Information on the Protection of Personal Data
With this Clarification Text, it is aimed to inform you that your personal data provided to Arzu Dalmış via the “Website” may be processed by the Website in accordance with the Law No. 6698 on the Protection of Personal Data (“Law”) and the Communiqué on the Principles and Procedures to be Followed in Fulfillment of the Obligation to Inform (“Communiqué”), as specified in this information text and limited to the purposes stated herein, and may be transferred to the persons listed below, both domestically and abroad.
As the data controller, Arzu Dalmış, whose detailed corporate information is provided below, within the scope of the KVKK (Law No. 6698), will record, store, update, disclose/transfer to third parties where permitted by legislation, classify, and process your personal data in the ways listed in the KVKK, within the framework explained on this page.
How your personal data may be processed: In accordance with KVKK No. 6698, the personal data you share with Arzu Dalmış may be obtained, recorded, stored, modified, reorganized, and processed, in whole or in part, automatically or by non-automatic means provided that it is part of any data recording system. Any operation performed on data within the scope of KVKK is considered as “processing of personal data.”
Purposes and legal grounds for processing your personal data: The personal data you share may be processed in compliance with KVKK No. 6698 and related secondary regulations, in order to fulfill the requirements of the services we provide to our customers in accordance with contractual and technological requirements, to improve our products and services, to identify the owner of the transaction by recording identity, address, and other necessary information in accordance with the Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on Consumer Protection, the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette dated 26.08.2015 and numbered 29457, the Regulation on Distance Contracts published in the Official Gazette dated 27.11.2014 and numbered 29188, and other relevant legislation; to organize all records and documents that will serve as a basis for transactions in electronic or paper form; to comply with information retention, reporting, and information obligations required by legislation and authorities; and to provide information to public prosecutors, courts, and relevant public officials upon request in matters related to public security and legal disputes.
Method of collecting personal data: The data provided by customers who transact on the website is processed by Arzu Dalmış in accordance with their consent and legal provisions. Data such as user preferences on pages accessed with username and password, IP records of transactions performed, cookie data collected by the browser, browsing duration and details, and location data; as well as data obtained verbally, in writing, or electronically through sales and marketing staff, agencies, dealers, paper forms, business cards, digital marketing, and call centers; and data obtained indirectly from different channels such as websites, campaign pages, micro-sites, social media, e-newsletter interactions, publicly available databases, and social media platforms (Facebook, Twitter, Google, Instagram, Snapchat, etc.) may be collected and processed.
Storage and protection of personal data: Your personal data will be stored confidentially in the databases and systems of Arzu Dalmış in accordance with Article 12 of KVKK and will not be shared with third parties except for legal obligations and the provisions stated in this document.
Arzu Dalmış is obliged to take necessary technical and administrative measures such as hashing, encryption, transaction logging, access management, and physical security measures to prevent unlawful processing of personal data and unauthorized access, and to ensure their protection in accordance with Article 12 of KVKK. If personal data is obtained unlawfully by others, the situation will be reported immediately and in writing to the Personal Data Protection Board in accordance with legal regulations.
Keeping personal data accurate and up to date: In accordance with Article 4 of KVKK, Arzu Dalmış is obliged to keep your personal data accurate and up to date. In this context, in order for Arzu Dalmış to fulfill its obligations arising from the applicable legislation, customers must provide accurate and up-to-date data or update it via the website/mobile application.
Rights of the personal data owner under KVKK No. 6698: Article 11 of KVKK, which entered into force on October 7, 2016, grants the personal data owner the following rights: to learn whether personal data is processed, to request information if personal data has been processed, to learn the purpose of processing and whether it is used in accordance with its purpose, to know the third parties to whom personal data is transferred domestically or abroad, to request correction if personal data is incomplete or incorrectly processed, to request deletion or destruction of personal data within the framework of Article 7 of KVKK, to request notification of these actions to third parties to whom the data has been transferred, to object to results arising against the person through analysis of processed data exclusively via automated systems, and to request compensation for damages in case of unlawful processing of personal data. The Data Controller Representative to be appointed by Arzu Dalmış will be announced in the Data Controllers Registry and on this website when the legal infrastructure is established.
Personal data owners may direct their questions, opinions, or requests through the following communication channel:
E-mail: [email protected]