HALİT KUL Personal Data Policy

General information about the Personal Data Law

The Law on the Protection of Personal Data No. 6698 (hereinafter referred to as KVKK) was adopted on March 24, 2016, and published in the Official Gazette No. 29677 dated April 7, 2016. Part of the KVKK came into effect on the date of publication, and the remaining part came into effect on October 7, 2016.

Information as a data controller

Pursuant to KVKK No. 6698 and in the capacity of Data Controller, your personal data will be recorded, stored, updated, disclosed / transferred to third parties when permitted by the legislation, classified, and processed in the ways specified in the KVKK, within the framework explained on this page.

How your personal data can be processed

According to KVKK No. 6698, the personal data you share with our Company may be processed by us entirely or partially; obtained automatically or by non-automatic means as part of any data recording system; recorded, stored, modified, reorganized — in short, subjected to any kind of operation on the data. All operations performed on the data within the scope of KVKK are considered as the "processing of personal data."

The purposes and legal grounds for processing your personal data

The personal data you share,

• To fulfill the requirements of the services we provide to our customers, and to improve our products and services in accordance with the contract and technological necessities;
  
  
• To record identity, address, and other necessary information for identifying the data owner within the scope of the Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on Consumer Protection, the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette No. 29457 dated 26.08.2015, the Distance Contracts Regulation published in Official Gazette No. 29188 dated 27.11.2014, and other relevant legislation;
  
  
• To organize all records and documents that serve as the basis for transactions in banking and electronic payment areas, either electronic or paper-based; to comply with the obligations regarding information retention, reporting, and notification mandated by legislation and other authorities;
  
  
• To be able to provide information to public prosecutors, courts, and relevant public officials upon request and as required by legislation in matters related to public security and legal disputes;

Your personal data will be processed in accordance with Law No. 6698 KVKK and relevant secondary regulations. Notification regarding third parties or organizations to which your personal data may be transferred: For the above purposes, the persons/organizations your personal data shared with our Company may be transferred to include, primarily, IdeaSoft Software Industry and Trade Inc., which provides our e-commerce infrastructure, suppliers, cargo companies, and other individuals and organizations related to the services provided, partners providing services within the scope of Data Processor, domestic/international organizations, and other third parties.

How your personal data is collected

Your personal data,

• Through forms on our Company’s website and mobile applications, such as name, surname, Turkish ID number, address, phone, work or private email address; preferences on pages accessed by username and password; IP records of performed transactions; cookie data collected by the browser; browsing duration and details; location data;

• Verbally, in writing, or electronically through our sales and marketing department employees, branches, suppliers, other sales channels, paper forms, business cards, digital marketing, and call center channels;

• From individuals who share their personal data with our Company for purposes such as establishing a commercial relationship, applying for a job, submitting offers, via business cards, resumes (CV), offers, and other methods either physically or virtually, face-to-face or remotely, verbally or in writing or electronically;

• Also data indirectly obtained from different channels such as websites, blogs, contests, surveys, games, campaigns, and similarly used (micro) websites and social media; e-newsletter reading or clicking behavior; data provided by publicly available databases; publicly shared profiles and data from social media platforms; may be processed and collected.

Your personal data obtained before the enforcement of KVKK

Personal data legally obtained before the enforcement date of KVKK on April 7, 2016, such as memberships, electronic communication permissions, product/service purchases, and other forms, are also processed and retained in accordance with the terms and conditions set forth in this document.

Transfer of your personal data abroad

Your personal data collected by any of the methods mentioned above may be processed in Turkey or transferred abroad for processing and storage purposes, provided they remain within the scope of KVKK and are transferred to service intermediaries located abroad (countries accredited by the Personal Data Protection Board and having adequate protection for personal data) in accordance with the contract purposes.

Storage and protection of personal data

Your personal data will be confidentially stored in the database and systems of our Company as per Article 12 of KVKK; except for legal obligations and the arrangements set forth in this document, your data will not be shared with third parties in any way. Our Company is obliged to take technical and physical security measures, including access management systems, to prevent unlawful processing of personal data and unauthorized access, as required by Article 12 of KVKK. If it is discovered that personal data has been unlawfully accessed by others, the situation will be immediately reported in writing to the Personal Data Protection Board in accordance with legal regulations.

Keeping personal data accurate and up-to-date

According to Article 4 of KVKK, our Company has the obligation to keep your personal data accurate and up-to-date. To fulfill our legal obligations, our customers must share accurate and up-to-date data or update their data through the website/mobile application.

Rights of the personal data owner under KVKK No. 6698

Article 11 of KVKK No. 6698 came into force on October 7, 2016, and as per this article, the rights of the Personal Data Owner are as follows: The Personal Data Owner has the right to apply to our Company (data controller) and inquire about the following regarding themselves;

1. Learning whether personal data is being processed,
2. If personal data has been processed, requesting information regarding this,
3. Learning the purpose of processing personal data and whether it is used appropriately for that purpose,
4. Knowing the third parties within or outside the country to whom personal data has been transferred,
5. Requesting correction of incomplete or incorrect personal data,
6. Requesting deletion or destruction of personal data as per the conditions set forth in Article 7 of KVKK,
7. If personal data is corrected, deleted, or destroyed, requesting notification of these actions to third parties to whom the data was transferred,
8. Objecting to the emergence of a result against the person by analyzing processed data solely through automatic systems,
9. Requesting compensation for damages arising from illegal processing of personal data,