Personal Data Information Text
Betül Süleyman Zarif Film with Mersis Number 3830863463463400001 ("Company"), as the data controller of your personal data, we attach great importance to protecting the confidentiality of your personal data and ensuring information security within the scope of the services offered on our website ("Website") and in our stores.
Within the framework of the Personal Data Protection Law No. 6698 (“KVKK”), we take the necessary technical and administrative measures to ensure the lawful processing and preservation of all personal data of all real persons associated with the Company. In this context, your personal data that you have shared within the scope of the services offered on our Company's Website and in our stores are processed by the Company in accordance with KVKK and other relevant legislation in the following cases.
Within the scope of KVKK, by reviewing this clarification text, you can obtain information about your personal data collected by the Company as the data controller, the purposes for which it is processed, the persons to whom it is transferred, the method of collection and legal reason, and your rights regarding such personal data.
Which of your personal data do we process as a company, for what purposes and on what legal basis?
• If you are our potential customer, your personal data processed by the Company, the purposes of processing and the legal reasons are as follows:
Your identity data (name, surname) and contact data (phone number, e-mail address, postal address if you request that your request be sent to your home by post/courier):
Your personal data in question will be processed within the scope of the following data processing purposes in case you have express consent within the scope of KVKK article 5/1:
• Carrying out marketing and sales activities,
• To provide you with better service, to conduct customer satisfaction research,
• Planning and execution of corporate communication activities.
Within the scope of Article 5/2 of the KVKK, without your explicit consent, data processing may be carried out for the legitimate interests of the data controller, provided that (i) it is clearly prescribed by law, (ii) it is mandatory for the data controller to fulfill its legal obligations and (iv) it does not harm the fundamental rights and freedoms of the relevant person. If necessary, it will be processed within the scope of the following data processing purposes:
• Keeping the data accurate and up-to-date (it is mandatory for the data controller to fulfill its legal obligations, data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject),
• Collecting, evaluating and responding to the complaints, questions, requests and suggestions of the data owner (data processing is mandatory for the legitimate interests of the data controller, provided that it is mandatory for the data controller to fulfill its legal obligations and does not harm the fundamental rights and freedoms of the data subject),
• To ensure that obligations are fulfilled within the scope of the Law on Consumer Protection, the Law on the Regulation of Retail Trade and other legal legislation, by our Company and our branches, affiliated companies on behalf of our Company, or through our websites and social media pages, or through all kinds of channels, but not limited to these (legally processing is mandatory, it is mandatory for the data controller to fulfill its legal obligation),
• Carrying out activities that have legal, technical and administrative consequences and providing information to authorized institutions based on legislation, activities related to legal requests and legal affairs (mandatory for the data controller to fulfill his legal obligations).
• If you become our customer by shopping in our stores, your personal data processed, the purposes of processing and the legal reasons are as follows:
Your identity data (name, surname), contact data (phone number, e-mail address, postal address if you request home delivery), financial data (invoice amount, payment method):
If your personal data in question is within the scope of Article 5/2 of the KVKK, without your explicit consent, provided that (i) it is clearly foreseen in the law, (ii) it is mandatory for the data controller to fulfill its legal obligations and (iii) it does not harm the fundamental rights and freedoms of the data controller, If data processing is mandatory for legitimate interests, it will be processed within the scope of the following data processing purposes:
• Execution and follow-up of financial transactions: (in accordance with the Tax Procedure Law and other legislation, the Law on Obligations and the Law on Consumer Protection, and the Regulation on Measures for the Prevention of Laundering Proceeds of Crime and Financing of Terrorism, in order to perform identity verification and follow-up of payment transactions) "It is required to be processed by law " " Processing personal data of the parties to the contract is necessary, provided that it is directly related to the establishment or performance of a contract" and it is mandatory for the data controller to fulfill its legal obligation and data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. to be)
• Return, request and complaint management (in accordance with the Law on Consumer Protection, "Processing must be done by law", in order to collect, evaluate and meet the complaints, questions, requests and suggestions of the data owner, in order to fulfill the legal obligation of the data controller and to comply with the fundamental rights and disabilities of the data subject). Data processing is mandatory for the legitimate interests of the data controller, provided that it does not cause harm)
• To ensure that obligations are fulfilled within the scope of the Law on Consumer Protection, the Law on the Regulation of Retail Trade and other legal legislation by our Company and our branches, affiliated companies on behalf of our Company, or through our websites and social media pages or all kinds of channels, but not limited to these.
• Planning and execution of customer relationship management processes, Planning and/or execution of customer satisfaction activities (data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person),
• To be able to provide better and more reliable service to the customer, to develop more suitable services and products and to maintain them uninterruptedly (data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person),
• To ensure that obligations are fulfilled within the scope of the Law on Consumer Protection, the Law on the Regulation of Retail Trade and other legal legislation, by our Company and our branches, affiliated companies on behalf of our Company, or through our websites and social media pages, or through all kinds of channels, but not limited to these (legally processing is mandatory, it is mandatory for the data controller to fulfill its legal obligation)
• Accelerating your purchasing transactions, receiving and delivering your orders, and managing supply processes and customer relations within this scope (provided that it is directly related to the establishment or execution of a contract, processing of personal data of the parties to the contract is necessary and mandatory for the data controller to fulfill its legal obligation). Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject).
• Carrying out activities that have legal, technical and administrative consequences and providing information to authorized institutions based on legislation, activities related to legal requests and legal affairs (mandatory for the data controller to fulfill his legal obligations).
• Keeping the data accurate and up-to-date (mandatory for the data controller to fulfill its legal obligation)
• If you become our customer by becoming a member through our website, your personal data processed by the Company, the purposes of processing and the legal reasons are as follows.
Your identity data (name, surname), contact data (phone number, e-mail address, postal address), transaction security data (password information, consent records), financial data (credit card information, bank account information, billing information). ), and other membership data ( your marketing data
If you have your explicit consent within the scope of KVKK article 5/1, it will be processed within the scope of the following data processing purposes:
• Getting to know our members and improving our communication,
• To provide you with better service, to provide you with various advantages, to conduct surveys and customer satisfaction research,
• Carrying out marketing and sales activities,
• Managing social media accounts and Website,
• Planning and execution of corporate communication activities,
• Advertising, promotions, etc. using the contact information you have shared. sending commercial electronic messages and being informed about all kinds of campaigns and events carried out by the Company,
• Sharing content online or offline.
Within the scope of Article 5/2 of the KVKK, without your explicit consent, data processing may be carried out for the legitimate interests of the data controller, provided that (i) it is clearly prescribed by law, (ii) it is mandatory for the data controller to fulfill its legal obligations and (iii) it does not harm the fundamental rights and freedoms of the relevant person. Based on the legal reason that it is mandatory, it will be processed within the scope of the following data processing purposes:
• Fulfilling the requirements of contracts concluded with customers and members (“Provided that it is directly related to the establishment or execution of a contract, the processing of personal data belonging to the parties to the contract is necessary, it is mandatory for the data controller to fulfill its legal obligation and it does not harm the fundamental rights and freedoms of the data subject.” Data processing is mandatory for the legitimate interests of the controller)
• Carrying out the necessary activities to carry out the Company's internal operations, business activities and to ensure the security of the Company's operations, to carry out the effectiveness, efficiency and appropriateness analysis of the business activities (provided that it is mandatory for the data controller to fulfill its legal obligations and does not harm the fundamental rights and freedoms of the data controller, data processing is mandatory for their interests)
• Execution and follow-up of financial transactions: (in accordance with the Tax Procedure Law and other legislation, the Law on Obligations and the Law on Consumer Protection, and the Regulation on Measures for the Prevention of Laundering Proceeds of Crime and Financing of Terrorism, in order to perform identity verification and follow-up of payment transactions) "It is required to be processed by law " " Processing personal data of the parties to the contract is necessary, provided that it is directly related to the establishment or performance of a contract" and it is mandatory for the data controller to fulfill its legal obligation and data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. to be),
• Ensuring business continuity and planning and execution of corporate governance and sustainability activities (data processing is mandatory for the legitimate interests of the data controller, provided that it is mandatory for the data controller to fulfill its legal obligations and does not harm the fundamental rights and freedoms of the relevant person)
• Planning and execution of corporate communication activities and organizing campaigns, sweepstakes and competitions within this scope, participation and support in social responsibility projects (data processing for the legitimate interests of the data controller, provided that it is mandatory for the data controller to fulfill its legal obligations and does not harm the fundamental rights and freedoms of the data subject). be mandatory)
• Carrying out activities that have legal, technical and administrative consequences and providing information to authorized institutions based on legislation, activities related to legal requests and legal affairs (mandatory for the data controller to fulfill his legal obligations).
• Keeping the data accurate and up-to-date (mandatory for the data controller to fulfill its legal obligation)
• Planning and execution of customer relationship management processes, Planning and/or execution of customer satisfaction activities (data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person),
• To be able to provide better and more reliable service to the customer, to develop more suitable services and products and to maintain them uninterruptedly (data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person),
• To ensure that obligations are fulfilled within the scope of the Law on Consumer Protection, the Law on the Regulation of Retail Trade and other legal legislation by our Company and our branches, affiliated companies on behalf of our Company, or through our websites and social media pages or all kinds of channels, but not limited to these ( It is mandatory to process by law, it is mandatory for the data controller to fulfill its legal obligation)
• Accelerating your purchase transactions, receiving and delivering your orders, and managing supply processes and customer relations within this scope (provided that it is directly related to the establishment or execution of a contract, processing of personal data of the parties to the contract is necessary and mandatory for the data controller to fulfill its legal obligation). Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject).
• Carrying out activities related to information security processes and information technology infrastructure (it is mandatory to process by law, it is mandatory for the data controller to fulfill its legal obligation, it is mandatory to process data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject)
• Carrying out development activities such as making our websites easier to use, improving them and returning feedback (if it is mandatory for the data controller to fulfill its legal obligations, if data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject)
• Improving your transactions on any Company-supported digital platform where you can log in with the password or similar provided to you via your contact information (if it is mandatory for the data controller to fulfill its legal obligation, data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person)
• Return, request and complaint management (by viewing your shopping details, in accordance with the Law on Consumer Protection, if it is required to be processed by law, in order to collect, evaluate and meet the data owner's complaints, questions, requests and suggestions, and if it is mandatory for the data controller to fulfill its legal obligations and the relevant person Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data controller)
During your visit to our stores, your physical location security data (closed circuit camera recordings -CCTV) is also processed. You can find detailed information about your personal data processed within the scope of CCTV in our Personal Data Protection and Processing CCTV Information Text available in our stores.
In addition, during your shopping on our Website, all credit card transactions and approvals are carried out online by the relevant Bank or Card Institutions, independent of our Company, and information such as credit card "password" is not seen and recorded by our Company.
With Whom Do We Share Your Personal Data?
Your personal data is processed through different channels in order to carry out the Company's activities; It is collected based on legal reasons to ensure compliance with the legislation and Company policies. Your collected personal data will be processed in accordance with the basic principles stipulated by the KVKK and within the scope of the data processing purposes listed in Article 5/1 of the KVKK above and within the scope of KVKK art. Pursuant to Article 8/1, if you have your express consent, we may contact Company shareholders, business partners, suppliers, Company subsidiaries, subsidiaries, businesses, any representatives, service providers and/or subcontractors and affiliated companies of the Company, cargo companies, banks. and payment institutions, GSM Operators, social media sharing sites and any person to whom the Company proposes to transfer its rights and/or duties, for the purposes and scope of data processing listed above in Article 5/2 of the KVKK and Art. To the Company's shareholders, business partners, suppliers, Company subsidiaries, subsidiaries, businesses, any representatives, service providers and/or subcontractors and affiliated companies of the Company, cargo companies, dated January 9, 2008 and 26751, without your express consent in accordance with Article 8/2. It can be transferred to banks and payment institutions, GSM Operators, legally authorized public institutions and organizations and legally authorized private institutions published in the Official Gazette No.
The Company keeps the personal data it collects from you on its domestic servers, and your data can only be transferred to our business partners abroad in accordance with KVKK Article 9/1 and with your explicit consent. Since e-mails are sent to the e-mail addresses used by the company and the e-mail system used is located abroad, e-mail service providers, social media platforms in case of access to social media links on our website, and cloud-based services are used to complete payment services on our website. It will be transferred to intermediary service providers that provide payment services.
In addition, as our company changes and grows, it may be restructured, we may acquire new companies, our companies may be transferred, all or some of our company's assets, including its equity assets, may be transferred, it may merge with new companies, or there may be divisions within our company. As a result of such changes in the company structure, our company's assets containing personal data may also be transferred. In case of such changes, you will be informed via e-mail, letter or public announcements in order to control your personal data in accordance with Article 10 of the KVKK , and your explicit consent will be obtained when necessary.
Your personal data will not be disclosed to third parties other than those listed above. The Company will store your personal data within the scope of the processing purposes explained in this Information Text and within the periods specified in the Company Data Retention and Destruction Policy . Your personal data whose retention period has expired is deleted or destroyed by the Company.
By What Methods Do We Collect Your Personal Data?
Your personal data; It is collected verbally, in writing or electronically through various channels such as our sales stores, the Website or the information you transmit to us via e-mail, short message (SMS), online applications or other means, our social media accounts, digital platforms, applications, software.
Our Measures and Commitments Regarding Data Security
The company is committed to protecting your personal data securely. It carries out technical and administrative measures using various methods and security technologies to ensure the appropriate level of security in order to prevent unlawful processing and access of your personal data and to ensure the preservation of personal data. In addition, your special personal data is processed by taking adequate measures determined by the Board.
The company will not disclose the personal data it obtains to anyone else in violation of the provisions of KVKK and will not use it for purposes other than processing. The Company declares that if your personal data is shared with outsourcing service providers, it will comply with the confidentiality commitments and KVKK with the transfer groups in question.
Changes to the Privacy Policy
The Company may update and change the provisions of this Information Text at any time by publishing it on the Website. Updates and changes made by the Company in the Information Text will be valid from the date of publication on the Website.
What are your rights as a data owner under KVKK?
We hereby inform you that, as a personal data owner, you have the following rights in accordance with Article 11 of the Law:
• Learning whether your personal data is being processed or not,
• Requesting information if your personal data has been processed,
• Learning the purpose of processing your personal data and whether they are used for their intended purpose,
• Knowing the third parties to whom your personal data is transferred at home or abroad,
• Requesting correction of your personal data if it has been processed incorrectly or incompletely, and requesting that the action taken in this context be notified to third parties to whom your personal data has been transferred,
• Requesting the deletion or destruction of personal data in case the reasons requiring processing no longer exist, even though it has been processed in accordance with the Law and other relevant legal provisions, and requesting that the action taken in this context be notified to third parties to whom your personal data has been transferred,
• To object if a result arises against you by analyzing the processed data exclusively through automatic systems,
• Request compensation for the damage if you suffer damage due to unlawful processing of your personal data.
your applications regarding your rights listed above by filling out the Data Owner Application Form on our website https://www.houseofzarif.com/ and sending it to Ergenekon mah. Republic street. My dream is apt. No:201 Floor:4 D:7 Şişli/ İstanbul or İspilandit Apt. Teşvikiye Cad. You can forward it to our company located at No: 13 K :5 34360 Şişli / Istanbul . Depending on the nature of your request, your applications will be finalized free of charge as soon as possible and within thirty days at the latest; However, if the process requires an additional cost, you may be charged according to the tariff determined by the Personal Data Protection Board.