Lighting And Privacy Policy On The Protection Of Personal Data

Title : Shopiverse Teknoloji ve Yazılım Anonim Şirketi
Adress : Armağanevler Mah. Dere Sok. No: 42 Kat: 2 Ümraniye/İstanbul
Phone : +90 212 909 88 15
E-mail : info@shopiverse.com
KEP adess : shopiverseteknoloji@hs06.kep.tr

As Shopiverse Teknoloji ve Yazılım Anonim Şirketi, we have the data of our related parties within the limits and rules of the Law on Protection of Personal Data No. 6698 in order to provide our services to you.

We would like to inform you in accordance with the Law on Protection of Personal Data No. 6698 in order to protect the privacy of private life and fundamental rights and freedoms, especially considering the security of your personal data.

As Shopiverse, we show maximum effort and sensitivity to the security of your personal data. In the capacity of data controller as required by the legislation, any personal data obtained within the scope of our business relationship will be processed in accordance with the Personal Data Protection Law, as detailed below and within the limits ordered by the legislation.

Our Principles Regarding the Processing of Personal Data

As Shopiverse Technology and Software Joint Stock Company;

a) To process in accordance with the law and honesty rules,

b) To strive to ensure correctness and up-to-dateness,

c) To be processed for specific, explicit and legitimate purposes,

ç) To be connected, limited and restrained with the purpose for which they are processed,

d) We have adopted the principle of being stored for the period required by the relevant legislation or for the purpose for which they are processed.

What Data Do We Collect? What is the Purpose of Collecting Data?

Personal data is any information that identifies you personally or can be used to identify you directly or indirectly. We may collect your personal data through your use of Shopiverse products and services or during your interactions with Shopiverse representatives.

The categories of personal data we collect from you depend on the nature of your interaction with us or the Shopiverse services you use, which may include one or more of the following:

Identity and Contact Data; We may collect your personal and/or business contact information including your name, surname, postal address, telephone number, fax number, e-mail or cap address.

Customer Transaction Data; We may collect transaction data related to your services, such as call center records, invoice, promissory note, check information, order information, request and complaint information.

Financial Data ; We collect your bank account information, including bank account numbers and other relevant billing information, to process payments and prevent fraud, refunds to your bank account during returns processes.

Physical Venue Security Data: When you visit us at our location, we may collect your data such as entry and exit registration information, camera recordings.

Transaction Security Data; If you connect to the Shopiverse network, we may collect your data such as IP address information and website entry and exit information within the scope of Law No. 5651.

Marketing Data: We may collect your data in the form of shopping history information, information obtained through surveys, campaigns and cookies on the website (see cookie policy).

Audio and Visual Recordings; During your visits to our location, we can collect your audio recordings within the scope of visual, customer satisfaction and quality standards.

Social Media Data; We may process your publicized social media data if you interact with your social networks and Shopiverse social media accounts.

Legal Processes and Legal Transaction Data; We may process your data, if any, of legal transactions arising between us, in order to fulfill our obligations arising from the legislation and to fulfill our other legal obligations towards authorized and authorized public institutions and organizations.

Other Unique Cookies; Examples of other unique cookies we collect from you include information you provide when you interact with our service centers, customer support channels in person via phone or mail, additional information you provide to us so that we can facilitate the delivery of Shopiverse services and respond to your questions.

In line with the data processing conditions specified in Articles 5 and 6 of the Personal Data Protection Law, within the scope of our business relations, the legal regulations subject to, the continuity of our business processes, the provision of products and services to you and the protection and use of your commercial rights, fulfilling our contractual obligations between us, our products and services. We collect your data to carry out operations and for other purposes stated below;

With the Purpose of Customer Support and Satisfaction; Your data is processed for the purposes of comprehensive customer support, providing you with a seamless customer experience, and improving the Shopiverse products and services you receive.

For Communication and Administrative Purposes; We communicate with you to provide information about Shopiverse products and services, however, your data is processed for reasons such as legally required communications, to respond to your questions or requests, for communications regarding the completion of product and service transactions or for support transactions afterward.

With the Purpose of Providing Transaction Support; Your data is processed for the purposes of completing purchases related to our products or services, processing payments, completing deliveries, technical support and assistance in the process.

For Security Purpose; We process your data to ensure the integrity and security of our websites, products, services and to prevent security threats, fraudulent activities or other criminal or malicious activities that may endanger your information. We also take additional security measures such as CCTV (Closed Circuit Camera System) to protect our locations.

With the Purposes of Business Activities; Your data is processed for the purpose of carrying out normal business activities, including providing services, conducting business research and analytics, corporate reporting and management, quality assurance practices (such as analyzing or recording incoming calls to our customer support services).

With Research and Innovation Purposes; Your data is processed with the aim of improving and developing new products and services by using research and development tools and combining data analysis activities.

With Corporate Communication and Marketing Purposes; Your data is processed for the purpose of delivering products and services to you by developing Shopiverse services and conducting research and development for you.

Legal Compliance; Your data is processed for the purposes of responding to applicable laws, regulations, court orders, requests from government and law enforcement authorities to provide our services and products appropriately, to protect ourselves and our customers, and to resolve any customer disputes.

In addition to the above-mentioned purposes; Your personal data is processed for the purposes of conducting information security processes, executing finance and accounting works, and ensuring the security of data controller operations.

Method and Legal Reason for Personal Data Collection

Your personal data for the above-mentioned purposes, in accordance with the basic principles stipulated in the Law, through direct interactions from our company’s service points, in automatic or non-automatic ways, through the communication channels you reach us (phone, mail, fax, social media, call center, website, surveys), It is collected through automated technologies or interactions (see cookie policy), third parties or public sources (various third parties that help provide services and services), government agencies, our applications and business partners from whom support services are received, and closed-circuit recording systems.

However, we are subject to the Turkish Commercial Code No. 6102, Turkish Code of Obligations No. 6098, Law No. 6563 on the Regulation of Electronic Commerce, Regulation on Commercial Communications and Commercial Electronic Messages No. 30998, Occupational Health and Safety and Tax Legislation, which we are subject to as the data controller within the scope of the commercial activities between us. Your personal data is processed in accordance with the obligations, these laws contain both our commercial and financial obligations and OHS terms and provisions in your commercial shopping processes.

All the data you have provided to us will be carried out in accordance with the quality and correct delivery of the services under the contract, measuring and increasing the service quality, providing information about the services, transmitting the announcements and warnings, customer satisfaction studies, information storage, reporting and information obligations requested by the public institutions of our company. It can be processed by automatic or non-automatic methods for the purposes of performing business and transactions, our legal obligation and legitimate interest as a data controller, the establishment and performance of the contract, the establishment, use and protection of the right, as long as the data processing purpose is valid.

To Whom The Processed Personal Data Can Be Transferred For What Purposes

We keep your personal data confidential, we do not sell, rent or trade your personal data to others. Unless we have your consent, we do not use or share your personal data in ways that are unrelated to the persons we identify at the points you provide data or are described in a prevailing contract.

Your collected personal data is limited to the purposes specified in the Clarification Text, and on the condition that it is measured, depending on the reasons that require it to be transferred within the scope of the Law and relevant legislation, and limited to these reasons;

We hire service providers or Business partners to manage or support certain aspects of our business activities on our behalf.

These service providers include the execution of Shopiverse operational processes, management services, customer support, on our behalf, product delivery, marketing activities, security, logistics, advocacy, IT services, email service providers, data hosting, live assistance, debt collection and Shopiverse web services. They can ensure that the management or support activities of their sites are carried out.

Our service providers and business partners are contractually required to protect the personal data they receive from us and are prohibited from using personal data for any purpose other than as specified by Shopiverse.

We may also share your personal data when we believe in good faith that we have an obligation such as: responding to fully authorized information requests from law enforcement, regulators, courts and other authorities, including to meet national security or other law enforcement requirements, all laws, comply with regulations, subpoenas or orders, investigate and help prevent security threats, fraud or other criminal or malicious activity, enforce/protect the rights and property of Shopiverse, or protect the rights or personal safety of Shopiverse employees and third parties on or using Shopiverse property protect to the extent permitted by applicable law and in accordance with the requirements of applicable law.

We assure you that your personal data will not be processed by our company other than for the purposes specified in this disclosure document.

Children’s Data Privacy

As part of its services, Shopiverse does not collect data from children (as specified by local law) without the prior consent of their parents or legal guardians, or except as permitted by applicable law.

Situations We May Process Your Personal Data Without Your Explicit Consent By Law

In accordance with Article 5 of the Law, express consent is one of the personal data processing conditions in the Law, but it is not the only element that legalizes data processing.

The law also stipulates conditions other than express consent for data processing activity. Accordingly, in the presence of one of the following conditions within the scope of our business relationship, it is possible to process personal data without requiring explicit consent:

a) It is clearly stipulated in the laws,

b) It is compulsory for the protection of the life or physical integrity of the person or another person, who is unable to express his consent due to actual impossibility or whose consent is not given legal validity,

c) It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract,

ç) It is mandatory for the data controller to fulfill its legal obligation,

d) The person concerned has been made public by himself,

e) Data processing is mandatory for the establishment, exercise or protection of a right,

f) Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

How Do We Protect?

All necessary technical and administrative measures are taken for the security of all personal data collected by Shopiverse. In this context, unauthorized unauthorized access is in line with the Personal Data Security Guide requirements published by the KVKK Board, ISO/IEC 27001 Information Security, ISO/IEC 27017 Cloud Services Information Security, ISO/IEC 27701 Privacy Information Management standards, and the European Union General Data Protection Regulation GDPR. We take physical, technical, organizational and managerial safeguards against access, misuse, disclosure or alteration.

What Are Your Rights Regarding Personal Data?

• Regarding your personal data;

• Learning whether your personal data is processed,

• If your personal data has been processed, requesting information about it,

• To learn the purpose of processing personal data and whether they are used in accordance with the purpose,

• Knowing the third parties to whom your personal data is transferred, in the country or abroad,

• Requesting correction of your personal data if it is incomplete or incorrectly processed,

• Requesting the deletion or destruction of your personal data within the framework of the conditions stipulated in the KVK legislation,

• When you request the deletion or destruction of your personal data by correcting incomplete or incorrect data, requesting that this situation be notified to the third parties to whom we have transferred your personal data,

• Objecting to the result if a result arises against you by analyzing the processed data exclusively through automated systems, and

• If you suffer damage due to the unlawful processing of personal data, you have the right to demand that this damage be remedied.

How Can You Exercise Your Rights Regarding Personal Data?

Pursuant to paragraph 1 of Article 13 of the Law on the Protection of Personal Data, you can make your request to exercise your above-mentioned rights with the following methods and information pursuant to the “Communiqué on the Procedures and Principles of Application to the Data Controller” published on March 10, 2018, No. 30356.

Necessary information in the application content;

1. Name, Surname information of the applicant

2. If the applicant is a citizen of the Republic of Turkey, the Turkish Republic Identity Number, if not, the Nationality and the Passport number or, if any, the Identity number.

3. The applicant’s domicile or workplace address for notification.

4. The applicant’s e-mail address, telephone or fax.

5. Subject of the Applicant’s Request.

6. Information and documents regarding the applicant’s request.

Application Methods;

1. The applicant can personally fill in the «Application Form» to the address of Shopiverse Teknoloji ve Yazılım Anonim Şirketi, with a closed envelope and the note “Information Request Pursuant to the Law on the Protection of Personal Data” on the envelope, and deliver it to our central location with a report by hand.

2. The applicant can send a notification to the head office address of Shopiverse Teknoloji ve Yazılım Anonim Şirketi through a Notary, but the phrase “Information Request Pursuant to the Law on the Protection of Personal Data” should be added on the notification envelope.

3. With the “Secure Electronic Signature” defined in the Electronic Signature Law No. 5070, the applicant is personally registered with our company’s Registered Electronic Mail shopiverseteknoloji@hs06.kep.tr. You can apply to the address with the note “Information Request Pursuant to the Law on the Protection of Personal Data” in the subject part.

You can reach our application form regarding your above-mentioned rights here.

How Long Will Your Requests Regarding the Processing of Your Personal Data Be Answered?

Your claims regarding your personal data are evaluated and answered within 30 (thirty) days at the latest from the date they reach us. In case your application is evaluated negatively, the reasons for rejection will be sent via e-mail or post to the address you specified in the application.

Changes to Our Privacy Statement

If we change our Privacy Statement, we will post the revised statement here with the updated revision date. If we make material changes to our Privacy Statement that will materially change our privacy practices, we may notify you before the changes take effect, such as by sending an e-mail or posting a notice on our corporate website and/or social media accounts.