PERSONAL DATA PROTECTION POLICY - iOkul

Pursuant to the Turkish Personal Data Protection Law No. 6698 (“KVKK”), your personal data will be processed by our Company, in its capacity as Data Controller, in connection with its business purposes, by being used, recorded, stored, updated, transferred and/or classified within the framework described below. In this context, in accordance with the Law and Regulations enacted for the purpose of protecting the fundamental rights and freedoms of individuals, in particular the privacy of private life, and protecting personal data, our Company takes all technical and administrative measures to ensure an appropriate level of security in order to prevent the unlawful processing of your personal data, to prevent unlawful access to it, and to ensure its safekeeping.

The target audience of this text is all natural persons whose personal data is processed by our Company, other than our Company’s employees and candidates who have applied for employment with our Company.

The personal data processed in our capacity as data controller is listed below, without being limited to those specified herein:
Name, surname, Turkish ID number, address, telephone number, e-mail address, signature, physical premises/security camera recordings, call center/service quality voice recordings, bank account number, cookie records

Purposes and legal grounds for processing personal data; Your personal data shared by you will be processed for the following purposes:

1. Carrying out the necessary activities, including but not limited to determining and implementing our Company’s commercial and business strategies, conducting marketing activities, and carrying out business development and planning activities, in order to enable you and/or the institutions and organizations you represent to benefit from the products and services offered by our Company,
2. Conducting the administrative operations relating to communications carried out by our Company,
3. Ensuring the physical security and supervision of the locations used by our Company,
4. Establishing relationships with business partners/customers/suppliers (their authorized representatives or employees),
5. Fulfilling contractual requirements and ensuring financial reconciliation relating to products and services offered together with our business partners, suppliers or other third parties,
6. Conducting our Company’s human resources policies,
7. Handling calls made to our Company’s call center and the use of our website.

Method of collecting and storing personal data;

Your personal data that you share with our Company may be collected verbally, in writing or electronically, by automated or non-automated means, through offices, branches, the call center, the website, social media channels, mobile apps and similar means. Your personal data will be stored in electronic and/or physical media. The necessary business process design and technical security infrastructure improvements are implemented so that your personal data obtained and stored by our Company is not subject to unauthorized access, manipulation, loss or damage in the media in which it is stored.

Your personal data will be processed by taking all necessary information security measures, provided that it is not used outside the purposes and scope notified to you, and will be stored and processed for the legal retention period or, if no such period is prescribed, for the period required by the purpose of processing. Upon the expiry of this period, your personal data will be removed from our Company’s data flows by means of deletion, destruction or anonymization.

Transfer of personal data

Your collected personal data may be transferred, limited to the fulfillment of the purposes stated above, to:

The COMPANY’s business partners, shareholders and affiliates,

Persons or organizations permitted by the provisions of the Turkish Commercial Code, the Turkish Code of Obligations and other legislation,

Legally authorized public institutions and organizations, administrative authorities and legal authorities,

Natural or legal persons from whom we receive services or with whom we cooperate for product/service comparison, analysis, evaluation, advertising and the fulfillment of the purposes stated above, program partner institutions and organizations, institutions with which we have agreements for sending the messages we send to our customers, and cargo companies delivering orders placed through our online store to you, within the framework of the personal data processing conditions and purposes set forth in Articles 8 and 9 of Law No. 6698.

Your rights under Article 11 of the KVKK;

1. To learn whether your personal data is processed,
2. To request information if it has been processed,
3. To learn the purpose of processing and whether it is used in accordance with that purpose,
4. To know the third parties to whom it is transferred domestically / abroad,
5. To request its rectification if it has been processed incompletely / incorrectly,
6. To request its erasure / destruction within the framework of the conditions set forth in Article 7 of the KVKK,
7. To request that the operations carried out pursuant to items 5 and 6 above be notified to the third parties to whom it has been transferred,
8. To object to the occurrence of a result to your detriment by means of analysis exclusively through automated systems,
9. To request compensation for damages in the event that you suffer damage due to unlawful processing.

Pursuant to paragraph 1 of Article 13 of the KVKK, you may submit your request regarding the exercise of the rights stated above to our Company in writing or by other methods determined by the Personal Data Protection Board.

In order to exercise the rights stated above, you may deliver your written request, together with the information necessary to verify your identity, by hand in person, or send it through a notary public or by other methods determined by the Personal Data Protection Board.