General Information About the Personal Data Protection Law

Law No. 6698 on the Protection of Personal Data (hereinafter referred to as the “KVKK”) was adopted on March 24, 2016, and published in the Official Gazette No. 29677 dated April 7, 2016. Part of the KVKK entered into force on the publication date, while the remaining provisions entered into force on October 7, 2016.

Information as Data Controller

Pursuant to Law No. 6698 and in our capacity as the Data Controller, your personal data may be recorded, stored, updated, disclosed/transferred to third parties where permitted by legislation, classified, and processed in the ways specified under the KVKK within the framework explained on this page.

How Your Personal Data May Be Processed

In accordance with Law No. 6698, your personal data that you share with our Company may be processed by us, wholly or partially, automatically or by non-automatic means provided that they form part of a data recording system, through collection, recording, storage, modification, reorganization, and any other operation performed on the data. Any operation performed on data within the scope of the KVKK is considered “processing of personal data.”

Purposes and Legal Grounds for Processing Your Personal Data

The personal data you share will be processed in order to fulfill the requirements of the services we provide to our customers, to perform our obligations in accordance with contractual and technological requirements, and to improve our products and services;

To record identity, address, and other necessary information for identifying the transaction owner within the scope of Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on Consumer Protection, the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in Official Gazette No. 29457 dated August 26, 2015, the Distance Contracts Regulation published in Official Gazette No. 29188 dated November 27, 2014, and other relevant legislation;

To arrange all records and documents that will serve as the basis for transactions in payment systems, electronic contracts, or paper media, which are mandatory in the fields of banking and electronic payments; and to comply with legal obligations regarding information retention, reporting, and disclosure required by legislation and other authorities;

To provide information to public prosecutors, courts, and relevant public officials upon request and as required by legislation in matters concerning public security and legal disputes;

Such processing will be carried out in accordance with Law No. 6698 and related secondary regulations.

Information About Third Parties or Organizations to Whom Your Personal Data May Be Transferred

For the purposes stated above, the persons/organizations to whom your personal data shared with our Company may be transferred include, primarily, the company providing our e-commerce infrastructure, suppliers, cargo companies, and other persons and organizations related to the services provided; program partner organizations from which we receive services and cooperate with in order to carry out our activities and/or in the capacity of Data Processor; domestic and foreign organizations; and other third parties.

Methods of Collecting Your Personal Data

Your personal data may be collected through:

Forms on our Company’s website and mobile applications, including information such as first name, last name, Turkish ID number, address, telephone number, business or personal email address; preferences on pages accessed using a username and password; IP records of transactions performed; cookie data collected by the browser; browsing duration and details; and location data;

Verbal, written, or electronic channels such as our sales and marketing department employees, branches, suppliers, other sales channels, paper forms, business cards, digital marketing activities, and call centers;

Individuals who share their personal data with our Company for purposes such as establishing a commercial relationship, applying for a job, or submitting a proposal, through business cards, résumés (CVs), proposals, and similar means, whether in physical or virtual environments, face-to-face or remotely, verbally, in writing, or electronically;

Data obtained indirectly through different channels, including websites, blogs, contests, surveys, games, campaigns, and similar (micro) websites and social media platforms; newsletter reading or click activities; data provided by publicly available databases; and publicly shared profiles and data on social media platforms.

Transfer of Your Personal Data Abroad

Provided that your personal data remains within the scope of the KVKK and is transferred in accordance with contractual purposes, personal data collected through any of the methods described above may be transferred to service providers located abroad (in countries accredited by the Personal Data Protection Board and deemed to provide adequate protection of personal data), either after being processed in Türkiye or for processing and storage outside Türkiye.

Storage and Protection of Personal Data

Your personal data will be stored confidentially in the databases and systems of our Company