General information on the Law on Personal Data
The Law on Protection of Personal Data No. 6698 (hereinafter referred to as KVKK) was adopted on 24 March 2016 and published in the Official Gazette No. 29677 on 7 April 2016. Some of the KVKK entered into force on the date of publication, and some on 7 October 2016.

Information as data supervisor
In accordance with KVKK No. 6698 and in the capacity of Data Supervisor, your personal data, as explained on this page, will be recorded, stored, updated, disclosed/transferred to third parties, classified and processed in the ways listed in KVKK, where the legislation allows.

How your personal data can be processed
In line with KVKK No. 6698, your personal data which you have shared with our Company can be processed by us completely or partially by obtaining, saving, storing, changing, re-editing automatically or non-automatically on the condition of being a part of a data recording system, in short, as subject to any type of processing conducted through data. Any operation performed on data within the scope of KVKK is considered as "processing of personal data".

Purposes and legal reasons of processing your personal data
The personal data which you shared will be processed in line with KVKK No. 6698 and other related secondary regulations in order to fulfill the requirements of the services we provide to our customers in accordance with the requirements of the contract and technology, and to improve our products and services; to record the identity, address and other necessary information to identify the transaction owner's information within the scope of the Law No. 6563 on the Regulation of Electronic Commerce, the Law No. 6502 on the Protection of the Consumer and the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette dated 26.08.2015 and numbered 29457, which was prepared on the basis of these regulations, the Distance Contracts Regulation published in the Official Gazette dated 27.11.2014 and numbered 29188 and other relevant legislation; to prepare all records and documents that will be the basis of payment systems, electronic contracts or transactions on paper, which are mandatory in the field of Banking and Electronic Payment; to comply with the information storage, reporting and information obligations stipulated by the legislation and other authorities; to provide information to prosecutors' offices, courts and relevant public officials on matters of public security and legal disputes, upon request and in accordance with the legislation. Information about third parties or organizations to which your personal data can be transferred

The persons/organizations to which your personal data you shared with our company can be transferred for the above-mentioned purposes are;
Notable İyzi Ödeme ve Elektronik Para Hizmetleri A.Ş. which provide payment infrastructure to our Company, persons and organizations related to the services provided such as suppliers, cargo companies, program partner organizations, domestic/foreign institutions and other 3^rd parties that we cooperate with and from which we received service to conduct our activities and/or in the capacity of Data Processor.

The way of collecting your personal data
Your personal data can be processed and collected with information such as name, surname, TR ID number, address, telephone, business or private e-mail address through the forms on the website and mobile applications of our company; in the form of location data, data including preferences on the pages logged in using the user name and password, IP records of the transactions performed, cookie data collected by the browser and browsing time and details; from oral, written or electronic media through our sales and marketing department employees, branches, suppliers, other sales channels, our channels such as call center, forms on paper, business cards and digital marketing; from oral or written or electronic media in a physical or virtual environment, face-to-face or remotely, received from people who share their personal data with business cards, CVs, bids and other ways, for purposes such as establishing a commercial relationship with our company, applying for a job, making offers; furthermore, from data obtained from (micro) websites and social media indirectly obtained from different channels, used for websites, blogs, contests, surveys, games, campaigns and similar purposes, e-bulletin reading or click movements, data provided by public databases, profile and data open to share from social media platforms.

Your personal data obtained before KVKK entered into force
Your personal data, which were obtained in accordance with the law in terms of membership, electronic message permission, product/service purchase and other forms before the effective date of KVKK, 7 April 2016, are also processed and preserved in accordance with the terms and conditions set forth in this document.

Transfer of your personal data to abroad
Your personal data collected by any of the above-mentioned methods to be processed in Turkey or to be processed and stored outside of Turkey can also be transferred to service intermediaries abroad (to countries accredited by the Personal Data Board and where there is sufficient protection for the protection of personal data), provided that it remains within the scope of KVKK and in accordance with the purposes of the contract.

Storage and protection of your personal data
Your personal data will be kept confidential in the database and systems of our company in accordance with Article 12 of the KVKK, and will not be shared with third parties in any way, except for legal obligations and the regulations specified in this document. In accordance with Article 12 of the KVKK, our company is obliged to prevent the illegal processing of systems and databases where your personal data is stored, to prevent unauthorized access, to take software and physical security measures such as access management. If it is learned that personal data has been obtained by others illegally, the situation will be reported to the Personal Data Protection Board immediately, in accordance with the legal regulation and in written form.

Keeping personal data updated and accurate
Pursuant to Article 4 of the KVKK, our company has the obligation to keep your personal data accurate and up-to-date. In this regard, our Customers are required to share accurate and up-to-date data or update them via the website/mobile application in order for our Company to fulfill its obligations arising from the current legislation.

Rights of personal data owner in accordance with KVKK No. 6698
Article 11 of the KVKK No. 6698 entered into force on 07 October 2016 and in accordance with the relevant article, the rights of the Personal Data Owner after this date are as follows: By applying to our Company (data supervisor), Personal Data Owner can
* Learn if personal data is processed or not,
* Request information if their personal data is processed,
* Learn the purpose of processing personal data and whether they are used in accordance with the purpose
* Be informed of the third parties to whom personal data is transferred inland or abroad,
* Request correction of personal data in case of incomplete or incorrect processing,
* Request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,
* Request the notification of the third parties to whom the personal data has been transferred, in case of correction, deletion or destruction of personal data,
* Object to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,