INFORMATION TEXT REGARDING THE PROCESSING AND PROTECTION OF PERSONAL DATA
INFORMATION TEXT
As Noppa - Leather and Leather Products - Belt & Wallet, we attach great importance to processing and safeguarding the personal data of all natural persons associated with our Company in compliance with the Personal Data Protection Law No. 6698 (“PDPL” or “Law”), including our valued customers, members, and visitors who benefit from our products and services.
As the Data Controller, we would like to inform you about our data processing activities pursuant to the Law through this Information Text and state the rights you have in this context.
A) Which of Your Personal Data Are Processed?
Our Company processes your personal data for specific purposes based on the legal grounds set out below. Winning your approval and satisfaction in providing and making our products and services available to you is our Company’s fundamental mission. Your personal data is processed by taking all necessary measures to enable the realization of this and the other specific purposes listed below, and is classified as follows:
Personal Data of Our Registered Customers
Identity: Name and Surname
Contact: E-Mail Address
Transaction Security: IP Address, Website Login-Logout Information, Password Information
Marketing: Cookie Records, Information Obtained Through Campaign Activities
Personal Data of Our Customers Who Place Orders
Identity: Name and Surname, Turkish Republic ID Number
Contact: Phone Number, E-Mail Address, Address
Finance: Payments and Payment Method Records
Customer Transaction: Order Information
Transaction Security: IP Address, Website Login-Logout Information, Password Information
Marketing: Cookie Records, Information Obtained Through Campaign Activities, Purchase History Information
Personal Data of Our Visitors
Transaction Security: IP Address, Website Login-Logout Information
Marketing: Cookie Records,
The personal data collected by our Company and the purposes for which it is collected may vary depending on the services provided and the contracts entered into. You can access detailed information about the processing of your personal data collected in this context, including the purposes and legal grounds, on the Personal Data Processing and Protection Policy page on our website.
B) For What Purposes Is Your Personal Data Collected and Processed?
Our Company processes your personal data in accordance with the Law and the principles of good faith for the purposes set out below:
To verify the identity of our customers who purchase products and services or perform similar transactions personally or through a representative,
To communicate with the data subjects electronically or physically,
To fulfill our obligations and exercise our legal rights pursuant to relevant legislation and the contracts we enter into,
To conduct our activities in compliance with the legislation,
To provide information to authorized public institutions and organizations,
To complete membership registration,
To inform our customers, website/mobile app members, and visitors about our products and campaigns that may meet their expectations and needs,
To identify our customers who shop on our website/mobile app and through other means, use this information in customer base analysis, use it in various marketing and advertising activities, and conduct surveys personally or through contracted organizations, both electronically and/or physically, to ensure customer satisfaction in this context, and to conduct trend and statistical analyses,
To ensure the security of our website/mobile app in order to provide a safer shopping environment,
To manage and execute processes related to orders placed on our website/mobile app and through other means, finalize these processes, provide our customers with up-to-date information about their orders, and send SMS and e-mails regarding delivery status,
To provide after-sales support services,
To conduct financial and accounting activities,
To conduct legal matters, track and resolve requests and complaints,
The personal data collected by our Company and the purposes for which it is collected may vary depending on the services provided and the contracts entered into. You can access detailed information about the processing of your personal data collected in this context, including the purposes and legal grounds, on our Personal Data Processing and Protection Policy page on our website.
C) With Whom and For What Purposes Is Your Personal Data Shared?
The sharing of personal data with third parties is carried out in accordance with Articles 8 and 9 of the Law and with the consent of the data subjects, and personal data is generally not transferred to third parties without the data subject’s approval. However, the Law provides that personal data may be shared without the data subject’s consent in certain circumstances.
In this context, your personal data is shared with judicial authorities and other public institutions and organizations upon request pursuant to our obligations arising from legislation. Personal data is also transferred to our contracted suppliers, legal advisors, and certified e-commerce service providers located abroad for the purposes of providing our products and services in the best possible manner, fulfilling our contractual and statutory obligations, tracking and auditing the services provided, resolving legal disputes, conducting financial and accounting activities, ensuring the security of our website/mobile app and your personal data, and creating a premium shopping experience.
D) How Is Your Personal Data Collected?
Your personal data is collected through various channels, both orally, in writing, and electronically, either fully or partially automatically or through non-automatic methods that form part of the data recording system, provided that they are part of the data recording system. This includes information you provide to us through our call center, corporate websites, mobile site, mobile app, e-mail, SMS, or other means, or during the signing of commercial contracts and/or throughout the course of the commercial relationship. It also includes technical communication files known as “cookies” (small files placed on your local drive) that enable our servers to automatically recognize you when you visit our website.
E) On What Legal Grounds Is Your Personal Data Processed?
As a general rule, your explicit consent is required to process your personal data. Explicit consent can be defined as the data subject being properly informed on a specific and clear matter and authorizing the processing in this regard. However, Article 5/2 of the Law specifies circumstances in which data may be processed without explicit consent. If at least one of these circumstances exists, data processing activities may be carried out without seeking the data subject’s consent.
Your personal data is processed based on the following legal grounds specified in Article 5/2 of the Law:
When expressly provided for by laws (e.g., the retention of cookie records and IP addresses pursuant to Law No. 5651)
When processing is mandatory for the data controller to fulfill its legal obligations (e.g., your name and surname are required to issue an invoice for the order you placed.)
When processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (e.g., identifying information obtained through campaign activities and presenting it to you based on your preferences)
When processing the personal data of the parties to a contract is necessary for the establishment or performance of a contract (e.g., processing your address information so that your order can be delivered to your address)
When processing is mandatory for the establishment, exercise, or protection of a right (e.g., tracking legal and financial matters)
F) What Are the Rights of Data Subjects Under the Law?
Pursuant to Article 11 of the Law, data subjects may:
Learn whether their personal data is being processed,
Request information about the processing of their personal data if it has been processed,
Learning the purpose of the processing of personal data and whether they are being used in accordance with that purpose,
Knowing the third parties to whom personal data is transferred domestically or abroad,
Requesting the correction of personal data in the event that it is incomplete or inaccurate and requesting that the action taken be notified to the third parties to whom the personal data is transferred,
Requesting the deletion or destruction of personal data when the reasons for processing no longer exist, even though it was processed in accordance with the Law and other relevant legal provisions, and requesting that the action taken be notified to the third parties to whom the personal data is transferred,
Objecting to a decision produced solely by automated means that produces legal effects or similarly significantly affects the individual,
You have the right to request compensation for damages suffered due to the unlawful processing of personal data.
You may submit your applications regarding the specified rights by completely and accurately filling out the Application Form on our website and delivering a signed copy of the form in person with documents identifying you to the address Yeni Mahalle Pamuk Sokak No:3 Gerede / BOLU, or you may send it through a notary public or by other methods specified in the Law. Depending on the nature of your request, your applications will be finalized free of charge as soon as possible and no later than thirty days; however, if an additional cost arises, the Company reserves the right to charge you in accordance with the tariff determined by the Personal Data Protection Board.
Headquarters
Yeni Mahalle Yıldız Sokak No:6 Gerede/BOLU
+90 532 429 0007
info@noppa.com.tr