Menu
Your Cart

Privacy Policy and Protection of Personal Data

Protection of personal data is an important issue for GUNAY TICARET. GUNAY TICARET, as the data responsible, adopts the principles stipulated by the KVK Law in order to comply with the Law on Protection of Personal Data (“KVK Law 66) no. 6698, processing, deleting, destroying, anonymizing, transferring data security. The Privacy and Protection of Personal Data Policy issued within this scope is made available to the real persons (“Contact Person”) whose personal data is processed.


1. Scope and Purpose of Privacy and Privacy Policy


This Privacy and Privacy Policy;


a. Methods of collecting personal data and legal reasons,


b. Which person groups' personal data is being processed (Data Group Categorization)


c. Which categories of personal data are processed for these groups of people (Data Categories) and sample data types,


D. In which business processes and for which purposes this personal data is used,


to. Technical and administrative measures taken to ensure the security of personal data,


f. To whom and for what purpose personal data may be transmitted,


g. Personal data storage periods,


h. Profiling and Segmentation


I. What are the rights of the Contact Persons on their personal data and how they may exercise these rights,


j. How they can change their positive or negative preferences for receiving electronic commercial messages,


k. Personal data sharing with government authorities


l. Cookie Usage and Management


Discloses.




a. Personal Data Collection Methods and Legal Reasons


GUNAY TICARET personal data Web sites, Web sites mobile applications, social media accounts, cookies, call center, administrative and judicial authorities and other communication channels through audio, electronic or written, in accordance with the personal data processing conditions specified in the KVK Law and Privacy / Personal Data Protection Policy.


b. Data Subject Contact Group Categorization


GUNAY TICARET categorizes the data groups in the personal data processing processes and the activities related to these processes as follows: However, in accordance with the personal data processing conditions stated in Articles 5 and 6 of the KVK Law and in accordance with the legal reasons stated in this Privacy / Personal Data Protection Policy, personal data of other groups of people (consultant, educator, blogger) can be processed.


c. Data Categories and Sample Data Types


one.


a) Member Customer


· Identification: Name, surname, date of birth, gender, T.C. identification number


· Location Information: City of residence, district (delivery address of shopping through tanyanargile.com)


· Contact Information: mobile phone, e-mail address, address, post code, fixed phone


· Financial Information: Tax office, invoice information


· Customer / Member Information: Membership information, membership ID number


· Customer / Member Transaction Information: Purchased product (s), purchase amount, shopping date, call center interview records, commercial communication permission, used campaigns / contests, used coupons, information about order


· Risk Management Information: IP address


· Transaction Security Information: Password, password information


· Marketing Information: Cookie records, targeting information, evaluations showing habits and likes


· Auditory Data: Call center call records


· Legal Transaction and Compliance Information: The starting and ending time of the service provided, the type of service used, the amount of data transferred, the commercial electronic message permission given by the Person concerned, the membership agreement approved, the corporate membership agreement, the services provided by GUNAY TICARET other legal texts and contracts


· Marketing Information: Calls made by sms, e-mail messages or call center for marketing purposes sent on the basis of the commercial electronic message permission given by the person concerned


· Demand / Complaint Management / Reputation Management Information: Records related to the complaints and / or requests submitted by the person concerned through the website, mobile application, social media accounts or call center regarding the product or service purchased and the transactions made during the evaluation or management of these requests.





b) Guest Customer (users who make purchases from the site without being a member)


· Identification: Name, surname, date of birth, gender, T.C. identification number


· Location Information: City of residence, district (delivery address of shopping through tanyanargile.com)


· Contact Information: mobile phone, e-mail address, address, post code, fixed phone


· Financial Information: Tax office, invoice information


· Guest Customer Transaction Information: Purchased product (s), purchase amount, shopping date, call center interview records, commercial communication permission, benefited campaigns, information about order


· Risk Management Information: IP address


· Transaction Security Information: Password, password information


· Marketing Information: Cookie records, targeting information, evaluations showing habits and likes


· Auditory Data: Call center call records


· Legal Transaction and Compliance Information: The start and end time of the service provided, the type of service used, the amount of data transferred, the commercial electronic message permission given by the Contact Person, the other legal texts and contracts enabling the use of the services provided by GUNAY TICARET


· Marketing Information: Calls made by sms, e-mail messages or call center for marketing purposes sent on the basis of the commercial electronic message permission given by the person concerned


· Demand / Complaint Management / Reputation Management Information: Records related to the complaints and / or requests submitted by the person concerned through the website, mobile application, social media accounts or call center regarding the product or service purchased and the transactions made during the evaluation or management of these requests.


2nd.


Online Visitor


· Transaction Security Information: Password, mobile phone, password information


· Legal Transaction Information / Risk Management Information: IP address


· Legal Procedures and Compliance Information: The start and end time of the service, the type of service used, the amount of data transferred.


3.


Person to whom the purchased product will be delivered


· Identification: Name, surname, date of birth, gender, T.C. identification number


· Location Information: City of residence, district (delivery address of shopping through tanyanargile.com)


· Contact Information: mobile phone, e-mail address, address, post code, fixed phone


· Financial Information: Tax office, invoice information


4.


Vendor / Supplier / Vendor Candidate / Vendor or Supplier Employee or Official


· Identity Information: Turkish Identity Number, Name and Surname


· Contact Information: e-mail address, telephone, REM address, mobile phone


· Financial Information: Account No, Tax office, Tax Identification Number, tax plate, IBAN


· Legal Procedures and Compliance Information: Signature circular, activity certificate,


· Personal Data / Legal Transaction Information: Signature


· Visual Information: Photo

D. Which Business Processes and For Which Purposes Are Personal Data Used?


one.


a) Member Customer Personal Data


· Realization of membership transactions,


· Tanyanargile.com e-commerce platforms (“platform”) operated by GUNAY TICARET; Improving the services offered through the internet, developing new services and providing information on this,


· For the purpose of fulfilling the Membership Agreement established with the Member Customer, commercial electronic message approval is available to the existing Member Customers; Analyzing the preferences, tastes and needs of the Member Customer and providing specific promotion, opportunity and benefit to the Member Customer,


· Remarketing, targeting, profiling and analyzing in accordance with the express consent of the Member Customer, promotion and marketing of applications, goods / products and services in line with the preference and taste of the Member Customer,


· Resolving member customer problems and complaints,


· Improving Member Customer experience on both platform and mobile application,


· Monitoring of accounting and purchasing transactions,


· Compliance with legal processes and legislation,


· Responding to information requests from administrative and judicial authorities,


· Ensuring information and process security and preventing misuse,


· Making necessary arrangements to ensure that the processed data is up-to-date and accurate





b) Guest Customer (users who make purchases from the site without being a member) Personal Data


· Shopping in platforms as Platform guests,,


· Improving the services offered through platforms, developing new services and providing information on this,


· Commercial electronic message approval available for Guest Customers; analyzing the preferences, tastes and needs and providing special promotion, opportunity and benefit to the Guest Customer,


· Remarketing, targeting, profiling and analysis in accordance with the express consent of the Guest Customer, promotion and marketing of applications, goods / products and services in accordance with the preference and taste of the Guest Customer,


· Resolving guest customer problems and complaints,


· Improving Guest Customer experience on both platform and mobile application,


· Monitoring of accounting and purchasing transactions,


· Compliance with legal processes and legislation,


· Responding to information requests from administrative and judicial authorities,


· Ensuring information and process security and preventing misuse,


· Making necessary arrangements to ensure that the processed data is up-to-date and accurate,


· Fulfillment of legal obligations


2nd.


Online Visitor Personal Data


· Processing of online visitor data within the scope of Law No. 5651,


· Compliance with legal processes and legislation,


· Responding to information requests from administrative and judicial authorities,


· Ensuring information and process security and preventing misuse,


· Fulfillment of legal obligations


3.


Person Personal Data to be Delivered on the Name of the Purchased Product


· Carrying out product delivery processes,


· Monitoring of accounting and purchasing transactions,


· Compliance with legal processes and legislation,


· Responding to information requests from administrative and judicial authorities,


· Ensuring information and process security and preventing misuse,


· Making necessary arrangements to ensure that the processed data is up-to-date and accurate,


· Fulfillment of legal obligations


4.


Seller / Supplier / Seller Candidate / Seller or Supplier Employee or Authorized Personal Data


· Conducting contract processes,


· Monitoring of accounting and purchasing transactions,


· Compliance with legal processes and legislation,


· Responding to information requests from administrative and judicial authorities,


· Ensuring information and process security and preventing misuse,


· Making necessary arrangements to ensure that the processed data is up-to-date and accurate,


· Fulfillment of legal obligations

to. Technical and Administrative Measures to Protect Personal Data


GUNAY TICARET, undertakes to take all necessary technical and administrative measures and to show due diligence to ensure the confidentiality, integrity and security of your personal data.


GUNAY TICARET takes necessary measures to prevent unauthorized access, misuse, personal processing, disclosure, alteration or destruction of personal data. GUNAY TICARET uses generally accepted security technology standards such as firewalls and Secure Socket Layer (SSL) encryption when processing personal data. In addition, when submitting your personal data to GUNAY TICARET through the website, mobile application and mobile site, this data is transmitted using SSL.


In order to prevent illegal access to personal data, to prevent unlawful processing of this data and to protect personal data, GUNAY TICARET:


· Protects all fields in the website or mobile application from which personal data is received with SSL,


· Creates and implements access authorization and control matrices for employees in order to prevent unlawful processing of personal data collected from the website or mobile application,


· To ensure that personal data is not illegally accessed; periodically conducts intrusion tests, tests the system's resistance to unauthorized access,


· Uses the Pseudonymization method for all secondary data processing except for the primary processing purpose. Pseudonymous uses encryption methods in the systems in which this data is included in order to make it impossible for the person to be identified and implements a more strict access authorization and control policy.


· Ensures that personal data on paper is kept in lockers and accessible only by authorized persons.


· Personal data processed through cookies from third parties receiving service is deleted from third party systems if membership expires.


Although GUNAY TICARET takes the necessary information security measures, GUNAY TICARET will immediately notify you and the Personal Data Protection Board in the event that the personal data is damaged as a result of attacks on the platforms operated by GUNAY TICARET or the unauthorized third parties. takes necessary measures.

f. Who and for what purpose can personal data be transferred


GUNAY TICARET transfers personal data only to third parties for the purposes specified in this Privacy and Privacy Policy and in accordance with Articles 8 and 9 of the KVK Law. Member Customer / Guest Customer data processed in this scope and the contact information to be delivered on behalf of the purchased product are shared with the seller and the cargo company and this data can be accessed by the call center when necessary. The information of the person to whom invoice will be issued is shared with the cargo company for the purpose of sending the invoice to the related person.


Member Customer / Guest Customer's mobile phone number and / or e-mail address; In accordance with the approval of commercial electronic messages, the shopping is shared with the commercial electronic messaging tool service provider in order to promote, advertise, benefit and opportunity in line with preferences, tastes and habits.


The website or mobile application usage preferences and navigation history are shared with our domestic / international business partners who receive cookies in order to make segmentation and to communicate with the Member Customer / Guest Customer in accordance with their preferences and preferences. Personal data transfers within this scope are carried out through the secure environment and channels provided by the related third party. Depending on the content and scope of the service received from third parties; In all cases where no transfer of personal data of Member Customer / Guest Customer is required, transfer is made using Pseudonymous data.


Member Customer / Guest In order to increase customer satisfaction and loyalty, the data of the Member Customer / Guest Customer is shared with the companies that will conduct market research.


Within the scope of reporting and statistical studies, the data belonging to the Member Customer / Guest Customer are Doğuş Holding A.Ş. and SK Planet Ltd. is shared with.


Personal data subject to domestic and international transfer mentioned above, as well as technical measures to ensure their safety; considering that the opposite party of the legal relationship is the data officer or the person who is processing the data, it is also legally protected by the provisions of the KVK Law, which is included in our contracts.


During the shared information, as stated above, when transferring personal data to countries outside of Turkey, the data transfer as permitted by applicable law and in accordance with this policy for data protection is ensured.

g. Personal Data Retention Times


GUNAY TICARET maintains the personal data it processes in accordance with the KVK Law for the periods required by the relevant legislation or for the purpose of processing. In our Personal Data Retention and Disposal Policy, these periods are approximately as follows:


Call Center Voice Recordings


3 years


Law No. 6563 and related secondary legislation


Membership and order records


10 years


Law No. 6098


All records related to accounting and financial transactions


10 years


Law No. 6102, Law No. 213


Cookies


Up to 540 days


Commercial electronic message approval records


1 year from date of revocation


Law No. 6563 and related secondary legislation


Traffic information for online visitors


2 years


Law No. 5651


Information and / or CVs received for job application


1 year


Personal data for Member Customer / Guest Customers


10 years after the end of the legal relationship; 6563 3 years in accordance with the law and related secondary legislation


Law No. 6563, Law No. 6102, Law No. 6098, Law No. 213, Law No. 6502


Personal data for suppliers


10 years after the end of legal relationship


Law No. 6102, Law No. 6098 and Law No. 213


Personal data received for usability testing research


2 weeks


You may review our Cookie Policy regarding the storage periods of personal data we obtain through cookies.

h. Profiling and Segmentation


GUNAY TICARET By using the personal data processed regarding the Member Customer / Guest Customer;


· A. Regarding the Member Customer / Guest Customer who approves receiving commercial electronic messages, it performs profiling and segmentation in order to prepare content that is more appropriate to the tastes and preferences of the Member Customer / Guest Customer, to promote advertising, discounts and discounts.


· B. By means of profiling and segmentation in terms of Member Customer / Guest Customer who did not give commercial electronic message approval;


a. Product improvement (identifying the best-selling or non-selling product categories),


b. Organizing and uploading campaigns for customer groups that have the potential to buy a specific product by modeling by analyzing shopping preferences,


c. Actions are taken to increase sales potential.


Within the scope of profiling and segmentation activities, the personal data of the Member Customer / Guest Customer, especially name and surname, mobile phone, e-mail or address information are not used directly, instead the transactions with the assigned Customer / Guest Customer IDs assigned to them are performed. Member Customer / Guest The use of nickname, in other words Customer ID or in other words, protects the personal data of the Customer / Member. Member Customer / Guest Customer IDs are only accessible to the relevant persons or departments within GUNAY TICARET. These IDs assigned to Member Customer / Guest Customer are kept encrypted by GUNAY TICARET in the system and access to this section is only granted to limited persons.


I. What are the Rights of the Persons on Personal Data and how they may use them


GUNAY TICARET has the rights of the person concerned in accordance with Article 11 of the KVK Law:


· Learn whether personal data is processed,


· Request information if their personal data has been processed,


· To learn the purpose of processing personal data and whether they are used appropriately,


· Knowing the third parties to whom personal data is transferred at home or abroad,


· Requesting correction of personal data in case of incomplete or incorrect processing,


· Requesting the deletion or destruction of personal data in accordance with the conditions stipulated in Article 7 of the KVK Law,


· Requesting the transactions carried out in accordance with paragraphs (d) and (e) to the third parties to whom the personal data are transmitted,


· Object to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems,


· Demand for damages in case of damage due to unlawful processing of personal data.


In order to exercise your rights on your personal data; You can access your account from GUNAY TICARET website, mobile application and ım My Account ”section of mobile site and make necessary changes, updates and / or deletions. In addition, you can make your application and exercise your rights with the methods specified in the “Application Form uyarınca prepared in accordance with Article 13 of the KVK Law on the website or mobile application of electronic commerce platforms operated by GUNAY TICARET.


j. How Contacts Can Change Positive or Negative Preferences for Receiving Electronic Business Messages


You may change or update your positive or negative preferences by receiving the elektronik My Account ”section at any time when you subscribe to the website or mobile application of the electronic trading platforms operated by GUNAY TICARET or at a later time.


Termination does not constitute a revocation of your consent to receive commercial electronic messages. Therefore, be sure to complete all procedures for reverting your consent.


With regard to cookie management, you can follow the steps outlined in our Cookie Policy.


k. Personal Data Sharing with Official Authorities


GUNAY TICARET shall provide you with your personal data and navigation information about your visit or membership to electronic commerce platforms and mobile applications operated by GUNAY TICARET; GUNAY TICARET is legally authorized to request this information in order to fulfill its obligations under the law (in cases where GUNAY TICARET has a legal or administrative obligation to give notice or information) including, but not limited to, the fight against crime, the threat of state and public security and the like. share with public institutions and organizations.

l. Cookie Usage and Management


For detailed information about cookies used by GUNAY TICARET, types of cookies, purposes, storage periods and cookie management, you can review our Cookie Policy.


2. Conditions for Deletion, Destruction and Anonymousization of Personal Data


GUNAY TICARET stores the personal data it processes through its web site, mobile application or mobile website for the periods required by the relevant laws and / or the purposes required for processing purposes pursuant to Articles 7, 17 and Article 138 of the Turkish Criminal Code. In the event that these periods expire, they shall delete, destroy or anonymize them in accordance with the provisions of the Regulation on the Deletion, Elimination or Anonymousization of Personal Data.


GUNAY TICARET means the process of deleting personal data, making the personal data inaccessible and reusable for the users concerned. GUNAY TICARET creates and implements access authorization and control matrix at user level for this purpose. Takes the necessary measures to perform the deletion in the database.


Destruction of personal data by GUNAY TICARET means the process of making personal data inaccessible, irrevocable and reusable by anyone.


The anonymization of personal data by GUNAY TICARET means that the personal data cannot be associated with any identifiable or identifiable real person even if the personal data is matched with other data.


GUNAY TICARET describes in detail the methods of deletion, destruction and anonymization and the technical and administrative measures taken within the scope of the Personal Data Storage and Destruction Policy prepared in accordance with the Regulation on Deletion, Destruction or Anonymous Making of Personal Data. In this Policy, the period of the periodic destruction required by the Regulation is determined as 6 months.


3. Amendments to the Privacy / Privacy Policy


GUNAY TICARET may change this Privacy / Personal Data Protection Policy at any time. These changes take effect immediately upon the publication of the new Privacy / Personal Data Protection Policy. We will provide you with the necessary information to keep you informed of any changes to this Privacy / Privacy Policy.