Personal Data Protection Policy
[Mono Kristal Arge Dan.Bil.San.Tic.Ltd. Şti. / Bulut İşkence]
This policy provides general information about the Personal Data Protection Law in Turkey.
The Law on the Protection of Personal Data No. 6698 (hereinafter referred to as “KVKK”) was adopted on March 24, 2016, and published in the Official Gazette No. 29677 on April 7, 2016. Some provisions became effective on the publication date, while others came into force on October 7, 2016.
Data Controller Disclosure
As a data controller, in accordance with Law No. 6698, your personal data may be recorded, stored, updated, disclosed or transferred to third parties, classified, and processed as outlined in this policy and permitted by the legislation.
How Your Personal Data May Be Processed
In compliance with KVKK, your personal data shared with our company may be processed wholly or partially by automated or non-automated means, as part of any data recording system. Any transaction involving personal data is considered “processing of personal data.”
Purposes and Legal Grounds for Processing Personal Data
Your personal data may be processed for the following purposes:
- To fulfill our services and improve our products in accordance with contracts and technology;
- To record required identity and contact details under laws such as the Electronic Commerce Law No. 6563 and the Consumer Protection Law No. 6502;
- To comply with payment systems regulations and to fulfill legal record-keeping obligations;
- To provide required information to public authorities, courts, and law enforcement upon legal request.
Transfer of Personal Data to Third Parties
Your personal data may be shared with: our e-commerce service provider IdeaSoft, suppliers, shipping companies, business partners, domestic or international service providers and third parties in compliance with KVKK.
Collection Methods of Personal Data
Personal data may be collected through:
- Forms on our website and mobile applications, including name, ID number, contact details, IP records, cookies, browsing data, and location information;
- Direct channels such as staff, branches, call centers, printed forms, business cards, and digital marketing;
- Third-party sources such as social media, public databases, competitions, surveys, and campaign websites.
Personal Data Collected Before KVKK
Personal data obtained before the effective date of KVKK (April 7, 2016) through membership, product/service purchases, or other legal means will continue to be processed in accordance with this policy.
Transfer of Personal Data Abroad
Your data may be transferred abroad, to countries accredited by the Personal Data Protection Board, for the purpose of contract fulfillment and only when sufficient data protection is ensured.
Data Retention and Protection
Personal data will be stored securely in our company’s systems and databases in accordance with KVKK Article 12. We implement necessary technical and physical security measures to prevent unauthorized access or unlawful processing. In case of any data breach, the situation will be reported to the Board in compliance with legal obligations.
Accuracy and Up-to-Date Requirement
According to Article 4 of KVKK, you are responsible for providing accurate and current personal data. You may update your information through our website or mobile application.
Rights of the Data Subject Under KVKK
Pursuant to Article 11 of the KVKK, effective as of October 7, 2016, you have the right to:
- Learn whether your personal data is being processed,
- Request information if your data has been processed,
- Learn the purpose of processing and whether it is used appropriately,
- Know the third parties to whom your data is transferred domestically or abroad,
- Request correction if your data is incomplete or incorrect,
- Request deletion or destruction of your data under certain conditions,
- Request notification of these actions to third parties your data was shared with,
- Object to outcomes resulting from automated data processing,
- Claim compensation if you suffer damages due to illegal processing.