Privacy Policy

The personal data processed depending on the User’s access to and activities on the Website are set out below:

• Transaction Security Information (e.g. username, IP address, etc.),
• On-site Navigation / Transaction Information,
  
  Where relevant forms are completed by the User:
  
  
• Identity Information,
• Contact Information,
• Request / Complaint Management Information.

In addition to the above, other personal data that may be necessary for the operation of the Website may also be processed in accordance with the Law.

Cookies are small text files sent to the User via browsers by servers. Cookies may be used to provide services tailored to the User, improve service quality, enhance website content based on user preferences, ensure the secure and efficient operation of the Website, and to offer promotional and marketing suggestions where applicable.

In this context, the Company may track the User’s browsing information and usage history on the Website and store cookies on the User’s device for varying periods depending on the type of cookie used. Cookies are retained only for as long as necessary for their intended purposes and in any event in accordance with applicable legislation.

The User may refuse the use of cookies, delete existing cookies, or request to be notified before cookies are placed by changing their browser settings. Where required by applicable legislation, cookies will only be used upon obtaining the User’s explicit consent through the cookie management tools made available on the Website.

Personal data are collected through the Website, by fully or partially automated or non-automated means, in electronic form, and are retained for the period necessary for the relevant purposes.

As a rule, personal data are processed based on the User’s explicit consent. However, pursuant to Article 5(2) of the Law, personal data may also be processed without explicit consent where one of the following legal grounds applies:

• where it is expressly provided for by law,
• where the personal data have been made public by the data subject,
• where processing is mandatory to protect the life or physical integrity of the data subject or another person who is unable to express consent due to actual impossibility,
• where processing is necessary for the establishment or performance of a contract to which the data subject is a party,
• where processing is mandatory for the Company to fulfil its legal obligations,
• where processing is necessary for the establishment, exercise or protection of a right,
• where processing is necessary for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the data subject.

The Company processes personal data obtained through the Website for the following purposes, provided that at least one of the conditions set out in Article 5(2) of the Law exists: fulfilling obligations expressly stipulated by law as well as professional and legal requirements; properly planning and conducting the Company’s commercial relationships, partnerships and strategies; ensuring the proper functioning and information security of the Company’s information systems and establishing the necessary databases for this purpose; improving the services offered through the Website, remedying technical issues, and managing requests and complaints.

Where the User provides consent, personal data may also be processed for the purposes of enabling the User to benefit from the products and services offered by the Company in the most effective manner (including conducting statistics, analysis, profiling and preference reporting) and informing the User about such products and services (including via promotional, advertising, campaign, announcement and information activities); personalizing the products and services offered by the Company in line with the User’s demands, needs and preferences; and planning, developing and carrying out corporate communication activities.

Where one of the conditions set out in Article 5(2) of the Law exists, personal data may be transferred, limited to the purposes specified in the first paragraph of Section (c), to the Company’s group companies, affiliates, business partners, third-party service providers from whom the Company receives services in order to fulfil its contractual or legal obligations (such as security, healthcare, occupational safety, legal services, hosting, etc.), and to authorized public institutions and organization’s, within the framework of Articles 8 and 9 of the Law and provided that the necessary security measures are taken.

Where the User provides consent, personal data may also be transferred, limited to the purposes specified in the second paragraph of Section (c), to the Company’s group companies, affiliates and business partners.

The Company is obliged to take all necessary technical and administrative measures to ensure an adequate level of security to prevent the unlawful processing of personal data, prevent unlawful access to personal data, and ensure the protection and safeguarding of personal data.

If the Website provides links or redirections to other websites or applications, the Company has no knowledge of whether such third-party websites or applications comply with personal data protection legislation and shall not be held responsible for their privacy policies or content.

More detailed information regarding the security of personal data is provided in the Company’s Personal Data Protection and Processing Policy.

Pursuant to Article 10 of the Law, the Company informs the Data Subject of their rights, provides guidance on how such rights may be exercised, and establishes the necessary internal procedures as well as administrative and technical arrangements for this purpose.

In accordance with Article 11 of the Law, Data Subjects whose personal data are processed have the right to:

• learn whether their personal data are processed,
• request information if their personal data have been processed,
• learn the purpose of processing and whether such data are used in accordance with their purpose,
• know the third parties to whom personal data are transferred domestically or abroad,
• request the correction of personal data if they are incomplete or inaccurate,
• request the deletion or destruction of personal data within the framework of the conditions set out in Article 7 of the Law,
• request notification of the third parties to whom personal data have been transferred regarding the actions taken pursuant to the requests for correction and deletion,
• object to the occurrence of a result against themselves by analyzing the processed data exclusively through automated systems,
• request compensation for damages in the event that they suffer damage due to unlawful processing of their personal data.

Requests and applications regarding the implementation of the Law may be submitted by completing the application form available on the Website and delivering it in writing in person or via a notary public to the following address:

Üniversiteler Mahallesi, 1596. Cadde No:8/1 Çankaya Ankara/Türkiye

Further details regarding requests and applications, as well as the application form, are available under the “Personal Data Protection” section on the Website.

By using the Website, the User declares that they have read and understood all the terms set out in this Privacy Policy, that they have been duly informed about the processing of their personal data, and that they accept and consent to the processing of their personal data within the scope and for the purposes specified herein.

The Company reserves the right to amend the provisions of this Privacy Policy without prior notice where required by legislation or for organizational reasons.