PROTECTION OF PERSONAL DATA ACCORDING TO LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA
INFORMATION TEXT
1. PURPOSE AND SCOPE
This privacy notice has been prepared in accordance with the Law No. 6698 on the Protection of Personal Data dated 07.04.2016, to inform members, as the data controller employer, about the processing, protection, and, when necessary, sharing of their personal data with third parties and institutions after becoming a member of our website, https://www.yesilpazar.com.tr/ .
2. PERSONAL DATA PROCESSED
Within the scope of this privacy policy, the following employee data is processed.
|
Personal Data Category
|
Content of Personal Data
|
|
Identity Data
|
• First and Last Name,
• Turkish Republic Identity Number,
|
|
Communication Data
|
• Phone Number,
• Full Address Information,
• Email Address.
|
|
Financial Data
|
• Bank Account Information,
• Billing Information
(if the purchase is made)
|
3. CONDITIONS FOR PROCESSING PERSONAL DATA
Members' personal data is processed by our company without their explicit consent if one of the conditions stipulated in the relevant law and listed below exists. Apart from explicit consent, the basis for personal data processing may be only one of the conditions listed below, or multiple conditions may serve as the basis for the same personal data processing activity.
• Explicitly Provided for in the Laws
• In cases where a person is unable to express their consent due to factual impossibility or where their consent is not legally valid, and it is necessary for the protection of their own life or the life or physical integrity of another person.
• Directly related to the formation or performance of the contract.
• Fulfillment of the Company's Legal Obligations
• Members' Disclosure of Personal Data
• Data processing is necessary for the establishment or protection of a right.
• Data processing is necessary for the legitimate interests of our company.
In certain circumstances, personal data will be processed without explicit consent. In all other cases, the employee's explicit consent is required for processing personal data.
4. METHODS AND LEGAL GROUNDS FOR COLLECTING AND PROCESSING PERSONAL DATA BELONGING TO MEMBERS
Your personal data is collected and processed by our Company's Management through various electronic and/or physical means such as printed and online forms, telephone, fax, e-mail, and courier services when you contact our Company. Furthermore, your personal data is processed in accordance with the provisions of Articles 5 and 6 of the Law and, where applicable, based on the legal grounds of explicit consent.
5. PURPOSES AND LEGAL GROUNDS FOR PROCESSING PERSONAL DATA
Personal data of members;
• Yeşilpazar processes and shares members' personal data with the relevant buyer group for the following purposes: conducting commercial activities, fulfilling orders placed by those shopping on the Yeşilpazar website, executing sales contracts, securing rights and obligations arising from sales contracts, ensuring the provision of services offered to members on the site, making suggestions to members based on their personal habits when they log in to the site, and designing personalized pages for members.
• Yeşilpazar stores visitors' website usage information to increase website usage, ensure the security of services offered through the site, and fulfill its obligations under Law No. 5651. Personal data of website visitors is used by Yeşilpazar to determine marketing strategies and develop recommendations based on member habits. Further explanations regarding this are also included in Yeşilpazar's cookie policy. Website visitors can delete cookies at any time using the methods specified in the Cookie Policy.
• Yeşilpazar uses the personal data and shopping habits of data subjects to create personalized campaign content on Yesilpazar.com.tr. This activity is carried out with the explicit consent of the data subject within the scope of their Yeşilpazar Card membership.
• If the data subject grants permission for electronic commercial communication, Yeşilpazar will send the relevant campaign information to the preferred communication address for marketing purposes.
• Conducting storage and archiving activities
It is processed, protected, and shared with third parties and institutions when necessary for these purposes.
6. PROCESSING OF SPECIAL CATEGORY PERSONAL DATA
Personal data that is considered sensitive under the law is given special importance due to the risk of causing harm or discrimination to individuals if processed unlawfully. These "special categories" of personal data include data relating to health, sexual life, criminal convictions, and security measures. The company does not process any special categories of data.
SHARING PERSONAL DATA WITH THIRD PARTIES
Personal data of members may be transferred to our partner companies, suppliers, shareholders, legally authorized public institutions and organizations, and domestic private individuals and legal entities with whom we do business, in accordance with the personal data processing conditions specified in Articles 8 and 9 of the Law, in line with the achievement of the purposes.
In this context, the personal data of the members;
• Our company's domestic suppliers, legally authorized public institutions and organizations, and private individuals and legal entities with whom we do business.
• Data processed into the accounting program used for payroll and accounting operations is shared with the relevant accounting program software company.
• In order to exercise the right of defense, lawyers and relevant institutions are obligated to fulfill legal requests such as court orders or requests for evidence, provided they are in accordance with the law and procedure; and consulting law firms and enforcement offices are required to respond to correspondence received at the workplace under the Enforcement and Bankruptcy Law.
• In order to fulfill their obligations, cooperation is established with State Institutions, primarily the Ministry of Labor and Social Security and the Ministry of Finance, as well as the Revenue Administration and Tax Offices.
• For the purpose of making payments, with banks within the Turkish Banks Association or other financial institutions.
• Temporary assignments, product deliveries, or service relationships with institutions, organizations, and companies (Cargo Companies) with whom we have agreements or to whom we provide services.
7. STORAGE OF PERSONAL DATA
Our company retains personal data for as long as necessary for the purpose for which it was processed, and for the minimum period stipulated in the relevant legislation. If a retention period for personal data is specified in the relevant legislation, we comply with that period. If no legal period exists, personal data is retained for as long as necessary for the purpose for which it was processed.
8. PROCEDURES FOR DELETION, DESTRUCTION AND ANONYMIZATION OF PERSONAL DATA
Personal data processed by the company in accordance with the relevant laws and regulations, primarily the Constitution of the Republic of Turkey, shall be deleted, destroyed, or anonymized upon a decision by the company or upon the request of the data subject, in accordance with Article 7 of the Personal Data Protection Law, when the reasons requiring the processing of the personal data cease to exist.
During the process of deleting and destroying personal data, the company ensures that personal data is physically destroyed, securely deleted from software, and, if necessary, expertly erased in a way that makes it impossible to recover.
9. MEMBERS' RIGHTS AND THE EXERCISE OF THESE RIGHTS
In accordance with Article 11 of the Law on the Protection of Personal Data, employees have the following rights, provided they can prove their identity.
a. To find out whether your personal data is being processed,
b. Requesting information about the processing of personal data, if applicable.
c. To learn the purpose of processing your personal data and whether it is being used in accordance with that purpose.
d. Knowing the third parties to whom your personal data is transferred, domestically or internationally,
e. The right to request the correction of personal data if it has been processed incompletely or incorrectly, and to request its deletion or destruction within the framework of the conditions stipulated in Article 7 of the KVKK (Law on Protection of Personal Data).
f. Requesting that third parties to whom personal data has been transferred be notified of the actions taken in accordance with paragraphs (d) and (e) above.
g. You have the right to object to an outcome that is detrimental to you due to the analysis of your personal data exclusively by automated systems.
h. You have the right to claim compensation for damages if you suffer harm as a result of the unlawful processing of your personal data.
In accordance with Article 13, paragraph 1 of the Personal Data Protection Law (KVK Law), you can submit your request letter, containing the necessary information to identify your identity and your explanations regarding the right you wish to exercise as specified in Article 11 of the KVK Law, along with your identity documents (photocopy of your ID), in person, by mail, or by email.
* Rights regarding personal data can only be exercised in relation to data belonging to the individual themselves. Requests regarding data of individuals other than the person sending the email and attaching a photocopy of their ID will not be considered. Forms without an attached photocopy of an ID will not be considered.
|
APPLICATION METHOD
|
APPLICATION ADDRESS
|
EXPLANATION
|
|
Personally
|
MACUN MAH. 190.CADDE GİMAT 13.BLOK NO 345 Y.MAHALLE ANKARA
|
Applicants may submit their applications in person at the following address, presenting proof of identity.
|
|
Notification via a Notary Public
|
The notification envelope must contain the phrase "Information Request under the Law on the Protection of Personal Data".
|
|
By Registered Mail with Return Receipt
|
Identifying documents must be attached, and the notification envelope must state "Information Request under the Law on the Protection of Personal Data".
|
|
Via email
|
sales@yesilpazar.com.tr
|
The applicant must include the phrase "Information Request Regarding the Personal Data Protection Law" in the subject line of the email.
|
Your requests included in your application will be processed free of charge as soon as possible, and no later than 30 (thirty) days, depending on the nature of the request, and the result will be notified to you in writing or electronically. If the application and request are deemed justified by the company, the necessary action will be taken without delay. If the application and request are rejected, the reason for the rejection will be notified to the relevant person in writing or electronically, as stated in the application and request. In cases where the application and request are rejected by the company, the response is deemed insufficient, or no response is given within the specified time, the relevant person has the right to file a complaint with the Personal Data Protection Board within 30 (thirty) days from the date they learned of the response to their application and request, and in any case within 60 (sixty) days from the date of application.
