confidentiality agreement
Protection of personal data is an important issue for turkishexportcenter.com.tr. As the data controller of turkishexportcenter.com.tr, it adopts the principles stipulated by the KVK Law in order to comply with the Law on the Protection of Personal Data No. 6698 (“KVK Law”). fulfills its obligations regarding informing the person and ensuring data security. The Privacy and Personal Data Protection Policy regulated in this context is made available to natural persons whose personal data are processed (“Relevant Person”).
1. Scope and Purpose of Privacy and Personal Data Protection Policy
This Privacy and Personal Data Protection Policy;
Personal data collection methods and legal reasons,
Which person groups' personal data are processed (Data Subject Person Group Categorization),
Which category of personal data is processed in relation to these groups of people (Data Categories) and sample data types,
In which business processes and for what purposes this personal data is used,
Technical and administrative measures taken to ensure the security of personal data,
To whom and for what purpose personal data can be transferred,
Personal data retention periods,
Profiling and Segmentation
What are the rights of the Related Persons on their personal data and how they can use these rights,
How Relevant Persons can change their positive or negative preferences in receiving electronic commercial messages,
Sharing personal data with official authorities
Cookie Usage and Management
explains.
a. Personal Data Collection Methods and Legal Reasons
turkishexportcenter.com.tr personal data is required to process the personal data of the parties to the contract, provided that it is clearly stipulated in the laws specified in Article 5 of the Personal Data Protection Law No. 6698, and is directly related to the establishment or performance of a contract. The fact that the data subject has been made public by himself. The data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. cookies, call center, notifications from administrative and judicial authorities and other communication channels are collected in audio, electronic or written form.
b. Data Subject Person Group Categorization
turkishexportcenter.com.tr categorizes the data subject groups, whose personal data are processed in the personal data processing processes and activities related to these processes, as follows. In addition, in accordance with the personal data processing conditions specified in Articles 5 and 6 of the KVK Law, and in line with the legal reasons specified in this Privacy/Personal Data Protection Policy, personal data of other individual groups (consultant, educator, blogger) can be processed.
c. Data Categories and Example Data Types
one.
a) Member Customer
Identity Information: Name, surname, date of birth, gender, T.R. identification number
Location Information: City of residence, district (delivery address of shopping made via turkishexportcenter.com.tr)
Contact Information: mobile phone, e-mail address, address, zip code, landline phone
Financial Information: Tax office, invoice information
Customer/Member Information: Membership information, membership ID number
Customer/Member Transaction Information: Purchased product/s, shopping amount, shopping date, call center call records, commercial communication permission, used campaigns/competitions, coupons used, order information
Risk Management Information: IP address
Transaction Security Information: Password, password information
Marketing Information: Cookie records, targeting information, reviews showing habits and likes
Audio Data: Call center call recordings
Legal Action and Compliance Information: The start and end time of the service provided, the type of service used, the amount of data transferred, the consent of the Relevant Person for commercial electronic messages in electronic environment, the membership agreement approved by him, the corporate membership agreement, the services offered by turkishexportcenter.com.tr other legal texts and contracts
Marketing Information: SMS, e-mail messages or calls made by the call center for marketing purposes sent based on the commercial electronic message permission given by the relevant person
Request/Complaint Management/Reputation Management Information: Records of the complaints and/or requests submitted by the person concerned via the website, mobile application, social media accounts or call center regarding the product or service purchased, and the transactions performed during the evaluation or management of these requests.
b) Guest Customer (users who shop on the site without being a member)
Identity Information: Name, surname, date of birth, gender, T.C. identification number
Location Information: City of residence, district (delivery address of shopping made via turkishexportcenter.com.tr)
Contact Information: mobile phone, e-mail address, address, zip code, landline phone
Financial Information: Tax office, invoice information
Guest Customer Transaction Information: Purchased product/s, shopping amount, shopping date, call center call records, commercial communication permission, used campaigns, order information
Risk Management Information: IP address
Transaction Security Information: Password, password information
Marketing Information: Cookie records, targeting information, reviews showing habits and likes
Audio Data: Call center call recordings
Legal Action and Compliance Information: The start and end time of the service provided, the type of service used, the amount of data transferred, the commercial electronic message permission given by the Relevant Person in the electronic environment, other legal texts and contracts that enable to benefit from the services offered by turkishexportcenter.com.tr
Marketing Information: SMS, e-mail messages or calls made by the call center for marketing purposes sent based on the commercial electronic message permission given by the relevant person
Request/Complaint Management/Reputation Management Information: Records of the complaints and/or requests submitted by the person concerned via the website, mobile application, social media accounts or call center regarding the product or service purchased, and the transactions performed during the evaluation or management of these requests.
2.Online Visitor
Transaction Security Information: Password, mobile phone, password information
Legal Transaction Information/Risk Management Information: IP address
Legal Action and Compliance Information: Start and end time of the service provided, type of service used, amount of data transferred.
3. The Person on whose Name the Purchased Product will be Delivered
Identity Information: Name, surname, date of birth, gender, T.R. identification number
Location Information: City of residence, district (delivery address of shopping made via turkishexportcenter.com.tr)
Contact Information: mobile phone, e-mail address, address, zip code, landline phone
Financial Information: Tax office, invoice information
4. Vendor/Supplier/Candidate Vendor/Vendor or Supplier Employee or Official
Identity Information: TR Identity Number, Name Surname
Contact Information: e-mail address, telephone, KEP address, address, mobile phone
Financial Information: Account No, Tax Office, Tax Identification Number, tax plate, IBAN
Legal Transaction and Compliance Information: Signature circular, activity certificate,
Special Qualified Personal Data/Legal Transaction Information: Signature
Visual Information: Photo
D. In Which Business Processes and For What Purposes Personal Data Are Used
one.
a) Member Customer Personal Data
Execution of membership transactions,
“turkishexportcenter.com.tr” e-commerce platforms (“platform”) operated by turkishexportcenter.com.tr; Improving the services offered on the website, developing new services and informing about it,
For the purpose of performing the Membership Agreement established with the Member Customer, for the Member Customers with commercial electronic message approval; Analyzing the preferences, tastes and needs of the Member Customer and providing special promotions, opportunities and benefits to the Member Customer,
Remarketing, targeting, profiling and analysis in line with the express consent of the Member Customer, and promotion and marketing of applications, goods/products and services in line with the Member Customer's preference and liking,
Resolving Member Customer problems and complaints,
Improving the Member Customer experience on both the platform and the mobile application,
Follow-up of accounting and purchasing transactions,
Legal processes and compliance with legislation,
Answering information requests from administrative and judicial authorities,
Ensuring information and transaction security and preventing malicious use
Making necessary arrangements in order to ensure that the processed data is up-to-date and correct.
b) Guest Customer (users who shop on the site without being a member) Personal Data
To be able to shop from the platforms as a “guest”,
Improving the services offered on the platforms, developing new services and informing about it,
In terms of Guest Customers with commercial electronic message approval; Analyzing the preferences, tastes and needs of the Guest Customer and providing special promotions, opportunities and benefits,
Remarketing, targeting, profiling and analysis in line with the express consent of the Guest Customer, and promotion and marketing of applications, goods/products and services in line with the Guest Customer's preference and taste,
Resolving guest customer problems and complaints,
Improving the Guest Customer experience on both the platform and the mobile application,
Follow-up of accounting and purchasing transactions,
Legal processes and compliance with legislation,
Answering information requests from administrative and judicial authorities,
Ensuring information and transaction security and preventing malicious use,
Ensuring that the processed data is up-to-date and correct
making the necessary arrangements for
Fulfillment of legal obligations
2.Online Visitor Personal Data
Processing of online visitor data within the scope of Law No. 5651,
Legal processes and compliance with legislation,
Answering information requests from administrative and judicial authorities,
Ensuring information and transaction security and preventing malicious use,
fulfillment of legal obligations
3. Personal Data of the Person to whom the Purchased Product will be Delivered
Execution of product delivery processes,
Follow-up of accounting and purchasing transactions,
Legal processes and compliance with legislation,
Answering information requests from administrative and judicial authorities,
Ensuring information and transaction security and preventing malicious use,
Making necessary arrangements in order to ensure that the processed data is up-to-date and correct,
Fulfillment of legal obligations
4. Personal Data of Seller/Supplier/Candidate Vendor/Vendor or Supplier Employee or Official
Execution of contract processes,
Follow-up of accounting and purchasing transactions,
Legal processes and compliance with legislation,
Answering information requests from administrative and judicial authorities,
Ensuring information and transaction security and preventing malicious use,
Making necessary arrangements in order to ensure that the processed data is up-to-date and correct,
Fulfillment of legal obligations
to. Technical and Administrative Measures Taken to Ensure the Security of Personal Data
turkishexportcenter.com.tr undertakes to take all necessary technical and administrative measures and to show due diligence to ensure the confidentiality, integrity and security of your personal data.
turkishexportcenter.com.tr takes the necessary measures to prevent unauthorized access, misuse, unlawful processing, disclosure, alteration or destruction of personal data. turkishexportcenter.com.tr uses generally accepted security technology standards such as firewalls and Secure Sockets Layer (SSL) encryption when processing personal data. In addition, when sending your personal data to turkishexportcenter.com.tr via the website, mobile application and mobile site, this data is transferred using SSL.
Regarding the prevention of unlawful access to personal data processed by turkishexportcenter.com.tr, the prevention of unlawful processing of this data and the protection of personal data:
All areas on the website or mobile application from which personal data are obtained are protected with SSL,
Creates and implements access authorization and control matrices for its employees so that personal data collected from the website or mobile application is not processed unlawfully,
In order to ensure that personal data is not accessed unlawfully; periodically performs penetration tests, tests the system's resistance to unauthorized access,
For all secondary data processing other than the primary processing purpose, it uses the Pseudonymization (aliased data) method. Pseudonymous uses encryption methods in the systems where this data is located in order to make it impossible to identify the person concerned, and applies a stricter access authorization and control policy to this data,
It ensures that personal data in paper media is kept in locked cabinets and only accessed by authorized persons.
Personal data processed through cookies belonging to third parties from which service is received, are deleted from the systems of third parties if the membership is terminated.
Despite turkishexportcenter.com.tr taking the necessary information security measures, in case personal data is damaged or accessed by unauthorized third parties as a result of attacks on the platforms operated by turkishexportcenter.com.tr or the turkishexportcenter.com.tr system, turkishexportcenter.com.tr does this. immediately notifies you and the Personal Data Protection Board of the situation and takes the necessary measures.
f. To Whom Personal Data Can Be Transferred And For What Purpose
turkishexportcenter.com.tr transfers personal data to third parties only for the purposes specified in this Privacy and Personal Data Protection Policy and in accordance with Articles 8 and 9 of the KVK Law. Member Customer/Guest Customer data processed in this context and the person to whom the purchased product will be delivered are shared with the seller and the cargo company, and these data can also be accessed by the call center when necessary. The information of the person on whose behalf an invoice will be issued is shared with the cargo company for the purpose of sending the invoice to the relevant person.
Mobile phone number and/or e-mail address of the Member Customer/Guest Customer; Based on the commercial electronic message approval, it is shared with the commercial electronic message tool service provider in order to promote, advertise, offer benefits and opportunities in line with shopping preferences, tastes and habits.
Website or mobile app
Operating preferences and browsing history are shared with our domestic/abroad business partners from whom cookie service is obtained, for the purpose of segmentation and communication with the Member Customer/Guest Customer in line with their tastes and preferences. Personal data transfers within this scope are carried out through the secure environment and channels provided by the relevant third party. Depending on the content and scope of the service received from third parties; In all cases where there is no need to transfer the personal data of the Member Customer/Guest Customer, the transfer is made using Pseudonymous data (pseudonymous data).
Member Customer/Guest Customer data are shared with companies that will conduct market research in order to increase customer satisfaction and loyalty.
Within the scope of reporting and statistical studies, the data of the Member Customer/Guest Customer is not shared with anyone.
In addition, your personal data will be shared with our business partners abroad for the purposes of providing business development services, providing statistical and technical services and conducting customer relations.
If the Member Customer/Guest Customer/Online Visitor reaches turkishexportcenter.com.tr via the corporate Whatsapp line, they will have sent their personal data abroad, since the Whatsapp platform is a service offered from abroad. If the Member Customer/Guest Customer/Online Visitor does not want to send their personal data abroad by using Whatsapp, they will be able to use other communication opportunities offered by turkishexportcenter.com.tr.
In addition to the technical measures to ensure their security, the personal data subject to domestic and international transfers we mentioned above; Considering that the other party of the legal relationship is a data controller or a data processor, it is also legally protected thanks to the provisions in line with the KVK Law included in our contracts.
While transferring personal information to countries other than Turkey during the sharing of information as stated above, it is ensured that the data is transferred in accordance with this policy and as permitted by the applicable law regarding data protection.