Privacy Policy
GENERAL INFORMATION TEXT
And
PRIVACY POLICY
As ALBES DERİCİLİK VE TEKSTİL SANAYİ TİCARET ANONİM ŞİRKETİ Mersis No: 0050002196000014 (Hereinafter referred to as the “COMPANY”), we show utmost sensitivity regarding the security of your personal data. With this awareness, we attach great importance to the processing and preservation of all personal data belonging to all persons associated with the COMPANY in accordance with the Personal Data Protection Law No. 6698 (“Law”). With the full awareness of this responsibility, the personal data you share with the COMPANY as the data owner and/or the COMPANY obtains within the framework of its services, procedures and transactions are processed as explained below and within the limits specified by the legislation.
This General Disclosure Text and Privacy Policy have been prepared to inform you about the purposes for which the COMPANY will process your personal data as the “Data Controller”, to whom and for what purposes your processed personal data may be transferred, the method and legal basis for collecting personal data, and your rights as the personal data owner, as set out in Article 11 of the Law.
The COMPANY may process the personal data specified below for the specified purposes and keep them for the period required for these purposes, in cases and to the extent permitted by the legislation.
The protection of personal data is of utmost importance to the COMPANY. The COMPANY takes the necessary measures to protect against unauthorized access to personal data or loss, misuse, disclosure, alteration or destruction of this information.
The COMPANY takes all necessary technical and administrative measures to keep your personal data confidential and to ensure confidentiality and security. In the event that personal data is damaged or unauthorized access to third parties as a result of attacks on the website and the system despite the necessary information security measures being taken, the COMPANY will immediately notify you and the Personal Data Protection Authority.
Your personal data that may be subject to processing are as follows:
|
Personal Data Category |
Personal Data |
|
Identity Information |
Name, Surname, TR ID Number, Date of Birth |
|
Contact Information |
Phone Number, Address, Email Address |
|
Customer Transaction Information |
Order/Product Purchase Request Information, Invoice Information |
|
Transaction Security Data |
IP Address Information, Website Login-Logout Information, Username-Password Information |
|
Marketing Data |
Shopping History Information, Cookie Records |
- Purposes for which Personal Data will be Processed:
Your personal data will be processed by the COMPANY for the purposes of providing the products and services offered by the COMPANY in a complete and timely manner within the legal framework, receiving and dispatching/directing orders within this scope, fulfilling legal obligations within the scope of the legislation, carrying out information security processes, especially keeping payment records within the COMPANY and carrying out finance-accounting activities, carrying out communication activities, fulfilling the responsibilities arising from the work, service, sales, power of attorney, work and other contracts and legislation to which the COMPANY is a party, carrying out storage and archive activities, following up and carrying out legal affairs, carrying out risk management processes, ensuring the security of data controller operations, and providing information to authorized persons/institutions and organizations.
- To Whom and For What Purposes Can Processed Personal Data Be Transferred:
Your personal data may be shared with our business partners, suppliers, organizations we cooperate with and legal authorities authorized by law to carry out our COMPANY activities, in order to provide products and services offered by the COMPANY in a complete and timely manner within the legal framework, to fulfill legal obligations within the scope of the legislation, to fulfill responsibilities arising from contracts and legislation in a complete and accurate manner, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law.
- Method and Legal Reason for Collecting Personal Data:
Your personal data, although it varies depending on your relationship with the COMPANY; is obtained without your explicit consent, based on your explicit consent as the relevant person or provided that it is clearly stipulated by law, provided that it is directly related to the establishment or execution of a contract, the processing of personal data belonging to the parties to the contract is necessary, the COMPANY can provide its commercial activities fully and on time within the legal framework and the COMPANY can fulfill its legal obligations fully and correctly within this scope, the data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person, and the personal data obtained for this legal reason is collected through other collection methods, partially or fully automatic or non-automatic, including verbal, written or electronic media, through the website, application (app), social media channels and similar means.
Personal data processed by the COMPANY is stored for the periods stipulated in the legislation and for the period necessary for the purpose of processing the data. If a legal period is not determined for the storage of the data in question, a period is determined by taking into account the COMPANY's business processes and legal and commercial practices and in any case not exceeding the purpose of processing.
After the said period has passed, your personal data will be deleted, destroyed or made anonymous by the COMPANY or upon your request in accordance with the legislation.
- Data Owner's Rights Listed in Article 11 of the Law:
In accordance with Article 11 of the Law titled “Rights of the Relevant Person”, personal data owners may apply to the COMPANY in writing or through other methods determined by the Personal Data Protection Board ,
- To learn whether your personal data is being processed,
- To request information regarding the processing of personal data,
- If personal data is being processed, to learn the purpose of processing personal data and whether they are being used in accordance with their purpose,
- If personal data is transferred to third parties within the country or abroad, to know the third parties to whom personal data is transferred,
- To request correction of personal data if it is processed incompletely or incorrectly and to request notification of the action taken to third parties to whom personal data is transferred,
- To request the deletion or destruction of personal data in case the reasons requiring processing are eliminated, even though it has been processed in accordance with the Law and other relevant legal provisions, and to request that the action taken within this scope be notified to third parties to whom personal data has been transferred,
- To object to a result that is to his/her detriment as a result of the analysis of processed data exclusively through automated systems,
- To request compensation for damages in case of damages due to unlawful processing of personal data.
has the rights.
In order to exercise your rights specified above, you may fill out the “Application Form to the Data Controller” on the COMPANY’s website https://www.raraatelier.com completely and completely, including the necessary information to identify you and your explanations regarding the right you wish to exercise among the rights specified in Article 11 of the Law, and submit a signed copy of the form to info@raraatelier.com by hand, through a notary public or by other methods specified in the Law.
The requests included in your application will be finalized by the COMPANY free of charge as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost for the COMPANY, the fee in the tariff determined by the Personal Data Protection Board will be charged.
- For payment transactions made through the https://www.raraatelier.com website , the IYZI Payment and Electronic Money Services Inc. infrastructure is used.
COMPANY may make changes to this General Information Text and Privacy Policy at any time. These changes shall become effective immediately upon publication of the new General Information Text and Privacy Policy on the https://www.raraatelier.com website.