PERSONAL DATA PROTECTION LAW
Here's the English translation in natural e-commerce language, without long dashes:
CLARIFICATION NOTICE ON THE PROCESSING OF PERSONAL DATA
This clarification notice, prepared within the scope of the protection of personal data, is a general clarification notice within the framework of Law No. 6698 on the Protection of Personal Data, which is applied throughout our company whose title is written below.
As a company, we attach great importance to the protection of your personal data. In this context, we process your personal data in our capacity as "Data Controller" pursuant to Law No. 6698 on the Protection of Personal Data ("KVKK"), within the purposes and limits specified below, and we take the utmost care to adopt the necessary administrative and technical measures accordingly.
Through this "Clarification Notice on the Processing of Personal Data," we would like to inform you, our valued customers and visitors, about our personal data processing procedures and about your rights arising from Law No. 6698 within the framework of the KVK Law.
Information About Personal Data, the Processing of Personal Data, and the Data Controller
Pursuant to Article 3 of Law No. 6698 on the Protection of Personal Data, "personal data" means any information relating to an identified or identifiable natural person. In the same article, "the processing of personal data" is defined as any operation performed on data, such as the obtaining, recording, storage, retention, alteration, reorganization, disclosure, transfer, acquisition, making retrievable, classification, or prevention of the use of personal data by fully or partially automated means, or by non-automated means provided that they form part of any data recording system.
A Ticaret / Ali Temel Altıparmak (the "Company") may process your personal data in accordance with the Law and within the conditions specified below, in its capacity as "Data Controller" pursuant to Law No. 6698 on the Protection of Personal Data.
Purposes and Legal Grounds for Processing Your Personal Data
The personal data you share is processed in accordance with the law and the rules of good faith, accurately and up to date, in a manner connected with, limited to, and proportionate to the purposes of processing, and for specific, explicit, and legitimate purposes.
Personal data will be processed in accordance with Articles 5 and 6 of Law No. 6698 (KVKK) and the relevant secondary regulations, for the following purposes:
For the fulfillment of legal obligations by our company,
For the fulfillment of our legal obligations arising from the contract, for the service we will provide to our customers to be carried out in accordance with the requirements of the contract and technology, and for the improvement of the products we offer,
For recording customer information such as identity, Turkish ID number (TCKN), address, and other necessary information within the scope of Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on Consumer Protection, the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce prepared on the basis of these regulations, the Regulation on Distance Contracts, and other relevant legislation,
For preparing all records and documents that will form the basis for processing in payment systems, electronic contracts, or paper form, which are mandatory in the field of Banking and Electronic Payment; and for complying with the information retention, reporting, and notification obligations required by legislation and foreseen by other authorities,
For providing information to prosecutors' offices, courts, and relevant public officials on matters related to public security and in legal disputes, upon request and as required by legislation.
To Whom and for What Purpose Processed Personal Data May Be Transferred
For the purposes specified above, the persons/organizations to whom your personal data shared with our company may be transferred include, primarily, ……………………… Yazılım San. ve Tic. A.Ş., which provides our company's e-commerce infrastructure, as well as persons and organizations related to the services provided such as suppliers and shipping companies, program partner organizations from which service is received and/or with which we collaborate in the capacity of Data Processor in order to conduct our activities, domestic/foreign organizations and other third parties, legally authorized judicial and administrative authorities, relevant public institutions, and, pursuant to Articles 8 and 9 of the KVK Law, domestic and foreign relevant persons and other relevant Institutions and Organizations.
Method of Collection and Legal Grounds for Personal Data
Your personal data is collected by our company, for the legal grounds specified in this Clarification Notice, through your statements regarding product orders made through the website or physically in our store, in physical and electronic form, orally or in writing. Your collected personal data is also collected, processed, and transferred in accordance with the KVK Law and for the purposes specified in this Clarification Notice.
Your personal data is processed and collected in the form of: information such as name, surname, Turkish ID number, address, phone, and business or personal email address through forms filled out on our company's website and mobile applications or physically in our store; preferences on pages accessed using a username and password, IP records of transactions carried out, cookie data collected by the browser, data including browsing duration and details, and location data;
Orally, in writing, or electronically through our channels such as our sales and marketing department employees, our branches, our suppliers, other sales channels, paper forms, business cards, digital marketing, and call center;
From individuals who share their personal data for purposes such as establishing a commercial relationship with our company, applying for a job, or submitting a proposal, by means of business cards, résumés (CVs), proposals, and other means, in a physical or virtual environment, face to face or remotely, orally or in writing, or electronically;
In addition, data obtained indirectly from different channels, data obtained from websites, blogs, (micro) websites used for competitions, surveys, games, campaigns, and similar purposes, and social media, e-newsletter reading or clicking activities, data provided by publicly available databases, and profiles and data open to sharing from social media platforms.
How Your Personal Data May Be Processed
Pursuant to Law No. 6698 (KVKK), your personal data shared with our company may be processed by us by being obtained, recorded, stored, altered, reorganized, fully or partially, by automated means, or by non-automated means provided that they form part of any data recording system; in short, being subject to any operation performed on data. Within the scope of the KVKK, any operation performed on data is considered "the processing of personal data."
Transfer of Your Personal Data Abroad
Your personal data, collected by any of the methods listed above to be processed in Turkey or to be processed and retained outside Turkey, may also be transferred, provided that it remains within the scope of the KVKK and in accordance with the purposes of the contract, to service intermediaries located abroad (to countries accredited by the Personal Data Protection Board and where adequate protection regarding the protection of personal data exists).
Storage and Protection of Personal Data
Your personal data will be stored confidentially in the database and systems within our company pursuant to Article 12 of the KVKK; it will not be shared with third parties in any way, except for legal obligations and the arrangements specified in this document. Pursuant to Article 12 of the KVKK, our company is obliged to prevent the unlawful processing of personal data, to prevent access by unauthorized persons, and to take software measures such as access management and physical security measures for the systems and databases in which your personal data is held. In the event that it is learned that personal data has been obtained by others through unlawful means, the situation will be reported immediately, in writing, and in accordance with legal regulations, to the Personal Data Protection Board.
Keeping Personal Data Up to Date and Accurate
Pursuant to Article 4 of the KVKK, our company has an obligation to keep your personal data accurate and up to date. In this context, in order for our company to fulfill its obligations arising from the applicable legislation, our customers must share their accurate and up-to-date data or update it through the website / mobile application.
Rights of the Personal Data Owner Pursuant to Law No. 6698 (KVKK)
Pursuant to Article 11 of Law No. 6698 (KVKK), the Personal Data Owner has the right, by applying to our company (the data controller), to:
Learn whether their personal data is being processed,
Request information if their personal data has been processed,
Learn the purpose of processing their personal data and whether it is being used in accordance with its purpose,
Know the third parties, domestic or abroad, to whom their personal data is transferred,
Request the correction of their personal data in the event that it has been processed incompletely or incorrectly,
Request the deletion or destruction of their personal data within the framework of the conditions set out in Article 7 of the KVKK,
Request that these operations be notified to the third parties to whom the personal data has been transferred, in the event that the personal data is corrected, deleted, or destroyed,
Object to the emergence of a result against the person themselves through the analysis of the processed data exclusively by automated systems,
Request compensation for damages in the event that they suffer damage due to the unlawful processing of their personal data.
Method of Applying to the Data Controller
You can submit the rights listed above in writing with a wet signature, or by using a registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the email address previously notified to our company by the relevant person and registered in our company's system. For applications to be made in writing, the application address is Erenköy Mahallesi, Kantarcı Rıza Sokak, Plevne Apt. No:23/A, Kadıköy, İstanbul. The email address is ayse@sunsetmagic.studio.
Duly submitted requests to our company are concluded free of charge within thirty days at the latest; however, in the event that the operation requires an additional cost, the fee in the schedule determined by the Personal Data Protection Board is charged. In the event that the response to the application is provided on a recording medium such as a CD or flash drive, the cost of the data recording medium may be charged.