Personal Data Protection

In accordance with the Personal Data Protection Law No. 6698 (“KVKK”), your personal data will be processed by our Company, acting as the Data Controller, within the framework explained below, for purposes related to business activities, and by recording, storing, updating, transferring, and/or classifying.

In this context, our Company takes all necessary technical and administrative measures to ensure an appropriate level of security to prevent the unlawful processing of your personal data, prevent unlawful access, and ensure the safekeeping of your data, in accordance with the Law and Regulations organized to protect the confidentiality of private life and the fundamental rights and freedoms of individuals, particularly the protection of personal data.

The target audience of this text includes all natural persons whose personal data are processed by our Company, excluding our employees or those who have applied for a job with our Company.

Personal Data Processed as a Data Controller

The personal data processed as a Data Controller include, but are not limited to, the following:

• Name, surname, Turkish ID number, address, phone number, email address, signature, physical location/security camera recordings, call center/service quality voice recordings, bank account number, cookie records.
  
  

Purposes and Legal Reasons for Processing Personal Data

Your personal data may be processed for the following purposes and legal reasons:

• Providing you with the products and services of the COMPANY, fulfilling our obligations to you, organizing records and documents, complying with information storage, reporting, informing, tax, and other obligations as prescribed by local and international legislation,
• Offering personalized advertisements, campaigns, advantages, and other benefits to improve the quality of services and products,
• Communicating necessary information to you regarding information technology requirements, system structure, and the necessity of the IT support services received for these products and services,
• Conducting traffic measurement, statistical analysis, segmentation/profiling, and CRM studies for sales and marketing activities,
  
  
• Measuring and increasing customer satisfaction, managing complaints, receiving your opinions and suggestions regarding new services and products, taking problem/error reports, providing information about products and services, complaints, and requests,
  
  
• Managing your membership for online sales, receiving your orders, processing your payments, collaborating with third parties for logistics to ensure product delivery, recommending products and services that may interest you, online behavioral advertising and marketing, customer portfolio management, measuring and improving service quality, communication, optimization, auditing, risk management and control, promotion, analysis, interest determination, scoring, profiling, marketing, sales, advertising, communication,
  
  
• Comparative product and/or service offers, modeling, studies and/or developments of existing or new products, using your personal data in any product and service to be offered to you within the scope of the COMPANY’s articles of association, which are the subject of your disclosure to the COMPANY,
  
  
• Complying with information storage, reporting, and informing obligations as required by official institutions, fulfilling the requirements of contracts, and performing the legal obligations to which the COMPANY is subject in relation to these services,
  
  
• Determining and implementing the commercial and business strategies of the COMPANY; conducting financial operations, communication, market research, and social responsibility activities carried out by the COMPANY, managing procurement operations (request, offer, evaluation, order, budgeting, contract), managing in-house system and application management operations, managing legal operations,
  
  
• Examining, evaluating, and responding to requests from official authorities or from you,

within the framework of the conditions and purposes of personal data processing specified in Articles 5 and 6 of Law No. 6698.

Transfer of Collected Personal Data

Your personal data may be transferred within the framework of the above-mentioned purposes and limited to the following:

• Company’s business partners, shareholders, affiliates,
• Persons or organizations permitted by the Turkish Commercial Code, the Turkish Code of Obligations, and other legislation provisions,
  
  
• Legally authorized public institutions and organizations, administrative authorities, and legal authorities,
• Real or legal persons, program partner institutions and organizations, institutions with which we cooperate in the process of comparison, analysis, evaluation, advertising, and the fulfillment of the above-mentioned purposes, organizations with which we have agreements for sending communications to our customers, cargo companies that deliver orders placed through our online store,

within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698.

Methods and Legal Reasons for Collecting Personal Data

Your personal data are collected by our COMPANY through various channels, such as our stores, website, mobile application, call centers, and social media accounts, verbally, in writing, or electronically, or primarily through other channels that may be established/formed in the future;

for the purposes specified above, within the framework of legal legislation, and limited to the presence of legal reasons such as the performance of the contract, being explicitly stipulated in the law, your personal data being made public by you, the necessity of establishing, using, or protecting a right granted to you; without harming your fundamental rights and freedoms, limited to the presence of legal reasons such as the COMPANY’s legitimate interests and the necessity of fulfilling its legal obligation.

Rights of the Personal Data Owner Stipulated in Article 11 of Law No. 6698

If you, as personal data owners, submit your requests regarding your rights to our COMPANY through the methods specified below, our COMPANY will finalize the request as soon as possible and at the latest within thirty days, depending on the nature of the request. No fee will be charged for responses up to ten pages. A transaction fee of 1 Turkish Lira will be charged for each page over ten pages. If the response to the application is provided on a CD, flash memory, or similar recording medium, the fee to be requested by our COMPANY will not exceed the cost of the recording medium.

In this context, personal data owners have the right to:

• Learn whether their personal data has been processed,
• Request information if their personal data has been processed,
• Learn the purpose of processing their personal data and whether they are used in accordance with the purpose,
• Know the third parties to whom personal data is transferred domestically or abroad,
• Request the deletion or destruction of personal data in the event that the reasons requiring its processing cease to exist, although it has been processed in accordance with the provisions of Law No. 6698 and other relevant laws, and request that the transaction carried out within this scope be notified to third parties to whom the personal data has been transferred,
• Object to the emergence of a result against the person by analyzing the processed data exclusively through automated systems,
• Request compensation for the damage in case of loss due to the unlawful processing of personal data.

To exercise your rights as listed above, you may submit your request in writing in Turkish or through registered electronic mail, secure electronic signature, mobile signature, or by using the electronic mail address previously notified to and registered in our system, in accordance with Article 13, paragraph 1 of Law No. 6698 and the Communiqué on the Procedures and Principles of Application to the Data Controller No. 30356, dated 10.03.2018. Our COMPANY reserves the right to verify your identity before responding.

This information text has been prepared within the scope of Law No. 6698, the Regulations and Communiqués published under this Law, and MADEKRAFT’s personal data processing purposes and policies. Necessary changes may be made to the information text in line with the relevant legal legislation and/or changes in MADEKRAFT’s personal data processing purposes and policies.