İN Dİ GO CLOTHING TEXTILE IND. AND TRADE CO. LTD.

REGARDING THE PROCESSING OF PERSONAL DATA

KVKK INFORMATION TEXT

1.INTRODUCTION

İN Dİ GO GİYİM TEKSTİL SAN. VE TİC. LTD. ŞTİ. (the "Company") demonstrates utmost sensitivity to the protection of personal data and takes all necessary measures to protect the rights of personal data subjects, as protected by the Constitution of the Republic of Turkey and Law No. 6698 on the Protection of Personal Data ("KVKK"). This Policy has been prepared to set forth the principles and rules to be applied by the Company regarding its compliance with the regulations regarding the processing and protection of personal data stipulated in the KVKK. This Policy may be updated periodically, as necessary, to ensure compliance with the KVKK and secondary legislation. Updates will be published on the Company's website.

2. PURPOSES OF PROCESSING AND TRANSFERRING PERSONAL DATA

Personal Data; In accordance with the law and the purpose of the Law, the Company's human resources policies, commercial partnerships, management and communication activities and strategies are processed within the scope of the personal data processing conditions specified in Articles 5 and 6 of the Law, limited to the purposes of correctly planning, executing and managing the products and services of the Company, ensuring the best use of the Personal Data Owners and recommending them by customizing them according to their demands, needs and requests, ensuring the highest level of data security, improving the services offered on the website and eliminating errors that occur on the website, communicating with the Personal Data Owners who submit their requests and complaints and ensuring request and complaint management, event management, providing information to the authorized institutions arising from the legislation, creating and monitoring visitor records, and within the scope of the personal data transfer conditions specified in Articles 8 and 9 of the Law, they are obtained by the Company's partners-business partners, successors and/or third parties/organizations determined by them or shared with them, recorded and transferred to their electronic systems. The processing activity carried out for the aforementioned purposes is foreseen within the scope of the Law. If you do not meet any of the conditions, the Company obtains your explicit consent to the relevant processing process. The personal data collected, stored, and transferred by our Company are available in our KVKK policy and are available to data owners who wish to obtain detailed information.

3. OUR METHOD OF COLLECTING YOUR PERSONAL DATA AND OUR LEGAL REASONS

We collect your personal data through automated methods, such as recording in our systems the information you verbally disclose to sales consultants in stores, through security cameras and devices located in stores, by stores, business partners, or suppliers, including dealers with whom we use a joint customer management and cash register system; recording in our systems the purchases you make through websites/mobile applications that sell Sarmaşık Giyim products or the information you provide when registering on the Site, and performing transactions through these channels; recording in our systems all purchases, collections, deliveries, transactions, survey completions, registrations, behavioral actions, and transactions on the Store/Site; recording your requests and complaints during mutual communication through our Communication Channels, Head Office, or Stores; recording your calls with the call center; and non-automated methods, such as recording information/documents related to you received from official institutions, organizations, and judicial/administrative authorities; and recording records of your return/review processes in relevant documents.

Your personal data;

  • "The necessity of processing personal data of the parties to a contract, provided that it is directly related to the establishment or execution of a contract" in relation to the establishment of site membership and the fulfillment of our obligations pursuant to the membership agreement and sales and after-sales support processes,

  • The "explicit consent" you will give regarding personal data processing processes and commercial communication activities within the scope of marketing, segmentation and analysis studies within the scope of site membership,

  • Detection and prevention of suspicious transactions regarding Site membership and Site use, ensuring transaction security, studies regarding operational processes (strategic planning, analysis and business development studies) and “data processing is mandatory for the legitimate interests of the data controller” regarding our customer relations processes,

  • Regarding the recording processes with security cameras in stores, “data processing is mandatory for the legitimate interests of the data controller”, “data processing and transfer is mandatory for the establishment, exercise or protection of rights” and “fulfillment of legal obligation”,

  • “To fulfill the legal obligation” and “to be clearly prescribed by law” regarding our obligations arising from the legislation,

  • "Data processing and transfer are mandatory for the establishment, exercise or protection of rights" in relation to legal disputes, investigations and other judicial/official processes,

  • We collect/process data based on the legal grounds that it has been made public by the person concerned.

You may, at any time and without giving any reason, stop the relevant commercial communication by taking the action (refusal) specified in the commercial electronic messages we send and/or terminate your membership by withdrawing your explicit consent to the Site membership, thus stopping the personal data processing processes based on explicit consent.

4. PERIODS OF STORAGE OF PERSONAL DATA BY THE COMPANY

The Company retains personal data for the period specified in the Personal Data Protection Law and relevant legislation, if stipulated in these regulations. If no specific period is specified in the relevant laws and legislation for the retention of personal data, the Company retains personal data for the period required by business practices to process it, and then deletes, destroys, or anonymizes it. All details regarding deletion, destruction, or anonymization are available in our Personal Data Protection Law policy and are available on our website.

5. DELETION, DESTRUCTION AND ANONYMIZATION OF PERSONAL DATA

Although processed by the Company in accordance with the provisions of the KVKK and other relevant laws, personal data are deleted, destroyed or anonymized ex officio or upon the request of the relevant person, if the reasons requiring processing are eliminated and the retention periods expire.

6. RIGHTS OF THE PERSONAL DATA OWNER UNDER THE PDPL LAW

By applying to Sarmaşık Giyim as the Relevant Person in accordance with Article 11 of the Personal Data Protection Law;

● Learning whether your personal data is being processed,

● Request information regarding your Personal Data if it has been processed,

● To learn the purpose of processing your Personal Data and whether they are used in accordance with their purpose,

● Knowing the third parties to whom your Personal Data is transferred, whether domestically or abroad,

● To request correction of your Personal Data if it is processed incompletely or incorrectly and to request that the action taken in this context be notified to third parties to whom your Personal Data has been transferred,

● If the reasons requiring the processing of your Personal Data are eliminated, even though they have been processed in accordance with the KVKK and other relevant legislation, and if the reasons requiring the processing of your Personal Data are evaluated within the scope of the purpose, duration and legitimacy principles, to request the deletion or destruction of your Personal Data and to request that the action taken within this scope be notified to third parties to whom the Personal Data has been transferred,

● To object to the emergence of a result to the detriment of the person himself/herself, by analyzing the processed data exclusively through automated systems,

● To request compensation in case of damages due to the unlawful processing of your Personal Data.

You have the rights.

In this context, you can submit your request regarding the above rights in the Sarmaşık Giyim Related Person Application Form,

You can send it to us by completing it in accordance with the established procedures and principles and using the communication methods specified in the form. Depending on the nature of the request, Sarmaşık Giyim will process the request free of charge as soon as possible and within 30 (thirty) days at the latest. However, if the Personal Data Protection Board stipulates a fee and if Sarmaşık Giyim incurs additional costs for processing the request, Sarmaşık Giyim may charge the fees specified in the tariff determined by the Personal Data Protection Board. We would like to emphasize that in cases where your Personal Data is processed with explicit consent, if you withdraw this explicit consent, you will be removed from the membership program requiring processing based on explicit consent and will no longer be able to benefit from the benefits you enjoyed as a result of such processing, as of the relevant date.

You can always follow the changes in our legislation and practices regarding Personal Data on the relevant page of our website.

For any questions, you can contact us via the call center at 0534 873 58 88 .


For Your Requests:

Data Controller: İN Dİ GO CLOTHING TEXTILE IND. AND TRADE LTD. ŞTİ.


Address: Ceyhun Atıf Kansu Street 1257. Street No:7/A Balgat, Çankaya / ANKARA 06520

email:
iletisim@indigogiyim.com

Cap:
indigogiyim@hs01.kep.tr