PROTECTION OF PERSONAL DATA IN ACCORDANCE WITH THE PERSONAL DATA PROTECTION LAW NO. 6698
INFORMATION TEXT
1. PURPOSE AND SCOPE
This information text has been prepared in accordance with the Law on the Protection of Personal Data No. 6698 dated 07.04.2016, in order to inform the members, as the data controller employer, about the processing, protection and sharing of the personal data of the members with third parties and institutions when necessary, after becoming a member of our website https://www.yesilpazar.com.tr/ .
2. PERSONAL DATA PROCESSED
Within the scope of this disclosure text, the following data of employees are processed.
|
Personal Data Category
|
Content of Personal Data
|
|
Identity Data
|
• Name-Surname,
• TR Identity Number,
|
|
Contact Data
|
• Phone Number,
• Full Address Information,
• Email Address.
|
|
Financial Data
|
• Bank Account Information,
• Billing Information
(if a purchase is made)
|
3. CONDITIONS FOR PROCESSING PERSONAL DATA
Members' personal data is processed by our company without the express consent of the members if one of the conditions set forth below, as stipulated in the relevant law, is present. Besides express consent, the basis for personal data processing may be only one of the conditions listed below, or multiple conditions may be the basis for the same personal data processing activity.
· Clearly Provided in Laws
In case it is necessary for a person who is unable to express his consent due to a physical impossibility or whose consent is not recognized as legally valid to protect his own life or the bodily integrity of another person.
Direct Interest in the Establishment or Execution of the Contract
Fulfillment of the Company's Legal Obligations
· Making Members' Personal Data Public
Data Processing is Necessary to Establish or Protect a Right
Data Processing is Necessary for the Legitimate Interest of Our Company
In these cases, the employee's explicit consent will be required for the processing of personal data. In other cases, the employee's explicit consent is required for the processing of personal data.
4. COLLECTION AND PROCESSING METHODS OF MEMBERS' PERSONAL DATA AND LEGAL REASONS
When you contact our Company, your personal data is collected and processed electronically and/or physically by our Company's Management, through printed and online forms, telephone, fax, email, cargo, etc. Furthermore, your personal data is processed within the framework of the provisions set forth in Articles 5 and 6 of the Law and, if applicable, based on the legal basis of explicit consent.
5. PURPOSES AND LEGAL REASONS FOR PROCESSING PERSONAL DATA
Personal data of members;
• Yeşilpazar processes the personal data of its members and shares them with the relevant buyer group in order to carry out its commercial activities, to fulfill the orders of those who shop on the Yeşilpazar website, to execute the sales contract, to ensure the rights and obligations arising from the sales contract, to ensure the fulfillment of the services offered to the members on the website, to make suggestions to the members on the website according to their personal habits when they enter the website, to create designs on the page specific to the member.
• Yeşilpazar stores visitor usage information to increase website utilization, ensure the security of the services offered through the website, and fulfill its obligations under Law No. 5651. Personal data from website visitors is used to determine Yeşilpazar's marketing strategies and develop recommendations based on member habits. Yeşilpazar's cookie policy also provides further explanations for this purpose. Site visitors may delete cookies at any time using the methods outlined in the cookie policy.
• Yeşilpazar analyzes data subjects' personal data and shopping habits to create personalized campaigns on Yeşilpazar.com, tailoring campaign content to these individuals. This activity is carried out with the data subject's explicit consent within the scope of their Yeşilpazar Card membership.
• If the data subject gives permission for electronic commercial communication, Yeşilpazar sends the relevant campaign information to the preferred contact address for marketing purposes.
• Carrying out storage and archive activities
are processed, protected and shared with third parties and institutions when necessary.
6. PROCESSING OF SPECIAL NATURE PERSONAL DATA
Sensitive personal data under the law is given special consideration due to the risk of victimization or discrimination if processed unlawfully. This "special" personal data relates to health, sexual life, criminal convictions, and security measures. Sensitive data is not processed within the company.
SHARING PERSONAL DATA WITH THIRD PARTIES
Personal data of members may be transferred to our partner companies, suppliers, shareholders, legally authorized public institutions and organizations and domestic private law real and legal persons with whom we do business, in line with the achievement of the purposes in accordance with the personal data processing conditions specified in Articles 8 and 9 of the Law.
In this context, personal data of members;
• Our company's suppliers residing in the country, legally authorized public institutions and organizations, and private law real and legal persons with whom we do business.
• Data processed into the accounting program used for the purpose of carrying out payroll and accounting transactions is sent to the relevant accounting program software company.
• With lawyers to exercise the right of defense and with the relevant institutions for the purpose of fulfilling legal requests such as court decisions or requests for evidence, provided that they are in accordance with the law and procedure, and with the consultant law firm and enforcement offices for the purpose of responding to letters received at the workplace within the scope of the Execution and Bankruptcy Law.
• In order to fulfill its obligations, it cooperates with the State Institutions (Revenue Administration, Tax Offices), especially with the Ministry of Labor and Social Security and the Ministry of Finance.
• With banks or other financial institutions within the Turkish Banks Association for the purpose of making payments.
• Institutions, organizations and companies with which we work or provide services under contract within the scope of temporary assignment, product delivery or service relationship (Cargo Companies)
7. STORAGE OF PERSONAL DATA
Our company retains personal data for the period necessary for the purpose for which it is processed and for the minimum period stipulated in applicable legislation. If applicable legislation specifies a retention period for personal data, we comply with this period. If no legal period exists, personal data is retained for the period necessary for the purpose for which it is processed.
8. PROCEDURES FOR DELETION, DESTRUCTION AND ANONYMIZATION OF PERSONAL DATA
Personal data processed by the Company in accordance with the relevant Laws and Regulations, particularly the Constitution of the Republic of Turkey, are deleted, destroyed or anonymized in accordance with the provision of Article 7 of the Personal Data Protection Law, if the reasons requiring processing are eliminated, personal data will be deleted, destroyed or anonymized by the decision taken by the Company or upon the request of the relevant person.
During the deletion and destruction of personal data by the Company, personal data is destroyed physically, deleted from software using secure methods, and, if necessary, safely deleted and destroyed by experts in a way that makes it impossible to recover.
9. MEMBERS' RIGHTS AND EXERCISE OF THESE RIGHTS
Within the scope of Article 11 of the Personal Data Protection Law, employees have the following rights, provided that they prove their identity.
a. To learn whether your personal data is being processed,
b. To request information about the processing of personal data,
c. To learn the purpose of processing personal data and whether it is used in accordance with its purpose,
d. To know the third parties to whom personal data is transferred, either domestically or abroad,
e. If your personal data has been processed incompletely or incorrectly, to request correction of it, or to request its deletion or destruction within the framework of the conditions stipulated in Article 7 of the KVKK,
f. To request notification of the transactions made pursuant to clauses (d) and (e) above to third parties to whom personal data has been transferred,
g. To object to any adverse consequences arising from the analysis of your personal data exclusively by automated systems,
h. In case you suffer damages due to the unlawful processing of your personal data, you have the right to demand compensation for the damages.
In accordance with the first paragraph of Article 13 of the Personal Data Protection Law, you can personally deliver your petition, send it by post or send it by e-mail, along with documents proving your identity (a photocopy of your identity card), and include the necessary information proving your identity for your rights specified above, as well as your explanations regarding the right you wish to exercise among those specified in Article 11 of the Personal Data Protection Law.
* Personal data rights may only be exercised regarding personal data belonging to individuals. Requests for data belonging to individuals other than the person sending the email and attaching a photocopy of their ID will not be considered. Forms without a photocopy of their ID will not be considered.
|
APPLICATION METHOD
|
APPLICATION ADDRESS
|
EXPLANATION
|
|
Personally
|
MACUN MAH. 190. STREET GIMAT 13. BLOCK NO 345 Y.NEIGHBORHOOD ANKARA
|
The applicant can apply in person by coming to the application address below with a document proving his/her identity.
|
|
By Notification Through Notary
|
The notification envelope must include the phrase "Request for Information within the Scope of the Personal Data Protection Law".
|
|
By registered letter with return receipt
|
Documents confirming your identity must be attached, and the notification envelope must include the phrase "Request for Information within the Scope of the Personal Data Protection Law."
|
|
via e-mail
|
satis@yesilpazar.com.tr
|
The applicant must include the phrase "Personal Data Protection Law Information Request" in the subject section of the e-mail.
|
Your requests in your application will be resolved free of charge as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request, and you will be notified of the outcome in writing or electronically. If the application or request is deemed justified, the Company will act promptly. If the application or request is rejected, the relevant person will be notified in writing or electronically, as stated in the application and request petition, with the reason for rejection. If the Company rejects the application or request, finds the response inadequate, or fails to provide a timely response, the relevant person has the right to file a complaint with the Personal Data Protection Board within 30 (thirty) days from the date they learn of the response to the application or request, and in any case, within 60 (sixty) days from the date of application.
