Personal Data Policy
[Bulut El Aletleri ve Mak. Sis. Ltd. Şti. / Bulut İşkence]

General Information about the Personal Data Protection Law

The Personal Data Protection Law No. 6698 (hereinafter referred to as "KVKK") was adopted on March 24, 2016, and published in the Official Gazette No. 29677 dated April 7, 2016. Some provisions of the KVKK came into effect on the date of publication, and others on October 7, 2016.

Information as Data Controller

In accordance with KVKK No. 6698 and as a Data Controller, your personal data will be recorded, stored, updated, classified, disclosed to third parties when legally permitted, transferred, and processed in ways specified by KVKK, as explained on this page.

How Your Personal Data May Be Processed

Under KVKK No. 6698, your personal data shared with our Company may be processed partially or fully, automatically or manually, by recording, storing, modifying, reorganizing, and subjecting to any kind of operation on the data. Any processing on personal data is considered "processing of personal data" within the KVKK scope.

Purposes and Legal Grounds for Processing Your Personal Data

To fulfill the requirements of services provided to our customers, in accordance with contracts and technological needs, and to improve our products and services;
To record identity, address, and other necessary information to identify data owners, pursuant to the Electronic Commerce Law No. 6563, Consumer Protection Law No. 6502, and related regulations;
To fulfill obligations related to banking and electronic payment systems, including document and record keeping, reporting, and information provision;
To provide information to public authorities, prosecutors, courts, and related officials in cases of public security or legal disputes;

Personal data processing will comply with KVKK and relevant secondary regulations.

Third Parties to Whom Your Personal Data May Be Transferred

Your personal data shared with our Company may be transferred to third parties, including but not limited to:

IdeaSoft Yazılım San. ve Tic. A.Ş. (providing our e-commerce infrastructure),
Suppliers, cargo companies, and related service providers,
Domestic and international organizations and partners providing services as Data Processors.

How Your Personal Data is Collected

Your personal data may be collected via:

Forms on our website and mobile applications including name, surname, identity number, address, phone, email, username and password, browsing data, cookies, location data, etc.,
Verbal, written or electronic data collection through our sales and marketing teams, branches, suppliers, other sales channels, call centers, etc.,
Physical or virtual environments, face-to-face or remotely, during commercial relationships, job applications, offers, etc.,
Data indirectly collected from websites, blogs, contests, surveys, games, campaigns, social media platforms, public databases, and e-newsletter interactions.

Personal Data Obtained Before KVKK Entry into Force

Personal data lawfully obtained before April 7, 2016, will continue to be processed and retained according to these terms.

International Transfer of Personal Data

Your personal data may be transferred abroad to countries accredited by the Personal Data Protection Board that provide adequate protection, within the limits of KVKK and contractual purposes.

Storage and Protection of Personal Data

Your personal data will be stored confidentially in our databases and systems as per Article 12 of KVKK. Our company is responsible for preventing unlawful processing and unauthorized access by implementing software and physical security measures. Any unlawful access will be reported promptly to the Personal Data Protection Board.

Keeping Personal Data Up to Date and Accurate

Our company is obliged to keep your personal data accurate and up to date. Customers are responsible for sharing and updating correct information.

Rights of Data Subjects under KVKK Article 11

As of October 7, 2016, you have the following rights:

To learn whether your personal data is processed,
To request information if processed,
To learn the purpose of processing and whether data is used accordingly,
To know third parties domestic or foreign to whom data is transferred,
To request correction of incomplete or inaccurate data,
To request deletion or destruction of data under specified conditions,
To request notification of corrections or deletions to third parties,
To object to automated processing resulting in unfavorable outcomes,
To claim compensation for damages caused by unlawful processing.

[Company full title], registered with the [ATO Chamber of Commerce No. 528991], MERSIS No. [0190-1618-5780-0001], located at [Address], is the Data Controller under KVKK. The appointed Data Controller Representative will be announced in the Data Controllers Registry and on this document’s website once legally established.