Disclosure Statement
MARAD FOREIGN TRADE LIMITED COMPANY ("COMPANY") implements all necessary technical and administrative measures for the lawful processing, storage, and protection of personal data belonging to all individuals associated with it, in accordance with the Law on Protection of Personal Data No. 6698 ("LPPD") and relevant legal regulations. The COMPANY acts as a "Data Controller" under the LPPD and processes your personal data only within the scope permitted by legislation and for specific purposes.
In this Clarification Text, the principles regarding the collection methods, processing, use, transfer, and deletion of your personal data by the COMPANY, located at Halaskargazi Cad. Hidayet Sok. No:4/2 Şişli/ISTANBUL, as the data controller, are set out below.
1. DATA CONTROLLER AND REPRESENTATIVE
In accordance with the provisions of the LPPD, personal data obtained electronically via the www.maredacare.com website ("SITE") or through physical methods via the COMPANY may be processed by the COMPANY, acting as the data controller and operating at Halaskargazi Cad. Hidayet Sok. No:4/2 Şişli/ISTANBUL, within the scope and conditions stated below.
2. PERSONAL DATA PROCESSED BY THE COMPANY
Pursuant to Article 6 of the LPPD, titled "Conditions for Processing Special Categories of Personal Data," data related to individuals' race, ethnic origin, political opinions, philosophical beliefs, religion, sect, or other beliefs, dress and attire, membership in associations, foundations, or unions, health, sexual life, criminal convictions, and security measures, as well as biometric and genetic data, are considered special categories of personal data. Under the legislation, processing special categories of personal data without the explicit consent of the data subject is prohibited. The COMPANY does not process or collect special categories of personal data. If special categories of personal data are shared through the SITE by members registered on the SITE or other visitors (both referred to as USER/USERS), such information will be immediately destroyed in accordance with the COMPANY's policy.
The personal data processed by the COMPANY are listed below.
|
Data Subject |
Data Category |
Data Types |
|
Customer |
Identity |
Name-Surname, T.C. Identification No, Gender, Date of Birth |
|
|
Contact |
Address, Email, Phone |
|
|
Marketing Information |
Shopping History Information, Survey Cookie Records, Information Obtained from Campaign Activities |
|
|
Customer Transaction
|
Invoice Information, Order Information, Request Information, Account Number/IBAN and bank Information (When Refund is Required), Call Center Records, Shopping details (shopping date, amount, shopping content, payment method, and payment details), credit card information (credit card information is transferred to the payment institution without being recorded by the COMPANY.) |
|
|
Transaction Security Information within the scope of Website Services
|
IP Address, Website Login, Logout and Navigation Information
|
|
|
Legal Process |
Correspondence and file information regarding dispute processes |
|
|
Other |
.. |
|
Online Visitor |
Transaction Security |
Transaction security data, browser information, IP Address, Website Login, Logout and Navigation Information, Log Records, Internet Password Information etc. |
3. PURPOSES OF PERSONAL DATA PROCESSING
The personal data of the USER may be processed for the purposes of fulfilling obligations arising from current legislation, maintaining shopping transactions carried out through the website, performing processes arising from the distance sales contract such as product sales, order delivery and contract execution, invoicing, and managing online payment processes, providing after-sales support services, carrying out customer relations and satisfaction activities, monitoring contract processes, evaluating requests and complaints, carrying out promotional and marketing activities related to products and services, submitting necessary information to authorized institutions and organizations, contacting the USER when necessary, sharing with contracted cargo companies for the execution of delivery processes, managing loyalty programs and campaign processes, providing advertising and marketing communications, sharing content on social media and digital platforms, protecting and exercising legal rights, and performing statistical evaluations. The COMPANY may use your personal information in the field of advertising and marketing by converting it into statistical information. However, these statistics will not contain personally identifiable information of the USER(s).
3.1. PROCESSING BASED ON LAWFULNESS REASONS
The processing of the USER's name, surname, address, email, phone number and other contact information within the framework of orders placed through the SITE is carried out based on legal reasons arising from the Turkish Code of Obligations, Turkish Commercial Code, consumer and tax legislation, pursuant to KVKK Article 5/2 (a), (c), (ç) and (e), respectively, due to legal requirement, being directly related to the establishment or performance of a contract, being mandatory for the COMPANY as data controller to fulfill its legal obligations, and being necessary for the COMPANY to establish, exercise and protect its rights.
Since the said data processing activities are carried out based on reasons of lawfulness, the explicit consent of the USER(s) is not required. Accordingly, it is accepted that personal data cannot be requested to be deleted or destroyed before the expiration of the retention periods stipulated within the scope of applicable legislation and relevant business processes.
3.2. DATA PROCESSING BASED ON EXPLICIT CONSENT
The COMPANY processes the USER's name, surname, email address, mobile phone and address information for the purposes of providing information about new products and campaigns, carrying out advertising and marketing activities, personalizing services offered to USERS, and conducting market research, but only based on the USER's explicit consent pursuant to KVKK Article 5/1.
The COMPANY may transfer the USER's Personal Data to its suppliers to receive advertising and marketing services for its products and services. This transfer may be made based on the USER's explicit consent pursuant to KVKK Article 8/1.
THE USER may always withdraw their explicit consent regarding the processing of their personal data for advertising and marketing purposes and its transfer to third parties. In case of withdrawal of explicit consent, the USER’s personal data will not be used for contacting the USER who wishes to withdraw their explicit consent or for carrying out marketing activities. In this context, the phone number of the USER who wishes to withdraw their explicit consent will be deleted, destroyed, or anonymized by the COMPANY subsequent to the withdrawal of consent.
Personal data made public by relevant individuals within the scope of membership, shopping, and service acquisition processes carried out through the website may be processed pursuant to Article 5/1 of the LPPD and based on the explicit consent of the data subject. Furthermore, merely creating a membership on the website does not imply that personal data will be used for advertising, marketing, or commercial communication activities. In this context, explicit consent must be provided separately by the data subject for communication to be established.
4. PARTIES TO WHOM PROCESSED PERSONAL DATA ARE TRANSFERRED AND PURPOSES OF TRANSFER
4.1. TRANSFER NOT BASED ON EXPLICIT CONSENT
Personal Data pertaining to the USER may be shared with the relevant bank, business partners, and authorized units within the COMPANY for the purpose of fulfilling product and service requests, carrying out delivery processes, and completing payment transactions. Furthermore, it is possible to transfer data to SSI, tax offices, law enforcement agencies, security units, judicial authorities, the Turkish Statistical Institute, and other authorized public institutions and organizations within the scope of fulfilling obligations arising from current legislation.
Additionally, sharing may be made with lawyers and legal advisors for carrying out legal processes and resolving potential disputes; and with financial advisors, certified public accountants, and independent auditing and consulting firms for financial auditing, accounting transactions, and fulfilling legal obligations.
Furthermore, in the event of a full or partial transfer, merger, restructuring, or transfer of assets of the COMPANY, Personal Data may be transferred to the acquiring natural and legal persons.
The USER’s Personal Data, in connection with the purposes for which they are processed, limited and proportionate, is transferred domestically to the above-mentioned third parties without the need for your explicit consent, in cases where it is explicitly stipulated by law pursuant to Article 8/2(a) in conjunction with Article 5/2(a) of the LPPD, and/or where it is necessary for the establishment or performance of a contract pursuant to Article 5/2(c), for the fulfillment of the data controller’s legal obligations pursuant to Article 5/2(ç), and where it is necessary for the establishment, exercise, and protection of the COMPANY’s rights pursuant to Article 5/2(e).
4.2. TRANSFER BASED ON EXPLICIT CONSENT
Personal Data of the USER/S, such as identity and contact information, may be shared with relevant service providers, business partners, and third parties based on explicit consent obtained under Article 8/1 of the LPPD, for the purpose of carrying out advertising, campaign, and marketing activities conducted by the COMPANY. The data subjects have the right to withdraw their explicit consent at any time in this context.
5. METHODS OF COLLECTING PERSONAL DATA AND LEGAL REASONS
Personal data may be obtained by the COMPANY via its website, through automated or non-automated methods, using written or electronic media. The collection of this data is based on legal grounds arising from current legislation, contractual obligations, USER requests, commercial practices, and principles of honesty, for the purposes of promoting and providing services and carrying out processes related to the COMPANY's operations.
Personal data obtained in this regard may be processed within the scope of data processing conditions specified in Article 5 of the LPPD, for the purposes explained in this Clarification Text, and may be transferred to relevant individuals, institutions, and organizations when deemed necessary.
The USER’s Personal Data is processed by obtaining it directly from the individual or from third parties, through written or oral data transfer tools, in physical and electronic environments, based on the legal grounds set forth in Article 5 of the LPPD, namely "with the explicit consent of the data subject," or "explicitly provided for in the laws," "being necessary for the establishment or performance of a contract, directly related to the parties to the contract," "being mandatory for the data controller to fulfill its legal obligation," and "being mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject."
The USER’s Personal Data is processed based on the legal grounds of "explicitly provided for in the laws" and "being mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject," as stated in Article 5 of Law No. 5651 on Regulating Broadcasts Made on the Internet and Fighting Crimes Committed Through These Broadcasts and the LPPD.
6. PROTECTION AND DELETION OF PERSONAL DATA
The COMPANY takes the necessary physical, technical, and administrative security measures to prevent the unlawful processing of the USER's Personal Data and unauthorized access by third parties, as well as to ensure the secure protection of Personal Data. All necessary measures are taken to implement data security at the highest possible level.
Personal Data is stored taking into account the retention periods and legal obligations specified in the relevant legislation; unless the deletion of Personal Data is requested, it is deleted, destroyed, or anonymized in accordance with the laws.
7. RIGHTS OF THE PERSONAL DATA OWNER BASED ON ARTICLE 11 OF LAW NO. 6698
The USER, as a personal data owner, can submit requests regarding their rights listed above to the COMPANY via "hello@maredacare.com" or other methods stipulated in the legislation. In this case, the COMPANY will finalize the request as soon as possible and within 30 (thirty) days at the latest, free of charge, depending on the nature of the request. However, if the process requires an additional cost, a fee may be requested from the applicant according to the tariff determined by the Personal Data Protection Board.
As a USER Personal Data owner, in accordance with the current legislation;
They have the right to learn whether their Personal Data is being processed (KVKK art. 11/a), to request information about how Personal Data is processed if it has been processed (KVKK art. 11/b), to learn the purpose of processing and whether it is used in accordance with its purpose (KVKK art. 11/c), to know the third parties to whom it has been transferred domestically or abroad (KVKK art. 11/ç), to request correction if Personal Data has been processed incompletely or incorrectly (KVKK art. 11/d), to request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK (KVKK art. 11/e), to request that the transactions made in accordance with KVKK art. 11/d and m11/e be notified to third parties to whom the personal data has been transferred (KVKK art. 11/f), to object to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems (KVKK art. 11/g), to request compensation for damages incurred due to the unlawful processing of personal data (KVKK art. 11/ğ).
In accordance with Article 13, paragraph 1 of the KVKK, it is possible for the USER to submit requests regarding the rights mentioned above to the COMPANY in writing. In this regard, information on the procedures and communication channels through which applications regarding the rights that can be exercised under Article 11 of the KVKK can be made is provided below.
In order to exercise the rights granted under the KVKK, an application containing explanations regarding the right to be exercised under Article 11 of the KVKK can be prepared using the application form available on the SITE and delivered in person to the address “Halaskargazi Cad. Hidayet Sok. No:4/2 Şişli/İSTANBUL”, sent via notary public, or transmitted using other methods specified in the KVKK, accompanied by identity verification documents.
In addition, in accordance with Article 5 of the "Communique on the Procedures and Principles of Application to the Data Controller"; applications can also be made via "hello@maredacare.com" using a registered electronic mail (KEP) address, secure electronic signature, mobile signature, or an e-mail address previously notified to the COMPANY and registered in the systems.
This clarification text may be amended from time to time to explain the practices within the scope of this clarification text in more detail or to ensure compliance with applicable legislation.
RIGHT TO COMPLAIN TO THE PERSONAL DATA PROTECTION BOARD
Within the scope of Articles 13, 14 and 15 of the KVKK, it is possible for the data subject to submit a complaint application to the Personal Data Protection Board. Contact information for the application processes is given below:
PERSONAL DATA PROTECTION AUTHORITY
Address: Nasuh Akar Mah. 1407. Sok. No:4, 06520 Çankaya / Ankara
Phone: +90 312 216 50 00
Website: http://www.kvkk.gov.tr