Protection of Personal Data

KVKK

INFORMATION ON THE PROTECTION OF PERSONAL DATA

We place great importance on ensuring the security of the personal information you have provided us, whether while using our website or through other means. Law No. 6698 on the “Protection of Personal Data” has come into effect. We would like to inform you about the legislation in question and certain definitions included in it:

Personal Data: Any information related to a real person whose identity is identified or identifiable,

Processing of Personal Data: Any operation performed on personal data, whether fully or partially automated or as part of any non-automated data recording system, including obtaining, recording, storing, preserving, altering, reorganizing, disclosing, transferring, receiving, making available, classifying, or preventing the use of such data,

Data Processor:A natural or legal person who processes personal data on behalf of the data controller based on the authority granted by the data controller,

Data Recording System: A record system where personal data is processed according to certain criteria,

Data Controller: A natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.

1. Purpose of the Personal Data Protection and Consent Text and Our Position as Data Controller:

Our shopping site is the “data controller” regarding personal data related to customers, according to the Law No. 6698 on the Protection of Personal Data (“Law”), and the purpose of this Personal Data Protection and Consent Text is to inform the customers about the personal data processing activities carried out by our shopping site in accordance with the Law and to obtain their explicit consent for the situations specified in Article 3 below.

3. Personal Data of Customers to be Processed with Explicit Consent and Processing Purposes:

In the below situations where the conditions for processing personal data specified in Articles 5/2 and 6/3 of the Law are not met, it is necessary to obtain the explicit consent of customers for the personal data to be processed by our shopping site.

2. Purpose of Processing Personal Data of Customers:

Personal data of customers are processed within the framework of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law and below. Personal data of customers are processed for the following purposes:

·       To carry out the necessary activities by business units to benefit the relevant persons from the products and services provided by our shopping site and to conduct the relevant business processes,

·       To carry out the necessary activities by business units for the execution of commercial activities conducted by our shopping site and to conduct the related business processes,

·       To plan and execute commercial and/or business strategies of our shopping site,

·       To ensure legal, technical, and commercial-business security of the relevant persons in business relationships with our shopping site and to plan and execute activities necessary to personalize and promote the products and services offered by us according to the preferences, usage habits, and needs of the relevant persons,

·       To establish potential rights and receivables claims of the relevant persons,

·       To provide information to authorized institutions as required by the legislation,

·       To create and track visitor records,

·       To ensure compliance with obligations under the Consumer Protection Law, the Retail Trade Regulation Law, and other legal regulations, by our company, our branches on behalf of our company, our call center, our subsidiaries or through our websites and social media pages, or through any channels limited to them,

·       To provide better service to customers, offering various advantages, providing information about sales, marketing, information, promotions, campaigns, and conditions, conducting surveys and customer satisfaction studies, facilitating and speeding up your purchasing transactions, and delivering your orders,

·       To create campaigns targeting customers, conduct cross-selling, target audience identification,

·       To improve user experience by tracking customer movements, developing the operation of our shopping site's website and mobile application according to customer needs, carrying out direct and indirect marketing, personal marketing, and remarketing activities, conducting personal segmentation, targeting, analysis, and internal company reporting activities, market research,

·       Including planning and execution of customer satisfaction activities, and planning and execution of customer relationship management processes, the planning and execution of sales and marketing processes of the products and/or services of our shopping site will be carried out based on the approval given by the customer, and shared with the parties specified in this Personal Data Protection Text.

Our shopping site has the right to associate the behavior of the user coming to the site with a cookie, even if they are not registered, to conduct online behavioral advertising and marketing, defining remarketing lists based on metrics such as page views, visit duration, and target completion count. Later, targeted advertising content may be shown to this user on the site or other sites in the Display Advertising Network, based on the interests of the users. Google AFS advertisements may place cookies on users' browsers or read cookies contained therein or use web beacons to collect information during the redirection to our shopping site.

4. Transfer of Personal Data of Customers:

Personal data of customers may be shared with company officials, our affiliates, business partners, suppliers, shareholders, and legally authorized public institutions and organizations, including private institutions, in accordance with the personal data processing conditions and purposes stated in Articles 8 and 9 of the Law, for the necessary activities that business units will carry out to benefit the relevant persons from the products and services provided by our shopping site, to carry out necessary works related to the execution of the commercial activities conducted by our shopping site, to plan and execute the commercial and/or business strategies of our shopping site, to provide legal, technical, and commercial-business security for the relevant persons in business relationships with our shopping site, and to plan and execute the activities necessary to personalize and promote the products and services offered by our shopping site according to their preferences, usage habits, and needs.

The user's name and contact information may be shared with payment institutions within the framework of the payment institution framework agreement they will approve during the payment phase and for the purpose of identity verification under the Regulation on Measures for Preventing Money Laundering and Financing of Terrorism published in the Official Gazette dated January 9, 2008, and numbered 26751.

Our shopping site may transfer personal data to third parties domestically as well as abroad, provided that the conditions set forth in Law No. 6698 are met for the purposes mentioned above.

5. Method of Collection of Personal Data and Legal Reason:

Personal data is collected electronically from customers. Personal data collected for the legal reasons stated above may be processed and transferred in accordance with the purposes specified in Articles 5 and 6 of the Law and in this Personal Data Protection Text.

6. Retention Periods of Personal Data

Our shopping site retains personal data for the duration stipulated in relevant laws and regulations when applicable.

If there is no period stipulated in the relevant legislation regarding how long personal data should be retained, the personal data will be processed for as long as required by the operations carried out by our shopping site in relation to that data and in accordance with the practices and commercial life principles of our shopping site, after which they will be deleted, destroyed, or anonymized.

When the purpose of processing personal data has expired; and the retention periods set forth by relevant legislation and our shopping site have also elapsed; personal data may only be retained for the purpose of serving as evidence in potential legal disputes, or for the assertion of rights associated with the personal data or the establishment of defense. The limitation periods for asserting rights mentioned above and the retention periods are determined based on examples from previous requests made to our shopping site on the same issues, even after those limitation periods have expired. In this case, access to the retained personal data will not be made for any other purpose, and access to such personal data will only be granted when it is necessary for their use in the relevant legal dispute. Once the period mentioned here has expired, the personal data will be deleted, destroyed, or anonymized.

7. Rights of Customers as Personal Data Owners:

According to Article 11 of the Law, data owners have the right to (i) learn whether their personal data is processed, (ii) request information regarding their processed personal data, (iii) learn the purpose of processing personal data and whether they are used in accordance with that purpose, (iv) know the third parties to whom personal data is transferred domestically or abroad, (v) request correction of personal data if it is incomplete or inaccurately processed and request that the resulting action be communicated to the third parties to whom the personal data has been transferred, (vi) request the deletion or destruction of personal data by presenting an adequate reason for its processing, even though it has been processed in accordance with the Law and other relevant legislation, and request that the action taken be communicated to the third parties to whom the personal data has been transferred, (vii) object to the emergence of a result against the person himself/herself, by analyzing the processed data solely through automated systems, and (viii) request compensation for the damage in case of damage due to the illegal processing of personal data.

Requests for the exercise of these rights can be delivered by data owners to our shopping site through the methods specified within the context of Law No. 6698. Our shopping site will evaluate these requests and conclude them within 30 days.

Changes may occur regarding the issues stated in this form in accordance with legal and technological developments.