PDPL(Personal Data Protection Law)
In accordance with the Personal Data Protection Law No. 6698 (“PDPL”), your personal data will be processed, recorded, stored, updated, transferred, and/or classified by our Company as the Data Controller, for the purposes explained below and in connection with business purposes.
In this context, our Company, in order to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, and to ensure the protection of personal data, takes all necessary technical and administrative measures to prevent the unlawful processing, unlawful access, and ensure the preservation of your personal data, in accordance with the laws and regulations.
This document is intended for all natural persons whose personal data is processed by our Company, except for our Company employees or job applicants who have applied to our Company.
Personal data processed as the data controller include, but are not limited to, the following:
Name, surname, Turkish ID number, address, phone number, email address, signature, physical location/security camera recordings, call center/service quality voice recordings, bank account number, and cookie records.
Purposes and Legal Grounds for Processing Personal Data
To provide COMPANY products and services to you, fulfill our obligations to you, arrange records and documents, comply with the information storage, reporting, notification, tax, and other obligations imposed by local and international legal regulations,
To offer you special advertisements, campaigns, advantages, and other benefits for the sales and marketing activities aimed at improving the quality of services and products,
To communicate with you to meet information processing requirements, system structure, and the necessity of the information processing support services received, and to convey necessary information regarding these services and products,
To conduct traffic measurement, statistical analyses, segmentation/profiling, and CRM activities for sales and marketing activities,
To measure and increase customer satisfaction, manage complaints, obtain your opinions and suggestions on new services and products, receive error reports, provide information regarding your requests and complaints about products and services,
To manage your membership for online sales, receive your orders, process your payments, provide logistics cooperation with third parties for product delivery, recommend products and services that may interest you, conduct online behavioral advertising and marketing, manage customer portfolios, measure and improve service quality, communication, optimization, auditing, risk management and control, promotion, analysis, determine interests, scoring, profiling, marketing, sales, advertising, communication,
To use your personal data within the scope of the COMPANY’s main contract regulating the work that you disclose your personal data for, in all kinds of products and services to be offered to you in accordance with the laws and related regulations,
To comply with the information storage, reporting, and notification obligations imposed by official institutions, fulfill the requirements of contracts, and perform the legal obligations to which the COMPANY is subject in relation to these services,
To determine and implement the commercial and business strategies of the COMPANY; managing the financial operations, communication, market research, and social responsibility activities conducted by the COMPANY, managing procurement operations (request, offer, evaluation, ordering, budgeting, contract), managing internal systems and application operations, managing legal operations,
To examine, evaluate, and respond to requests from official authorities or from you, your personal data will be processed within the framework of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698.
Your Collected Personal Data Will Be Transferred, Limited to the Fulfillment of the Above-Mentioned Purposes, to;
The COMPANY’s business partners, shareholders, affiliates,
Persons or organizations permitted by the provisions of the Turkish Commercial Code, Turkish Code of Obligations, and other legislation,
Legally authorized public institutions and organizations, administrative authorities, and legal authorities,
Real or legal persons, program partner institutions and organizations, institutions with which we cooperate to carry out comparison, analysis, evaluation, advertising, and the above-mentioned purposes, and courier companies that deliver orders placed on our online store to you, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698.
Method and Legal Grounds for Collecting Personal Data
Your personal data are collected through our stores, website, and mobile application, call centers, social media accounts, or other channels that may be established/formed in the future, verbally, in writing, or electronically;
Within the framework of legal regulations by the COMPANY for the above-mentioned purposes and for the fulfillment of the contract, the explicit provisions of the law, the personal data being made public by you, the necessity of establishing, using, or protecting a right granted to you; limited to the existence of legal reasons such as the necessity of fulfilling the COMPANY’s legitimate interests and legal obligations without harming your fundamental rights and freedoms.
Rights of the Personal Data Owner Under Article 11 of Law No. 6698
As personal data owners, if you submit your requests regarding your rights to the COMPANY through the methods set out below, the COMPANY will resolve the request as soon as possible and within thirty days at the latest, depending on the nature of the request. No fee will be charged for responses up to ten pages. A processing fee of 1 Turkish Lira will be charged for each page exceeding ten pages. If the response to the application is provided in a recording medium such as CD or flash drive, the fee that may be requested by our COMPANY will not exceed the cost of the recording medium.
In this context, personal data owners have the right to;
Learn whether their personal data are processed,
Request information if their personal data have been processed,
Learn the purpose of processing personal data and whether they are used in accordance with their purpose,
Know the third parties to whom personal data are transferred domestically or abroad,
Request the deletion or destruction of personal data within the framework of the conditions set forth in Article 7 of the Law, even though they have been processed in accordance with the provisions of this Law and other relevant laws, and request notification of the process to third parties to whom the personal data have been transferred,
Object to the emergence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,
Request the compensation of the damage in case of damage due to the unlawful processing of personal data.
You may submit your request regarding the exercise of your above-mentioned rights in accordance with the first paragraph of Article 13 of Law No. 6698 and the Communiqué on the Procedures and Principles of Application to the Data Controller, No. 30356 and dated March 10, 2018, in writing or via registered electronic mail, secure electronic signature, mobile signature, or using the electronic mail address previously notified to the COMPANY and registered in our system. The COMPANY reserves the right to verify your identity before responding.
This information text has been prepared within the scope of Law No. 6698 and the regulations and communiqués published under this Law, and the purposes and policies of personal data processing of An Idea Agency. Necessary changes may be made to the information text in line with the relevant legal legislation and/or changes in the purposes and policies of An Idea Agency regarding personal data processing.