to fulfill the requirements of the services we provide to our customers in accordance with the contract, regulations such as the Law on the Regulation of Electronic Commerce No. 6563, the Law on the Protection of Consumers No. 6502, and the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette No. 29457 dated August 26, 2015; to determine the information of the data subject for identity, address, and other necessary information recording purposes; to regulate payment systems, electronic contracts, or all records and documents that will form the basis of transactions, which are mandatory in the field of banking and electronic payments; to comply with the information storage, reporting, and notification obligations required by legislation and other authorities; to provide information to prosecutors, courts, and relevant public officials in matters related to public security and legal disputes, upon request and in accordance with the legislation; and to be processed in compliance with the PDPL No. 6698 and relevant secondary regulations.
Information about third parties or organizations to which personal data may be transferred
For the purposes mentioned above, the individuals/organizations to whom your personal data may be transferred by our company include suppliers, courier companies, individuals, and organizations related to the services provided, program partner organizations with whom we receive services as a Data Processor or in collaboration, domestic/foreign institutions, and other third parties.
Methods of collecting personal data
Your personal data is collected through forms on our company's website and mobile applications, including information such as name, surname, Turkish identification number, address, telephone, business or personal email address, and through preferences on pages accessed using a username and password, IP records of transactions, cookie data collected by the browser, navigation time and details, and location data. It is also collected verbally, in writing, or electronically through channels such as our sales and marketing department employees, branches, suppliers, other sales channels, paper forms, business cards, digital marketing, and call centers. Furthermore, data obtained indirectly from different channels, such as websites, blogs, contests, surveys, games, campaigns, and similar (micro) websites, and from social media platforms, e-newsletter reading or clicking activities, publicly available database information, and open profile and data sharing on social media platforms, can be processed and collected.
Personal data obtained before the enforcement of the PDPL
Your personal data obtained before the effective date of the PDPL, which is April 7, 2016, through membership, electronic consent, product/service purchase, and other lawful