Privacy Policy

General Information on the Personal Data Protection Law

The Personal Data Protection Law No. 6698 (hereinafter referred to as the “KVKK”) was adopted on March 24, 2016, and published in the Official Gazette No. 29677 dated April 7, 2016. Part of the KVKK entered into force on the date of publication, and part of it entered into force on October 7, 2016.

Information in the capacity of data controller

In accordance with KVKK No. 6698 and in the capacity of Data Controller, your personal data will be recorded, stored, updated, disclosed/transferred to third parties in cases permitted by legislation, classified, and processed in the ways listed in the KVKK, within the framework explained on this page.

How your personal data may be processed

In accordance with the Personal Data Protection Law No. 6698, your personal data shared with our Company may be processed by us by being obtained, recorded, stored, modified, reorganized, in short, by being subject to any kind of processing performed on the data, either fully or partially, automatically, or by non-automatic means, provided that it is part of a data recording system. Any operation performed on data within the scope of the KVKK is considered “processing of personal data.”

Purposes and legal grounds for processing your personal data

The personal data you share is used to:

Fulfill the requirements of the services we provide to our customers, in accordance with the requirements of the contract and technology, and to improve our products and services;

Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on the Protection of Consumers, and the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette dated August 26, 2015, No. 29457, prepared based on these regulations, The Regulation on Distance Contracts published in the Official Gazette dated November 27, 2014, numbered 29188, and other relevant legislation, to record the identity, address, and other necessary information to identify the transaction owner;

To organize all records and documents that will serve as the basis for payment systems, electronic contracts, or paper-based transactions, which are mandatory in the field of banking and electronic payments; to comply with the information storage, reporting, and notification obligations required by legislation and other authorities;

To provide information to prosecutors, courts, and relevant public officials upon request and as required by legislation in matters related to public safety and legal disputes;

Your personal data will be processed in accordance with the Personal Data Protection Law No. 6698 and related secondary regulations. Information about third parties or organizations to whom your personal data may be transferred For the purposes mentioned above, the individuals/organizations to whom your personal data shared with our Company may be transferred are as follows: primarily Ikas, which provides our Company's e-commerce infrastructure, suppliers, shipping companies, and other persons and organizations related to the services provided, program partner organizations with which we collaborate and from which we receive services in order to carry out our activities and/or in the capacity of Data Processors, domestic/foreign organizations, and other third parties.

How your personal data is collected
Your personal data is collected
Through forms on our company's website and mobile applications, including information such as your name, surname, Turkish ID number, address, telephone number, work or personal email address; preferences on pages accessed using your username and password, IP records of transactions performed, data collected by the browser such as cookies, browsing duration and details, and location data.

Our sales and marketing department employees, branches, suppliers, other sales channels, paper forms, business cards, digital marketing, and call centers collect data verbally, in writing, or electronically.

Personal data obtained from individuals who share their personal data with our company for purposes such as establishing a business relationship, applying for a job, or submitting a proposal, through business cards, resumes (CVs), proposals, and other means, in a physical or virtual environment, face-to-face or remotely, verbally or in writing, or electronically;

In addition, data obtained indirectly through different channels, such as websites, blogs, competitions, surveys, games, campaigns, and similar purposes (micro) websites and social media, e-newsletter reading or clicking activities, data provided by public databases, and publicly shared profiles and data from social media platforms may be processed and collected.

Your personal data obtained before the KVKK came into effect
Your personal data obtained before April 7, 2016, the effective date of the KVKK, through membership, electronic communication consent, product/service purchase, and other legally compliant means, is also processed and stored in accordance with the terms and conditions set forth in this document.

Transfer of your personal data abroad
Your personal data collected by any of the methods listed above, whether processed in Turkey or processed and stored outside Turkey, may be transferred to service providers located abroad (in countries accredited by the Personal Data Protection Board and where adequate protection of personal data is ensured), provided that it remains within the scope of the KVKK and is in accordance with the purposes of the contract.

Storage and protection of personal data
Your personal data will be stored confidentially in the databases and systems of our Company in accordance with Article 12 of the KVKK; it will not be shared with third parties in any way except for legal requirements and the regulations specified in this document. Our company is obligated to prevent the unlawful processing of personal data, prevent access by unauthorized persons, and take software measures such as access management and physical security measures for the systems and databases where your personal data is stored, in accordance with Article 12 of the KVKK. If it is learned that personal data has been obtained by others through illegal means, the situation will be reported immediately, in writing, and in accordance with legal regulations to the Personal Data Protection Board.

Keeping personal data up-to-date and accurate
Pursuant to Article 4 of the KVKK, our Company has an obligation to keep your personal data accurate and up-to-date. In this context, in order for our Company to fulfill its obligations arising from the applicable legislation, our Customers must share their accurate and up-to-date data or update it via the website/mobile application.

Rights of the personal data owner in accordance with KVKK No. 6698
Article 11 of KVKK No. 6698 entered into force on October 7, 2016, and in accordance with the relevant article, the rights of the Personal Data Owner after this date are as follows: The Personal Data Owner may apply to our Company (data controller) regarding themselves;

The right to learn whether personal data has been processed,
The right to request information regarding the processing of personal data,
The right to learn the purpose of processing personal data and whether it is being used for its intended purpose,
The right to know the third parties to whom personal data has been transferred within or outside the country,
The right to request the correction of personal data if it has been processed incompletely or incorrectly,
Requesting the deletion or destruction of personal data within the framework of the conditions set forth in Article 7 of the KVKK,
Requesting that third parties to whom personal data has been transferred be notified of any rectification, erasure, or destruction of personal data,
Objecting to the analysis of processed data exclusively through automated systems resulting in a decision against the individual,
To request compensation for damages incurred due to the unlawful processing of personal data,
The “registered trade or chamber of commerce registration number, address, company owner” is the Data Controller within the scope of the KVKK. The Data Controller Representative appointed by our company will be announced in the Data Controllers Registry and on the website address where this document is located once the legal infrastructure is in place. Data Subjects may direct their questions, opinions, or requests to any of the following communication channels: