Personal Data Protection Law Text

In accordance with Personal Data Protection Legislation

Information Notice Regarding Customers

Our valued customer,

ZEV Halı ( “ZEV Halı” or “the Company” ), as the data controller,

If you are a member of our site, in order to benefit from our membership services,
If you are a customer who has placed an order through our website, in order for us to provide you with our services in connection with your purchase from our website,
If you are a customer who shops at our stores; during your shopping experience while visiting our stores,

We inform you that we will record, store, maintain, and share the personal data we obtain from you in accordance with the purposes specified in the Personal Data Protection Law ("KVKK") and detailed below, in a limited and proportionate manner, while preserving the accuracy and up-to-date nature of the personal data, and that we will transfer it to third parties and companies under the conditions stipulated by the KVKK, and to institutions legally authorized to request personal data.

Definitions related to the Personal Data Protection Law (KVKK)

In the implementation of the Personal Data Protection Law (KVKK);

Anonymization : The process of rendering personal data in such a way that it cannot be linked to an identified or identifiable natural person, even when combined with other data.
Data Subject: The natural person whose personal data is being processed.
Personal data: Any information relating to an identified or identifiable natural person,
Processing of personal data: Any operation performed on personal data, such as obtaining, recording, storing, preserving, modifying, reorganizing, disclosing, transferring, acquiring, making available, classifying or preventing the use of data, whether wholly or partly automated or non-automated, provided that it is part of a data recording system.
Board: The Personal Data Protection Board,
Institution: The Personal Data Protection Authority,
Data processor: A natural or legal person who processes personal data on behalf of the data controller, based on the authority given by the data controller.
Data recording system: A recording system in which personal data is processed by structuring it according to specific criteria.
Data controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.
Special categories of personal data refer to data relating to a person's race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and clothing, membership in associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data.

What is Personal Data? Which Personal Data is Processed?

Personal data is any information that identifies or makes you identifiable. In this context, your primary identifying information, such as your name, surname, and Turkish Republic Identity Number, as well as your address, telephone number, and bank account information, are all referred to as "Personal Data." According to Article 6 of the KVKK (Law on Protection of Personal Data), sensitive data such as data relating to race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, membership in associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data, are referred to as "Special Categories of Personal Data." ZEV Halı does not process any special categories of personal data within the scope of the data processing activities mentioned in this disclosure text.

Personal Data That May Be Processed, the Purpose of Data Processing and the Legal Grounds

In this context, ZEV Halı collects and stores the Personal Data listed below in accordance with the KVKK (Turkish Personal Data Protection Law).

3.1 If you are a member of our website, we process the following personal data of yours;

Data Categories That Can Be Processed	Identity Information
Personal Data That May Be Processed	Name-Surname
Purposes of Processing	Implementing information security processes, Our quote generation service is presented to you. Managing contract processes, Ensuring the security of data controller operations and verifying the identity of the person performing/requesting the transaction.
Legal Grounds for Processing	The processing of your personal data is necessary provided that it is directly related to your membership registration and the provision of the services here.

Data Categories That Can Be Processed	Contact Information
Personal Data That May Be Processed	Email, Phone number, Address Information
Purposes of Processing	Managing processes related to company/product/service loyalty, Conducting communication activities, Conducting activities aimed at customer satisfaction, Tracking requests/complaints, Implementing information security processes, Providing after-sales support services for goods/services. Execution of sales contracts for goods/services, Execution of customer relationship management processes,
Legal Grounds for Processing	The processing of your personal data is necessary provided that it is directly related to your membership registration and the provision of the services here.

Data Categories That Can Be Processed	Contact Information* * We may process your contact information with your explicit consent for the purposes detailed below.
Personal Data That May Be Processed	Email, Phone number
Purposes of Processing	Managing processes related to company/product/service loyalty, Organization and event management, managing marketing analysis studies, Managing campaign/promotion processes, Managing the marketing processes for products/services.
Legal Grounds for Processing	If you wish to be informed about campaigns and other attractive offers, your contact information will be processed only with your explicit consent.

Data Categories That Can Be Processed	Customer Transaction Information
Personal Data That May Be Processed	Your knowledge of the products and services you are interested in.
Purposes of Processing	Conducting activities aimed at customer satisfaction, Execution of marketing processes for products/services, Providing after-sales support services for goods/services. Tracking requests/complaints, Execution of sales contracts for goods/services, Execution of customer relationship management processes.
Legal Grounds for Processing	The processing of your personal data is necessary provided that it is directly related to the performance of membership services.

Data Categories That Can Be Processed	Transaction Security Information
Personal Data That May Be Processed	Your IP address information, website login and logout information, password and login details, etc.
Purposes of Processing	Implementing information security processes, Ensuring that activities are carried out in accordance with the legislation, Conducting/supervising business activities, Ensuring the security of data controller operations.
Legal Grounds for Processing	The processing of your personal data is necessary for your membership registration and the provision of the services here, provided that it is directly related to these purposes, and for the data controller to fulfill its legal obligations.