Privacy policy

Personal Data Protection

yerlicanta.com

Personal Data Policy

General information about the Personal Data Protection Law

Personal Data Protection Law No. 6698 (hereinafter referred to as “KVKK”) was adopted on 24 March 2016 and published in the Official Gazette No. 29677 dated 7 April 2016. Some provisions of the KVKK entered into force on the date of publication, while others entered into force on 7 October 2016.

Information provided in our capacity as data controller

Under the KVKK and in our capacity as data controller, your personal data may be recorded, stored, updated, disclosed or transferred to third parties where permitted by law, classified, and otherwise processed in the ways specified in the KVKK, within the framework described on this page.

How your personal data may be processed

Under the KVKK, the personal data you share with our Company may be processed wholly or partly by automated means, or by non-automated means provided that the processing forms part of a data recording system. Processing includes collecting, recording, storing, modifying, reorganizing, and any other operation performed on personal data. Any operation performed on personal data is considered “processing of personal data” under the KVKK.

Purposes and legal grounds for processing your personal data

The personal data you share will be processed in accordance with the KVKK and the relevant secondary legislation for the following purposes:

• To fulfil the requirements of the services we provide to our customers in accordance with contractual and technological requirements, and to improve our products and services.

• To record identity, address, and other necessary information to identify the parties to transactions under Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on Consumer Protection, the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette No. 29457 dated 26 August 2015, the Regulation on Distance Contracts published in the Official Gazette No. 29188 dated 27 November 2014, and other relevant legislation.

• To prepare the records and documents required for payment systems in banking and electronic payments, electronic contracts, or paper-based transactions, and to comply with information retention, reporting, and notification obligations imposed by legislation and other authorities.

• To provide information to prosecutors’ offices, courts, and relevant public officials upon request and as required by law in matters concerning public security and legal disputes.

Information about third parties or organizations to which your personal data may be transferred

For the purposes stated above, the persons or organizations to which the personal data you share with our Company may be transferred include Shopify, which provides our Company’s e-commerce infrastructure; suppliers; shipping companies; other persons and organizations involved in the services provided; partner organizations with which we cooperate or from which we obtain services to conduct our activities and/or which act as data processors; domestic and international organizations; and other third parties.

How your personal data is collected

Your personal data may be collected and processed through the following channels:

• Forms on our Company’s website and mobile applications, including information such as your first name, surname, Turkish identity number, address, telephone number, and business or personal email address; preferences on pages accessed using a username and password; IP records of transactions; cookie data collected by your browser; browsing duration and details; and location data.

• Our sales and marketing department employees, branches, suppliers, other sales channels, paper forms, business cards, digital marketing, and call centres, through verbal, written, or electronic means.

• Individuals who share their personal data for purposes such as establishing a commercial relationship with our Company, applying for a job, or submitting a proposal, through business cards, CVs, proposals, and other means, in physical or virtual environments, in person or remotely, and verbally, in writing, or electronically.

• Data obtained indirectly through various channels, including websites, blogs, micro-websites used for competitions, surveys, games, campaigns, and similar purposes; social media; newsletter reading or clicking activity; publicly accessible databases; and publicly shared profiles and data on social media platforms.

Personal data obtained before the KVKK entered into force

Personal data lawfully obtained before 7 April 2016, the date on which the KVKK entered into force, through membership registration, permission to receive electronic communications, purchases of products or services, or other means, is also processed and retained in accordance with the terms and conditions set out in this document.

Transfer of your personal data abroad

Personal data collected through any of the methods listed above may also be transferred to service intermediaries located abroad for processing in Türkiye, or for processing and storage outside Türkiye, provided that such transfers remain subject to the KVKK and are consistent with the purposes of the contract. Such service intermediaries are located in countries accredited by the Personal Data Protection Board as providing adequate protection for personal data.

Storage and protection of personal data

Your personal data will be kept confidential in our Company’s databases and systems in accordance with Article 12 of the KVKK. It will not be shared with third parties except where required by law or as provided in this document.

Under Article 12 of the KVKK, our Company is required to prevent unlawful processing of personal data, prevent unauthorized access to the systems and databases containing your personal data, and implement software measures such as access management, together with physical security measures.

If it becomes known that personal data has been unlawfully obtained by others, the Personal Data Protection Board will immediately be notified in writing in accordance with the applicable legal requirements.

Keeping personal data accurate and up to date

Under Article 4 of the KVKK, our Company is required to keep your personal data accurate and up to date. To enable our Company to fulfil its obligations under applicable legislation, our customers must provide accurate and current information or update it through the website or mobile application.

Rights of the data subject under the KVKK

Article 11 of the KVKK entered into force on 7 October 2016. Under this article, data subjects have the following rights from that date onward.

By applying to our Company as data controller, you have the right to:

1. Learn whether your personal data is being processed.
2. Request information about the processing of your personal data, if it has been processed.
3. Learn the purpose of processing your personal data and whether it is being used in accordance with that purpose.
4. Know the third parties to which your personal data has been transferred within Türkiye or abroad.
5. Request correction of your personal data if it has been processed incompletely or inaccurately.
6. Request deletion or destruction of your personal data under the conditions specified in Article 7 of the KVKK.
7. Request that third parties to which your personal data has been transferred be notified of its correction, deletion, or destruction.
8. Object to a result that is detrimental to you arising from the analysis of your personal data exclusively through automated systems.
9. Request compensation for damages suffered as a result of unlawful processing of your personal data.

yerlicanta.com is the data controller under the KVKK. The Data Controller Representative to be appointed by our Company will be announced in the Data Controllers Registry and on the webpage containing this document once the legal framework is in place.

Data subjects may submit their questions, comments, or requests through either of the following contact channels:

Email: info@yerlicanta.com

Telephone: 0224 254 5 444