General Information About the Personal Data Protection Law

The Personal Data Protection Law No. 6698 (hereinafter referred to as KVKK) was adopted on March 24, 2016, and published in the Official Gazette No. 29677 on April 7, 2016. Parts of the KVKK came into force on the publication date, while others came into force on October 7, 2016.

Information as a Data Controller

Pursuant to the KVKK No. 6698, and in the capacity of Data Controller, your personal data, within the framework explained on this page, will be recorded, stored, updated, disclosed/transferred to third parties in cases permitted by the legislation, classified, and processed in the ways listed in the KVKK.

How Your Personal Data Can Be Processed

Pursuant to the KVKK No. 6698, the personal data you share with our Company can be obtained, recorded, stored, changed, reorganized, in short, processed by us through automatic or non-automatic means, provided that it is part of a data recording system. Any operation performed on data within the scope of the KVKK is considered as “processing of personal data.”

Purposes and Legal Reasons for Processing Your Personal Data

The personal data you share,
To meet the requirements of the services we provide to our customers, in accordance with the requirements of the contract and technology, and to improve our products and services;

To record identity, address, and other necessary information to determine the information of the transaction owner within the scope of the Regulation on the Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette No. 29457 dated 26.08.2015, the Regulation on Distance Contracts published in the Official Gazette No. 29188 dated 27.11.2014, and other relevant legislation;

To arrange all records and documents that will be the basis of transactions in the electronic environment or on paper in the field of banking and electronic payment; to comply with the information retention, reporting, and informing obligations stipulated by the legislation and other authorities;

To provide information to prosecutors, courts, and relevant public officials upon request and as required by legislation in matters related to public security and legal disputes;
will be processed in accordance with the KVKK No. 6698 and relevant secondary regulations.

Information About Third Parties or Organizations to Which Your Personal Data May Be Transferred

For the purposes mentioned above, the persons/organizations to which your personal data you share with our Company may be transferred include, but are not limited to, our Company’s e-commerce infrastructure provider IdeaSoft Yazılım San. ve Tic. A.Ş., suppliers, cargo companies, other related persons and organizations involved in the services provided, program partner organizations with whom we cooperate, domestic/international organizations and other third parties from whom services are received, and/or those that act as data processors.

How Your Personal Data Is Collected

Your personal data,
Through forms on our Company’s website and mobile applications, with information such as name, surname, ID number, address, phone number, work or private e-mail address; preferences made on pages accessed using a username and password, IP records of performed transactions, cookie data collected by the browser, and browsing duration and details;

Through verbal, written, or electronic communication from our sales and marketing department employees, branches, suppliers, other sales channels, paper forms, business cards, digital marketing and call center channels;

Through physical or virtual, face-to-face or remote, verbal or written or electronic communication from people who share their personal data via business cards, resumes (CV), offers, and other means for purposes such as establishing a commercial relationship with our Company, applying for a job, making an offer;

Also, data obtained indirectly from different channels, from web sites, blogs, competitions, surveys, games, campaigns and similar (micro) web sites and social media, data provided by public databases, social media platforms open to sharing;
can be processed and collected.

Personal Data Obtained Before the KVKK Came into Force

Your personal data, legally obtained before the effective date of the KVKK, April 7, 2016, through membership, electronic communication permissions, product/service purchases, and other means, are processed and preserved in accordance with the terms and conditions set out in this document.

Transfer of Your Personal Data Abroad

Your personal data, collected through any of the methods listed above, processed in Turkey or to be stored outside Turkey, may be transferred to service agents located abroad (accredited by the Personal Data Board and with sufficient protection for personal data) in accordance with the KVKK and for contractual purposes.

Storage and Protection of Personal Data

Your personal data will be kept confidential in our Company’s database and systems in accordance with Article 12 of the KVKK; they will not be shared with third parties except for legal obligations and regulations stated in this document. Our Company is obliged to take software measures such as access management and physical security measures to prevent unauthorized access and illegal processing of personal data in accordance with Article 12 of the KVKK. In case personal data are obtained by others through illegal means, the situation will be immediately reported to the Personal Data Protection Board in writing in accordance with the legal regulation.

Keeping Personal Data Accurate and Up-to-Date

Our Company has an obligation to keep your personal data accurate and up-to-date in accordance with Article 4 of the KVKK. In this context, our customers are required to share accurate and up-to-date data with our Company or update them via the website/mobile application to fulfill their obligations under the applicable legislation.

Rights of the Personal Data Owner Pursuant to the KVKK No. 6698

Article 11 of the KVKK No. 6698, which came into force on October 7, 2016, stipulates the following rights for Personal Data Owners after this date:
Personal Data Owners have the right to:

Learn whether personal data is processed,
Request information if personal data has been processed,
Learn the purpose of processing personal data and whether they are used in accordance with their purpose,
Know the third parties to whom personal data is transferred domestically or abroad,
Request correction of personal data if it is incomplete or incorrectly processed,
Request deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,
Request notification of the transactions made pursuant to correction, deletion, and destruction to third parties to whom personal data has been transferred,
Object to the occurrence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,
Request compensation for the damage in case of loss due to unlawful processing of personal data,
Our Company, registered with the Istanbul Chamber of Commerce under the registration number 790193, MERSİS number 0883039785600001, located at Çavuşoğlu mah. Spor cad. No:70/A Kartal/Istanbul/TURKEY, is the Data Controller under the KVKK. The Data Controller Representative to be appointed by our Company will be announced in the Data Controllers Registry and on the internet address where this document is located once the legal infrastructure is provided. Personal Data Owners can direct their questions, opinions, or requests through any of the following communication channels:

E-mail: info@verpolboya.com

Phone & Fax: 0216 374 06 02