[Eysell Jewellery] Personal Data Policy General information about the Personal Data Law

Personal Data Protection Law No. 6698 (hereinafter referred to as the KVKK) was adopted on March 24, 2016, and published in the Official Gazette No. 29677 dated April 7, 2016. Some parts of the KVKK entered into force on the date of publication, while others entered into force on October 7, 2016.

Information as a Data Controller

In accordance with KVKK No. 6698 and as a Data Controller, your personal data will be recorded, stored, updated, disclosed/transferred to third parties where permitted by legislation, classified, and processed in the ways specified in the KVKK, within the framework described on this page.

How your data may be processed

In accordance with the Personal Data Protection Law No. 6698, the personal data you share with our company may be processed by us, in whole or in part, automatically, or non-automatically, provided that it is part of a data recording system, by obtaining, recording, storing, changing, and rearranging data. In short, any operation performed on data within the scope of the Personal Data Protection Law is considered "processing of personal data."

Purposes and legal reasons for processing your data

To fulfill the services we provide to our customers in accordance with the requirements of the contract and technology, and to improve our products and services;

To record the identity, address, and other necessary information to identify the transaction owner, as required by Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on Consumer Protection, the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in Official Gazette No. 29457 dated August 26, 2015, which was prepared based on these regulations, the Distance Contracts Regulation published in Official Gazette No. 29188 dated November 27, 2014, and other relevant legislation;

To prepare all records and documents that will support payment systems, electronic contracts, or paper transactions required in the field of banking and electronic payments; and to comply with information storage, reporting, and disclosure obligations stipulated by legislation and other authorities;

To provide information to prosecutors, courts and relevant public officials on matters related to public security and legal disputes, upon request and in accordance with the legislation;

Your personal data will be processed in accordance with the Personal Data Protection Law No. 6698 and relevant secondary regulations. Information about third parties or organizations to whom your personal data may be transferred: For the purposes specified above, the persons/organizations to whom your personal data shared with our Company may be transferred include IdeaSoft Yazılım San. ve Tic. A.Ş., which provides our Company's e-commerce infrastructure, as well as persons and organizations related to the services provided, such as suppliers and cargo companies, program partner organizations we collaborate with from whom we receive services to carry out our activities and/or as Data Processors, domestic/international organizations, and other third parties.

How your data is collected

Our company collects information such as name, surname, Turkish ID number, address, telephone, work or private e-mail address through the forms on our website and mobile applications; preferences on the pages accessed using the user name and password, IP records of the transactions performed, cookie data collected by the browser and data including browsing time and details, and location data;

Verbally, in writing, or electronically through our sales and marketing department employees, branches, suppliers, other sales channels, paper forms, business cards, digital marketing, and call centers;

Personal data received from individuals who share their personal data with us through business cards, resumes (CVs), offers, or other means for purposes such as establishing a commercial relationship with our company, applying for a job, or submitting an offer; whether physically or virtually, face-to-face or remotely, verbally, in writing, or electronically;

In addition, data obtained indirectly from different channels, from (micro) websites and social media used for websites, blogs, competitions, surveys, games, campaigns and similar purposes, e-bulletin reading or clicking movements, data provided by public databases, profiles and data open to sharing on social media platforms can be processed and collected.

Your personal data obtained lawfully through membership, electronic message consent, product/service purchase and other means before the effective date of the KVKK, April 7, 2016, is also processed and stored in accordance with the terms and conditions set out in this document.

Transfer of your personal data abroad

Your personal data collected through any of the methods listed above, whether for processing in Turkey or for processing and storage outside Turkey, may also be transferred to service intermediaries located abroad (in countries accredited by the Personal Data Board and with adequate protection for the protection of personal data), provided that it remains within the scope of the Personal Data Protection Law and in accordance with the contractual purposes.

Storage and Protection of Personal Data

Our company's databases and systems will be kept confidential in accordance with Article 12 of the Personal Data Protection Law (KVKK) and will not be shared with third parties under any circumstances other than in accordance with legal obligations and the regulations specified in this document. Our company is obligated to protect the systems and databases that house your personal data, in accordance with Article 12 of the Personal Data Protection Law, from unlawful processing of personal data, to prevent unauthorized access, and to implement software and physical security measures such as access management. If we learn that personal data has been obtained by others through illegal means, we must immediately report the situation to the Personal Data Protection Board in writing, in accordance with legal regulations.

Keeping Personal Data Up-to-Date and Accurate

According to Article 4 of the Personal Data Protection Law, our Company is obligated to keep your personal data accurate and up-to-date. In this context, in order for our Company to fulfill its obligations arising from applicable legislation, our Customers are required to share accurate and up-to-date data or update it through our website or mobile application.

Personal Data Subject's Rights Pursuant to KVKK No. 6698

Article 11 of KVKK No. 6698 entered into force on October 7, 2016. According to this article, the Personal Data Subject's rights after this date are as follows: The Personal Data Subject may apply to our Company (the data controller) and request the following information regarding themselves:

To learn whether personal data has been processed,

To request information if personal data has been processed,

To learn the purpose of processing personal data and whether it is being used in accordance with its intended purpose,

To know the third parties to whom personal data has been transferred, both domestically and internationally,

To request correction of personal data if it has been processed incompletely or incorrectly,

To request the deletion or destruction of personal data under the conditions stipulated in Article 7 of the Personal Data Protection Law,

To request notification of such corrections, deletion, or destruction to third parties to whom personal data has been transferred,

To object to the analysis of processed data exclusively through automated systems, leading to a detrimental outcome,

To request compensation for damages suffered due to unlawful processing of personal data.

[Company full title], registered in the [..........................] registry number of the [.................................] Chamber of Commerce, with the [.............................] MERSİS number, located at [.................................................................], is the Data Controller within the scope of the KVKK. The Data Controller Representative to be appointed by our company will be announced in the Data Controllers Registry and on the website where this document is located once the legal infrastructure is established. Personal Data Owners may direct their questions, opinions, or requests to any of the following communication channels:

E-mail: [.........................]

 

Telephone: [.........................]

 

Fax: [.................................]