Information Text on the Protection and Processing of Personal Data
1. Information Text on the Protection and Processing of Personal Data
1.1. fayybutik regarding the Personal Data Protection Law No. 6698 (KVKK), published in the Official Gazette No. 29677 dated April 7, 2016, in order to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, in the processing of personal data and to determine the obligations of real and legal persons who process personal data. com, as the Data Controller, we provide information in accordance with Article 10 of the Law titled “Information Obligation of the Data Controller”.
1.2. As fayybutik.com, it has been prepared to ensure that the personal data of our citizens are processed in accordance with the relevant legislation, especially the Constitution of the Republic of Turkey and the international agreements on Human Rights to which our country is a party, and the Personal Data Protection Law No. 6698 (KVKK) and that the relevant persons whose data are processed can effectively exercise their rights. All personal data shared with our company can be processed in accordance with the law, in connection with our activities and service purposes, and in a proportionate manner.
2. Definitions
2.1. The concepts of personal data, special personal data and data processing used in the information text are used based on the definitions made in KVKK. Mentioned in KVKK;
2.1.1. Personal Data Protection Law (“KVKK”): Personal Data Protection Law No. 6698, which came into force by being published in the Official Gazette on April 7, 2016,
2.1.2. Personal Data: any information relating to an identified or identifiable natural person,
2.1.3. Data Processor: Real or legal person who processes Personal Data on behalf of the data controller, based on the authority given by the data controller,
2.1.4. Data Controller: The natural or legal person who determines the purposes and means of processing Personal Data and is responsible for establishing and managing the data recording system,
2.1.5. Recording of personal data: recording, saving, preserving, changing, rearranging, disclosing, transferring, canceling, making available, classifying or non-automatically recording personal data, either fully or automatically, provided that it is part of any data recording system. It refers to any process that changes data, such as preventing its use in
3. Personal Data Processing Principles
3.1. Personal data of the data owner specified in Article 4 of KVKK; In accordance with the law and the rules of honesty, accurate and reliable up-to-date, specific, clear and legitimate purposes; their processing is related, limited and proportionate; The data will be processed within the scope of the general information specified below by the data controller Company, in accordance with the changes in the relevant legislation or retention rules for the period required for the purpose for which they are processed.
4. Purpose of Processing Your Personal Data
4.1. Personal storage in order to keep articles 4, 5 and 6 of KVKK;
4.1.1. In accordance with the law and the rule of honesty,
4.1.2. In connection with processing processes, in a limited and measured manner,
4.1.3. Accurate and up to date,
4.1.4. Clear and legitimate transactions will be processed until the standard in the relevant legislation or the period required for the purpose for which they are processed.
4.2. For your personal illnesses, our business units handle the people necessary for you to benefit from the products and services offered by your company; Recommending the products and services offered by our company to you; Planning and/or conducting market research for sales and marketing of products and services; Planning and/or execution of after-sales support services activities; Following up on contract parts and/or legal demands, ensuring the legal, technical and commercial occupational safety of the relevant persons within business relations; Ensuring that our company’s human resources policies are maintained, evaluating a job application, fulfilling our statutory and legal obligations if we have employees; maintaining quality monitoring; hygienic storage provided; For the purpose of determining your security and information when you visit our business; Contacting help if you request information from our company; performance of this contract in case of purchase of the product; Planning, auditing and execution of information security; Subcomponents of information technologies and their content; Follow-up of financial and/or accounting affairs; Follow-up of legal affairs; Planning and implementation of workflow; Planning and execution of corporate communication systems; The personal data processing conditions and features specified in the 5th and 6th classes of Law No. 6698 will be processed with the determination of the company’s commercial and business systems and their results. Your employees’ data may be processed in accordance with the rules stipulated by the Labor Law and Labor and Social Security legislation and other legislation in force, as well as within our human resources policy or for operational reasons such as performance policy and employee storage and labor policy and labor peace, and the fact that the system or system cooperates or is authorized. or may be processed by legal entities.
5. Transfer of Personal Data
5.1. Your personal data; Our business units carry out the necessary work to benefit you from the products and services offered by our company; Customizing and recommending the products and services offered by our company according to the needs of you and your company; Ensuring that our company’s human resources policies are implemented; Ensuring the legal and commercial security of our Company and the people who have business relations with our Company; For the purposes of determining and implementing our company’s commercial and business strategies; It can be transferred to our business partners, suppliers, shareholders, affiliates, legally authorized public institutions and private individuals within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698.
.
6. Collection Method and Legal Basis of Personal Data
6.1. Personal data is collected by our company in connection with the legitimate purposes clearly stated above, in accordance with the law and the rules of honesty, by verbally, written and/or electronically, by informing the personal data owners clearly and understandably, and by obtaining their explicit consent when necessary. It is collected, used, recorded, stored and processed within the framework of the principle of proportionality, provided that it is limited. And also; Through different channels and based on different legal reasons within the framework of our company’s commercial purpose, such as contacting us, establishing a contractual relationship, visiting our business, transmitting your information to us for contacting us for commercial activities, sharing information in promotional organizations; It is collected in order to improve the products and services we offer and to carry out our commercial activities. Your personal data collected for this legal reason can be processed and transferred for the purposes specified in this Information Text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698.
6.2. In addition, we ensure that your personal data will not be processed by our company for purposes other than those specified in this information document, and will not be transferred or stored to third parties at home or abroad.
7. Storage and Deletion of Data:
7.1. Our company stores the personal data it processes for the periods determined by the legislation, and if a separate period is not specified in the legislation; Personal data is stored for the period required to be processed in accordance with our Company’s practices and commercial life practices, depending on the services our company offers while processing that data, and after this period, only for the periods deemed necessary in practice to serve as evidence in possible legal disputes. After the specified periods expire, the personal data in question is deleted, destroyed or anonymized.
8. Rights of the Data Owner
8.1. Data owners may contact the Company acting as the data controller;
8.1.1. Learning whether personal data is processed or not,
8.1.2. Requesting information if your personal data has been processed,
8.1.3. Learning the purpose of processing personal data and whether they are used for their intended purpose;
8.1.4. Being informed about third parties to whom personal data are transferred at home or abroad,
8.1.5. Requesting correction of personal data if they are incomplete or incorrectly processed,
8.1.6. Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of KVKK No. 6698,
8.1.7. To request that the transactions carried out in accordance with paragraphs (d) and (e) of Article 11 of the KVKK be notified to third parties to whom personal data have been transferred,
8.1.8. Objecting to the emergence of a result that is unfavorable to the individual by analyzing the processed data exclusively through automatic systems,
8.1.9. In case of damage due to unlawful processing of personal data, they have the right to request compensation for the damage.
8.2. In order to exercise your above-mentioned rights, you can send your written request to “fayybutik.com” with the necessary information that identifies you and your explanations about the right you want to use, by submitting the Personal Data Information and Processing Request Form with a wet signature or “……………………….” You can send it to our registered e-mail address by using a secure electronic signature, mobile signature or the e-mail address previously notified to fayybutik.com by the relevant person and registered in the data controller’s system. Applications must be made in Turkish.
8.3. In applications, name, surname and signature if the application is written, T.R. for citizens of the Republic of Turkey. It is mandatory to include identification number, nationality for foreigners, passport number/identification number, notification basis residence or workplace address, notification e-mail address, telephone or fax number, if any, and subject of the request.
8.4. In your application containing your explanations regarding the right you have as a personal data owner and which you request to exercise, in order to exercise your above-mentioned rights; The matter you are requesting must be clear and understandable, the matter you are requesting must be personally related to you, or if you are acting on behalf of someone else, you must be specifically authorized in this matter and your authority must be documented, the application must include identity and address information, and documents proving your identity must be attached to the application.
8.5. Your applications within this scope will be finalized within 30 days at the latest. If the relevant person’s application will be answered in writing, no fee will be charged for up to ten pages. A processing fee of 1 TL may be charged for each page over ten pages. If the answer to the application is given on a recording medium such as a CD or flash memory, the fee that may be requested by fayybutik.com cannot exceed the cost of the recording medium.