GENERAL INFORMATION

This text has been prepared to inform you about the storage, recording, processing, and transfer of personal data belonging to all individuals who use our website, benefit from our services, and enter into a contractual relationship with us within the scope of services we provide through www.celikhortum.com.tr.

2.Organize Sanayi Bölgesi Reisköy Caddesi No:6 Konya / TURKEY is sharing detailed information below regarding your data that can be collected, recorded, stored, processed, and transferred in accordance with the services we provide to you and in compliance with the Personal Data Protection Law No. 6698 ("PDPL").

As is known, under Article 10 of the PDPL, the data controller is obligated and required to provide information about:

  • a) The identity of the data controller and, if any, its representative,
  • b) The purpose for which personal data will be processed,
  • c) To whom and for what purpose the processed personal data may be transferred,
  • ç) The method and legal basis of collecting personal data,
  • d) Other rights as listed in Article 11"

Within this scope and in accordance with relevant legislation provisions and as the data controller; we will "record, classify, process, store, update and disclose to third parties where permitted by legislation" all your general and special category personal data within the scope of legal reasons and, where explicit consent is required, with your explicit consent, and we hereby inform you about our mutual rights and obligations under the aforementioned legal regulation.

DEFINITIONS

In order for the clarification text to be understood clearly and without need for explanation by the parties, the terms defined within the PDPL and their meanings are presented below for your attention.

In this context;

  • Explicit Consent: Freely given, specific, informed and unambiguous consent,
  • Anonymization: Rendering personal data impossible to link with an identified or identifiable natural person, even through matching with other data,
  • Data Subject: The natural person whose personal data is processed,
  • Personal Data: Any information relating to an identified or identifiable natural person,
  • Processing of Personal Data: Any operation performed on personal data such as collection, recording, storage, preservation, alteration, adaptation, disclosure, transfer, retrieval, making available for collection, categorization or blocking its use by wholly or partly automatic means or otherwise than by automatic means which form part of a filing system,
  • Board: The Personal Data Protection Board,
  • Authority: The Personal Data Protection Authority,
  • Data Processor: The natural or legal person who processes personal data on behalf of the data controller upon their authorization,
  • Data Recording System: The recording system in which personal data is processed by being structured according to certain criteria,
  • Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system.
DATA CONTROLLER

Under the Personal Data Protection Law No. 6698, the "data controller" is Çelik Hortum Company.

In this context, Article 11 of the PDPL regarding the rights of data subjects is included at the end of this clarification text.

You can communicate your requests regarding your data by written notification to 2.Organize Sanayi Bölgesi Reisköy Caddesi No:6 Konya / TURKEY, or by sending a notification to the email address [email protected].

CONDITIONS FOR PROCESSING DATA AND EXPLICIT CONSENT

The conditions for processing personal data are specified in Article 5 of the PDPL. In this context, the processing of personal data not included in Article 5/2 of the PDPL and personal data not subject to Article 6/3 is contingent on explicit consent.

In accordance with the exceptions regulated in Article 5 paragraph 2 and Article 6 paragraph 3 of the PDPL; personal data including your special categories of personal data may be collected and processed without the explicit consent of the data subject for the purpose of: (i) it is explicitly provided for by laws, (ii) it is necessary for the protection of life or physical integrity of the person or of any other person who is bodily incapable of giving his consent or whose consent is not deemed legally valid, (iii) processing of personal data belonging to the parties of a contract is necessary provided that it is directly related to the conclusion or fulfillment of that contract, (iv) it is necessary for compliance with a legal obligation to which the data controller is subject, (v) the relevant data are made available to the public by the data subject himself, (vi) data processing is necessary for the establishment, exercise or protection of a right, (vii) processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.

Similarly, exceptions regarding the transfer of data and transfer abroad are specified in Articles 8 and 9 of the PDPL.

The disclosure of explicit consent and your information is essential. In this context, explicit consent is consent that relates to a specific issue, based on information and expressed with free will.

The existence of explicit consent is sought only for the processing of your personal data that do not fall within the scope of exceptions. In this context, consent and approval statements given freely, with sufficient information and in a manner that does not give rise to hesitation are accepted as explicit consent, and your personal data will be processed only and only with the occurrence of explicit consent when explicit consent is required.

In this direction, we request consent regarding the processing, storage, recording, anonymization when necessary, and sharing with third parties of your personal data to be acquired during the contractual relationship, except for matters covered by exceptions.

For this reason, explicit consent forms have been shared with you within the site, and explicit consent forms will also be conveyed to you in the contracts signed by you.

You are requested to mark the boxes for which consent is given, as you have been informed. Indeed, to reiterate and as stated in this text, your general and special category personal data will be processed with consent.

YOUR PERSONAL DATA TO BE PROCESSED AND PURPOSES OF PROCESSING

As stated in the About Us section; we see you as part of the www.celikhortum.com.tr family. In this context, another form of reflection of the value given to you is our approach to the personal data you have conveyed to us.

We strive to provide you with the most suitable and advantageous service in a form that emphasizes quality, and in this context, your personal data is collected as listed below.

Primarily;

  • The names and surnames of customer individuals, their T.R. Identity numbers are collected for preparing the appropriate contract as mutually agreed, for issuing invoices, for making accounting calculations, for notification in case of dispute and upon requests from official authorities, and also because it is mandatory to share the information of customers/prospective customers with law enforcement as per the legislation on Identity Notification,
  • Communication tools belonging to you such as phone number, address, e-mail address; for providing you with better service, for obtaining order confirmations before establishing a contractual relationship, for providing the best services closely during the contractual relationship, for communicating with you on the following matters afterward,
  • IBAN numbers, bank account numbers, and payment information belonging to you; are stored, processed, and recorded for the fulfillment of the contract.

In this context, consent on our site

Your personal data will be processed in accordance with your approval to provide you with better service, provide various advantages, sales, marketing, information, promotions, campaign and condition information, conduct surveys, customer satisfaction research, facilitate purchasing transactions, plan and execute our commercial and/or business strategies, ensure the legal, technical and commercial-business security of individuals in business relationships with us, and to plan and execute necessary activities for the customization and promotion of products and services offered by us according to the preferences, usage habits and needs of relevant individuals, create and monitor visitor records, create campaigns, perform cross-selling, determine target audiences, track customer movements to enhance user experience, develop and personalize the website and mobile application according to customer needs, conduct direct and indirect marketing, perform personalized marketing and remarketing activities, conduct personalized segmentation, targeting, analysis and internal reporting activities, conduct market research, plan and execute customer satisfaction activities and manage customer relationship processes, including for the planning and execution of the sales and marketing processes of our shopping site's products and/or services, and planning and execution of processes to create and/or increase loyalty to the products and/or services offered by our shopping site, and will be shared with the persons specified in this clarification text in accordance with the purposes mentioned.

For the execution of commercial activities carried out by our site and the execution of related business processes by conducting necessary studies by relevant business units,

  • Establishment of possible rights and claims of relevant parties,
  • Providing information to authorized institutions as required by legislation,
  • Ensuring the fulfillment of obligations within the scope of the Consumer Protection Law, Law on the Regulation of Retail Trade, Law on the Regulation of Electronic Commerce, Distance Contracts Regulation, and other legal legislation through our company and on behalf of our company, our branches, our call center, affiliated companies, or through our websites and social media pages, and not limited to these, through all channels,
  • Your personal data will be processed for the purposes of receiving and delivering your orders, and for the proper fulfillment and execution of the e-commerce shopping process you carry out on our site.

There are explicit consent checkboxes under the site and in the annexes of contracts. In this context, as you have been informed, you are requested to mark the boxes for which consent is given.

TRANSFER OF DATA

Your personal data may be shared with third parties if consent is given for the work to be carried out by business units to enable relevant individuals to benefit from products and services offered by our site, to manage business processes, and to plan and execute commercial and/or business strategies.

In addition, it may be transferred to our company officials, affiliates, business partners, suppliers, shareholders, legally authorized public institutions and organizations, and private institutions for the purposes stated above.

It may be shared with payment institutions for the purpose of verifying identity in accordance with the Regulation on Measures Regarding Prevention of Laundering Proceeds of Crime and Financing of Terrorism published in the Official Gazette dated January 9, 2008 and numbered 26751.

Also, under the Identity Notification Law No. 1174 ("INL"); sharing the identity information of prospective customers is legally mandatory, so your information will be shared with law enforcement through the Identity Notification System in this context.

We may transfer personal data to third parties within the country as well as abroad for the purposes stated above, provided that it meets the conditions set forth in the PDPL.

COLLECTION AND PROCESSING METHOD OF PERSONAL DATA, LEGAL REASONS

In accordance with the general principles, it is essential that personal data is retained for the period stipulated in the relevant legislation or for the period necessary for the purpose for which they are processed, in order to offer you the most suitable and advantageous campaigns in line with the purposes mentioned above, in cases required by law, within the scope and integrity of the execution of contracts, and the determination of campaign strategies.

In this context, in compliance with general principles, evaluations are made for determining retention periods for each data processing process in accordance with the provisions of the applicable legislation, together with the purpose of the process. Therefore, personal data is stored until the expiration of minimum legal obligation periods and limitation periods.

With the expiration of these periods, if the purpose of processing personal data ceases to exist within any process; your personal data is anonymized, deleted, and/or destroyed in accordance with the PDPL.

In this direction, your personal data is collected and processed through any verbal, written, or electronic medium for the purposes specified above, in order to provide our services in accordance with the legislation and to fulfill our company's contractual and legal obligations completely and accurately.

Your personal data will be collected, processed, and shared within the scope of personal data processing conditions and purposes specified in Articles 5 and 6 of the PDPL and in accordance with the legal reasons and purposes set forth in this clarification text.

RETENTION OF DATA

Your personal data that you have submitted to us is processed in accordance with the principle of purpose limitation and for the purposes explained in this text; it is limited to the period required by applications and commercial life practices, and after the expiration of these periods, it is deleted, destroyed, or anonymized.

Besides these; in cases explicitly provided for by laws, when it is necessary for the fulfillment of the legal obligation of our company as the data controller, when the data is made public by the data subject themselves, when it is necessary for the processing of the legitimate interests of our company as the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, your data can be used only for the realization of the purposes exhaustively listed in this sentence, even after the expiration of the periods mentioned under this heading.

For these reasons, access to your personal data stored for other purposes will not be allowed and can only be used within the scope of mandatory situations. When these mandatory situations end, your personal data will be properly deleted, destroyed, or anonymized.

RIGHTS OF THE DATA SUBJECT

You can make all your requests regarding personal data that is recorded, stored, collected, processed, and transferred by us to the e-mail address [email protected] as mentioned above.

In this context, your requests will be concluded free of charge within thirty (30) business days at the latest, taking into account the nature of the request, in accordance with the PDPL.

However, if the transaction requires an additional cost, a fee from the tariff determined by the Personal Data Protection Board may be requested.

According to Article 11 of the PDPL, data subjects (data owners);

  • Have the right to learn whether their personal data is being processed,
  • Request information if their personal data has been processed,
  • Learn the purpose of processing their personal data and whether they are used in accordance with their purpose,
  • Know the third parties to whom personal data is transferred, domestically or abroad,
  • Request the rectification of incomplete or inaccurate personal data and request that this action be notified to third parties to whom personal data has been transferred,
  • Request the deletion or destruction of personal data which has been collected, processed, and transferred in compliance with the Law and other relevant legal provisions, in case the reasons necessitating their processing no longer exist, and request that this action be notified to third parties to whom personal data has been transferred,
  • Object to the occurrence of a result against themselves by analyzing the processed data exclusively through automated systems,
  • Request compensation for damages arising from the unlawful processing of personal data.

Changes may occur in the matters included in this form in accordance with legal and technological developments.