General Information on the Personal Data Protection Law
The Personal Data Protection Law No. 6698 (“KVKK”) was adopted on March 24, 2016, and published in the Official Gazette dated April 7, 2016, numbered 29677. Some provisions of the Law entered into force on the date of publication, while others entered into force on October 7, 2016.
Information as Data Controller
Pursuant to the Personal Data Protection Law No. 6698, as the data controller, your personal data may be processed in accordance with the law and the principles of honesty and accuracy, and where necessary, kept up to date, for specific, clear, and legitimate purposes.
Your personal data may be recorded, stored, updated, disclosed, or transferred to third parties where permitted under the law, classified, and processed in accordance with the provisions of the KVKK.
Methods of Processing Your Personal Data
Pursuant to the KVKK, your personal data shared with our company may be collected fully or partially by automated means or non-automated means, provided that it is part of any data recording system, and may be recorded, stored, modified, reorganized, and subjected to any processing activities.
Any processing activity performed on personal data within the scope of the KVKK is considered “processing of personal data.”
Purposes and Legal Grounds for Processing Your Personal Data
Your personal data may be processed for the following purposes:
• To provide our services in accordance with contractual and technological requirements,
• To improve our products and services,
• To record identity, address, and other necessary information within the scope of Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on Consumer Protection, and relevant legislation,
• To carry out payment transactions, electronic contracts, and related legal records,
• To fulfill legal obligations and provide information to authorized institutions,
• To provide information to relevant authorities in case of legal disputes or public security requests, in accordance with the KVKK and relevant legislation.
Transfer of Personal Data
Your personal data may be shared, limited to the above-mentioned purposes, with:
• Our website infrastructure provider, İzofis,
• Authorized company employees,
• Relevant public institutions and organizations, when required by legal obligations.
Methods of Collecting Personal Data
Your personal data may be collected verbally, in writing, or electronically through:
• Websites, mobile applications, and forms,
• Telephone, e-mail, business cards, and verbal or written communication channels,
• Sales, marketing, and call center activities,
• Cookies and IP logs,
• Social media, campaigns, surveys, and similar digital channels.
Data Storage and Security
Your personal data is stored confidentially in accordance with Article 12 of the KVKK and is protected by appropriate technical and administrative measures against unauthorized access.
In the event of a data security breach, the incident will be reported to the relevant public authorities in accordance with applicable legislation.
Data Accuracy and Up-to-Date Information
Pursuant to Article 4 of the KVKK, your personal data must be accurate and up to date. Therefore, users are responsible for providing correct and current information.
Rights of the Data Subject
As a data subject under Article 11 of the KVKK, you have the right to:
• Learn whether your personal data is being processed,
• Request information if it has been processed,
• Learn the purpose of processing and whether it is used in accordance with that purpose,
• Know the third parties to whom it is transferred, domestically or abroad,
• Request correction if it is incomplete or inaccurate,
• Request deletion or destruction within the conditions of the KVKK,
• Request notification of such actions to third parties,
• Object to results arising from analysis exclusively by automated systems,
• Request compensation in case of damage due to unlawful processing.