Personal Data Policy

General information on the Personal Data Protection Law

Law No. 6698 on the Protection of Personal Data (hereinafter "KVKK") was adopted on 24 March 2016 and published in Official Gazette No. 29677 of 7 April 2016. Part of the KVKK entered into force on its publication date and part on 7 October 2016.

Information provided as data controller

In accordance with KVKK No. 6698 and in our capacity as Data Controller, your personal data may be recorded, stored, updated, disclosed or transferred to third parties where permitted by law, classified and processed in the ways listed in the KVKK, within the framework described on this page.

How your personal data may be processed

Under KVKK No. 6698, the personal data you share with our company may be processed by us, wholly or partly, by automated means or by non-automated means provided they form part of a data filing system, by being obtained, recorded, stored, altered, reorganised, in short, by being subject to any operation performed on data. Under the KVKK, any operation performed on data is considered "processing of personal data".

Purposes and legal grounds for processing your personal data

The personal data you share will be processed in accordance with KVKK No. 6698 and the related secondary legislation:

to carry out the services we provide to our customers in line with the contract and current technology, and to improve the products and services we offer;

to record identity, address and other necessary information in order to identify the person carrying out the transaction under Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on Consumer Protection, the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in Official Gazette No. 29457 of 26.08.2015, the Distance Contracts Regulation published in Official Gazette No. 29188 of 27.11.2014 and other relevant legislation;

to issue all records and documents underlying transactions, electronically or on paper, in payment systems mandatory in banking and electronic payments, and to comply with information retention, reporting and notification obligations required by legislation and other authorities;

to provide information, on request and as required by law, to public prosecutors, courts and relevant public officials in matters of public security and legal disputes.

Third parties or organisations to which your personal data may be transferred

For the purposes stated above, the persons and organisations to which your personal data may be transferred are, first and foremost, Agesoft Yazılım San. ve Tic. A.Ş., which provides our company's e-commerce infrastructure, as well as persons and organisations related to the services provided such as suppliers and cargo companies, partner organisations we work with and from which we receive services to carry out our activities and/or as Data Processors, domestic and foreign organisations and other third parties.

How your personal data is collected

Your personal data may be processed and collected:

through forms on our company's website and mobile applications, in the form of information such as name, surname, Turkish ID number, address, telephone, business or personal email address; preferences on pages accessed with a username and password, IP records of transactions, cookie data collected by the browser and data including browsing time and details, and location data;

verbally, in writing or electronically through our channels such as our sales and marketing staff, branches, suppliers, other sales channels, paper forms, business cards, digital marketing and call centre;

physically or virtually, face to face or remotely, verbally, in writing or electronically from persons who share their personal data through business cards, CVs, offers and other means for purposes such as establishing a commercial relationship with our company, applying for a job or submitting an offer;

and also from data obtained indirectly through different channels, from websites and (micro) websites used for blogs, competitions, surveys, games, campaigns and similar purposes and from social media, newsletter reading or click activity, data offered by publicly available databases, and profiles and data open to sharing on social media platforms.

Personal data obtained before the KVKK entered into force

Your personal data obtained lawfully before 7 April 2016, the effective date of the KVKK, through membership, electronic message consent, purchase of products / services and other means, is also processed and retained in accordance with the terms and conditions set out in this document.

Transfer of your personal data abroad

Your personal data collected by any of the methods listed above, to be processed in Türkiye or processed and kept outside Türkiye, may also be transferred to service intermediaries located abroad (in countries accredited by the Personal Data Protection Board and offering adequate protection of personal data), provided this remains within the scope of the KVKK and is consistent with the purposes of the contract.

Storage and protection of personal data

Your personal data will be kept confidential in the databases and systems held by our company in accordance with Article 12 of the KVKK and will not be shared with third parties in any way except as required by law and the provisions set out in this document. In accordance with Article 12 of the KVKK, our company is obliged to prevent the unlawful processing of personal data in the systems and databases where your personal data is held, to prevent unauthorised access, and to take software measures such as access management and physical security measures. If it is learned that personal data has been obtained by others unlawfully, this will be reported immediately and in writing to the Personal Data Protection Board in accordance with the law.

Keeping personal data accurate and up to date

Under Article 4 of the KVKK, our company is obliged to keep your personal data accurate and up to date. For our company to fulfil its obligations under current legislation, our customers need to share accurate and up-to-date data or update it through the website / mobile application.

Rights of the data subject under KVKK No. 6698

Article 11 of KVKK No. 6698 entered into force on 7 October 2016. Under that article, from that date the Data Subject has the right to apply to our company (the data controller) to:

  • learn whether their personal data is processed,
  • request information if their personal data has been processed,
  • learn the purpose of processing and whether the data is used in line with that purpose,
  • know the third parties in Türkiye or abroad to whom personal data is transferred,
  • request correction if personal data has been processed incompletely or incorrectly,
  • request deletion or destruction of personal data under the conditions set out in Article 7 of the KVKK,
  • request that correction, deletion or destruction of personal data be notified to third parties to whom the data has been transferred,
  • object to a result against them arising from the analysis of processed data exclusively by automated systems,
  • claim compensation for damage suffered due to unlawful processing of personal data.

This is an English translation provided for convenience. In case of any discrepancy, the Turkish version prevails.