Clarification Text of the Personal Data Protection Law

Clarification Text on Tiny House Personal Data

As Tiny House Adalı, our visitors, online visitors regarding the processing, storage and transfer of your personal data within the framework of the activities arising from the Personal Data Protection Law No. 6698 (“KVKK”), the European Union General Data Protection Regulation (“GDPR”) and the relevant legislation and legal regulations We have prepared this clarification text in order to inform our customers, potential customers, supplier employees and supplier authorities.

1) What Are Your Categories of Personal Data We Process and For What Purposes Do We Process Them?

Your personal information, in accordance with the principles set forth in Article 4.2 of the PDPL by Tiny House Adalı, within the scope of our ongoing business relations with our business partners (it is possible for a person to fall into more than one category) for the purposes stated below can be processed accordingly; being in compliance with the law and honesty rules, being accurate and up-to-date when necessary, being processed for specific, clear and legitimate purposes, being limited and proportional to the purpose for which they are processed, being kept for as long as required by the relevant legislation or for the purpose for which they are processed.

A. Our visitors

Identity information of our visitors (eg. name, surname, R.T. Identity Number, place and date of birth) will be processed for the purpose of creating and tracking visitor records.

B. Our Online Visitors

Transaction security information (e.g. your IP address information), marketing information (e.g. shopping history information, cookie records) of our online visitors using our website, and if you notify us of these, identity information, contact information (e-mail address, full address, telephone number) will be processed in order to carry out activities in accordance with the legislation, to carry out information security processes, to follow up requests/complaints, to carry out communication activities, to provide information to authorized persons, institutions and organizations, and to enable you to access our website via the internet.

C. Our customers

Identity information, contact information, customer transaction information (e.g. order information), financial information (e.g. balance sheet information), legal transaction information, marketing information (e.g. shopping history information) of our natural person customers or legal entity customers’ officials and/or employees. ) will be processed for the following purposes; carrying out the activities in accordance with the legislation, execution of financial and accounting affairs, execution/supervision of business activities, carrying out logistics activities, execution of after-sales support services for goods/services, execution of goods/service sales processes, conducting marketing analysis studies, execution of contract processes, providing information to authorized persons, institutions and organizations, resolution of legal disputes, carrying out storage and archiving activities, execution of risk management processes, execution of advertisement/campaign/promotion processes, to send commercial electronic messages, execution of company/product/service commitment processes, execution of communication activities.

D. Our Potential Customers

Identity information, contact information, customer transaction information, marketing information of officials and/or employees of our real person customers or legal entity customers; will be processed for the purposes of managing goods/service sales processes, executing contract processes, executing advertisement/campaign/promotional processes, sending commercial electronic messages, and conducting marketing analysis studies.

E. Our solution partners

Identity information, contact information, dealer transaction information (order information, etc.), financial information (balance sheet information, etc.), legal transaction information, marketing information (shopping history information) of our real person solution partners or legal entity solution partners’ officials and/or employees, will be processed for the purposes of carrying out the following communication activities; carrying out activities in accordance with the legislation, execution of financial and accounting affairs, execution/supervision of business activities, carrying out logistics activities, execution of after-sales support services for goods/services, execution of goods/service sales processes, conducting marketing analysis studies, execution of contract processes, providing information to authorized persons, institutions and organizations, resolution of legal disputes, carrying out storage and archiving activities, execution of risk management processes, execution of advertisement/campaign/promotion processes, to send commercial electronic messages, execution of end-consumer service processes.

F. Our Supplier Employee

Identity information, contact information, professional experience information of our supplier employee (e.g., in-service training information); will be processed for the purposes of conducting communication activities, conducting/supervising business activities, executing supply chain management processes, executing logistics activities, executing activities in accordance with the legislation, and carrying out occupational health/safety activities.

G. Our Supplier Authority

Identity information, contact information, customer transaction information, financial information, marketing information, legal transaction information of our natural person suppliers or legal entity supplier authorities; will be processed for the purposes of conducting/supervising business activities, executing goods/service procurement processes, executing finance and accounting works, executing contract processes, executing investment processes, and following and executing legal affairs.

2) What are the Collection Methods of Your Personal Data?

Your personal data specified above in categories; is collected by physical means such as order forms, contracts, visitor forms or by automatic or non-automatic means through information systems and electronic devices (e.g. telecommunication infrastructure, computers and telephones), third parties, our website and other documents declared by the person concerned.

3) How Long Do We Retain Your Personal Data?

Your personal data, which are specified in categories above, are stored for the period stipulated in the relevant legislation, if a period is foreseen, and if the period is not foreseen, for the duration of our legitimate interest, taking into account the following criteria.

1. Applications
 
2. Commercial practices applied
 
3. Timeout periods stipulated in the relevant legislation
 
At the end of these periods, the stored personal data is deleted, destroyed or anonymized.

4) What is the Legal Reason for Collecting Your Personal Data?

Your personal data, by Tiny House Adalı, in line with the realization of the purposes described above, as specified in Article 5 of the PDPL;
 
1. Explicitly stipulated in laws.
 
2. It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract.
 
3. It is mandatory for the data controller to fulfill its legal obligation. Data processing is mandatory for the establishment, exercise or protection of a right, provided that it does not harm the fundamental rights and freedoms of the data subject, it is processed on the basis of legal reasons, for the legitimate interests of the data controller.

4. The identity and communication data of our solution partners, customers and potential customers will be processed for the purposes of advertising, campaigning, promotion and sending commercial electronic messages based on their explicit consent. You always have the right to request that communication regarding our activities such as advertising, campaign, promotion and sending commercial electronic messages be stopped, and to withdraw your express consent. If you do not want to be contacted for advertisements, campaigns, promotions and sending commercial electronic messages from now on, you can exercise your right to cancel via the contact information you have shared with us.

5) Do We Transfer Your Personal Data To A Third Party?

1. Personal data of our visitors may be shared with law enforcement and judicial authorities, upon request, in order to resolve legal disputes and in accordance with the relevant legislation.

2. Personal data of our online visitors may be shared with judicial authorities and authorized public institutions and organizations, upon request, in order to resolve legal disputes and in accordance with the relevant legislation.

3. Personal data belonging to our customers are transferred to authorized public institutions and organizations for the purpose of following and executing legal affairs, carrying out activities in accordance with the legislation, and informing authorized persons, institutions and organizations, within the scope stipulated by legal regulations, these data are transferred to our group companies, solution partners, cargo companies, suppliers, banks and financial advisors to the extent necessary in order to carry out/audit business activities, carry out risk management processes, and perform our services properly. In addition, the personal data in question may be transferred to the law firm and judicial authorities from which we receive services so that they can be used as evidence in legal disputes that may arise in the future.

4. Personal data belonging to our potential customers may be transferred to our solution partners to the extent necessary for the proper performance of our services, and to the law firm and judicial authorities from which we receive services so that they can be used as evidence in future legal disputes.

5. Personal data belonging to our solution partners, within the scope stipulated by legal regulations, to authorized public institutions and organizations for the purpose of carrying out activities in accordance with the legislation, informing authorized persons, institutions and organizations, is transferred to our solution partners, courier companies, suppliers and banks to the extent necessary for the purpose of conducting/supervising business activities, executing risk management processes, following and executing legal affairs, and performing our services as required. In addition, the personal data in question may be transferred to the law firm and judicial authorities from which we receive services so that they can be used as evidence in legal disputes that may arise in the future.

6. Personal data belonging to our supplier employees can be transferred to authorized public institutions and organizations for the purposes of carrying out activities in accordance with the legislation, informing authorized persons, institutions and organizations, following up and conducting legal affairs, and conducting / auditing business activities, within the scope stipulated by the legal regulation; in order to perform the service properly, this data is also transferred to group companies, cargo companies, suppliers, our financial consultancy office and banks as necessary. In addition, the personal data in question may be transferred to the law firm and judicial authorities from which we receive services so that they can be used as evidence in legal disputes that may arise in the future.
 
7. Personal data of our supplier representative can be transferred to authorized public institutions and organizations for the purposes of carrying out activities in accordance with the legislation, informing authorized persons, institutions and organizations, following up and conducting legal affairs, and conducting / auditing business activities, within the scope stipulated by the legal regulation; in order to perform the service properly, this data is also transferred to group companies, cargo companies, suppliers, our financial consultancy office and banks as necessary. In addition, the personal data in question may be transferred to the law firm and judicial authorities from which we receive services so that they can be used as evidence in legal disputes that may arise in the future.

6) Do We Transfer Your Personal Data Abroad?

It can be shared with third parties abroad, our business partners/suppliers based on the rules within the framework of Article 9 of the PDPL.

7) How You Can Exercise Your Rights Regarding Your Personal Data?

Right of Rectification: If you have any personal data that you think is incorrect, you have the right to request correction from our company.
At the same time, if you have any personal data that you think is missing, you have the right to request that it be completed by our company.

Access Right: You have the right to request a copy of your personal data from our company. Some payment may be requested from you for this activity.

Withdrawing Your Consent: You have the right to withdraw consent at any time, without affecting the legality of the processing performed on the basis of consent prior to the withdrawal of your express consent you have given to our company.

Right to be forgotten: In certain cases, you have the right to request the deletion of your personal data from our company.

Right to Data Portability: In certain cases, you have the right to request that your personal data we obtain from our company be transferred to another organization or directly to you.

Right to Limit Processing: In certain circumstances, you have the right to request that our company limit the processing of your personal data.

Right to Object to Processing: In certain circumstances, you have the right to object to the processing of your personal data by our company.

Right to Make a Complaint to a Supervisory Authority: If you believe that we are processing your personal data in violation of the applicable data protection guidelines, you have the right to file a complaint with the competent regulatory authority, primarily your habitual residence or workplace if you live in the European Union, or the relevant supervisory regulatory authority in the Member State where you believe a data protection breach has occurred.
 
You can forward your requests regarding the rights mentioned above and your requests within the scope of Article 11 of the PDPL, which regulates the rights of the persons concerned, via "[email protected]".