PERSONAL DATA PROTECTION LAW CLARIFICATION
1. Introduction
As "Yontuart Global Sanat ve Teknoloji Sanayi Ticaret Anonim Sirketi" (“Company”), the confidentiality and security of your personal data is one of our highest priorities. Our Company processes your personal data within the scope of the Personal Data Protection Law No. 6698 (“KVKK”) and relevant secondary legislation. Personal data refers to any information that determines or makes your identity identifiable.
When you become a “Platform Member” by accepting the Membership Agreement to benefit from the services (collectively “Platform Services”) offered through our Company’s mobile applications and websites (collectively “Platform”), we would like to inform you about your processed personal data.
2.What are the personal data we process?
When you become a Platform Member, your processed personal data is as follows :
User Account Information: It includes your name, surname, customer number, membership e-mail address, telephone number, social media addresses, date of birth and user information.
Customer Transaction Information: Includes your order and invoice information, shopping history, request and complaint details, Platform usage data, comments and questions about products, score and evaluation information, chat conversations and cancellation/return information.
Delivery Information: Includes the phone number you provide for the delivery of your orders, delivery address and information about delivery transactions.
Payment Information: Information about the payments you have made and payment methods.
Transaction Security Information: Includes information such as device information, your IP address, password and passcode information, cookie data, platform access records and your login method (e.g. Google/Facebook).
Legal Transaction Information: Includes information in correspondence with authorized persons, institutions and organizations, data in lawsuit and enforcement files and information about legal information requests.
3.What are the legal reasons, purposes and collection methods for processing your personal data?
Your personal data is collected by our Company through various methods. These methods may include fully or partially automatic systems or non-automatic methods as part of data recording systems. Your data is collected electronically via mobile applications or websites through which you access the Platform Service we offer within the scope of our membership agreement. In addition, when you contact us via live help, call center or e-mail channels, your data may be collected electronically via these communication channels. Your data sent to our company via printed forms, notifications or mail may also be collected physically. The purposes and legal reasons for your processed personal data are explained below.
3.1. Membership and Account Creation Process:
Your personal data processed under this category are as follows: It includes your user account information, customer transaction information and transaction security information.
Objectives:
• Carrying out the processes of creating and fulfilling the membership agreement,
• Creating and closing your member profile or account on the Platform when necessary,
• Confirming the accuracy of your contact information,
• Carrying out the necessary transactions for your shopping through the Platform,
• Carrying out and supervising our Company's business operations,
• Ensuring the security of Platform operations,
• Ensuring compliance with relevant legislation such as Law No. 6563 on the Regulation of Electronic Commerce, Turkish Commercial Code No. 6102, Turkish Penal Code No. 5237 and Law No. 6502 on the Protection of Consumers,
• Continuing the Platform activities in accordance with legal regulations,
• Fulfilling data sharing and storage requirements in line with the obligations arising from the legislation.
Legal Reasons:
It is clearly stated in the laws, it is mandatory to fulfill our company's legal obligations, it is necessary for the fulfillment of the membership agreement between you and our Company.
3.2. Order, Delivery and Cancellation/Return Processes:
Your personal data processed under this category are as follows: It includes your user account information, delivery information, customer transaction information, payment information and transaction security information.
Objectives:
• Receiving your orders and creating order processes,
• Creating and fulfilling the distance sales contract,
• Carrying out delivery and logistics transactions,
• Carrying out cancellation and return transactions,
• Managing payment and invoicing processes,
• Fulfilling the legal obligations determined by the competent authorities with the relevant legislation such as the Distance Contracts Regulation and the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce,
• Carrying out the purchasing processes of products and services on the platform.
Legal Reasons: It is necessary for our Company to fulfill its legal responsibilities, It is mandatory for the membership agreement between you and our Company to be enforced.
3.3. Company Information Security, Risk, Audit and Control Processes:
Your personal data processed un der this category are as follows: It includes your user account information, customer transaction information, delivery information, payment information and transaction security information.
Objectives:
• Managing and auditing financial and accounting transactions,
• Carrying out billing processes,
• Implementing information security processes and examining suspicious transactions,
• Ensuring the security of platform operations,
• Auditing, developing and improving the quality of products and services offered by our Company,
• Determining and analyzing risks, managing complaints,
• Preventing fraudulent activities,
• Conducting legal and financial investigations in possible mergers, acquisitions, partnerships, divisions and other structural changes of the Company.
Legal Reasons:
It is necessary for the fulfillment of our membership agreement, Data processing is mandatory to protect the legitimate interests of our Company.
3.4. Company Information Security, Risk, Audit and Control Processes:
Your personal data processed in this category are as follows: User account information, customer transaction information, delivery information, payment information and transaction security data.
Objectives :
• Conducting and auditing financial and accounting transactions,
• Carrying out billing processes,
• Conducting information security processes and investigating suspicious transactions,
• Ensuring the security of operations on the platform,
• Assessing, developing and improving the quality of the products and services offered by our company,
• Assessing and analyzing risks, managing complaints,
• Preventing fraudulent activities,
• Conducting legal and financial examinations in possible mergers, acquisitions, partnerships, divisions and other structural changes of the company.
Legal Reasons:
It is necessary for the implementation of our membership agreement, and data processing is mandatory in order to protect the legitimate interests of our company.
3.5.Processes Based on Explicit Consent:
Your personal data in this category are the following information: Your user account information, customer transaction data, delivery information and payment information.
Objectives :
• Carrying out marketing, advertising and promotional activities,
• Managing financial offer processes,
• Presenting advantageous offers specific to you, increasing your satisfaction by getting to know you better and sending commercial electronic messages during this process.
Legal Basis: Your explicit consent.
If you wish to withdraw your consent, you may apply to the Company using the methods under the heading "7-Communication for Your Rights and Requests".
4. To whom and for what reasons does the Company transfer your personal data?
Our Company processes your personal data in accordance with the principles of "need to know" and "need to use", paying attention to data minimization and taking the necessary technical and administrative security measures.
Your personal data is transferred to the recipient groups detailed below within the framework of Article 8 of the KVKK, for the following legal reasons:
• It is clearly prescribed by law,
• It is mandatory for our Company to fulfill its legal obligations,
• It is necessary for the establishment or execution of a contract,
• Data processing is mandatory for the establishment, exercise or protection of a right,
• It is mandatory for the legitimate interests of our Company.
In case your data is transferred abroad, it is shared with the recipient groups specified in detail below for legal reasons such as "Providing appropriate security with a standard contract" or "Existence of exceptional circumstances specified in Article 9, paragraph 6 of the KVKK" as specified in Article 9 of the KVKK and the Regulation on the Procedures and Principles Regarding the Transfer of Personal Data Abroad.
4.1. Membership and Account Creation Process:
• In line with our contract, we share your personal data with our affiliates in order to provide you with access to the Platform Services and to create and execute the membership contract.
• In order to ensure the effective operation of the Platform and to provide IT, technology and software services, we share your personal data with our affiliates, business partners, service providers and affiliates abroad that support our IT infrastructure and provide services.
Legal Basis: In order to be necessary for the establishment or execution of the contract and to provide appropriate security with a standard contract.
4.2. Order, Delivery and Cancellation/Return Processes:
• We share your personal data with cargo companies and private couriers for logistics operations and tracking the delivery process.
• We share data with contracted banks and other payment institutions for the execution and tracking of payment transactions.
• We share your personal data with our business partners who provide bulk SMS or e-mail services to provide information about the product you purchased.
• When you order a product from abroad, we share your information with cargo and logistics companies, product sellers and customs consultants located abroad for the execution of delivery, return, logistics and supply chain management, customs transactions and Platform operations.
Legal Basis: It is necessary for our company to fulfill its legal obligations, to establish or execute the contract and to provide appropriate security with standard contracts.
4.3. Customer Experience Improvement Processes:
• In order to provide sales of goods and services and after-sales support services, to ensure customer satisfaction and to manage requests and complaints, we share your personal data with our business partners providing call center services and our providers providing customer support services.
• In order to develop and improve the products and services offered by our company, to provide Platform services and manage their operations, we share your personal data with our affiliates, group companies, business partners and consultants providing IT infrastructure, software and technology services abroad.
Legal Basis: Necessary for the establishment or execution of the contract, appropriate assurance provided by standard contracts, and in case of an incident, the existence of one of the conditions specified in Article 9, paragraph 6 of the KVKK.
4.4. The Company's Information Security, Risk, Audit and Control Processes:
• We share your personal data with our business partners, consultants and service providers, banks, e-invoice business partners, cargo and courier companies, special integrators, independent auditors, customs authorities and companies providing financial advisory/accounting services in order to carry out billing transactions, transmit e-invoices electronically, deliver physical contracts or invoices, manage financial and accounting processes, identify and evaluate risks, and prevent fraud.
• We share your personal data with our independent auditors, customs authorities, financial advisory/accounting service providers, community companies, affiliates, group companies, special integrators, technology companies, business partners and service providers in order to ensure the security of company operations, control and improve product and service quality, and conduct risk identification and analysis. • In order to conduct legal and financial investigations during mergers, acquisitions, joint ventures, divisions and other structural changes, we share your personal data with potential buyers, sellers or other parties to the transaction and with employees, consultants and database service providers who are obliged to keep confidential during this process.
Legal Basis: It is necessary for our Company to fulfill its legal obligations, to establish or execute the contract, and to be mandatory for our Company's legitimate interests.
4.5. Process of Carrying Out Legal Transactions:
• In order to fulfill our Company's legal obligations and to carry out Platform activities in accordance with the legislation, we share your personal data with authorized public institutions and organizations such as regulatory and supervisory institutions, courts and enforcement offices, and mediators for the purpose of informing authorized persons, institutions and organizations, following up on legal affairs and exercising and protecting rights in legal dispute situations.
• In order to carry out our Company's audit activities, manage legal consultancy processes, ensure the security of operations and investigate suspicious transactions, we share your personal data with lawyers, auditors, tax consultants, forensic computer and cyber security experts, our group companies, our affiliates and other third parties from whom we receive consultancy and services.
• When requested, information is shared with authorized persons, institutions and organizations abroad, and data is shared with authorized public and private organizations for the use and protection of rights in cases of legal disputes.
Legal Basis: It is clearly stated in the laws, it is necessary for our Company to fulfill its legal obligations, to establish, use or protect rights, to establish or execute the contract, and in case of incidental cases, one of the cases stipulated in Article 9, paragraph 6 of the KVKK.
4.6. Processes Based on Explicit Consent:
• We share your personal data with our affiliates, service providers and business partners for marketing, advertising and promotional activities, to offer you special advantages and to increase your satisfaction.
Legal Basis: Your explicit consent.
5. How Does the Company Protect Your Personal Data?
Personal data shared with our Company is protected under the supervision and control of our Company. Within the framework of the responsibility of the data controller, we take the necessary measures to establish the necessary organization, take technical measures and adapt them in order to ensure the confidentiality and integrity of information in accordance with the applicable legislation.
6.Your Rights Regarding the Protection of Your Personal Data
You can exercise your following rights by applying to our Company using the methods in the " Contact for Your Rights and Requests " section specified in this disclosure text:
• Learning whether your personal data is processed or not.
• Request information about this data if it has been processed.
• Learn the purpose of processing your data and whether it is used for this purpose.
• Know the recipients of your data in Turkey or abroad.
• Request correction of your data if it is processed incompletely or incorrectly.
• Request deletion or destruction of your data within the scope of the conditions specified in the KVKK.
• Request notification of your requests for correction, deletion and destruction to third parties to whom the data is transferred.
7. Contact for Your Rights and Requests
You can send us your questions and requests regarding your personal data with a petition prepared in accordance with the conditions specified in the Comminuque On The Principles And Procedures For The Request To Data Controller, as follows:
Application Method
Address to Apply : From your e-mail address that you have previously provided and is registered in our system to info@yontuart.com
As personal data owners, when you submit your requests regarding your rights to our Company, our Company will finalize these requests free of charge within 30 (thirty) days at the latest. However, if responding to your application creates a cost as required by the legislation, our Company may charge a fee in accordance with the tariff determined by the Personal Data Protection Board.
8.About Clarification Text
The Company reserves the right to update this Clarification Text on the Protection of Personal Data in line with the changes in the current legislation.