01 General Information About KVKK
Law No. 6698 on the Protection of Personal Data (KVKK) was adopted on March 24, 2016 and published in the Official Gazette No. 29677 dated April 7, 2016. Certain provisions of the law entered into force on the date of publication, while the remaining provisions entered into force as of October 7, 2016.
02 Information as Data Controller
In accordance with the KVKK and in our capacity as the Data Controller, the personal data obtained from you may be recorded, stored, updated, shared or transferred to third parties when necessary, classified, and processed in the manner prescribed by law.
03 Processing of Personal Data
The personal data you share with our company may be subject to the following processing activities, either wholly or partially by automated means or by non-automated means provided that they form part of a data recording system:
- Recording, storing, modifying or reorganizing
- Being subject to any processing activity considered as "processing of personal data" under the KVKK
04 Purposes and Legal Grounds for Processing
Your personal data will be processed within the framework of the following purposes and legal grounds:
- To fulfill the requirements of the products and services provided, provide services in accordance with contracts and technology, and develop products and services
- To record the identity, address and necessary information of the transaction owner in accordance with Law No. 6563, Law No. 6502 and the Distance Contracts Regulation
- To conduct banking and electronic payment processes; prepare records and documents; and fulfill legal obligations regarding information retention, reporting and notification
- To provide necessary information in accordance with requests from competent authorities due to public security, legal disputes or legal requirements
05 Third Parties to Whom Data Is Transferred
Your data may be shared with the following persons and organizations, limited to the purposes stated above:
- IdeaSoft Yazılım San. ve Tic. A.Ş., which provides the e-commerce infrastructure
- Suppliers and shipping companies
- Partner organizations with which cooperation is carried out
- Service intermediaries and other third parties located in Türkiye and abroad
06 Methods of Data Collection
Your personal data is collected through the following channels:
- Through forms on websites and mobile applications (name, surname, Turkish ID number, address, telephone, e-mail, etc.)
- Preferences and transaction records on pages accessed with a username and password, IP addresses, cookie data and location information
- Verbally, in writing or electronically through sales and marketing departments, branches, suppliers, call centers and other communication channels
- Through face-to-face or remote communication via business cards, CVs, offers or other documents
- Through websites, blogs, competitions, surveys, games, campaigns and social media channels
07 Data Obtained Before the Entry into Force of KVKK
Personal data lawfully obtained before April 7, 2016 continues to be processed and stored in accordance with this policy.
08 International Data Transfers
Your personal data collected under the KVKK may be transferred to service intermediaries in countries recognized by the Personal Data Protection Board as providing an adequate level of protection, provided that such transfers are carried out in accordance with contractual purposes, whether processed in Türkiye or processed and stored abroad.
09 Storage and Protection
Your personal data is stored confidentially in databases maintained by our company pursuant to Article 12 of the KVKK and is not shared with third parties except where legally required or as provided under this policy.
Our company is responsible for preventing the unlawful processing of data, preventing unauthorized access, and implementing access management and physical security measures. Data determined to have been obtained through unlawful means will be immediately reported to the Personal Data Protection Board.
10 Keeping Data Up to Date
Pursuant to Article 4 of the KVKK, keeping your personal data accurate and up to date is a legal requirement. Our customers are required to provide us with their current information or update it through the website or mobile application.
11 Rights of the Data Subject Article 11 of the KVKK
As a personal data subject, you have the following rights:
To learn whether your personal data has been processed and, if processed, to request information about it
To learn the purposes for which your data is processed and whether it is used in accordance with its purpose
To learn the domestic and international third parties to whom your data has been transferred
To request the correction of incomplete or incorrectly processed data
To request the deletion or destruction of data pursuant to Article 7 of the KVKK
To request that correction, deletion or destruction procedures be notified to third parties
To object to decisions made against you as a result of analysis by automated systems
To request compensation for damages incurred due to unlawful processing of personal data
12 Data Controller Contact Information
You may submit your questions and requests regarding our personal data policy through the following communication channels: