Information Text on the Protection and Processing of Personal Data
The purpose of this Information Text on the Protection and Processing of Personal Data (“ Information Text ”) is to fulfill the information obligation imposed by Article 10 of the Law on the Protection of Personal Data No. 6698 (“Law”) regarding the processing of personal data obtained from you within the scope of the products and services offered by Lavanta __ A.Ş. (“ Lavanta ” or “ Our Company ”).
Lavanta constantly renews itself to provide better service to its users and works to provide the best service, takes the highest possible security measures to ensure that personal data is collected, stored and shared in accordance with the law and to protect its privacy.
Our Company may update and change this Disclosure Statement at any time. Updates and changes made by our Company will be effective from the date they are provided to you.
- a) Data Controller
In accordance with the Personal Data Protection Law, your personal data will be collected and processed by Lavanta __ A.Ş., as the data controller, within the scope described below.
- b) Collected Personal Data
Our company obtains and processes the following personal data from you within the scope of the products and services it offers.
Identity Information: Name and surname, Turkish identity number, customer number, trade name (if any), tax number and tax office.
Contact Information: Mobile phone number, email address, delivery and billing address information.
Financial Information: Credit card information, information on whether the payment transaction has been completed.
Customer Transaction Information: Information regarding payment, contract data signed with you, and power of attorney data if the work is carried out with a power of attorney.
Transaction Security Information: Device information, IP address information, password information, platform access records.
Marketing Information: Commercial electronic message permission record given by the relevant person, marketing SMS, e-mail messages sent in line with this permission or calls made by the call center, targeting information, shopping habits and likes, analyses conducted for marketing purposes.
Audio Recordings: Call center voice recordings in case of using a call center.
Legal Transaction Information: Information in correspondence with authorized persons, institutions and organizations, information in case and enforcement files, and information on legal information requests.
- c) Purposes for which Personal Data will be Processed
Your personal data obtained based on Article 5 of the Law and detailed above (“your personal data”) are processed in a limited and proportionate manner in connection with the processing purposes specified below, in line with the general principles set out in Article 4 of the Law.
Within the scope of the products and services offered by our company, your identity information, contact information, customer transaction information, transaction security information and audio recordings are processed for the following purposes:
- Planning and carrying out sales transactions of our products and maintaining the contractual relationship with you,
- Planning and execution of the delivery processes of our products,
- Planning and execution of payment processes,
- Ensuring that products and services are delivered to the right person,
- Carrying out communication activities within the scope of the above activities,
- Meeting, evaluating and reporting all your requests, complaints, questions and opinions, taking necessary actions accordingly, planning and conducting customer satisfaction surveys, and carrying out communication activities with you within this scope.
Within the scope of marketing activities carried out by our company, your identity information, contact information, customer transaction information, transaction security information, marketing information and audio recordings are processed for the following purposes:
- Planning and execution of discounts, campaigns, promotions and marketing activities,
- Planning and executing marketing strategies through market research and analysis activities,
- Planning and executing marketing activities and campaigns specifically defined for specific audiences on different professional groups and special occasions,
- Personalizing products and services according to customers' tastes, interests, usage habits and needs,
- Conducting segmentation/profiling and analysis studies,
- Displaying personalized advertisements through social media platforms and search engines,
- Planning and conducting customer satisfaction surveys,
- Carrying out communication activities within the scope of marketing activities.
All your personal data mentioned above are processed for the following purposes within the scope of management and compliance activities:
- Carrying out personal data storage activities, improving system performance and carrying out information security processes,
- Carrying out all the above-mentioned activities in accordance with the current legislation,
- Conducting, evaluating and reporting risk analysis studies and audits,
- Providing information to legally authorized institutions and organizations, following up on legal matters and exercising our right to defense when necessary.
Ç) To Whom and For What Purposes Can Processed Personal Data Be Transferred?
Our Company may transfer all personal data collected as mentioned in this Information Text to the following persons and organizations within the framework of the personal data processing conditions specified in Articles 8 and 9 of the Law:
- All your personal data mentioned above are transferred to the company providing services in this regard and stored by this company for the purpose of carrying out storage activities, planning and executing relevant transactions and improving system performance.
- All your personal data mentioned above are transferred to the service provider company that provides services in this regard for the purpose of customer relations management and customer requests / complaints tracking.
- Your identity, contact and customer transaction data are transferred to cargo companies for the purpose of planning and executing delivery processes.
- Your personal data mentioned above is transferred to service providers and marketing agencies that provide customer relationship management and marketing services for the purpose of carrying out marketing activities.
- Your personal data mentioned above may be transferred to legally authorized private persons and organizations and legally authorized public institutions, including the relevant ministries, courts, enforcement offices, notaries, only if it is mandatory pursuant to legislation, for the purposes of carrying out activities in accordance with the applicable legislation, providing information to legally authorized institutions and organizations, following up on legal affairs, and exercising our right of defense when necessary.
- d) Method and Legal Reason for Collecting Personal Data
All your personal data processed for the above-mentioned purposes are obtained by our Company (i) verbally and/or in writing, in physical and/or electronic environment and/or by being personally submitted by the relevant real person in physical environment and/or via e-mail and other means of communication, (ii) through our website, (iii) in physical and/or electronic environment through the e-commerce platforms we sell.
Personal data collected by our Company for the purposes and methods mentioned above may be processed and transferred based on the following legal grounds within the scope of Articles 5 and 6 of the Law:
- All personal data obtained by our company within the scope of providing our products and services and specified above are processed based on the legal reason of "performance or establishment of the contract" and transferred to the above-mentioned persons and organizations.
- All your personal data obtained within the scope of activities related to the development of our products and services and specified above are processed based on the legal reason of "the existence of our legitimate interest" and transferred to the persons and organizations specified above.
- Your personal data, which is processed for the purposes of conducting, evaluating and reporting risk analysis studies and audits, planning and conducting customer satisfaction surveys and carrying out information security processes, and is specified above, is processed and transferred to the above-mentioned persons and organizations based on the legal grounds of "explicitly prescribed by law", "fulfillment of our legal obligations" and "existence of our legitimate interest".
- All your personal data obtained within the scope of marketing activities and specified above are processed and transferred to the above-mentioned persons and organizations based on the legal ground of "the existence of your explicit consent" if you give your explicit consent.
- Your personal data, which is processed for the purposes of carrying out the above-mentioned activities in accordance with the applicable legislation, providing information to legally authorized institutions and organizations, pursuing legal affairs and exercising our right of defense when necessary, is processed and transferred to the above-mentioned persons and organizations based on the legal grounds of "explicitly prescribed by law," "fulfillment of our legal obligations," and "establishment, exercise, or protection of a right."
- e) Rights of the Personal Data Owner Listed in Article 11 of Law No. 6698
As personal data owners, if you submit your requests regarding your rights to our Company using the methods outlined below, our Company will process your request as soon as possible and within thirty days at the latest, depending on the nature of the request. No fee will be charged for a response up to ten pages. A processing fee of 1 Turkish Lira will be charged for each page exceeding ten pages. If the response is provided on a recording medium such as a CD or flash drive, the fee that the Owner may charge will not exceed the cost of the recording medium.
In this context, personal data owners;
- To learn whether your personal data is being processed,
- To request information regarding the processing of personal data,
- To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
- To know the third parties to whom personal data is transferred, either domestically or abroad,
- To request correction of personal data if it is processed incompletely or incorrectly and to request that the action taken in this context be notified to third parties to whom personal data has been transferred,
- To request the deletion or destruction of personal data in case the reasons requiring processing are eliminated, even though it has been processed in accordance with the provisions of Law No. 6698 and other relevant laws, and to request that the action taken within this scope be notified to third parties to whom personal data has been transferred,
- To object to the emergence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,
- In case of any damage caused by the unlawful processing of personal data, the person has the right to demand compensation for the damage.
You may submit your request to exercise your rights specified above, in accordance with Article 5 of the Communiqué on the Procedures and Principles of Application to the Data Controller, in Turkish; in writing, accompanied by information and documents proving your identity, to our Company, acting as the data controller, at Ayazağa Mah. 215. Sk. Vadi İstanbul Teras Vadistanbul Teras 3.Blok No:4/3 İç Kapı No:72 Sarıyer/İstanbul, via registered electronic mail (KEP) to duygu.peker@hs09.kep.tr, via secure electronic signature or mobile signature to hello@universeoflavanta.com , or by using the electronic mail address registered by the relevant person in our Company’s system.
Our company reserves the right to verify your identity in order to prevent the unlawful sharing of your personal data.
In your application;
- Your name, surname and signature if the application is in writing,
- For citizens of the Republic of Türkiye, your Turkish ID number, if you are a foreigner, your nationality, passport number or ID number if you have one,
- Your residence or workplace address for notification,
- If available, your email address, telephone and fax number for notification,
- Your request subject,
It is mandatory to have it and, if any, relevant information and documents must be attached to the application.