PERSONAL DATA PROTECTION AND PROCESSING CLARIFICATION TEXT

 

I. IDENTITY OF THE DATA CONTROLLER

KADIR TARIK EDIZ TEKSTIL SANAYI VE TİCARET ANONIM ŞIRKETI (Hereinafter referred to as “Tarık Ediz” or “Company”)

As Tarık Ediz, we show utmost sensitivity to the privacy and security of personal data of our customers, visitors and business partners, in accordance with the Constitution of the Republic of Turkey, the Law on Protection of Personal Data No. 6698 ("KVKK" or "Law") and relevant secondary legislation.

Your personal data is processed by our Company, which has the title of "Data Controller" defined in Article 3 of the Law, within the framework of the procedures and principles detailed below; in accordance with the law and honesty rules, accurately and when necessary, up-to-date, for specific, explicit and legitimate purposes, relevant, limited and proportionate to the purpose for which they are processed.

 

II. PURPOSES OF PROCESSING YOUR PERSONAL DATA

Your personal data, transmitted to our Company or acquired during our Company's commercial activities, are processed for the purposes of ensuring that our Company's commercial activities are carried out in accordance with legislation and Company policies, ensuring the legal and commercial security of our Company and relevant persons in a business relationship with our Company, and determining and implementing business strategies.

In this context, your personal data are processed for the following purposes, including but not limited to, within the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law:

•   Fulfillment of Legal Obligations: Fulfillment of registration and documentation obligations arising from the Turkish Commercial Code No. 6102, Tax Procedure Law No. 213, Law on Consumer Protection No. 6502, Turkish Code of Obligations No. 6098, Law on Regulation of Publications Made on the Internet and Combating Crimes Committed Through These Publications No. 5651, and other relevant legislative provisions,

•   Execution of Contractual Processes: Planning of product and service sales processes, fulfillment of after-sales support services (alteration, exchange, return, etc.), establishment and execution of contracts, and management of customer relationship processes,

•   Continuation of Operational Activities: Tracking of financial and accounting operations, management of invoicing processes, execution of information security processes, ensuring physical space security (store camera recordings, etc.), providing information to authorized persons, institutions and organizations,

•   Customer Satisfaction and Marketing: Monitoring customer demands and complaints, planning cross-selling activities, analyzing customer habits to create personalized product/service offers, campaign management, and maintaining corporate communication activities,

•   Monitoring Legal Affairs: Retention of transaction records to be used as evidence in potential disputes and conducting legal processes.

•   Carrying out Communication Activities and Sending Commercial Electronic Messages: Your communication information (mobile phone number, e-mail address, etc.) that you have provided to us is primarily processed to finalize your application/request, to provide you with necessary information, and to contact you. Furthermore, if you have given your explicit consent or permission to receive commercial electronic messages, our Company may contact you via SMS (short message), instant messaging applications (WhatsApp, etc.), e-mail, automated calls, and similar communication channels to inform you about campaigns, discounts, promotions, celebrations, and announcements regarding our products and services.

 

Processed Personal Data	Legal Reason for Processing
Name, Surname	If goods or services are purchased from us, processing is mandatory pursuant to Articles 230 et seq. of Tax Procedure Law No. 213 and Article 82 of Turkish Commercial Code No. 6102. (Law No. 6698 Art. 5/2-a). If you become a member of our websites or loyalty card system even if you have not purchased goods or services from us, processing is mandatory for the performance of the membership agreement and services related to the membership agreement. (Law No. 6698 Art. 5/2-c)
TR ID No, Address	If goods or services are purchased from us, processing is mandatory pursuant to Articles 230 et seq. of Tax Procedure Law No. 213 and Article 82 of Turkish Commercial Code No. 6102. (Law No. 6698 Art. 5/2-a)
Email, phone, and other communication information	If you receive services from us, your personal data belonging to the parties of the contract is processed because it is necessary for the performance of the contract to make the necessary notifications regarding the goods and services you have received and to establish communication between the parties. (Law No. 6698 Art. 5/2-c) If you become a member of our websites or loyalty card system even if you have not purchased services from us, processing is mandatory for the performance of the membership agreement and services related to the membership agreement. (Law No. 6698 Art. 5/2-c). If you have requested to receive commercial electronic messages from us, processing is done solely on the basis of your explicit consent. (Law No. 6698 Art. 5/1)
Date of birth, gender	If you request to receive personalized promotions and notifications from us, processing is done solely on the basis of your explicit consent. (Law No. 6698 Art. 5/1)
Service history	Your product and service history received from us is recorded to provide you with a better shopping experience, to improve service quality by identifying suitable products for you, to plan products, and to inform you about suitable products and services if you request. These records are processed because it is mandatory for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed. (Law No. 6698 Art. 5/2-f)
Camera recording	Camera recordings are made at our locations to ensure security. These records are processed because it is mandatory for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed. (Law No. 6698 Art. 5/2-f)

 

 

 

III. TRANSFER OF YOUR PERSONAL DATA

Your personal data may be shared with the individuals and institutions listed below, in line with the realization of the above-mentioned purposes and within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, by taking all necessary technical and administrative measures:

•   Service Providers and Suppliers: Information technology (server, hosting, software), archiving, storage, security, call center, logistics, and cargo companies, and payment service providers (banks, virtual POS institutions) from which our Company procures services to sustain its commercial activities,

•   Legal and Financial Advisors: Lawyers, financial advisors, auditors, and consulting firms, for the purpose of protecting the rights and interests of our Company, resolving legal disputes, and carrying out legal compliance processes,

•   Legally Authorized Public Institutions and Organizations: Courts, enforcement offices, tax offices, Consumer Arbitration Committees and other relevant public institutions, for the purpose of fulfilling our legal obligations and/or responding to duly issued requests from authorized bodies.

•   Advertising and Marketing Solution Partners: Agencies and advertisers with whom we cooperate for the purpose of tailoring advertisements to the target audience and conducting marketing analyses, on the condition that your personal data is anonymized.

 

IV. METHOD OF COLLECTING PERSONAL DATA AND ITS LEGAL BASIS

Your personal data is collected through channels such as our stores, head office units, website, mobile applications, social media platforms, and call center; orally, in writing or electronically; by fully or partially automated means or by non-automated means provided that it is part of any data recording system.

Your personal data collected by these methods is processed based on the following legal grounds specified in Article 5 of the Law:

•   Explicitly foreseen by the laws,

•   It is necessary to process the personal data of the parties to a contract, provided that it is directly related to the establishment or performance of the contract,

•   It is mandatory for the data controller to fulfill its legal obligation,

•   Data processing is mandatory for the establishment, exercise or protection of a right,

•   Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject,

•   Having your explicit consent when necessary (especially for marketing activities and special categories of personal data).

 

V. RIGHTS OF THE PERSONAL DATA OWNER (KVKK ARTICLE 11)

As personal data owners, you can exercise your following rights by applying to our Company in accordance with Article 11 of the Law:

1.      Learning whether your personal data is processed,

2.      Requesting information if your personal data has been processed,

3.      Learning the purpose of processing your personal data and whether they are used in accordance with their purpose,

4.      Knowing the third parties to whom your personal data is transferred domestically or abroad,

5.      Requesting the rectification of your personal data if it is incomplete or incorrectly processed and requesting that the operation carried out in this context be notified to third parties to whom the personal data has been transferred,

6.      Requesting the erasure or destruction of your personal data if the reasons requiring its processing have disappeared, despite being processed in accordance with the Law and other relevant laws, and requesting that the operation carried out in this context be notified to third parties to whom the personal data has been transferred,

7.      Objecting to the emergence of a result against you by analyzing your processed data exclusively through automated systems,

8.      To request compensation for damages incurred due to the unlawful processing of your personal data.

 

VI. PROCEDURES AND PRINCIPLES FOR APPLICATION TO THE DATA CONTROLLER

Pursuant to the first paragraph of Article 13 of the Law and the provisions of the "Communiqué on the Procedures and Principles for Application to the Data Controller"; your requests regarding your rights mentioned above, in Turkish, can be submitted as follows:

•   In Writing: By delivering your petition with a wet signature personally or through a notary to the address "Merkez Mh. Bağlar Cd. No: 16 Kağıthane / İstanbul",

•   Via Registered Electronic Mail (KEP): By sending it to our Company's KEP address,

•   Via Electronic Mail: By using your e-mail address registered in our Company's system or by signing with a secure electronic signature/mobile signature and sending it to "tarikediz@tarikediz.com".

You can submit your application to our Company.

Your application must include your name, surname, and signature if written, Turkish ID number for Turkish citizens, nationality, passport number or ID number if available for foreigners, residence or business address for notification, email address, phone and fax number for notification if available, and the subject of your request. Information and documents related to the subject should be attached to the application.       

Applications submitted to us will be finalized within the shortest time, depending on the nature of the request, and no later than 30 (thirty) days; our response will be communicated to you in writing or electronically. If the process requires an additional cost, a fee determined by the Board may be requested.

 

VII. DECLARATION OF READING AND ACCEPTANCE

After this Clarification Text has been communicated to you through any communication channel (SMS, e-mail, instant messaging applications, QR code, etc.) or made accessible to you; if you purchase products or services from our Company, place an order, or continue your existing commercial relationship, you will be deemed to have read this entire text, understood its content, been fully and completely informed about the processing of your personal data, data transfer groups, and your rights, and irrevocably accept, declare, and undertake these matters.

 

KADİR TARIK EDİZ TEKSTİL SANAYİ VE TİCARET A.Ş.