Personal Data Processing Disclosure Form

As our Company (hereinafter referred to as “Company”), we attach utmost importance to the security of your personal data. With this awareness, we take the necessary technical and administrative measures to process and preserve all kinds of personal data belonging to all individuals related to our Company, especially our valued members, in accordance with the Personal Data Protection Law No. 6698 (hereinafter referred to as the “Law”). With the awareness of the responsibility we bear and in our capacity as Data Controller, we process your personal data for the purposes of registering on the platform (“Platform”) managed by the Company and providing services through it, as explained below and within the limits mandated by Article 4 of the Law;

a) In compliance with the law and rules of integrity,

b) Accurate and up-to-date,

c) For specific, explicit and legitimate purposes,

d) Related to, limited to and proportionate to the purposes for which they are processed,

e) Preserved for periods appropriate to the processing purposes.

1. Purposes and Legal Bases for Processing Personal Data

As a Company, we process your personal data listed below for the stated purposes within the framework of our legal obligations arising from relevant legislation, in order to fulfill our obligations to you, our valued members, and to ensure that you can provide services to Users without any problems.

1. Name-Surname, Identity and Contact Data

Your Identity and Contact Data will be processed within the scope of fulfilling the obligations arising from the Contract(s) signed between you and the Company and the Company's fulfillment of its legal obligations, pursuant to Articles 5/2(c) and (ç) of the Law. In this context, your Name-Surname, TC Identity Number, e-mail, address and telephone data will be processed for your registration on the Platform and for Company officials to reach you on administrative and technical matters.

1. Financial Data

Your credit card information will be processed within the scope of fulfilling the obligations arising from the Contract(s) signed between you and the Company and the Company's fulfillment of its legal obligations within the framework of the Tax Procedure Law, pursuant to Articles 5/2(c) and (ç) of the Law, in order to ensure payment of the service fees you will receive. These personal data may be stored on the electronic platform belonging to licensed companies established in Turkey, whose servers are located domestically, which the Company will use for payment transactions and payment systems.

All data stated to be processed by the Company within the scope of this article are shared with the business partner company providing server and infrastructure services to the data obtained within the scope of the Platform only within the scope of the specified storage purpose. There is no active data transfer in this sharing required for the storage of electronic data, and periodic data flow is provided as required by the electronic storage service provided. 

Our Company may process, report, share, transfer, use and store all kinds of personal data it collects with its domestic and foreign business partners within the framework of the services provided to you, in accordance with the relevant articles of the Law and other legislation. 

1. Rights of the Personal Data Owner Based on the Law

In this context, our valued members can apply to the Company, which has the status of data controller, within the scope of Article 11 of the Law at any time they deem appropriate and exercise the rights specified below. Accordingly, data owners have the right to:

1. Learn whether their personal data is being processed,
2. Request information about processed personal data, if any,
3. Learn the purpose of processing personal data and whether this data is used in accordance with its purpose,
4. Know the third parties to whom personal data is transferred, request correction of errors in personal data, and if transfer has been made, request this correction from the relevant third party,
5. Request the deletion, destruction or anonymization of personal data within thirty days in accordance with the Regulation on the Deletion, Destruction or Anonymization of Personal Data when the reasons requiring the processing of personal data cease to exist, and if transfer has been made, request that this request be communicated to the transferred third parties, 
6. Object to the emergence of a negative result related to the person as a result of the processed data,
7. In case of damage arising from illegal data processing, claim their damages within the framework of laws.

1. Application Procedure and Content

Applications regarding the requests specified above may be made:

1. In writing to the central address, or;
2. By e-mail to [email address] using a registered electronic mail (KEP) address, secure electronic signature, mobile signature, or by using the e-mail address previously notified to the Company by the relevant person and registered in the Company's information systems.

Applications made by our members through means other than these will not be taken into consideration within the framework of legal compliance and data security principles.

Applications must include the following information and documents related to the request:

1. Name, surname and your signature if the application is made in writing,
2. For citizens of the Republic of Turkey, T.C. identity number; for foreign citizens, nationality, passport number or foreign identity number if any,
3. Residential or business address for notification purposes,
4. E-mail address, telephone or fax number for notification purposes, and
5. Clear statement of the subject of the request.

The presence of the information listed above in the content of applications is mandatory by legislation, and in case of any deficiency, the application will not be processed.

1. Response to Applications

Applications received by the Company and containing the requests of the relevant person written in Turkish will be answered by e-mail or physical mail as soon as possible and within 30 (thirty) days at the latest, and the necessary actions requested will be provided by our relevant units.

Within the scope of the Communiqué on the Procedures and Principles of Application to the Data Controller (“Communiqué”) published by the Personal Data Protection Authority, if the response process requires an additional cost, this process will be carried out for a fee based on the pricing regulated in the Communiqué.