PERSONAL DATA POLICY

General information about the Personal Data Law

The Law on Protection of Personal Data numbered 6698 (hereinafter referred to as KVKK) was accepted on March 24, 2016, and published in the Official Gazette dated April 7, 2016, and numbered 29677. Some parts of the KVKK came into force on the date of publication, and some parts on October 7, 2016.

Information as the Data Controller

Pursuant to the KVKK numbered 6698 and in the capacity of Data Controller, your personal data will be processed by us within the framework explained on this page, by being recorded, stored, updated, disclosed/transferred to third parties when permitted by law, categorized, and processed in the ways listed in the KVKK.

How Your Personal Data May Be Processed

Pursuant to the KVKK numbered 6698, the personal data you share with our Company may be processed by us wholly or partially, automatically, or non-automatically provided that it is a part of any data recording system, by obtaining, recording, storing, modifying, rearranging, in short, by being subject to any kind of operation performed on the data. Any operation performed on the data within the scope of KVKK is accepted as "processing of personal data."

Purposes and Legal Reasons for Processing Your Personal Data

The personal data you share will be processed in accordance with the KVKK numbered 6698 and related secondary regulations for the following purposes:

To fulfill the requirements of the services we provide to our customers, in accordance with the contract and technology, and to improve our products and services;
To record identity, address, and other necessary information to determine the transaction owner within the scope of the Law on Regulation of Electronic Commerce numbered 6563, the Law on Consumer Protection numbered 6502, the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette dated 26.08.2015 and numbered 29457, the Regulation on Distance Contracts published in the Official Gazette dated 27.11.2014 and numbered 29188, and other related legislation;
To arrange all records and documents necessary for payment systems, electronic contracts, or paper-based transactions required in the field of Banking and Electronic Payment; and to comply with information storage, reporting, and notification obligations stipulated by legislation and other authorities;
To be able to provide information to prosecutor's offices, courts, and relevant public officials in matters related to public safety and legal disputes, upon request and as required by law.

Information on Third Parties or Organizations to Whom Your Personal Data May Be Transferred

For the purposes stated above, the persons/organizations to whom your personal data shared with our Company may be transferred are: primarily IdeaSoft Yazılım San. ve Tic. A.Ş. which provides the e-commerce infrastructure of our Company, suppliers, cargo companies, and similar individuals and organizations related to the services provided, program partner organizations we cooperate with, domestic/international organizations, and other 3rd parties from whom services are received and/or who act as Data Processors to carry out our activities.

Method of Collecting Your Personal Data

Your personal data can be processed and collected in the following ways:

Through forms on our Company's website and mobile applications, including information such as name, surname, Turkish ID number, address, telephone, work or personal email address; preferences on pages accessed using a username and password, IP records of transactions performed, cookie data collected by the browser, and data containing navigation times and details, and location data;
Verbally, in writing, or electronically through our sales and marketing department employees, our branches, suppliers, other sales channels, paper forms, business cards, digital marketing, and call center channels;
From individuals who share their personal data for purposes such as establishing a commercial relationship with our Company, applying for a job, submitting an offer, etc., via business cards, résumés (CVs), offer submissions, and other means, whether in a physical or virtual environment, face-to-face or remotely, verbally, in writing, or electronically;
Additionally, data obtained indirectly from different channels, data obtained from (micro) websites and social media used for purposes such as websites, blogs, contests, surveys, games, campaigns, and similar activities, e-newsletter reading or clicking movements, data provided by publicly available databases, and publicly shared profiles and data from social media platforms.

Your Personal Data Obtained Before the KVKK Came into Effect

Your personal data obtained legally before the effective date of the KVKK, April 7, 2016, through membership, electronic communication consent, product/service purchase, and other means, is also processed and maintained in accordance with the terms and conditions regulated in this document.

Transfer of Your Personal Data Abroad

Your personal data collected by any of the methods listed above, whether processed in Turkey or processed and stored outside Turkey, may be transferred to service intermediaries abroad (to countries accredited by the Personal Data Protection Board and having adequate protection regarding the protection of personal data) provided that it remains within the scope of the KVKK and is in line with the contract purposes.

Storage and Protection of Personal Data

Your personal data will be stored confidentially in the database and systems within our Company pursuant to Article 12 of the KVKK; and will not be shared with third parties under any circumstances, except for legal obligations and the regulations specified in this document. Our Company is obliged to prevent the unlawful processing of personal data, to prevent unauthorized persons from accessing the systems and databases where your personal data is hosted, to take software measures such as access management, and physical security measures, pursuant to Article 12 of the KVKK. If it is learned that personal data has been obtained by others through illegal means, the situation will be immediately reported to the Personal Data Protection Board in accordance with legal regulations and in writing.

Keeping Personal Data Up-to-Date and Accurate

Pursuant to Article 4 of the KVKK, our Company has the obligation to keep your personal data accurate and up-to-date. In this context, to enable our Company to fulfill its obligations arising from current legislation, our Customers must share or update their accurate and current data via the website/mobile application.

Rights of the Personal Data Owner Pursuant to KVKK numbered 6698

Article 11 of the KVKK numbered 6698 came into force on October 7, 2016, and pursuant to the relevant article, the rights of the Personal Data Owner after this date are as follows: The Personal Data Owner may apply to our Company (data controller) and exercise the right to:

Learn whether personal data is processed,
Request information if personal data has been processed,
Learn the purpose of processing personal data and whether they are used in accordance with their purpose,
Know the third parties to whom personal data is transferred domestically or abroad,
Request the rectification of personal data if it is incomplete or incorrectly processed,
Request the erasure or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,
Request the notification of the operations carried out regarding the rectification, erasure, or destruction of personal data to third parties to whom the personal data has been transferred,
Object to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems,
Request compensation for damages in case of suffering damage due to the unlawful processing of personal data.

Deva Teknolojik Giysiler, located at Gülük mah göllü sok Alphan lapis iş mer kat 3 no 11 Melikgazi/Kayseri, is the Data Controller within the scope of the KVKK. Personal Data Owners can direct their questions, opinions, or requests to any of the following communication channels:

Email: mtutak71@gmail.com Phone: 05337404582

​