Qavruq Personal Data Policy

General information about the Personal Data Protection Law
The Personal Data Protection Law No. 6698 (hereinafter referred to as KVKK) was adopted on March 24, 2016 and published in the Official Gazette dated April 7, 2016 and numbered 29677. Some provisions of KVKK entered into force on the date of publication, while others entered into force on October 7, 2016.

Information as Data Controller
In accordance with KVKK No. 6698 and in the capacity of Data Controller, your personal data will be recorded, stored, updated, disclosed/transferred to third parties where permitted by legislation, classified and processed in the ways listed in KVKK, within the framework explained on this page.

How your personal data may be processed

In accordance with KVKK No. 6698, your personal data that you share with our Company may be processed by us, wholly or partially, automatically or non-automatically provided that it is part of any data recording system, by obtaining, recording, storing, changing, reorganizing, in short, being subject to any kind of operation performed on the data. Any operation performed on data within the scope of KVKK is considered as “processing of personal data”.

Purposes and legal reasons for processing your personal data

Your personal data that you share,

In order to fulfill the requirements of the services we provide to our customers in accordance with the requirements of the contract and technology and to improve our products and services;

In order to record identity, address and other necessary information to determine the information of the transaction owner within the scope of the Law No. 6563 on the Regulation of Electronic Commerce, the Law No. 6502 on the Protection of Consumers and the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette dated 26.08.2015 and numbered 29457, the Distance Contracts Regulation published in the Official Gazette dated 27.11.2014 and numbered 29188 and other relevant legislation;

In order to arrange all records and documents that will be the basis for processing in payment systems, electronic contracts or paper environment which are mandatory in the fields of Banking and Electronic Payments; to comply with the information storage, reporting and notification obligations stipulated by legislation and other authorities;

In order to be able to provide information to public prosecutors, courts and relevant public officials upon request and as required by legislation in matters related to public security and legal disputes; will be processed in accordance with KVKK No. 6698 and relevant secondary regulations.

Information about third persons or organizations to whom your personal data may be transferred

For the purposes stated above, the persons/organizations to whom your personal data shared with our Company may be transferred include; primarily Ikas, which provides our e-commerce infrastructure, as well as suppliers, cargo companies and other persons and organizations related to the services provided, program partner organizations from which services are received and with which we cooperate in order to carry out our activities and/or in the capacity of Data Processor, domestic/foreign organizations and other third parties.

Method of collecting your personal data
Your personal data,

Through the forms on our Company’s website and mobile applications, including information such as name, surname, Turkish ID number, address, phone number, business or personal e-mail address; preferences on pages accessed using username and password, IP records of transactions carried out, cookie data collected by the browser and data including browsing time and details, location data;

Through our sales and marketing department employees, our branches, our suppliers, other sales channels, forms on paper, business cards, digital marketing and call center channels, verbally, in writing or electronically;

From persons who share their personal data for purposes such as establishing a commercial relationship with our Company, applying for a job, submitting an offer, through business cards, resumes (CV), offers and other means, in a physical or virtual environment, face-to-face or remotely, verbally, in writing or electronically;

Additionally, data obtained indirectly through different channels, data obtained from websites, blogs, competitions, surveys, games, campaigns and similar (micro) websites used for such purposes and from social media, e-newsletter reading or click actions, data provided by publicly available databases, and profile and data shared publicly on social media platforms; may be processed and collected.

Your personal data obtained before KVKK entered into force

Your personal data obtained lawfully before April 7, 2016, the effective date of KVKK, through membership, electronic communication consent, purchase of products/services and other means, are also processed and stored in accordance with the terms and conditions set out in this document.

Transfer of your personal data abroad
Your personal data collected by any of the methods listed above may be transferred to service intermediaries located abroad (to countries accredited by the Personal Data Protection Board and where sufficient protection for personal data exists), provided that they remain within the scope of KVKK and in line with the purposes of the contract, in order to be processed or stored abroad.

Storage and protection of personal data
Your personal data will be stored confidentially in the databases and systems within our Company in accordance with Article 12 of KVKK and will not be shared with third parties in any way except for legal obligations and the regulations stated in this document. Our Company is obliged, in accordance with Article 12 of KVKK, to prevent unlawful processing of personal data, to prevent unauthorized access, and to take software measures such as access management and physical security measures to protect the systems and databases where your personal data are stored. In the event that personal data are obtained unlawfully by others, the situation will be reported immediately to the Personal Data Protection Board in writing and in accordance with legal regulations.

Keeping personal data accurate and up to date
In accordance with Article 4 of KVKK, our Company has an obligation to keep your personal data accurate and up to date. In this context, in order for our Company to fulfill its obligations arising from the current legislation, our Customers must share accurate and up-to-date data or update them via the website/mobile application.

Rights of the personal data owner under KVKK No. 6698
Article 11 of KVKK No. 6698 entered into force on October 7, 2016, and pursuant to the relevant article, the rights of the Personal Data Owner after this date are as follows: The Personal Data Owner, by applying to our Company (data controller), has the right to;

Learn whether personal data are processed,
Request information if personal data have been processed,
Learn the purpose of processing personal data and whether they are used in accordance with their purpose,
Know the third parties to whom personal data are transferred domestically or abroad,
Request correction of personal data if they are incomplete or incorrectly processed,
Request deletion or destruction of personal data within the framework of the conditions set forth in Article 7 of KVKK,

Request that the transactions made regarding correction, deletion or destruction of personal data be notified to third parties to whom personal data have been transferred,
Object to the emergence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,

Request compensation for damages in case of damage due to unlawful processing of personal data,

has the rights.

[................] registered with the Chamber of Commerce under registry number [..........................], having MERSİS number [.............................], located at [.......................................................................] address, [Full Company Title] is the Data Controller within the scope of KVKK. The Data Controller Representative to be appointed by our Company will be announced in the Data Controllers Registry and on the website where this document is located when the legal infrastructure is established. Personal Data Owners may direct their questions, opinions or requests through any of the communication channels below:

E-mail: [.........................]
Phone: [.........................]
Fax: [.............................]