Privacy Notice under the Personal Data Protection Law (KVKK)
General Information about the Personal Data Protection Law
Personal Data Protection Law No. 6698 (referred to below as KVKK) was adopted on 24 March 2016 and published in the Official Gazette dated 7 April 2016, No. 29677. Some provisions of KVKK entered into force on publication, while others took effect on 7 October 2016.
Information Provided as Data Controller
Under KVKK No. 6698, we act as the Data Controller. Within the framework explained on this page, your personal data may be recorded, stored, updated, disclosed or transferred to third parties where permitted by law, classified and processed in the ways specified in KVKK.
How Your Personal Data May Be Processed
Under KVKK No. 6698, we may process the personal data you share with our company, wholly or partly, by automated means or by non-automated means where the data forms part of a data filing system. This includes collecting, recording, storing, modifying, reorganising and, in short, performing any operation on the data.
Under KVKK, any operation performed on personal data is considered "processing of personal data".
Purposes and Legal Grounds for Processing Your Personal Data
The personal data you share will be processed for the following purposes:
- To fulfil the requirements of the services we provide to our customers in accordance with contractual and technological requirements, and to improve our products and services;
- To record identity, address and other necessary information to identify the person carrying out a transaction under Law No. 6563 on the Regulation of Electronic Commerce, Consumer Protection Law No. 6502, the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette dated 26.08.2015, No. 29457, the Regulation on Distance Contracts published in the Official Gazette dated 27.11.2014, No. 29188, and other relevant legislation;
- To prepare all records and documents required for payment systems, electronic contracts or paper-based transactions in banking and electronic payments, and to comply with information retention, reporting and disclosure obligations required by legislation and other authorities;
- To provide information to public prosecutors, courts and relevant public officials upon request and as required by law in matters concerning public safety and legal disputes;
Processing will be carried out in accordance with KVKK No. 6698 and the relevant secondary legislation.
Third Parties or Organisations to Which Your Personal Data May Be Transferred
For the purposes stated above, the personal data you share with our company may be transferred primarily to ubbon.com, which provides our company's e-commerce infrastructure; individuals and organisations involved in our services, such as suppliers and shipping companies; partner organisations we work with or obtain services from to conduct our activities and/or act as data processors; organisations in Türkiye and abroad; and other third parties.
How Your Personal Data Is Collected
Your personal data may be collected and processed through:
- Forms on our company's website and mobile applications, including your name, surname, Turkish identification number, address, telephone number and business or personal email address; preferences on pages accessed using a username and password; IP records of transactions; cookie data collected by your browser; browsing duration and details; and location data;
- Our sales and marketing employees, branches, suppliers, other sales channels, paper forms, business cards, digital marketing and call centre channels, verbally, in writing or electronically;
- People who share personal data through business cards, CVs, proposals or other means to establish a business relationship with our company, apply for a job or submit a proposal, in physical or virtual environments, in person or remotely, verbally, in writing or electronically;
- Information obtained indirectly through various channels, including websites, blogs, microsites used for competitions, surveys, games, campaigns and similar purposes, social media, newsletter reading or clicking activity, public databases, and publicly accessible profiles and data on social media platforms;
These sources and methods may be used to collect and process your personal data.
Personal Data Obtained Before KVKK Entered into Force
Personal data lawfully obtained before 7 April 2016, when KVKK entered into force, through membership, consent to electronic communications, purchases of products or services, or other means is also processed and stored in accordance with the terms and conditions set out in this document.
Transfer of Your Personal Data Abroad
Personal data collected through any of the methods listed above, whether processed in Türkiye or intended for processing and storage abroad, may also be transferred to service intermediaries abroad, provided the transfer remains within the scope of KVKK and complies with the purposes of the Agreement. Such transfers may be made to countries accredited by the Personal Data Protection Board as providing adequate protection for personal data.
Storage and Protection of Personal Data
Your personal data will be stored confidentially in our company's databases and systems under Article 12 of KVKK. It will not be shared with third parties except where legally required or as provided in this document.
Under Article 12 of KVKK, our company must prevent unlawful processing of personal data and unauthorised access to the systems and databases where it is stored. We must implement software measures, such as access management, and physical security measures.
If we discover that personal data has been unlawfully obtained by others, the Personal Data Protection Board will be notified in accordance with legal requirements.
Keeping Personal Data Accurate and Up to Date
Under Article 4 of KVKK, our company is required to keep your personal data accurate and up to date.
To enable our company to fulfil its obligations under applicable legislation, customers must provide accurate, current information or update it through the website or mobile application.
Rights of Data Subjects under KVKK No. 6698
Article 11 of KVKK No. 6698 entered into force on 7 October 2016. Under this article, data subjects have had the following rights since that date:
By applying to our company as the Data Controller, data subjects may:
- Find out whether their personal data is being processed;
- Request information about the processing of their personal data;
- Learn the purpose of processing and whether their personal data is being used in accordance with that purpose;
- Learn which third parties in Türkiye or abroad have received their personal data;
- Request correction of incomplete or inaccurate personal data;
- Request deletion or destruction of their personal data under the conditions set out in Article 7 of KVKK;
- Request that third parties receiving their personal data be notified of any correction, deletion or destruction;
- Object to a result that adversely affects them and arises from analysis of their data solely through automated systems;
- Request compensation for damage caused by unlawful processing of their personal data.
Data Controller Details
Registered with the Istanbul Chamber of Commerce under registration number 1061921,
with MERSIS number 0833122808800001,
and located at Mimar Sinan Mh. Atlas Çıkmazı Sk. No.6/68 Üsküdar - İSTANBUL ,
TAYRADA ELEKTRONİK HİZMETLER VE TİCARET A.Ş. is the Data Controller under KVKK.
The Data Controller Representative to be appointed by our company will be announced in the Data Controllers Registry and on the webpage containing this document once the necessary legal framework is in place.
Contact Details
Data subjects may submit questions, comments or requests through any of the following contact channels:
Website: ubbon.com
Email: [email protected]
Telephone: +90 212 485 72 13
Address: Mimar Sinan Mh. Atlas Çıkmazı Sk. No.6/68 Üsküdar - İSTANBUL