TEXT OF INFORMATION AND CONSENT FOR PROCESSING OF PERSONAL DATA
1. Purpose of Information text and Position of Our company (D-Market Elektronik Hizmetler Ticaret A.Ş. , “Hepsiburada”) as Data Controller,
Hepsiburada is the Data Controller under the Turkish Personal Data Protection Law no. 6698(“Law”) responsible for personal data of customers and with this Information and Consent Text, it is aimed to inform customers concerning the personal data processing activities, conducted by Hepsiburada and to provide their explicit consent for the issues specified in Article 3 below.
2. Purpose of Processing Personal Data of the Customers
Personal data of the customers are processed for the conduction of necessary studies by the business units in order to benefit the customers from the products and services and to carry out the related business processes, and for planning and execution commercial and/or business strategies of Hepsiburada,the provision of technical and commercial-business security of Hepsiburada and its business partners, planning and execution of the activities required for suggestion and promotion of products and services offered by Hepsiburada, by customizing the same according to the likes, usage habits and needs within the framework of personal data processing conditions and purposes given in Article 5 and 6 of the Law. Detailed information about the processing of personal data by Hepsiburada may be obtained from Policy concerning Processing of Personal Data under Law No. 6698 located at https://www.hepsiburada.com.
3. Personal Data, to be Processed with Explicit Consent of Customers and Purposes of Processing
For the following cases, where the personal data processing conditions in Article 5/2 and 6/3 of the Law cannot be met, explicit consent of customers must be obtained for processing the personal data by Hepsiburada.
Within this scope, the personal data of customers may be processed in line with the consent of the customer, creating campaigns for customers, conducting cross sales, determining target groups, conducting activities to improve customer experience and to improve website and mobile application of Hepsiburada by following customer movements and the customization of the same according to customer requirements, direct and indirect marketing, personal marketing and remarketing, carrying out customized segmentation, targeting, analysis and internal reporting activities, market researches and planning and execution of customer satisfaction activities, planning and execution of sales and marketing processes of the products and/or services of Hepsiburada including planning and execution of customer relations management processes, planning of process for creation and/or enhancement of loyalty to the products and/or services, provided by Hepsiburada ,and may be shared with the parties, specified in this Information and Consent Text.
The customer agrees to hold harmless the company from any claims arising out of, or in connection with the use of the services and the performance of the services, including the planning and marketing execution of customer satisfaction activities of all Hepsiburada's products, services, designs, and implementation.
4. Transmission of Customer’s Personal Data
Personal data of the customers is shared with Doğan Holding A.Ş., and Doğan Online Group of Companies, Company authorities, our affiliates, our business partners, our suppliers, our shareholders, all legally authorized public institutions and establishments and private institutions within the framework of personal data processing conditions and purposes, given in Articles 8 and 9 of the Law, including the conduction of necessary studies by related business units in order to benefit related persons from the products and services offered by Hepsiburada and to carry out the related business processes, the conduction of necessary studies by relevant business units for conduction of commercial activities by Hepsiburada, planning and execution of commercial and/or business strategies of Hepsiburada, the provision of legal, technical and commercial-business security of Hepsiburada and its business partners, planning and execution of activities, required for suggestion and promotion of products and services, offered by Hepsiburada, by customizing the same according to the likes, usage habits and needs.
5. Method and Legal Reason of Collection of Personal Data
Personal data is collected in the electronic environment from customers. The personal data collected for the legal purposes mentioned above may be processed and transferred for the purposes specified in the articles 5 and 6 of the Law and in this Information and Consent Text.
6. The rights of Data Subject
The Rights of Data Subject ARTICLE 11- (1) Each person, in connection with herself/himself has the right to apply to the data controller and a) to learn whether or not his/her personal data has been processed or not, b) to request information if her/his personal data has been processed, c) to learn the purpose of processing of personal data and whether this data is used for intended purposes, d) to know the third parties to whom his/her personal data is transferred at home or abroad, e) to request the rectification in case personal data are processed incompletely or inaccurately f) to request the deletion or destruction of his/her personal data under the conditions laid down in Article 7, g) to request notification of the operations carried out in compliance with subparagraphs (d) and (e) to third parties to whom his personal data has been transferred, h) to object to occurrence of any result that is to her/his detriment by means of analysis of personal data exclusively through automated systems, i) to request compensation for the damage arising from the unlawful processing of his personal data.
The requests for an exercise of such rights may be delivered via the methods, specified in Policy for Processing and Protection of Personal Data by Hepsiburada under Law numbered 6698, given at the address https://www.hepsiburada.com
Hepsiburada will consider these requests and will resolve the same in 30 days. The right of Hepsiburada to charge fees for requests, over the fee tariff (if any), determined by Personal Data Protection Board, is reserved. https://www.hepsiburada.com