INFORMATION TEXT REGARDING THE PROCESSING AND PROTECTION OF PERSONAL DATA
INFORMATION TEXT
As Noppa - Leather and Leather Products - Belt & Wallet, we attach great importance to processing and safeguarding the personal data of all natural persons associated with our Company, including our valued customers, members, and visitors who benefit from our products and services, in accordance with the Personal Data Protection Law No. 6698 (“PDPL” or “the Law”).
As the Data Controller, we would like to inform you about our data processing activities pursuant to the Law through this Information Text and notify you of the rights you have in this regard.
A) Which of Your Personal Data Are Processed?
Our Company processes your personal data for specific purposes based on the legal grounds set out below. Winning your favor and satisfaction in the provision and utilization of our products and services is our Company’s fundamental mission. Your personal data is processed and classified as follows, with all necessary measures taken to enable the realization of this and the other specific purposes listed:
Personal Data of Our Registered Customers
Identity: Name-Surname
Contact: E-Mail Address
Transaction Security: IP Address, Website Login-Logout Information, Password Information
Marketing: Cookie Records, Information Obtained Through Campaign Activities
Personal Data of Our Customers Who Place Orders
Identity: Name-Surname, T.C. Identity Number
Contact: Phone Number, E-Mail Address, Address
Finance: Payments and Payment Method Records
Customer Transaction: Order Information
Transaction Security: IP Address, Website Login-Logout Information, Password Information
Marketing: Cookie Records, Information Obtained Through Campaign Activities, Purchase History Information
Personal Data of Our Visitors
Transaction Security: IP Address, Website Login-Logout Information
Marketing: Cookie Records,
The personal data collected by our Company and the purposes of collection may vary depending on the services provided and the contracts entered into. You can access detailed information regarding the data processing activities, including the purposes and legal grounds for collecting your personal data, on the Personal Data Processing and Protection Policy page on our website.
B) For What Purposes Is Your Personal Data Collected and Processed?
Our Company processes your personal data in accordance with the Law and the principles of good faith for the purposes set out below:
To verify the identity information of our customers who purchase products and services or perform similar transactions personally or through a representative,
To communicate with the data subjects electronically or physically,
To fulfill the obligations undertaken pursuant to the provisions of relevant legislation and the contracts entered into, and to exercise legal rights,
To conduct activities in accordance with the legislation,
To provide information to authorized public institutions and organizations,
To complete membership registration,
To inform our customers, website/mobile app members, and visitors about our products and campaigns that may meet their expectations and needs,
To identify customers who shop on our website/mobile app and through other means, use the information in customer base analysis, use it in various marketing and advertising activities, and conduct surveys personally or through contracted organizations electronically and/or physically to ensure customer satisfaction in this regard,
To identify preferences and present them to customers as a result of campaign activities,
To ensure the security of our website/mobile app in order to provide a safer shopping environment,
To manage and execute processes related to orders placed on our website/mobile app and through other means, complete the orders, provide customers with up-to-date information about their orders, and send SMS and E-Mails regarding the delivery status,
To provide after-sales support services,
To conduct financial and accounting activities,
To conduct legal affairs, track and resolve requests and complaints,
The personal data collected by our Company and the purposes of collection may vary depending on the services provided and the contracts entered into. You can access detailed information regarding the data processing activities, including the purposes and legal grounds for collecting your personal data, on the Personal Data Processing and Protection Policy page on our website.
C) With Whom and For What Purposes Is Your Personal Data Shared?
The sharing of personal data with third parties is carried out with the consent of the data subjects pursuant to Articles 8 and 9 of the Law, and personal data is generally not transferred to third parties without the data subject’s consent. However, the Law provides that personal data may be shared without the data subject’s consent in certain cases.
In this regard, pursuant to our obligations arising from legislation, your personal data is shared with judicial authorities and other public institutions and organizations upon request. Personal data is also transferred to our contracted suppliers, legal advisors, and certified e-commerce service providers located abroad for the purposes of providing our products and services in the best possible manner, fulfilling our contractual and statutory obligations, tracking and auditing the services provided, resolving legal disputes, conducting financial and accounting activities, ensuring the security of our website/mobile app and your personal data, and creating a premium shopping experience.
D) How Is Your Personal Data Collected?
Your personal data is collected and stored through various channels, including our call center, corporate websites, mobile site, mobile app, email, SMS, and other means, as well as during the signing of commercial contracts and/or throughout the course of the commercial relationship. This includes information you provide to us, technical communication files known as “cookies” (small files placed on your local drive) that enable our servers to automatically recognize you when you visit our website, and physical forms. Data is collected and stored either fully or partially automatically, or through various non-automatic methods that form part of the data recording system.
E) On What Legal Grounds Is Your Personal Data Processed?
As a general rule, your explicit consent is required to process your personal data. Explicit consent can be defined as the data subject being properly informed on a specific and clear matter and authorizing processing in this regard. However, Article 5/2 of the Law specifies cases in which data may be processed without explicit consent. If at least one of these cases exists, data processing activities may be carried out without seeking the data subject’s consent.
Your personal data is processed based on the following legal grounds specified in Article 5/2 of the Law:
Explicitly provided for by laws (e.g., the retention of cookie records and IP addresses pursuant to Law No. 5651)
Necessary for the data controller to fulfill its legal obligations (e.g., your name and surname are required to issue an invoice for the order you placed.)
Necessary for the legitimate interests of the data controller, provided that the data subject’s fundamental rights and freedoms are not adversely affected (e.g., identifying preferences obtained through campaign activities and presenting them to you)
Necessary for the establishment, performance, or fulfillment of a contract (e.g., processing address information to deliver your order to your address)
Necessary for the establishment, exercise, or defense of legal claims (e.g., tracking legal and financial matters)
F) What Rights Do Data Subjects Have Under the Law?
Pursuant to Article 11 of the Law, data subjects may:
Learn whether their personal data is being processed,
Request information about the processing of their personal data if it has been processed,
Learning the purpose of the processing of personal data and whether they are being used in accordance with that purpose,
Knowing the third parties to whom personal data is transferred domestically or abroad,
Requesting the correction of personal data in the event that it has been processed incompletely or inaccurately, and requesting that the action taken in this regard be notified to the third parties to whom the personal data has been transferred,
Requesting the deletion or destruction of personal data when the reasons for processing no longer exist, even though it has been processed in accordance with the provisions of the Law and other relevant legislation, and requesting that the action taken in this regard be notified to the third parties to whom the personal data has been transferred,
Objecting to a decision produced solely by automated means on the basis of the analysis of processed data which produces legal effects concerning the data subject,
You have the right to request compensation for damages suffered as a result of the unlawful processing of personal data.
You may submit your applications regarding the specified rights by completely and accurately filling out the Application Form on our website and delivering a signed copy of the form in person with your identity documents to Yeni Mahalle Pamuk Sokak No:3 Gerede / BOLU or by sending it via notary or other methods specified in the Law. Depending on the nature of your request, your applications will be finalized free of charge as soon as possible and no later than thirty days; however, if additional costs arise, the Company reserves the right to charge you in accordance with the tariff to be determined by the Personal Data Protection Board.
Headquarters
Yeni Mahalle Yıldız Sokak No:6 Gerede/BOLU
+90 532 429 0007
info@noppa.com.tr