CUSTOMER CLARIFICATION TEXT OF GP KOMPOZIT ANONIM SIRKETI FOR THE PROTECTION OF PERSONAL DATA UNDER THE LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA

1. Purpose and Scope of the Clarification Text and Definitions

 

The subject of this Clarification Text is to inform our customers about the Law No. 6698 on the Protection of Personal Data and to explain their rights in order to protect the fundamental rights and freedoms of our customers, especially the privacy of private life, in the processing and transfer of personal data of our customers within GP KOMPOZIT ANONIM SIRKETI (GP KOMPOZIT).

 

As GP KOMPOZIT family, we show maximum sensitivity to the security of our customers' personal data. With this awareness, we attach great importance to the processing and preservation of the information considered as personal data of all persons associated with our Company in accordance with the Law No. 6698 on the Protection of Personal Data ("LPPD"), the Constitution of the Republic of Turkey and the international conventions to which our country is a party. Within the scope of the Law No. 6698 on the Protection of Personal Data, we inform you that your personal data that we have requested or that you have shared with us may be recorded, stored, retained, reorganized, shared with institutions authorized by law to request this personal data and under the conditions stipulated by the LPPD, transferred to domestic third parties under the terms stipulated by LPPD, transferred, classified and processed in other ways and procedures listed in the LPPD, and that your personal data may be destroyed, deleted or anonymized if the conditions written in the LPPD and Disposal Policy are met.

 

In this text, the following terms shall refer to the following;

Personal Data	Any information related to the person whose identity is identified or identifiable,
Private Personal Data	Data with respect to the race, ethnicity, political thought, philosophical belief, religion, sect or other beliefs, appearance, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data of the data subject,
Processing of Personal Data	All kinds of operations performed on data such as obtaining, recording, storing, maintaining, altering, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the using of personal data through fully or partially automated or non-automatic means provided that it is part of any data recording system,
Law on the Protection of Personal Data ("LPPD"):	Law No. 6698 on the Protection of Personal Data,
Data Controller	Real or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system,
Data Operator	Real or legal person who processes personal data on behalf of the data supervisor basing on the authority given by him/her.

 

In this context, GP KOMPOZIT, in its capacity as data controller and by taking the necessary technical and administrative measures, shall process your personal data within the framework of the limits stipulated by the Constitution of the Republic of Turkey, international conventions to which our country is a party and all legislation on the protection of personal data, especially the LPPD, in accordance with the principles of compliance with the law and honesty rules in Article 4 of the LPPD, being accurate and up-to-date when necessary, being processed for specific, clear and legitimate purposes, being connected, limited and measured for the purposes of processing, and being kept for the period stipulated in the relevant legislation or required for the purpose for which they are processed.

2. Data Controller

Pursuant to Law No. 6698 on the Protection of Personal Data ("LPPD"), your personal data may be processed by GP KOMPOZIT as the data controller within the scope described below.

 

3. Method and Legal Reason of Data Collection

GP KOMPOZIT collects your personal data in accordance with the provisions of LPPD and other legislation, through the channels listed below, automatically or non-automatically, verbally, in writing, electronically or by your sharing with us with your own consent in accordance with the law and processes it within the personal data processing conditions and purposes specified in Articles 5 and 6  of LPPD. Your personal data are obtained in whole or in part by automatic means, or by non-automatic methods, provided that they are part of the data recording system.

 

4. Your Personal Data Processed and Purposes of Processing

If you visit our store, we process;

1. Your store security camera records in order to fulfill our contractual obligations to ensure the safety of you, the Company and its employees and other third parties against any act, crime or behavior contrary to the legislation and to fulfill our obligations to provide information, documents and other relevant obligations to official/judicial institutions and organizations,

If you shop from our store we process;

1. Name, surname, address, shopping (shopping date, time, amount, content) and payment (payment method and payment details) information for the purpose of realization of shopping transactions and, accordingly, conclusion and execution of the sales contract, issuance of invoices and follow-up of accounting affairs, as well as e-mail address in order to ensure that the e-invoice/e-archive invoice regarding your shopping is sent to you electronically, and name, surname and mobile phone number in order to provide after-sales support services (such as replacement, return, product inspection),

iii. If the shopping is made by credit/debit card, your credit/debit card details, provided that they are transferred to the relevant payment institution without being recorded by the Company,

1. Your Turkish ID Number that you share to be included in the invoice in order to fulfill our legal obligations and your sole proprietorship details to be included in the invoice if you are a taxpayer,

If you become a member of our site, we process;

1. Your name, surname, e-mail address and mobile phone number in order to ensure that your membership is realized and to record your member details, to enable member login, to inform you about your membership, to fulfill the requirements of the membership contract and to enable you to log in to the Site using member information without the need to enter all membership details again and to enable shopping without the need to enter membership details again, and log record details in order to ensure the security of the transaction,
2. Your address details if you save them,

• Your shopping (shopping date, time, amount, content) and payment (payment method and payment details) information in order to provide you with the service of viewing your order history as a member,
• Your name, surname, gender, date of birth if you prefer to share it, e-mail address, mobile phone number, User ID details automatically assigned by the system when you become a member of the Site in order to update your information that you will provide to GP KOMPOZIT during the membership process or through other channels and/or to ensure that the information you will change later is updated for the information you have provided for all your memberships and to fulfill our obligation to keep your personal data up to date,

1. In case you return the products you have purchased within the scope of after-sales support, your name, surname, bank name, IBAN number details and shopping (shopping date, time, amount, content) details in order to record this information in case you want your return transactions to be carried out without the need to re-enter all the information with the realization of the return transaction,
2. Your name, surname, gender, e-mail address, mobile phone number, date of birth if you share it optionally, province, district, approaches to in-site notifications/surveys/offers/campaigns, habits, favorites, likes, behaviors, preferences, search activities, previous shopping, cookie records, cookie and advertisement identifier/ID information and device ID, communication preferences, shopping amount, payment methods/channels and preferences, payment bank details, details of the operator used, and survey answers to provide you with special opportunities and offers according to your site membership and shopping, create general or personalized campaigns, advantages, promotions, advertisements, organize campaigns, contests, sweepstakes and other events, conduct marketing and analysis studies, conduct advertisements and marketing/communication activities (notifications on the Site, pop-up display, personalized offers, customization of user screens, surveys, etc.) belonging to GP KOMPOZIT on the Site or other 3rd party media, studies to improve customer experience and strategic planning, analysis and business development efforts regarding operational processes.

In case you shop online, we process;

1. Your name, surname, signature, e-mail address, mobile phone number, address, shopping details (shopping date, time, amount, content), log records and IP address of your shopping transaction, as well as your bank details and IBAN number if necessary in order to carry out the shopping transaction and fulfill the requirements of the distance sales contract, to ensure that the e-invoice/e-archive invoice for your shopping is issued and sent to you, to deliver your order to you, and to provide after-sales support services (such as replacement, return, product inspection) in case you shop on the Site as a member or through the Site without being a member,

• If the shopping is made by credit/debit card, your credit/debit card details (first 4 and last 4 digits, expiration date, bonuses, bank to which the card belongs and card type details) in order to ensure that the payment can be collected,

xiii. If the shopping is made by Money Order/EFT method, your name, surname, bank where the transaction was made, and if shared, your details on the receipt,

If you contact us through our Communication Channels, we process;

xiv. Your name, surname, social media username, e-mail address, mobile phone number, fixed telephone number if shared, if relevant, your legal action details, your requests and complaints, your log records related to your request and complaint or for the finalization of your request and complaint, and other relevant information to be communicated by you depending on your request and complaint in order to resolve your requests and complaints that you have communicated to us and to contact you when necessary, if you contact us via call center, e-mail, Website, WhatsApp application, social media and similar channels ("Our Communication Channels"), and to address you correctly, to ensure service/transaction security, to better manage, follow-up and report all customer relations processes, and to improve quality standards if you contact us via our call center or WhatsApp application,

1. Your call center voice recordings and message history with us via WhatsApp application to be used as evidence in our efforts towards customer satisfaction and in disputes that may arise between us,

xvi. If your request and complaint is related to our Stores, your store security camera records,

If you give GP KOMPOZIT permission for commercial communication through any channel, we process;

xiv. If you give GP KOMPOZIT permission/explicit consent for commercial communication through any channel, your name, surname, user ID, mobile phone number, e-mail address and log records to communicate our invitations regarding general or special personalized campaigns, advantages, product and service promotions, survey studies, presentation of customer satisfaction practices, promotions, advertisements, information, marketing activities carried out by GP KOMPOZIT, commercial communication activities through the channels you choose (SMS, e-mail, etc. ) within the scope of marketing activities, campaigns, contests, sweepstakes, invitations and other events, as well as your signature if you carry out your commercial communication permission transactions in the store.

 

5. Sharing Personal Data with 3rd Parties and Purpose of Sharing

By ensuring that all necessary technical and administrative measures are taken to ensure the appropriate level of security in accordance with the LPPD and the relevant legislation, personal data are shared with courts and other public institutions due to and limited to our legal obligations in accordance with the rules regarding the transfer of personal data specified in Articles 8 and 9 of the Law for the purposes stated above. In addition, personal data is transferred to contracted third parties in order to provide the services we undertake and to perform quality control of the services provided. Personal data of our customers is shared with third parties within the framework of the consent of the customers and as a rule, personal data is not transferred to third parties without the consent of our customers.

6. Data Subject's Rights under Article 11 of the LPPD

Pursuant to the Law on the Protection of Personal Data, you are entitled to;

- Learn whether your personal data is processed by applying to the data controller,

- Request information if personal data has been processed, and learn the purpose of processing personal data and whether they are used in accordance with their purpose,

- Know the third parties, if any, to whom personal data are transferred at home or abroad,

- Request correction of personal data in case of incomplete or incorrect processing, and request deletion or destruction of personal data in case the reasons requiring processing disappear,

- Request notification of the correction or deletion/destruction/anonymization to third parties to whom personal data are transferred in case of correction/deletion/destruction/anonymization,

- Object to the appearance of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,

- Request the compensation of damages in case of loss due to the processing of your personal data contrary to the legislation.

 

For the exercise of these rights and your requests, you can submit your requests in writing to our address below, provided that your identity is verified, by using your registered electronic mail (REM) address, secure electronic signature, mobile signature or your e-mail address that you have previously notified us and is included in our records. In case you apply, all of our evaluations shall be made in accordance with the relevant provisions stipulated in the LPPD, and some verifying information may be requested from you in order to confirm that the applicant is the right person. All of the information that may be requested in this context shall only be requested in order to determine who the real data subject is and to share the results of the application with the right person. In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, applications must be made in Turkish. If your request will be answered in writing, no fee shall be charged for this process up to ten pages; and 1 Turkish Lira transaction fee may be charged for each page exceeding ten pages.

 

7. Possible Amendments to Our Data Security and Clarification Text

GP KOMPOZIT takes appropriate technical and administrative measures regarding data security under LPPD. In the event of an amendment to the Clarification Text on the Purposes of Processing, Legal Reasons, Collection Methods and Transfer of Personal Data and Processing of Personal Data, amendments can be made when necessary to fulfill the legal requirements newly enforced. In such a case, this text shall be announced to you again in its most up-to-date form.

 

10- Contact Information

GP KOMPOZIT A.S.

Address: Seyhli Mah. Hizir Reis Cad. No:6 Pendik/Istanbul

Electronic Mail: info@gpkompozit.com

Telephone: 0850 305 5547