Personal Data Policy

Monadas Bijou Personal Data Policy

General information about the Personal Data Law

The Law on the Protection of Personal Data No. 6698 (hereinafter referred to as KVKK) was adopted on March 24, 2016, and published in the Official Gazette No. 29677 on April 7, 2016. Parts of the KVKK came into force on the date of publication, and other parts on October 7, 2016.

Information as Data Controller

In accordance with KVKK No. 6698 and in the capacity of Data Controller, your personal data will be recorded, stored, updated, disclosed/transferred to third parties when permitted by legislation, categorized, and processed in the ways listed in KVKK, within the framework explained on this page.

How your personal data may be processed

In accordance with KVKK No. 6698, your personal data shared with our Company may be processed by us, entirely or partially, automatically, or non-automatically as part of any data recording system, by obtaining, recording, storing, modifying, reorganizing, in short, by subjecting it to all kinds of operations performed on data. Within the scope of KVKK, any operation performed on data is considered "processing of personal data."

Purposes and legal reasons for processing your personal data

Purposes and legal reasons for processing your personal data:

- To fulfill the requirements of the services we provide to our customers, in accordance with the contract and technology, and to improve our products and services;
- To record identity, address, and other necessary information to identify the transaction owner within the scope of the Law on Regulation of Electronic Commerce No. 6563, the Law on Consumer Protection No. 6502, and the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette No. 29457 dated 26.08.2015, the Regulation on Distance Contracts published in the Official Gazette No. 29188 dated 27.11.2014, and other relevant legislation;
- To arrange all records and documents that will serve as a basis for payment systems, electronic contracts, or paper-based processing that are mandatory in the field of Banking and Electronic Payment; to comply with information retention, reporting, and notification obligations stipulated by legislation and other authorities;
- To provide information to prosecutor's offices, courts, and relevant public officials upon request and due to legislation in matters related to public safety and legal disputes;

 

will be processed in accordance with KVKK No. 6698 and relevant secondary regulations. Information about third parties or organizations to whom your personal data may be transferred For the purposes stated above, the persons / organizations to whom your personal data shared with our Company may be transferred are; primarily Shopify International Limited, which provides our Company's e-commerce infrastructure, as well as suppliers, shipping companies, and other individuals and organizations related to the services provided, program partner organizations with whom we cooperate, domestic / foreign organizations and other third parties from whom we receive services as a Data Processor and/or to carry out our activities.

Method of collecting your personal data

Your personal data,

- Through the forms on our Company's website and mobile applications, including information such as name, surname, Turkish ID number, address, phone number, work or personal email address; preferences on pages accessed using a username and password, IP records of performed transactions, cookie data collected by the browser, and data including browsing times and details, location data in the form of;

- Verbally, in writing, or electronically through our sales and marketing department employees, branches, suppliers, other sales channels, paper forms, business cards, digital marketing, and call centers;

- From individuals who share their personal data for purposes such as establishing a commercial relationship with our Company, applying for a job, submitting a proposal, through business cards, resumes (CVs), proposals, and other means, in a physical or virtual environment, face-to-face or remotely, verbally or in writing or electronically;

- Additionally, data indirectly obtained from different channels, obtained from websites, blogs, contests, surveys, games, campaigns and similar (micro) websites, and social media, e-newsletter reading or clicking actions, data provided by publicly available databases, public profile and data from social media platforms; can be processed and collected.

Your personal data obtained before KVKK came into force

Your personal data legally obtained before April 7, 2016, the effective date of KVKK, through membership, electronic communication consent, product / service purchase, and other means, is also processed and stored in accordance with the terms and conditions set forth in this document.

Transfer of your personal data abroad

Your personal data collected by any of the methods listed above, to be processed in Turkey or processed and stored outside Turkey, may be transferred to service providers located abroad (to countries accredited by the Personal Data Board and where there is adequate protection for personal data) provided that it remains within the scope of KVKK and is in accordance with the purposes of the contract.

Storage and protection of personal data

Your personal data will be stored confidentially in the database and systems of our Company in accordance with Article 12 of KVKK; it will not be shared with third parties under any circumstances, except for legal obligations and the regulations stated in this document. Our Company is obliged to prevent the unlawful processing of personal data, prevent unauthorized access, and take software measures such as access management and physical security measures, in accordance with Article 12 of KVKK, for the systems and databases where your personal data is hosted. In the event that personal data is learned to have been obtained by others unlawfully, the situation will be immediately and in writing reported to the Personal Data Protection Board in accordance with legal regulations.

Keeping personal data up-to-date and accurate

In accordance with Article 4 of KVKK, our Company has an obligation to keep your personal data accurate and up-to-date. In this context, in order for our Company to fulfill its obligations arising from the current legislation, our Customers must share accurate and up-to-date data or update it through the website / mobile application.

Rights of the personal data owner under KVKK No. 6698

Article 11 of KVKK No. 6698 came into force on October 7, 2016, and in accordance with the relevant article, the rights of the Personal Data Owner after this date are as follows: The Personal Data Owner, by applying to our Company (data controller), has the right to learn whether personal data related to them is being processed;

To learn whether personal data is being processed,

1. If personal data has been processed, to request information regarding this,
2. To learn the purpose of processing personal data and whether it is used in accordance with its purpose,
3. To know the third parties to whom personal data is transferred domestically or abroad,
4. To request correction of personal data if it is incomplete or incorrectly processed,
5. To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of KVKK,
6. To request that these operations be notified to third parties to whom personal data has been transferred in case of correction, deletion, or destruction of personal data,
7. To object to the occurrence of a result against the person themselves through the analysis of processed data exclusively by automatic systems,
8. To request compensation for damages if they suffer damage due to unlawful processing of personal data,

 

Monadas Bijou (Merve Burma), located at Cevizli Mah. Zuhal Cad. A Blok No:46 İç Kapı No:50 Maltepe/ İstanbul, is the Data Controller within the scope of KVKK. The Data Controller Representative to be appointed by our Company will be announced in the Data Controllers Registry and on the internet address where this document is located when the legal infrastructure is provided. Personal Data Owners can direct their questions, opinions, or requests to any of the following communication channels:

 

Email: info@monadasbijou.com

Phone: +905333903002