PPPD-KVKK

POLICY ON THE PROCESSING AND PROTECTION OF PERSONAL DATA

I. INFORMATION ABOUT THE LAW

The Law on Protection of Personal Data No. 6698 (“KVKK”) entered into force on 07.04.2016. KVKK lays down the procedures and principles regarding the processing of personal data by real or legal persons, who are classified as "data controller", determine the purposes and means of processing personal data, and are responsible for the establishment and management of the data recording system.

Within the scope of KVKK;

  • Explicit consent: Consent on a specific subject, based on information and expressed with free will,
  • Anonymization: Making personal data incapable of being associated with an identified or identifiable natural person in any way, even by matching with other data,
  • Relevant person: The real person whose personal data is processed,
  • Personal data: Any information relating to an identified or identifiable natural person,
  • Processing of personal data: Obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available personal data by fully or partially automatic or non-automatic means provided that it is a part of any data recording system All kinds of operations performed on data such as classification or prevention of use,
  • Data processor: The natural or legal person who processes personal data on behalf of the data controller, based on the authority given by the data controller,
  • Data registration system: the registration system in which personal data is processed and structured according to certain criteria,
means.

The KVKK imposes an obligation on the data controllers of other regulations to inform / enlighten the data owners whose personal data will be processed during the acquisition of personal data.

According to Article 10 of KVKK, data controllers are data owners; The identity of the data controller and its representative, if any, for what purpose the personal data will be processed, to whom and for what purpose the processed personal data can be transferred, the method and legal reason for collecting personal data, and other rights listed in Article 11 of the KVKK. It has been prepared within the scope of purpose and legal responsibility and presented to the information of users.

II. PURPOSE OF COLLECTING AND PROCESSING PERSONAL DATA

Our company is responsible for promoting, marketing, improving the site and services, providing services to users, making the site easy to use, providing customer services, providing personalized experience to users, making personalized advertising and marketing, Law No. 6563 on the Regulation of Electronic Commerce, No. 6502. Within the scope of the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce, which was prepared on the basis of the Law on the Protection of Consumers and published in the Official Gazette dated 26.08.2015 and numbered 29457, and the Regulation on Distance Contracts published in the Official Gazette dated 27.11.2014 and numbered 29188, and other relevant legislation. to record the identity, address and other necessary information in order to identify the information of the transaction owner, to issue all records and documents that will be the basis of the transaction in payment systems, electronic contracts or paper media, which are mandatory in the field of banking and electronic payment; In order to comply with the information retention, reporting and information obligations stipulated by the legislation and other authorities, to meet the demands of the competent authorities, to fulfill the legal obligations, to ensure transaction security, and to prevent illegal activities; “Provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract, it is necessary for the data controller to fulfill its legal obligation; Personal data processing specified in Articles 5 and 6 of the KVKK, based on the legal grounds of “obligatory data processing for the establishment, use or protection of a right, mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject”. Personal data is processed within the framework of its terms and purposes.

Information about the third parties or organizations to which your personal data can be transferred, For the purposes stated above, Especially the Company that provides the e-commerce infrastructure of our company, the persons and organizations related to the services provided such as suppliers, cargo companies, program partner organizations that we cooperate with to carry out our activities and/or in the capacity of Data Processor, domestic / international organizations and other They are 3rd persons.

Your personal data is collected in audio, electronic or written form through websites, mobile applications of websites, social media accounts, cookies, call center, notifications from administrative and judicial authorities and other communication channels.

III. PRINCIPLES ON THE PURPOSE OF USING PERSONAL DATA AND THEIR SHARING

Pursuant to Article 5 of the KVKK;
Personal data cannot be processed without the explicit consent of the person concerned. However, in the presence of one of the following conditions, it is possible to process personal data without seeking the explicit consent of the data subject:
  • Explicitly stipulated in laws.
  • It is compulsory for the protection of the life or physical integrity of the person or another person, who is unable to express his consent due to actual impossibility or whose consent is not legally recognized.

It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract.
It is mandatory for the data controller to fulfill its legal obligation.
Being made public by the person concerned.
Data processing is mandatory for the establishment, exercise or protection of a right.
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Again, in accordance with Article 6 of the KVKK, the race, ethnic origin, political thought, philosophical belief, religion, sect or other beliefs, disguise and dress, association, foundation or union membership, health, sexual life, criminal conviction and security measures Related data, biometric and genetic data are special personal data. It is prohibited to process sensitive personal data without the explicit consent of the person concerned. However, personal data other than health and sexual life listed in the first paragraph of the Law may be processed without seeking the explicit consent of the person concerned, in cases stipulated by the laws. In this context, our Company may transfer your personal data within the framework of the conditions numbered in Articles 5 and 6 of the KVKK.

Our company, as a data controller, informs the data owners of the Clarification Text in line with Article 10 of the KVKK before collecting personal data from the data owners/users, within the scope of its responsibilities arising from KVKK. If any data processing process carried out by our company does not meet the conditions specified in the KVKK, explicit consent is obtained from the data owners and the transactions are carried out within the framework of explicit consent.

According to the principles of KVKK; providing content and services such as registration, transaction and customer support, detecting or preventing fraudulent transactions or suspected fraudulent transactions, illegal transactions, data security breaches, providing personalized and relevant advertising to our users, products, sites, applications, services and marketing It may be possible to share your personal data in order to guide the decisions to be made about the communications.

We may also share your personal data to comply with legal requirements, to fulfill our contract with users, to intervene with claims that any content violates the rights of others, or to protect anyone's rights or safety. Data may also be shared with law enforcement or official authorities or authorized third parties in response to an official request regarding criminal investigation or suspected illegal activities and other activities that may expose the company or users to legal liability.

In line with Article 9 of the KVKK, your personal data collected by any of the above-mentioned methods to be processed in Turkey or to be processed and stored outside of Turkey, provided that they remain within the scope of KVKK and in accordance with the purposes of the contract (accredited by the Personal Data Board and protected by the Personal Data Board). It can also be transferred to service intermediaries (to countries where there is sufficient protection in relation to this issue).

IV. PROTECTION OF PERSONAL DATA

Our company within the scope of KVKK;
  • To prevent the unlawful processing of personal data,
  • To prevent unlawful access to personal data,

In order to ensure the protection of personal data, it takes all necessary technical and administrative measures to ensure the appropriate level of security.

In order to ensure the security of personal data, our company takes reasonable technical and administrative measures to prevent unauthorized access risks, possible data loss, deliberate deletion or damage to data. In this context, software and hardware security measures are taken in accordance with the personal data processed, trainings and audits are carried out, and internal authorizations are made in accordance with the principles of KVKK.

In line with Article 4 of the KVKK, our Company has an obligation to keep your personal data accurate and up-to-date. In this context, in order for our Company to fulfill its obligations arising from the current legislation, our Customers are required to share accurate and up-to-date data or update it via the website / mobile application.

We will keep your personal data as long as it is necessary for and related to the activities of the Company, as long as required by our storage purpose and our obligations arising from the legislation. The retention period may vary depending on the time we need personal data in order to provide our services as a company, but this period is usually shorter if the personal data is personal data of a private nature. In addition, if you give your explicit consent to the storage of your personal data for a longer period of time, your data will be stored for that long. If we have a legal, contractual or similar obligation to keep your personal data, it is possible to keep your personal data for as long as necessary in order to comply with the law, assist investigations and perform other actions required by the legislation. In the event that the situations that require keeping your personal data disappear, your personal data will be securely destroyed or anonymized.

V. RIGHTS FROM THE LAW ON THE PROTECTION OF PERSONAL DATA

Users who are data owners in accordance with Article 11 of KVKK;
  • learning whether personal data about them is processed,
  • requesting information on personal data if it has been processed,
  • to learn the purpose of processing personal data and whether they are used in accordance with the purpose,
  • to know the third parties to whom personal data is transferred in the country or abroad,
  • to request correction of personal data in case of incomplete or incorrect processing and to notify the third parties to whom the personal data has been transferred,
  • Requesting the deletion or destruction of personal data in the event that the reasons requiring the processing of the data disappear, although it has been processed in accordance with the provisions of the KVKK and other relevant laws, and requesting the notification of the transaction made in this context to the third parties to whom the personal data has been transferred,
  • Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems and requesting the compensation of the damage in case his personal data is damaged due to unlawful processing
has rights.

When the user wants to use one or more of the rights written above, our company's Düzce 1.OSB İstiklal OSB 1 Mah. 4.Cad No:5/5/A Merkez / DÜZCE address in writing, as well as reach our registered e-mail address using secure electronic signature, mobile signature or through Customer Services.

Centre:
E-mail: info@engeenery.com
Phone: +90 216 250 32 88

Factory:
E-mail: info@engeenery.com
Phone: +90 380 514 68 28