Personal Data Policy

General information about the Law on Personal Data
Law No. 6698 on Protection of Personal Data (hereinafter shall be referred to as LPPD) was accepted on 24 March 2016 and published in the Official Gazette No. 29677 on April 7, 2016. Some part of the LPPD entered into force on the date of its publication and some part of it entered into force on October 7, 2016.
Informing as a data controller
In accordance with LPPD numbered 6698 and with the title of Data Controller, your personal data, as explained herein, will be recorded, stored, updated, disclosed / transferred to third parties, if permitted by the legislation, classified and processed in the methods listed in the LPPD.
How your personal data can be processed
Pursuant to the LPPD no 6698, your personal data that you shared with our company can be obtained, recorded, stored, changed, rearranged, briefly it can be processed by us with all operations to which the data are subject, with completely or partially automatic means or non-automatic means provided that it is part of any data recording system. Within the scope of LPPD, any transaction performed on data is considered as "processing of personal data".
Purposes and legal reasons for processing your personal data
 The personal data you share will be processed in compliance with LPPD no 6698 and secondary regulations in order to
       1- To be able to fulfill the requirements of the services we provide to our customers in accordance with the requirements of the contract and technology, and to improve our products and services;

       2- to store the identity, address and other necessary information in order to determine the identity of data subject within the scope of Legislation on Service Providers and Intermediary Service Providers in Electronic Commerce which was prepared based on the Law on Regulation of Electronic Commerce No 6563, Law On Protection of Consumers No 6502 and which was published on Official Gazette dated 26.08.2015 and numbered 29457, Distance Contracts Legislation published on Official Gazette dated 27.11.2014 and numbered 29188 and other related legislation.

       3- To arrange all the records and documents that will be the basis of payment systems, electronic contracts or paper transaction which are obligatory in the field of Banking and Electronic Payment; in order to comply with the information storage, reporting and informing obligations stipulated by the legislation and all the relevant authorities;

       4- In order to provide information to public prosecutors, courts and related public officials upon request and as required by the legislations, on public security issues and legal disputes;

Informing about third parties or organizations to which your personal data can be transferred

For the purposes stated above; persons/organizations to which your personal data you share with our company can be transferred; will be persons and institutions related with the services that are rendered by Ekstra Yazılım who prepared the e-commerce infrastructure of our Company, suppliers, cargo companies, program partner companies from which we receive services and make cooperation in order to perform our activities and/or with the title of Data Processor, domestic/foreign Institutions and other 3rd parties.

How your personal data is collected
 Your personal data can be processed and stored from
       1- as information such as name, surname, T.R. Identity number, address, phone, work or private e-mail address through forms in website and mobile applications of our company; as data that contains the preferences made in webpages you log in by using username and password, IP logs of realized transactions, cookie data collected by browser and surfing period and details, location data;

       2- From verbal, written or electronic environment through our channels such as our sales and marketing department employees, branches, suppliers, other sales channels, forms on paper, business cards, digital marketing and call center;

       3- Taken from individuals who share their personal data by giving business cards, resumes (cv), offers and through various methods with the purpose of establishing commercial relationship with our company, making job application, giving offers, in physical or virtual environment, face to face or remotely, from verbal or written or electronic environment;

       4- Further, data obtained from websites, blogs, competitions, surveys, games, campaigns and (micro) websites used for similar purposes and social media through different channels, e-bulletin reading or clicking actions, data presented by public databases, profiles and data open to sharing on social media platforms.

Your personal data obtained before the LPPD entered into force
 Your personal data obtained in accordance with the law in terms of membership, electronic message permission, product/service purchase and other means before the effective date of LPPD is also processed and stored in accordance with the terms and conditions set forth in this document.
Transfer of your personal data abroad
Your personal data that is obtained through on of the above mentioned methods can be transferred to intermediary service provides located abroad (to countries accredited by Personal Data Council and that have enough protection on personal data protection) by being processed in Turkey or to be processed and maintained outside of Turkey provided that it is within the scope of LPPD and in compliance with contractual purposes.
Storage and protection of personal data
Your personal data will be kept confidential in the database and systems of our company in accordance with Article 12 of the LPPD; they will not be shared with third parties in any way other than legal obligations and regulations specified in this document. Our company is obligated to take software measures and physical safety measures in order to prevent the illegal processing of personal data, to prevent access by unauthorized individuals, to manage access in systems and databases where your personal data is stored in compliance with 12th Article of LPPD. If it is learned that personal data is obtained by others illegally, the situation will be immediately reported to the Personal Data Protection Board in accordance with the legal regulation and in writing.
Keeping personal data up to date and accurate
In accordance with 4th Article of the LPPD, our company is obligated to keep your personal data accurate and up to date. In this context, in order for our company to fulfill its obligations arising from the current legislation, our customers must share their correct and up-to-date data or update them via the website/mobile application.
Rights of personal data subject in accordance with LPPD no. 6698
11th Article of the LPPD no. 6698 entered into force on October 07, 2016, and in accordance with this relevant article, the rights of the Personal Data Subject after this date are as follows: Personal Data Subject, by applying to our company (data controller), is entitled to;

  1.       To learn whether the personal data is processed,
          2. To request information if the personal data has been processed,
           3. To learn the purpose of processing personal data and whether they are used appropriately for their purpose,
           4. To know the third parties to whom personal data are transferred in homeland or abroad,
           5. To request correction of personal data in case of incomplete or incorrect processing,
           6. To request the erasure or destruction of personal data within the framework of the conditions stipulated in 7th Article of the LPPD,
           7. In case of correction, erasure or destruction of personal data, to request that these transactions be notified to third parties to whom personal data are transferred,
           8. To object to the occurrence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,
           9. To demand the compensation of the damage in case of damages due to the processing of personal data illegally.

……………. which is located in the address of……………………… is the Data Controller within the scope of LPPD. The Data Controller’s Representative to be appointed by our Company will be announced in the Data Controller Registry and the website address where this document is located once the legal infrastructure is established. Personal Data Subjects may direct their questions, opinions or requests to any of the following communication channels:


Phone: +90 212 689 77 90