MENU

Personal Data Protection Law

  • Home
  • |
  • Personal Data Protection Law

  • DATA CONTROLLER

    Data Controller Business Name:

    MERSIS/Tax ID Number:

    Registered E-Mail Address:

    Phone/Fax:

    Website:

    Mailing Address:

    Contact Person Email Address:

  • PURPOSE AND SCOPE OF THE INFORMATION NOTICE

    • The purpose of this Personal Data Processing Information Notice is to fulfill the obligation to inform, as set forth in Article 10 of the Personal Data Protection Law No. 6698 (“PDPL”), regarding the use of personal data processed by our business.
    • In accordance with Article 3 of the Personal Data Protection Law No. 6698 (PDPL), personal data refers to any kind of information related to an identified or identifiable real person (Name, Surname, ID Number, Camera Recording, Address, Salary, IP, Log, Email, etc.).
    • Your personal data is processed by our business, the data controller, in accordance with the general principles specified in Article 4 of Law No. 6698 PDPL and one or more of the personal data processing conditions specified in Article 5.
    • In accordance with Article 5 of Law No. 6698 PDPL, some of your data can be processed without your explicit consent, subject to the conditions of legality as an exception, while certain data can only be processed with your "explicit consent based on informed and freely given consent on a specific subject." You can withdraw your explicit consent given for the processing of your data at any time by applying to our business using the "Data Subject Application Form" in accordance with Article 11 of Law No. 6698 PDPL and the explanations in the "Your Rights" section of this notice. If you withdraw your explicit consent, the relevant data will be destroyed if it is not processed for other purposes. Otherwise, in the absence of your explicit consent, it will continue to be processed for the intended purposes and legal reasons.

  • PROCESSABLE PERSONAL DATA, PROCESSING PURPOSES, AND LEGAL GROUNDS

    Below are the personal data processed by our business as the data controller, along with their processing purposes and legal grounds (explicit consent/exception to the legality conditions):

    Processable Data Category: Identity
    Processable Personal Data: Name & Surname, Turkish ID Number, Foreign ID Information, Passport Information
    Processing Purposes: "Execution of Information Security Processes, Conducting Activities in Compliance with Legal Regulations, Conducting Business Activities/Inspections, Execution of Sales Contracts for Goods/Services, Management of Storage and Archive Activities, Management of Contract Processes, Ensuring the Security of Data Controller Operations, Providing Information to Authorized Individuals, Institutions, and Organizations, Pursuing and Executing Legal Affairs"
    Legal Grounds for Processing: Processing personal data is allowed when it is explicitly prescribed by the law, or when it is necessary for the conclusion or performance of a contract, provided that it directly concerns the parties to the contract. It is also permitted when it is necessary for the data controller to fulfill their legal obligations.
    Data Category Communication
    Personal Data that can be Processed Registered e-mail adress, Phone Number, E-mail, Address
    Purposes of Processing Conducting Activities in Compliance with Regulations, Carrying out Financial and Accounting Operations, Conducting Communication Activities, Monitoring and Managing Legal Affairs, Ensuring Data Controller Operations' Security, Execution of Product/Service Sales Contracts, Management of Storage and Archive Activities, Execution of Customer Relationship Management Processes, Execution of Post-Sale Support Services for Products/Services, Management and Audit of Business Activities, Conducting Business Continuity Activities, Management of Marketing Analysis Studies, Management of Performance Evaluation Processes, Execution of Product/Service Marketing Processes, Management of Contract Processes, Tracking Requests/Complaints, Ensuring the Security of Movable Property and Resources, Execution of Product/Service Marketing Processes
    Legal Grounds for Processing Processing of personal data of the parties to a contract is necessary when directly related to the establishment or performance of a contract, and when it is mandatory for the data controller to fulfill their legal obligations.
    Data Category that Can be Processed Legal Transaction
    Personal Data that Can be Processed Company-Institution Information, Title Information in the Company-Institution, Signature, Tax Identification Number/Tax Office, Signature/Signature Declaration/Signature Circular, Product/Service Information
    Purposes of Processing Conducting Information Security ProcessesConducting Activities in Compliance with Regulations, Carrying out Financial and Accounting Operations, Monitoring and Managing Legal Affairs, Managing Business Activities/Auditing, Managing Storage and Archive Activities, Managing Contract Processes, Ensuring the Security of Movable Property and Resources, Ensuring the Security of Data Controller Operations, Providing Information to Authorized Individuals, Institutions, and Organizations, Implementing the Pricing Policy, Managing Risk Management Processes, Managing Logistic Activities, Conducting Strategic Planning Activities
    Legal Grounds for Processing It can be processed if it is explicitly prescribed by the laws, when it is necessary for the establishment or performance of a contract, provided that it directly concerns the parties to the contract, and when it is mandatory for the data controller to fulfill their legal obligations.
    Data Category that Can be Processed Finance
    Personal Data that Can be Processed Bank Account Information, Payment/Current Account Information, Collateral Information
    Purposes of Processing Conducting Activities in Compliance with Regulations, Carrying out Financial and Accounting Operations, Conducting Communication Activities, Ensuring the Security of Data Controller Operations, Execution of Product/Service Sales Contracts, Management of Business Activities/Auditing, Management of Risk Management Processes, Management of Storage and Archive Activities, Management of Contract Processes, Implementation of Pricing Policy, Conducting Strategic Planning Activities, Providing Information to Authorized Individuals, Institutions, and Organizations, Monitoring and Managing Legal Affairs, Ensuring the Security of Movable Property and Resources, Ensuring the Security of Data Controller Operations
    Legal Grounds for Processing Processing of personal data of the parties to a contract is necessary when directly related to the establishment or performance of a contract, and when it is mandatory for the data controller to fulfill their legal obligations. It is also necessary for data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
    Data Category that Can be Processed Identity – Communication – Visual and Audio Recordings – Marketing
    Personal Data that Can be Processed

    - Identity: Full Name, Special Day Information (for celebrating your special days and national-religious-cultural days and for sending you gifts/cards and other materials, for sending commercial electronic messages for marketing purposes, and for conducting surveys/contests)

    - Communication: Phone Number, Email, Address (for celebrating your special days and national-religious-cultural days and for sending you gifts/cards and other materials, for sending commercial electronic messages for marketing purposes, and for conducting surveys/contests)

    - Visual and Audio Recordings: Photograph, Video, and Personal Data Declared/Shared in These Recordings (for use in postings on websites, social media, company catalogs, and other media)

    - Marketing: Survey Information, Contest Information (for conducting surveys/contests)
    Purposes of Processing Conducting Communication Activities, Conducting Activities for Customer Satisfaction, Managing Advertising/Campaign/Promotion Processes, Conducting Strategic Planning Activities, Managing Product/Service Marketing Processes, Execution of Post-Sale Support Services for Products/Services, Managing Customer Relationship Management Processes, Managing Storage and Archive Activities, Managing Contract Processes, Ensuring the Security of Data Controller Operations, Providing Information to Authorized Individuals, Institutions, and Organizations
    Legal Grounds for Processing It can be processed with your explicit consent.

  • METHODS OF COLLECTING PERSONAL DATA

    Your personal data may be collected through oral, written, or electronic means, including but not limited to: when you contact us through communication forms on our website, in physical locations, or other channels, and subsequently when conducting activities related to customer satisfaction and advertising/marketing for promoting your business on our website or mobile application (including sending commercial electronic messages, celebrating special days, sharing photographs/videos, conducting surveys/contests); when you share your requests, complaints, and suggestions with us; and when providing information and documents, whether provided by you or obtained through third parties, including private/public institutions and organizations, depending on the nature of the service or activity and the channel of communication with us. This data may be collected automatically, semi-automatically, or as part of any data recording system, excluding fully automatic means.

  • TRANSFER OF PERSONAL DATA

    • Your personal data, in accordance with the 8th article of the KVKK and other relevant legislation, may be transferred to Public Institutions and Organizations (Ministry of Finance, Revenue Administration, Ministry of Environment and Urbanization, Ministry of Commerce, Chamber of Commerce, Chamber of Industry, Exporters' Association, Customs Consultancy, etc.), our company's departments, our shareholders, our customers, and our suppliers such as transportation companies, cargo companies, banks, lawyers, certified public accountants, website, infrastructure provider, IT/Information Processing Support company, and other organizations we cooperate with, in order to carry out our activities, maintain the security of all your personal data, prevent unauthorized access, and prevent them from being processed unlawfully.
    • With your explicit consent, your name, surname, photograph, video, and the personal data declared/shared in these records can be recorded during events and organizations organized or participated by our company and shared with the public through internet sites, company catalogs, social media, and other channels for advertising and marketing purposes. Additionally, to carry out this activity, it can be shared with our suppliers (agency, IT/Information Processing Support company).
    • With your explicit consent, your name, surname, phone number, email address can be processed for the purpose of sending commercial electronic messages to you for advertising and marketing, and it can be shared with our suppliers (agency, IT/Information Processing Support company), and with IYS Inc. to carry out this activity.
    • With your explicit consent, your name, surname, special day information, phone number, email address, and address can be processed for the purpose of celebrating your special days, national-religious-cultural days, and for sending you gifts/cards, and it can be shared with our suppliers (agency, cargo company, IT/Information Processing Support company) to carry out this activity.
    • With your explicit consent, your name, surname, phone number, email, survey information, and contest information can be processed for the purpose of participating in surveys and contests organized by our company for advertising and marketing and ensuring customer satisfaction. If the survey/contest is conducted publicly or its results are announced publicly, it can be shared with the public through internet sites, company catalogs, social media, and other channels. Additionally, it can be shared with our suppliers (agency, IT/Information Processing Support company) to carry out this activity.
    • Your personal data is not transferred abroad.

  • YOUR RIGHTS

    • Within the scope of Article 11 of the Personal Data Protection Law No. 6698, you have the right to learn whether your personal data is processed, request information if your personal data has been processed, learn the purpose of processing your data and whether it is used for its purpose, know the third parties to whom your data is transferred, request the correction of your data if it is incomplete or incorrect, request the deletion or destruction of your data if the reasons requiring its processing have disappeared despite being processed in accordance with the Law and other relevant laws, request that the correction, deletion, or destruction processes be notified to third parties to whom your data has been transferred if your data has been transferred, object to the emergence of a result against you as a result of the analysis of your data exclusively through automated systems, and demand the compensation of damages in case you suffer any damage due to the unlawful processing of your data.
    • As the Data Subject, you can submit your requests in writing according to the principles and procedures set forth in the Regulation on the Procedures and Principles of Application to the Data Controller. You can reach the "Data Subject Application Form" from the website address provided above and submit it to the Data Controller in writing through a notary public or by registered letter with return receipt to the postal address provided above, by using your registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the electronic mail address you previously notified to us and registered in our system, to the KEP address provided above, or to the electronic mail address designated for KVKK communication.

My Dream Corner Seat Colorful Armchair Bedroom Set Coffee Table