ABOUT THE PROTECTION OF PERSONAL DATA IN ACCORDANCE WITH THE LAW ON PROTECTION OF PERSONAL DATA NUMBER 6698 ("KVKK")

 

CUSTOMER LIGHTING TEXT

 

Turkey, Kemalpaşa OSB Mahallesi, Ankara Asfaltı Caddesi, No: 83, 35735 – Kemalpaşa, İzmir, TÜRKİYE , KEMALPAŞA Tax Office, taxpayer with tax number 1781130846 Bisan Motor Perakende Sanayi ve Ticaret A.Ş (“COMPANY”) ) aspect; line with the importance we attach to the security of your personal data, all kinds of personal data we hold are processed, stored and transferred in accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”) This information has been prepared in accordance with Article 10 of the KVKK titled “Information Obligation of the Data Controller” regarding your personal data collected, stored and processed by the COMPANY in the capacity of data controller.

When necessary, your personal data we obtain in the following ways,

  • within the scope of our commercial relations or within our business relationship with you;
  • Within the framework of the purpose requiring their processing way,
  • By maintaining the accuracy and the most up-to-date version of the personal data you have notified or notified to us,
  • It will be recorded, stored, preserved, rearranged, shared with the institutions, shareholders, business partners that are legally authorized to request this personal data and will be transferred, transferred, classified to third parties in the country, under the conditions stipulated by the Personal Data Protection Law and listed in the Personal Data Protection Law. can be processed in other ways,

we will notify you. 

YOUR PROCESSED PERSONAL DATA

 

The personal data and data categories being processed regarding our customers and customer employees are as follows:

Customer/Member, Potential Customer/Member

· Identity Information: Name, surname, date of birth, gender, TR identity number

· Location Information: City, district where he

· Contact Information: mobile phone, e-mail address, address, zip code, landline phone

· Financial Information: Tax office, invoice information

· Customer/Member Information: Membership information, membership ID number

Customer /Member Transaction Information: Purchased product/s, shopping amount, shopping date, call center call records, commercial communication permission, campaigns used, coupons used, order information

· Risk Management Information: IP address

· Transaction Security Information: Password, password information

Marketing Information: Cookie records, targeting information, reviews showing habits and likes

Audio Data: Call center call recordings

Legal Action and Compliance Information: The start and end time of the service provided, the type of service used, the amount of data transferred, the commercial electronic message permission given by the Relevant Person in the electronic environment, the membership agreement approved, the corporate membership agreement, the distance sales agreement and the offered by the COMPANY. other legal texts and contracts that enable the use of services

Marketing Information: SMS, e-mail messages or calls made by the call center for marketing purposes sent based on the commercial electronic message permission given by the person concerned.

Demand /Complaint Management/Reputation Management Information: Records of the complaints and/or requests submitted by the relevant person via the website, mobile application, social media accounts or call center regarding the product or service purchased, and the transactions performed during the evaluation or management of these requests

Online Visitor

· Transaction Security Information: Password, mobile phone, password information

· Legal Transaction Information/Risk Management Information : IP address

· Legal Action and Compliance Information: The start and end time of the service provided, the type of service used, the amount of data transferred.

Person on whose name the Purchased Product will be Delivered

· Identity Information: Name, surname, date of birth, gender, TR identity number

· Location Information: City, district where he

· Contact Information: mobile phone, e-mail address, address, zip code, landline phone

· Financial Information: Tax office, invoice information

Vendor/Supplier/Candidate Vendor/Vendor or Supplier Employee or Official

· Identity Information: TR Identity Number, Name Surname

· Contact Information: e-mail address, telephone, KEP address, address, mobile phone

Financial Information: Account No, Tax Office, Tax Identification Number, tax plate, IBAN

· Legal Transaction and Compliance Information: Signature circular, activity certificate ,

· Special Qualified Personal Data/Legal Transaction Information: Signature

· Visual Information: Photograph

 

METHOD OF COLLECTING YOUR PERSONAL DATA AND LEGAL REASON

To fulfill our legal and financial obligations as a COMPANY, for the requirements of the commercial relationship between us, for the reasons stipulated in the laws and for the legitimate interest of the COMPANY, your personal data, which we request from you personally or in other texts shared by you, are submitted to us electronically and the COMPANY is open to the use of more than one person. by recording information available to third parties in computer programs, applications and servers or on the internet ; We collect in order to fulfill our legal and financial obligations and because it is stipulated in the laws.

Personal data collected by the COMPANY as a commercial connection between the parties;

Law on Protection of Personal Data Art. 5/2-c : “It is necessary to process the personal data of the parties of the contract, provided that it is directly related to the establishment or performance of a contract”

Law on Protection of Personal Data Art. 5/2-ç: “It is obligatory for the data controller to fulfill its legal obligation”

Law on Protection of Personal Data Art. 5/2-e: “Data processing is mandatory for the establishment, exercise or protection of a right”

operates on legal grounds.

Your personal data pursuant to Article 5 of the KVKK; In cases expressly stipulated in the TCC, TCO and other laws, it is necessary to process your personal data, provided that you are directly involved in the conclusion or performance of a contract, it is necessary to protect your or someone else's life or bodily integrity in cases where you cannot express your consent due to actual impossibility or your consent is not legally valid. For the legitimate interests of the COMPANY, provided that it is mandatory for the COMPANY to fulfill its legal and financial obligations, your personal data made public by you, the COMPANY's data processing is mandatory for the establishment, exercise or protection of a right, provided that it does not harm your fundamental rights and freedoms. If the processing of your data is mandatory, your data may be processed by the COMPANY without your consent.

 

PURPOSE OF PROCESSING YOUR PERSONAL DATA

 

Your personal data may be processed by the COMPANY for the following purposes and legal reasons.

Fulfilling the purpose necessary for the performance of the contract between the parties, in particular;

  • Providing you with the products and services offered by our company
  • Carrying out necessary operational activities within the company,
  • Suggesting products and services that are suitable for your consumption and purchasing motivation to our customers
  • Carrying out the necessary work with the relevant business unit and business partners,
  • Ensuring the rights of real persons by providing human resources management by our Company,
  • Taking the necessary steps for the making, implementation and realization of commercial decisions by our company,
  • Ensuring the legal safety of real persons with whom we have business relations and our Company arising from these relations
  • To send important information about changes to our terms of service, changes to our electronic services, and other administrative information.
  • Provide quality, training and security improvement (for example, regarding recorded or monitored phone calls made to our contact numbers)
  • Resolving complaints and processing data access or correction requests.
  • To prevent, detect and investigate crime and analyze and manage other business risks.
  • Comply with applicable laws and regulatory obligations (including those outside your country of residence); comply with legal process and respond to requests from government and government authorities (including those outside your country of residence).
  • Managing our infrastructure and business activities and auditing, finance and accounting; invoicing and collections; information processing systems; data and website hosting; Comply with internal policies and procedures, including those related to business continuity and records, document and print management.
  • To establish and defend legal rights; to protect our operations or the activities of our business partners, our rights, privacy, security or property and/or your or others' such assets, and to take available remedies or limit our damage.
  • Conducting market research and analysis, including satisfaction surveys.
  • Making the right/unjust distinction of the customer in customer complaints, increasing customer satisfaction, understanding customer needs and improving customer-related processes
  • Processing of online visitor data in accordance with the relevant legislation,
  • Improving the services offered on the platforms, developing new services and informing about it
  • For the purpose of the execution of the Service Agreement established with the customer, commercial electronic message approval in terms of existing customers; Analyzing customer preferences, tastes and needs and providing special promotions, opportunities and benefits to the Customer
  • Within the scope of the contractual relationship, for customers with commercial electronic message approval; Direct marketing, digital marketing, remarketing, targeting, profiling and analysis to promote and market applications, goods/products and services in line with the Customer's preference and liking.
  • Resolving customer problems and complaints
  • Contacting the Customer based on the commercial electronic message permission, improving the Customer experience on both the platform and the mobile application
  • Creating customer satisfaction, loyalty and loyalty
  • Corporate reputation management, media communication
  • Determination and implementation of the COMPANY's commercial and business strategies
  • Follow-up of accounting and purchasing transactions
  • Legal processes and compliance
  • Answering information requests from administrative and judicial authorities
  • In-company reporting and planning of business development activities
  • Ensuring information and transaction security and preventing malicious use

Your personal data will be kept for the maximum period specified in the relevant legislation or required for the purpose for which they are processed, and possibly for the legal statute of limitations.

SHARING YOUR PERSONAL DATA WITH THIRD PARTIES IN THE DOMESTIC

For your security and the COMPANY's fulfillment of its obligations against the law, your personal data, Turkish Code of Obligations, Turkish Commercial Code, Personal Data Protection Law No. 6698, Identity Reporting Law and other legislation provisions, including but not limited to these, are required by the relevant institutions or organizations. ; It can be shared with public legal entities such as Personal Data Protection Authority, Ministry of Finance, Ministry of Customs and Trade, Ministry of Labor and Social Security, Information Technologies and Communication Authority.

YOUR RIGHTS UNDER THE LAW ON THE PROTECTION OF PERSONAL DATA

 

In accordance with Article 11 of the Personal Data Protection Law, if you apply to us personally, with the form on the COMPANY's website, provided that you prove your identity, regarding your personal data; 

  • To learn whether the COMPANY processes personal data about you, and if so, to request information about it,
  • To learn the purpose of processing your personal data and whether they are used in accordance with the purpose,
  • To learn whether personal data is transferred domestically or abroad and to whom,
  • To request the correction of your incorrect and incomplete personal data and to inform the recipients whose data has been or may have been transferred,
  • Demanding that your data be destroyed (deleted, destroyed or anonymized) within the framework of the conditions stipulated in Article 7 of the KVKK and that the third parties to whom the data is transferred/to be transferred are informed about your destruction request,
  • Objecting to the results of your personal data analysis, created exclusively using an automated system, if these results are contrary to your interests,
  • You have the right to demand the compensation of the damage if you suffer damage due to the unlawful processing of your personal data.

However, by evaluating your destruction request, we will evaluate which method is appropriate according to the conditions of the concrete case. In this context, you can always request information from us about why we have chosen the destruction method we have chosen.

be concluded free within thirty days at the latest , depending on the nature of the request However, if the transaction requires a separate cost for the COMPANY, the fee in the tariff determined in the Communiqué on Application Procedures and Principles to the Data Controller may be charged by the Personal Data Protection Board.

Your application regarding the processing of your personal data; To our COMPANY by filling out the application form on the COMPANY's website, in writing or by using the registered electronic mail (KEP) address bisan@hs01.kep.tr, secure electronic signature, mobile signature or your e-mail address that you have previously informed us and included in our records . You must deliver.

Depending on the nature of your request and your application method, the COMPANY may request additional verifications (such as sending a message to your registered phone, calling) in order to determine whether the application belongs to you or not, and thus to protect your rights. For example, if you apply through your e-mail address registered in the COMPANY, we can reach you using another communication method registered in the COMPANY and request confirmation of whether the application belongs to you.