PROTECTION OF PERSONAL DATA
As UCUZCULAR GIDA MADDELERİ SAN. VE TİC. A.Ş., we attach the utmost importance to ensuring the security of your personal information that you have transmitted to us either while using our website or our mobile application, or through other means. Therefore, it is important for us that you read this text, which details which personal data we use and for what reason, and that you clearly demonstrate that you understand the obligations of Hayfene, which is responsible for their administrative and technical security in the capacity of "Data Controller". Indeed, on 07.04.2016, the "Law on the Protection of Personal Data" No. 6698 entered into force. We would like to inform you as the data controller about the aforementioned legislation and certain definitions specified in this legislation:
Personal data: Refers to any information relating to an identified or identifiable natural person,
Processing of personal data: Refers to any operation performed on data such as obtaining, recording, storing, preserving, altering, reorganizing, disclosing, transferring, taking over, making available, classifying, or preventing the use of personal data by fully or partially automated means or by non-automated means provided that it is part of any data recording system,
Data processor: Refers to the natural or legal person who processes personal data on behalf of the data controller based on the authority granted by the data controller,
Data recording system: Refers to the recording system where personal data is structured and processed according to specific criteria,
Data controller: Refers to the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.
1. Purpose of the Personal Data Protection and Consent Text and the Position of Our Company as Data Controller:
Our shopping site holds the title of "data controller" within the scope of the Personal Data Protection Law No. 6698 ("Law") regarding the personal data of customers, and with this Personal Data Protection and Consent Text, it is aimed to inform customers about the personal data processing activities carried out by our shopping site in accordance with the said Law and to obtain their explicit consent for the situations specified in Article 3 below. As Hayfene, we obtain your personal data within the scope of the clarification text when you create a membership on our hayfene.com website or our hayfene mobile application. If we need to explain what the personal data obtained is and why we need to obtain it;
Your name and surname are requested as identity data, and your mobile phone number and e-mail address are requested as communication data. The legal ground for this is that the processing of personal data belonging to the parties to the contract is necessary, provided that it is directly related to the establishment and performance of the contract.
Your website or mobile application log-in and log-out information, password and passcode details, and IP address information are requested as Transaction Security data. The legal ground for this is that the processing is explicitly prescribed by law.
A record stating that you have read and accepted the clarification text and membership agreements is requested as Legal Action data. The legal ground for this is the fulfillment of our legal obligation regarding the approvals you have provided.
Your call center records, information on counter receipts, comments you have made on the website or mobile application, and order and request information are recorded as Customer Transaction data. The legal ground for this is that processing is mandatory to fulfill legally valid interests and requests.
We would like to state that if you do not want your name and surname to be seen on our website or mobile application, you can choose the option to leave an anonymous comment; if you prefer not to be anonymous, your comments will be published in line with the name and surname information defined in your account. We kindly request that you do not share your personal data or special categories of personal data outside the scope of KVKK in the comments you make. In the event that such a disclosure is made, it will be accepted that you have given explicit consent, and your comments may be deleted if necessary.
2. Purpose of Processing Personal Data Belonging to Customers:
Personal data belonging to customers are processed within the framework of the personal data processing conditions and purposes specified below and in Articles 5 and 6 of the Law. Namely; identity, communication, and legal action data are processed based on the legal ground of establishing and performing the contract for the purpose of establishing the membership agreement and creating the membership profile. Identity and communication data are processed based on the legal ground of establishing and performing the contract for the purpose of keeping communication information up-to-date and providing informative communications regarding the transactions carried out by the customer through their membership. Transaction security and communication data are processed for the purpose of providing communication address verifications and executing password renewal procedures.
Personal data belonging to customers may be processed;
- To enable business units to carry out the necessary work and execute the relevant business processes so that data subjects can benefit from the products and services offered by our shopping site,
- To enable the relevant business units to carry out the necessary work and execute the connected business processes for the realization of commercial activities conducted by our shopping site,
- To plan and execute the commercial and/or business strategies of our shopping site,
- To ensure the legal, technical, and commercial-business security of the relevant persons who are in a business relationship with our shopping site, and to plan and execute the activities necessary to customize and recommend the products and services offered by us to the relevant persons according to their tastes, usage habits, and needs,
- To establish possible rights and receivables claims of the relevant parties,
- To provide information to authorized institutions arising from the legislation,
- To create and track visitor records,
- To ensure the fulfillment of obligations under the Law on the Protection of Consumers, the Law on the Regulation of Retail Trade, and other legal legislation by our Company and on behalf of our Company by our branches, our call center, our affiliated companies, or through our websites and social media pages and all kinds of channels, including but not limited to these,
- To provide better service to customers, to offer and present various advantages, to provide information about sales, marketing, informing, promotions, to provide information about campaigns and conditions, to conduct surveys and customer satisfaction research, to provide and accelerate your purchasing transactions, to receive and deliver your orders,
- To create campaigns for customers, to perform cross-selling, and to determine the target audience,
- To conduct activities that enhance the user experience by tracking customer movements, and to improve the functioning of the website and mobile application belonging to our shopping site and personalize them according to customer needs, to carry out direct and indirect marketing, personalized marketing, and remarketing activities, to execute personalized segmentation, targeting, analysis, and in-house reporting activities, and market research,
- Within the scope of planning and executing the sales and marketing processes of our shopping site's products and/or services, including but not limited to the purposes of planning and executing customer satisfaction activities and customer relationship management processes, and planning and executing the processes of creating and/or increasing loyalty to the products and/or services offered by our shopping site, in line with the consent to be given by the Customer, and may be shared with the parties specified in this Personal Data Protection Text.
Our Shopping Site reserves the right to associate the behavior of the user coming to the site with a cookie located in the browser, even if they are not a member, for the purpose of online behavioral advertising and marketing, and to define remarketing lists based on metrics such as the number of pages viewed, visit duration, and number of goal completions. Afterwards, targeted advertising content can be shown to this user on the site or on other sites in the Display Network according to the users' interests. Google may place cookies on users' browsers or read cookies contained therein, or use web beacons to collect information during the redirection of Google AFS advertisements to our Shopping Site. Explicit consent has been shown by the customer for all these matters.
3. Personal Data to be Processed and Processing Purposes in Accordance with the Explicit Consent of Customers:
Personal data are processed in accordance with the Conditions for Processing Personal Data specified in Articles 5 and 6 of the Law No. 6698. Our shopping site needs to obtain the explicit consent of customers to process personal data for the following situations where the personal data processing conditions specified in Articles 5/2 and 6/3 of the Law No. 6698 cannot be met.
4. Transfer of Personal Data Belonging to Customers:
Personal data may be transferred to natural and legal persons, provided that it complies with Articles 8 and 9 of the Law No. 6698. These transfers are made within the framework of specific purposes and with the knowledge of the customer. Therefore, personal data belonging to customers may be shared with Company officials, our affiliates, our lawyers, our financial advisors, our business partners, our suppliers, our shareholders, legally authorized public institutions and organizations, and private institutions within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, including the carrying out of necessary work by business units to benefit the relevant persons from the products and services offered by our shopping site and the execution of relevant business processes, the carrying out of necessary work by relevant business units for the realization of commercial activities conducted by our shopping site and the execution of related business processes, the planning and execution of commercial and/or business strategies of our shopping site, ensuring the legal, technical, and commercial-business security of our shopping site and the relevant persons who are in a business relationship with our shopping site, as well as planning and executing the activities necessary to customize and recommend the products and services offered by our shopping site to the relevant persons according to their tastes, usage habits, and needs. The Name and Contact Information of the user may be shared with payment institutions for the purpose of performing verification in accordance with the payment institution framework agreement to be approved by the user at the payment stage and pursuant to the Regulation on Measures regarding Prevention of Laundering Proceeds of Crime and Financing of Terrorism published in the Official Gazette dated January 9, 2008 and numbered 26751. Our Shopping Site may transfer personal data to third parties domestically as well as abroad within the scope of the above-mentioned purposes, provided that the conditions stipulated in Law No. 6698 are met.
5. Method of and Legal Ground for Collecting Personal Data:
Personal data are collected from customers electronically. Personal data collected for the legal grounds mentioned above can be processed and transferred for the purposes specified in Articles 5 and 6 of the Law and in this Personal Data Protection Text. Indeed, your personal data processed by specifying the data category in the content of Article 1 of the Clarification Text and the legal grounds for obtaining these data are explained in detail.
6. Retention Periods of Personal Data:
Our Shopping Site retains personal data for the period specified in these legislations in case it is envisaged in the relevant laws and legislations.
If a period is not regulated in the legislation regarding how long personal data should be retained, Personal Data are processed for the period required for processing in accordance with the practices of our Shopping Site and the customs of commercial life depending on the activity carried out while processing that data, and are then deleted, destroyed, or anonymized.
If the purpose of processing personal data has ended, and the end of the retention periods determined by the relevant legislation and our Shopping Site has been reached; personal data may only be retained for the purpose of serving as evidence in possible legal disputes or for asserting the relevant right associated with personal data or establishing a defense. In establishing the periods here, the retention periods are determined based on the statute of limitations for asserting the mentioned right, as well as examples in the requests previously directed to our Shopping Site on the same issues despite the expiration of the statute of limitations. In this case, the stored personal data are not accessed for any other purpose, and access to the relevant personal data is provided only when it needs to be used in the relevant legal dispute. Here too, after the expiration of the mentioned period, personal data are deleted, destroyed, or anonymized.
7. Rights of Customers as Personal Data Owners:
Pursuant to Article 11 of the Law, data subjects have many rights, including but not limited to; (i) learning whether personal data regarding them are processed, (ii) requesting information if personal data have been processed, (iii) learning the purpose of processing personal data and whether they are used in accordance with their purpose, (iv) knowing the third parties to whom personal data are transferred domestically or abroad, (v) requesting the correction of personal data if they are processed incompletely or incorrectly and requesting the notification of the transaction made within this scope to third parties to whom personal data are transferred, (vi) requesting the deletion or destruction of personal data in the event that the reasons requiring its processing cease to exist despite being processed in accordance with the Law and other relevant law provisions, and requesting the notification of the transaction made within this scope to third parties to whom personal data are transferred, (vii) objecting to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems, and (viii) requesting the compensation of the damage in case of incurring damage due to the unlawful processing of personal data.
Requests regarding the exercise of the said rights can be transmitted by personal data owners in writing (via a notary notification or a registered letter with return receipt) with the methods specified within the scope of Law No. 6698 by our Shopping Site, or by using a registered electronic mail (KEP) address, electronic signature, mobile signature, or the electronic mail address previously registered in the system. Changes may occur regarding the matters included in this form in line with legal and technological developments. Requests will be finalized free of charge as soon as possible and within thirty days at the latest. In the event that an additional cost is required to fulfill the transaction subject to the requests, a fee may be requested from you according to the tariff to be determined by the Personal Data Protection Board.