DISCLOSURE STATEMENT ON THE PROCESSING OF PERSONAL DATA
IDENTITY OF THE DATA CONTROLLER
We take the best possible security measures to ensure that your personal data is collected, stored and shared in accordance with the law and to protect your privacy.
This disclosure statement is presented to you in order to fulfill the obligation of clarification arising from Article 10 of the Law in the capacity of “Data Controller” for the purposes of the Law No. 6698 on the Protection of Personal Data (“LPPD” or “Law”) regarding your personal data that Ankaref İnovasyon ve Teknoloji Anonim Şirketi (“Company”), requests from you and you share with the Company via “www.turef.ai” (“Site”).
PROCESSED PERSONAL DATA
| Your User Account Details | Your name, surname, customer number, membership e-mail address, phone number, gender, date of birth |
| Your Customer Transaction Details | Your order and invoice details, transaction history information about your purchase, information on content search and products you added to the cart, your request and complaint information, your usage information, the information you personally share in your comments and questions in case you comment and/or ask questions about the products on the site, your score and evaluation information, information about the content of the conversation via the chat channel |
| Delivery Information | Your phone number and delivery address details you have added for the delivery of the product you ordered, delivery details, delivery status information |
| Your Payment Details | Your information regarding the payments and methods of payment made by you, your registered card information, invoice information added by you, your identity and contact information requested in order to issue invoices and in some cases to make current account and settlement transactions, as well as some additional billing information if you are a taxpayer (Turkish identity / tax number, sole proprietorship information) |
| Auditory Data | Sound recordings |
| Visual Data | Camera recording images |
| Your Transaction Security Information | Security system usage information, your device information, device ID, IP address information, MAC address, wireless connection data, operating system type and version, application version, notification identifier, log files, mobile network data, password information, cookie information, login method (via Google/Facebook), clicks, downloads, messages sent or received, and data on the use of our other sites/services, status of being online or not, activation time, software version and update data |
| Legal Action Information | Information contained in correspondence with authorized persons, institutions and organizations, information in lawsuits and execution files, your legal information requests |
THE PURPOSE FOR WHICH PERSONAL DATA WILL BE PROCESSED
Your personal data is collected by our Company through fully or partially automated or non-automated means, provided that it is part of any data recording system; electronically through our Company’s Site under our membership agreement; electronically through the channel you communicate with if you communicate via e-mail; and physically if it is transmitted to our Company via printed forms, notifications, mails or if the are communicated by legal authorities. Our Company processes your personal data for the purposes listed in the table below and on the basis of the following reasons for compliance with the law specified in Article 5 of the LPPD (Law on the Protection of Personal Data).
| Your Personal Data Processed by Our Company | Legal Reasons for Processing Your Personal Data | Purposes of Processing Your Personal Data |
| Your User Account Details, Customer Transaction Details, Delivery Information | Your explicit consent | Carry out marketing, advertising and promotional activities, offer you special offers, carry out activities to increase your satisfaction by getting to know you better and send commercial electronic messages within this scope |
| Your User Account Details, Transaction Security Information | Necessary for entering into a user agreement between you and us | Carry out the processes for entering into a user agreement, manage the processes of creating and closing the member profile, ensure the security of the operations regarding the Site |
| Auditory Data, Visual Data | Necessary for the performance of our user agreement between you and us | Meet the requirements of the products and security solutions served by the Company, carry out the activities of the Company, increase the quality of the security solutions offered and improve the economic existence of the Company, communicate with you in order to ensure the execution of tasks such as the analysis of purchasing preferences and evolving security solutions, address the deficiencies in security solutions and meet the requirements |
| Your User Account Details, Customer Transaction Details, Delivery Information, Payment Details, Transaction Security Information, Legal Transaction Information | Necessary for the performance of our user agreement between you and us | Execute processes for entering into and performing the user agreement, carry out activities for the completion of your purchase transactions through the Site, execute and supervise the Company’s business activities, carry out information security processes and investige suspicious transactions, and fulfill the obligations of the data controller |
| Your Payment Details, User Account Details, Customer Transaction Details, Delivery Information | Necessary for the performance of our user agreement between you and us | Carry out and supervise financial and accounting processes, and execute invoicing processes |
| Your Delivery Information, User Account Details, Customer Transaction Details | Necessary for the performance of our user agreement between you and us | Track the delivery processes of the product you ordered, and carry out logistics operations |
| Your User Account Details, Customer Transaction Details, Delivery Information | Necessary for the performance of our user agreement between you and us | Carry out communication activities, evaluate requests, complaints and suggestions regarding our products and services, carry out support activities for your orders, and provide after-sales support services for goods and services |
| Your User Account Details, Customer Transaction Details, Delivery Information, Payment Details, Transaction Security Information, Legal Transaction Information | Establish, exercise or protect a right | Conduct legal and litigation affairs, respond to your legal requests, review and respond to your applications duly made as the data subject, resolve legal disputes, and share information with authorized persons, institutions and organizations upon request |
| Your User Account Details, Customer Transaction Details, Delivery Information, Transaction Security Information, Legal Transaction Information | Mandatory for the legitimate interest of our Company | Ensure that you can quickly and easily access products that are suitable for your preferences and interests, provide a better user experience in service transitions, develop and improve our user experience, improve our service quality, carry out analysis and reporting tasks, ensure the security of Site operations, and fulfill the obligations of the data controller |
TO WHOM AND FOR WHAT PURPOSE PERSONAL DATA MAY BE TRANSFERRED
Within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, the collected personal data may be shared with domestic public institutions and agencies, law enforcement agencies, courts and enforcement offices, domestic third party real and legal persons with whom we have relations, service provider companies and their officials, our business partners, our Company’s shareholders, suppliers and support service providers (sending commercial messages via SMS, email, telephone, advertising companies for the purpose of creating campaigns, companies providing CRM and software support, etc.), and domestic persons and institutions from whom we receive cloud storage service, provided that this transfer is limited to the purposes stated in this Disclosure Statement. Your personal data is not transferred abroad.
MEANS OF AND LEGAL REASON FOR COLLECTING PERSONAL DATA
Your personal data may be collected in accordance with the legislation by our Company for the purposes stated above and for the purpose of performance of agreements, verbally, in writing or electronically through various channels, including applications filed through contracted websites, other institutions that we provide/receive support services and natural and/or legal persons with whom operations are carried out within the scope of any legislation or contract, information you transmit to us via the Site, e-mail or other means, our social media accounts, devices with audio and video tracking and recording features, and the identification system called “cookies”, which allows our computers to automatically recognize you when you visit our website, and other channels that may be established in the future.
HOW AND FOR HOW LONG WE STORE YOUR PERSONAL DATA
Your personal data shared with our Company is stored on our Company’s domestic secure servers in accordance with the relevant legislation, LPPD provisions and Company policies.
In accordance with the LPPD, your personal data will be deleted, destroyed or anonymized by us and will continue to be used when the purpose of processing according to Article 7/1 of the LPPD disappears and/or the statute of limitations under which we are obliged to process your data in accordance with the legislation expires.
OUR MEASURES FOR THE SECURITY OF YOUR PERSONAL DATA
In order to prevent unlawful processing of your personal data and to ensure the necessary level of security for the safe storage of your personal data, our Company takes the relevant technical and administrative measures using the technological means available.
RIGHTS OF PERSONAL DATA SUBJECT
Pursuant to Article 11 of the LPPD, anyone has the right to apply to the data controller to:
- learn whether or not their personal data is being processed;
- seek information if their personal data has been processed;
- learn the purpose of processing personal data and whether it is used in accordance with that purpose;
- know the third parties to whom their personal data is transferred domestically or abroad;
- request correction of personal data in case of incomplete or incorrect processing;
- request the deletion or destruction of their personal data within the framework of the conditions provided for in Article 7;
- request notification of the processes carried out pursuant to subparagraphs (d) and (e) to third parties to whom personal data is transferred;
- challenge any result to their detriment upon analysis of their processed personal data exclusively through automated systems;
- claim compensation for their damages arising from unlawful processing of their personal data.
HOW YOU CAN EXERCISE YOUR RIGHTS
You can submit your applications for your rights listed above to the Data Controller by filling out the Application Form[AA1] available here.
Pursuant to the Communiqué on the Rules and Procedures for Applying to the Data Controller, it is obligatory for the Data Subject to include their name, surname, and if the application is in writing, their signature, Turkish identity number (if the applicant is a foreigner, his/her passport number), residential or workplace address for notification, electronic mail address for notification, telephone number and fax number, if any, and information on the subject of the request.
To exercise the abovementioned rights, the Data Subject must clearly and comprehensibly state the matter requested in the application, which includes explanations regarding the right they request to exercise. Information and documents related to the application must be attached to the application.
While the subject of the request must be related to the applicant himself/herself, any applicant acting on behalf of someone must be specifically authorized to do so and this authorization must be documented (power of attorney). In addition, the application must contain identity and address details, and documents confirming the identity must be attached to the application. Requests made on behalf of someone else by unauthorized third parties will not be evaluated.
HOW LONG IT WILL TAKE TO ANSWER YOUR REQUESTS
Your requests regarding your personal data will be evaluated and answered within 30 days at the latest from the date of receipt. However, if this actions requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board will be charged by our Company.
If your application is rejected, the reasons for rejection will be sent to the address you specified in the application by one of the methods selected in the Application Form, particularly by mail or e-mail.
Data Controller Contact Details:
Ankaref İnovasyon ve Teknoloji A.Ş.
Üniversiteler Mah. İhsan Doğramacı Bul. İkizler Binasi Blok No: 35 İç Kapı No: 104
Çankaya, Ankara
Tel : [+90 (312) 299 21 64]
Email: [info@ankaref.com]