Protection of Personal Data

Sanal Magaza Computer Services and Trade. Inc. (hereinafter referred to as Sanal Mağazacılık A.Ş.) of my personal information; Pursuant to the conditions set forth in the “Personal Data Protection Law Disclosure Statement and Privacy Policy”, which is an integral part of this consent form and prepared in accordance with the Law on the Protection of Personal Data (KVKK) of 6698, limited to the purpose and scope of benefiting from the services provided by this online platform to third parties and/or Sanal Mağazacılık A.Ş., by taking all security measures, when the normal flow of business requires it and its domestic and foreign subsidiaries, other institutions and organizations and/or with our business partners and/or Sanal Mağazacılık A.Ş.,I accept and declare that i expressly give my consent to the transfer of the work to the servers of the company or group companies abroad when necessary.



In this lighting text;

Personal Data: Any information relating to an identified or identifiable natural person,

Law on the Protection of Personal Data (“KVKK”): The Law on the Protection of Personal Data No. 6698, which was published in the Official Gazette on April 7, 2016,

Data Controller: Refers to the natural or legal person who determines the purposes and means of processing Personal Data and is responsible for the establishment and management of the data recording system.

Sanal Mğazacılık A.Ş. as our company, our priority principles include the protection of fundamental rights and freedoms, the protection of privacy regarding private lives, the provision and protection of information security, and respect for ethical values. Accordingly, within the scope of fulfilling our disclosure obligation arising from Article 10 of the Personal Data Protection Law (“KVKK”), the explanations we have given below are presented for your information. Sanal Mağazacılık A.Ş., which has the title of "Data Controller" as defined in the KVKK, processes your personal data for the purposes described below and within the limits ordered by the legislation.

Purpose of Processing and Transferring Personal Data

Sanal Mağazacılık A.Ş. your personal data received and processed by KVKK will be processed within the conditions and purposes specified in the provisions of Articles 5 and 6 of the KVKK law text, in line with the purposes specified in the continuation of this text. Although it may vary depending on the activities and work flows of Sanal Mağazacılık A.Ş.; your personal data, Sanal Mağazacılık A.Ş. the realization of the commercial activities carried out by the Company and the management and execution of the related business processes, relations with business partners and / or suppliers, Sanal Mağazacılık A.Ş. 's web sites, customer management and follow-up of complaints, product surveys and follow-up of questions you send to Sanal Mağazacılık A.Ş., Sanal Mağazacılık A.Ş. Carrying out the necessary work by our business units to benefit you from the products and services offered by our company, planning and executing the sales, marketing and after-sales processes of the products and/or services, informing about the contents of the products and services in question, obtaining separate approval in accordance with the legal legislation. sending electronic messages, conducting competitions, events and other organizations, Sanal Mağazacılık A.Ş. and Sanal Mağazacılık A.Ş. Execution of legal and commercial relations with people who have business relations with the company and ensuring the security of these relations, Sanal Mağazacılık A.Ş. Administrative operations for communication, employee administration and management, ensuring the physical security and supervision of the locations of Sanal Mağazacılık A.Ş, planning logistics activities, conducting reputation research processes, complying with ethical values ​​and law, and conducting legal business and procedures, contracting Pursuing business processes and/or legal requests, planning and executing human Resources and personnel recruitment processes, monitoring and performing education and training activities, planning and/or executing occupational health and/or safety processes, conducting research and development activities, and Sanal Mağazacılık A.Ş. ensuring to benefit from incentives, planning and executing corporate communication and corporate governance activities, conducting information security management services, monitoring finance and/or accounting works, carrying out activities for the determination of the financial risks of the customers, determining and implementing the commercial and business strategies of Sanal Mağazacılık A. In order to ensure the fulfillment of obligations, personal data is collected and processed within and limited to the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK. Your personal data, to the extent required and limited for the fulfillment of the above-mentioned purposes and to ensure your data security, to reliable third parties and/or institutions and organizations and/or to our business partners and/or to our domestic and/or abroad Sanal Mağazacılık A.Ş. . company and all necessary measures, Sanal Mağazacılık A.Ş. may be transferred within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK. In addition, personal data may also be shared with public institutions and organizations that are authorized to request and receive such data as required by law.

Personal Data Collection Method and Legal Reason

Personal data, Sanal Mağazacılık A.Ş. By providing personal data owners with clear and comprehensible verbal, written and/or electronic information and by obtaining their explicit consent when necessary, verbally, in writing and/or electronically, in accordance with the law and the rules of honesty, in connection with and limited to the legitimate purposes clearly stated above, are collected, used, recorded, stored and processed within the framework of the principle of proportionality.

Sanal Mağazacılık A.Ş. of your personal data. We assure that it will not be processed, transferred or stored to third parties in the country or abroad, other than the purposes specified in this disclosure document.

Retention Period of Personal Data

If your personal data is kept within the storage periods specified in the relevant legal regulations, if no period has been determined in the relevant legal regulations, Sanal Mağazacılık A.Ş. It is stored for as long as required by the above-mentioned processing purposes and practices and practices of commercial life, and then deleted, destroyed or anonymized in accordance with KVKK.

The purpose of processing personal data has ended; if the storage periods determined by the relevant legislation and Sanal Mağazacılık A.Ş. have come to an end; Personal data can only be stored to provide evidence in possible legal disputes or to assert the right related to personal data or to establish a defense. Despite the expiry of the statute of limitations and the expiration of the right to assert the aforementioned right in the establishment of the terms herein, retention periods are determined based on the examples in the requests submitted to Sanal Mağazacılık A. In this case, the stored personal data is not accessed for any other purpose and access is provided only when it is necessary to use it in the relevant legal dispute. Here, too, personal data is deleted, destroyed or anonymized after the aforementioned period expires.

Security of Personal Data

Information Security Management System (ISO 27001 Standard and good practice booklet 27018) technical and administrative measures, Personal Data Protection Management System (Bureau Veritas - Data Protection Technical Standard, BS 10012 Data Protection Personal Information Management System Standard) requirements as well as the requirements of the guides on the Security of Personal Data published by the KVKK board are constantly operated and developed within the scope of continuous improvement.

Rights of Personal Data Owner

In accordance with Article 11 of the KVKK, everyone can apply to the data controller and;

a) Learning whether personal data is processed or not,

b) If personal data has been processed, requesting information about it,

c) Learning the purpose of processing personal data and whether they are used in accordance with its purpose,

ç) To know the third parties to whom personal data is transferred in the country or abroad,

d) Requesting correction of personal data in case of incomplete or incorrect processing,

e) Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7,

f) Requesting notification of the transactions made pursuant to subparagraphs (d) and (e) to third parties to whom personal data has been transferred,

g) Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,

ğ) In case of loss due to unlawful processing of personal data, it has the right to demand the compensation of the damage.

Application Methods Regarding the Rights of the Personal Data Owner

In accordance with paragraph 1 of Article 13 of the KVKK, your request regarding the exercise of your above-mentioned rights, based on the "Communiqué on the Procedures and Principles of Application to the Data Controller" published in the Official Gazette dated March 10, 2018 and numbered 30356, you can do so with the following methods and information.

Necessary information in the application content;

1. Name, Surname information of the applicant.

2. If the applicant is a citizen of the Republic of Turkey, T.R. ID number, if not, passport number along with nationality or identification number, if any.

3. The applicant's place of residence or workplace address for notification.

4. The applicant's e-mail address, telephone or fax.

5. Subject of the applicant's request.

6. Information and documents regarding the applicant's request about self demand

Application methods that the person concerned can use;

1.The applicant can personally fill out the company address* "Application Form" and deliver it to the advisory office with record with the note "Request for Information in Accordance with The Law on Protection of Personal Data"

2. The applicant may issue a notice to the company address* through a notary, but the notice envelope should contain the note "Request for Information in Accordance with The Law on Protection of Personal Data".

3. The applicant with the "Secure Electronic Signature" defined in the electronic signature law No. 5070 is personally Sanal Mğazacılık A.Ş.registered e-mail address can apply to the subject section with that note "Request for Information in Accordance with The Law on Protection of Personal Data".

* Company Address: Rüzgârlıbahçe Mah. Bozkurt Sok. No:3 Acarlar Business Center Block F K:8 Beykoz / Istanbul / TURKEY

You can reach our application form regarding your above-mentioned rights here.