Clarification Text - Online Standart

Clarification Text

Information Text on Processing of Personal Data

As Online Information Services Education and Publication Ind. Trade Inc. and onlinestandard.com, we attach importance to the security of your personal data. We must state that we reserve the right to update this Personal Data Protection Explanation text at any time within the framework of changes that may be made to the current legislation, Board Decisions, and court decisions. With this sensitivity, it is of great importance for our Company that all personal data belonging to all persons affiliated with the Institution, including those who benefit from our services, are processed and stored in accordance with the Personal Data Protection Law No. 6698 (“LPPD Law”). We would like to inform you that your personal data will be processed by our institution and that any transaction performed on your information, including obtaining, recording, storing, preserving, changing, disclosing, transferring, and making your information available through automatic or non-automatic means, constitutes “processing of personal data”. In this context:

-Law No. 6563 on the Regulation of Electronic Commerce also includes provisions regarding the protection of personal data.
– Criminal sanctions have been foreseen in some cases for the protection of personal data through the provisions of the Turkish Penal Code No. 5237.
-Indeed, data must be collected and used in order to fulfill our obligations arising from the Consumer Protection Law No. 6502 and the Distance Contracts Regulation.

-Moreover, there is data that our institution is obliged to keep in accordance with Law No. 6769. In accordance with this responsibility, as defined in the Personal Data Protection Law, we process your personal data as the “Data Controller” in the manner explained below and within the limits set by the legislation.

After you review this information text and notify our institution about it, a consent text will be presented to you, the esteemed addressee, so that our institution can use all your personal data within the scope of the business and commercial relationship that our institution is a party to, limited to the requirements of this relationship. We must state that there is no requirement to sign the relevant consent text. In this context, it is mandatory for the validity of the consent text to be approved after this information text is reviewed in detail and sufficiently and all your questions, if any, are forwarded to our institution.

Definitions

In this disclosure text;

  • Personal Data: Any information relating to an identified or identifiable natural person,
  • Personal Data Protection Law (“KVKK”): Personal Data Protection Law No. 6698, which was published in the Official Gazette on April 7, 2016 and entered into force.
  • Our Institution: Online Information Services Education and Publication Industry Trade Inc.,
  • Data Processor: The natural or legal person who processes Personal Data on behalf of the Data Controller based on the authority granted to him,
  • Data Controller: The natural or legal person who determines the purposes and means of processing Personal Data and is responsible for the establishment and management of the data recording system.

expresses.

1) Data Controller and Representative

In accordance with the Personal Data Protection Law, your personal data may be processed by our Institution as the data controller within the scope explained below.

2) Collection, Processing and Purposes of Processing of Personal Data

Your personal data is used by our relevant units in order to ensure that the activities carried out by our Institution are carried out in accordance with the relevant legislation and our Institution’s procedures, in order to fulfill their obligations and commitments within the scope of all relevant national/international legislation and secondary regulations published by national/international competent authorities based on these or the agreements to which they are a party in relation to these or their activities;
Identity Information (name and surname, mother-father’s name, mother’s maiden name, date of birth, place of birth, marital status, copy of identity card and serial number, Turkish identity number, passport information (for foreigners);
Contact Information (address, e-mail address, contact address, registered electronic mail (KEP) address, telephone number)
Location information (location information of the place where it is located)
Customer Transaction (call center records, invoice, promissory note, check information, information on teller receipts, order information, request information)
Risk Management (information processed to manage commercial, technical and administrative risks)
Finance (balance sheet information, financial performance information, credit and risk information, asset information)
Audiovisual Recordings (audiovisual recordings)
Physical Space Security (entry and exit registration information of employees and visitors, camera recordings)
Transaction Security (IP address information, website login and logout information, password and passcode information)
Marketing (purchase history information, surveys, cookie records, information obtained through campaign work) and in addition to this information;

Establishment of contracts regarding all kinds of products and services you request from our institution and preparation of all other records and documents (in paper or electronic environment), making customer satisfaction calls, fulfilling SMS / e-mail sending requests, presenting the products and services in question and ensuring that they continue uninterruptedly as required, carrying out necessary activities in terms of service and product, carrying out participant and customer transactions, processing in accordance with the Terms of Service or the relevant product-specific contract, resolving complaints regarding the services provided and improving the services, fulfilling the instructions of the customers that are in compliance with the law and the contract, planning our institution’s human resources policies and processes, determining the scope of service, product and marketing activities, determining and evaluating the purchasing habits of the customers, determining and statistically evaluating and executing the marketing and service provision process and its results, using it as evidence in the event of a legal dispute and fulfilling our obligations in accordance with the legislation and international rules to which our institution is subject, protecting and storing the data that is required to be protected and stored by the administration for certain periods, in accordance with Articles 5, 6, and 8 of the Personal Data Protection Law. and will be processed in accordance with the personal data processing conditions and purposes specified in Articles 9.

3) To Whom and For What Purposes Can Processed Personal Data Be Transferred?

Your personal data collected; In order to ensure that the activities carried out by our Institution are carried out in accordance with the relevant legislation and our Institution’s procedures, all relevant national/international legislation and secondary regulations published by national/international competent authorities based on these or in relation to these or their activities by our relevant units;

  • Establishment of the contract requested by the Customer in terms of service and product,
  • Recording the address and other necessary information for communication,
  • Communicating with customers about the conditions, current status and updates of the contracts concluded under the relevant articles of the Consumer Protection Law in order to establish a distance sales contract and/or sales contract, and providing the necessary information,
  • Preparing all records and documents that will form the basis of the transaction in electronic or paper format,
  • Fulfilling the necessary obligations in accordance with the national/international legislation to which our institution is subject,
  • Fulfilling the obligations to which our institution is subject in accordance with the contract concluded in the context of the national/international legislation to which our institution is subject,
  • To be able to provide information to public officials on matters related to public security upon request and as required by law,
  • In order to provide customers with a better shopping experience, informing customers about products and services that may be of interest to them by considering customer preferences, informing them about campaigns, monitoring consumer movements and carrying out activities that increase user experience, market research, planning and implementation of after-sales service activities, and organizing and implementing relationship management processes.
  • Increasing customer satisfaction, making customer satisfaction calls, fulfilling SMS/email sending requests, determining the purchasing habits of customers who shop from the website and/or mobile applications, and using it in marketing and advertising activities in order to carry out direct and indirect marketing, personalized marketing and remarketing activities that will be organized according to the customer’s preferences, and within this scope, providing information electronically and/or physically through contracted institutions, determining the target audience, making cross-selling, personalized segmentation, target determination, analysis and carrying out activities such as in-house reporting,
  • Conducting R&D studies on the operation of our institution’s website and mobile application and personalizing it according to consumer requests, preferences and needs,
  • Fulfilling the obligations (identification, information storage, reporting, informing) and commitments of our institution within the scope of the contracts to which it is a party;
  • Resolving customer complaints and improving services provided by our institution,
  • Fulfilling the instructions of customers that are in accordance with the law and the contract,
  • Planning our institution’s human resources policies and processes,
  • Determining the scope of service, product and marketing activities, determining their results, statistically evaluating and executing them,
  • It can be used as evidence in the event of a legal dispute,
  • To fulfill our obligations in accordance with the national and international legislation and rules to which our institution is subject,
  • Within the framework of planning and implementing the processes of planning and maintaining and improving after-sales service processes as well as sales and marketing activities of products and/or services, identifying and developing alternative production techniques, and developing and/or increasing loyalty to the products and/or services offered by our institution,
  • Data that is required to be protected and stored by the administration for certain periods of time is processed in accordance with the consent of the customers and the provisions of the legislation, for the purposes of protecting and storing it for the periods specified in the relevant legislation.

Within the scope provided above, all kinds of personal data may be transferred to institution authorities, third parties, domestic and international business partners, solution partners, suppliers, legally authorized public institutions and private persons, corporate, commercial and data controller and/or data processors, in whole or in part, to obtain, record, store, change, update, periodically check, reorganize, classify, keep for the period required for the purpose of processing or for the period stipulated in the relevant law, to share with public institutions and organizations that our institution works with or is legally obliged to in case of legal or service-related actual requirements and/or with 3rd party service providers, supplier companies resident in Türkiye or abroad, including transferring abroad in case of legal or service-related actual requirements, and to persons and institutions that have been granted permission to request and obtain the relevant data in accordance with the legislation to which our Institution is subject, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Personal Data Protection Law.

4) Method and Legal Reason for Collecting Personal Data

Your personal data may vary depending on your relationship with our Institution; however, it may be collected verbally, in writing or electronically through automatic or non-automatic methods, through our Institution’s units and offices, website, social media channels, mobile applications and similar means. Your personal data collected in this manner may also be processed and transferred for the purposes specified in articles (2) and (3) of this text within the scope of the personal data processing conditions and purposes specified in articles 5 and 6 of the Personal Data Protection Law. In addition, when you use our website to use our Institution’s services, visit our Institution or our website, or participate in training, seminars or organizations organized by our Institution, your personal data may be processed for the purposes specified in article 3.
Again, if you use our website; our institution stores the information collected by our institution in order to form an opinion about your preferences. Our institution’s website may monitor your browsing information and/or usage history on the site in order to make special promotions for you, organize promotional and marketing activities, improve the content of the website and/or determine your preferences.
Again, our customers who shop with a credit card via our website and/or via mobile use the ………………… payment system; are deemed to have consented to sharing their personal data with the ……………….. company from which this service was purchased and to have their personal data processed by ……………. In this respect, it is also necessary to read and review the ……………….. page before shopping with a credit card.
Our institution’s website may provide links to websites belonging to third parties and institutions outside of our institution. These links are used for the purpose of obtaining information and/or facilitating the provision of a service, however, if you are directed to links to other websites, companies and individuals outside of our institution’s website, you should also review the privacy rules and cookie policies of these sites.
In such cases, our institution has no responsibility for the acquisition and processing of your personal data by sites other than its own website. In order to receive information about the current work and transactions of the relevant persons and institutions in terms of privacy and personal data, the information on the relevant sites must first be reviewed and any questions you may have must be forwarded to the relevant site management.

5) How Long Will Your Personal Data Be Processed?

Our institution determines the storage periods of personal data by taking into consideration the applicable national and international legislation and the purposes of processing the data in question. In accordance with the KVKK, your personal data processed for the purposes specified in this Information Text will be deleted, destroyed or anonymized by us and will continue to be used when the purpose requiring processing is eliminated in accordance with the KVKK article 7/f.1 and/or when all periods, including the limitation periods, for which we are required to process your data in accordance with the legislation have expired.

6) Your Rights as a Personal Data Owner, Listed in Article 11 of the Personal Data Protection Law;

As personal data owners, if you submit your requests regarding your rights to our Institution using the methods set out below in this Information Text, our Institution will finalize your request as soon as possible depending on the nature of the request. In this context, personal data owners;

  • Learning whether personal data is being processed,
  • To request information regarding the processing of personal data,
  • To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
  • To know the third parties to whom personal data is transferred, either domestically or abroad,
  • To request correction of personal data if it is processed incompletely or incorrectly and to request notification of the action taken to third parties to whom personal data is transferred,
  • To request the deletion or destruction of personal data in case the reasons requiring processing are eliminated, even though it has been processed in accordance with the provisions of the Personal Data Protection Law and other relevant laws, and to request that the action taken within this scope be notified to third parties to whom personal data has been transferred,
  • To object to a result that is to the detriment of the person himself/herself, as a result of the analysis of the processed data exclusively through automatic systems,
  • In case of damages due to unlawful processing of personal data, the person has the right to demand compensation for the damages.

In accordance with Article 13, paragraph 1 of the PDP Law, you can submit your request regarding the exercise of your rights specified above in writing to our Istanbul office address. In the event that our institution requires expenses to be incurred in order to ensure the fulfillment of these requests, we reserve the right to request such from you in accordance with the tariff specified in Article 13 of the PDP Law titled “Application to the Data Controller”. Since the Personal Data Protection Board has not determined any method at this stage, you must submit your application to our Institution in writing in accordance with the PDP Law. In this context, the channels and procedures through which you will submit your application in writing to our Institution within the scope of Article 11 of the PDP Law are explained below.
In order to exercise your rights specified above, you may personally deliver your request, including the necessary information to establish your identity and your explanations regarding the right you wish to exercise among the rights specified in Article 11 of the Personal Data Protection Law, to our Istanbul office address, together with documents to establish your identity, or send it through a notary public or through other methods specified in the Personal Data Protection Law.

If you would like to receive more detailed information regarding the information provided above, please contact us for detailed information.