(KVK) Information Text

CUSTOMER INFORMATION TEXT ON PROTECTION OF PERSONAL DATA

As Kaptan Dış Ticaret Limited Şirketi ("Master Stil"), we attach great importance to the processing and protection of your personal data. This Customer Information Policy has been prepared in accordance with Article 10 of the Personal Data Protection Law No. 6698 ("Law" or "KVKK") and the Communiqué on the Procedures and Principles to be Complied with in Fulfilling the Disclosure Obligation, to ensure that our customers are informed about the personal data processed and transferred during the provision and development of various services.

However, you can find detailed information about the processing of your personal data obtained automatically through cookies used on Master Stil's website www.masterstil.com, the types of cookies used, and your management preferences regarding these cookies in the Cookie Policy.

PURPOSE OF PROCESSING YOUR PERSONAL DATA, LEGAL REASON AND COLLECTION METHODS

If you shop as a member on our website www.masterstil.com, your personal data is processed within the framework of legal reasons in accordance with the KVKK and other regulations.

Master Stil is based on the following principles in its personal data processing activities:

• Compliance with the law and the rule of honesty,

• Ensuring that personal data is accurate and up-to-date when necessary,

• Processing for specified, explicit and legitimate purposes,

• Being connected, limited and proportionate to the purpose for which they are processed,

• Preservation for the period required by the relevant legislation or for the purpose for which they are processed.

In accordance with the principles listed above, personal data of members are processed and destroyed securely by Master Stil in physical or electronic environments in accordance with the Law and relevant legislation.

 

PURPOSE AND LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA

Your collected personal data may be processed by Master Stil within the scope of the personal data processing conditions specified in Articles 5 and 6 of the Law for the following purposes (“Purposes”) within the scope of the necessary work to enable you to benefit from the products and services offered by our business units and the execution of relevant business processes:

 

Purposes of Processing Member's Personal Data: Carrying out finance and accounting affairs, carrying out communication activities, carrying out processes related to company/product/service affiliation, carrying out activities in accordance with legislation, monitoring and carrying out legal affairs, carrying out activities related to ensuring business continuity, carrying out and auditing business activities, carrying out personalized goods/service sales processes, carrying out personalized goods/service after-sales support services, carrying out customer relationship management processes, carrying out activities aimed at customer satisfaction, carrying out advertising, campaign and promotion processes, carrying out storage and archive activities, carrying out contract processes, following up on requests/complaints, providing information to authorized persons, institutions and organizations, carrying out auditing/ethics activities, carrying out internal audit/investigation/intelligence activities.

MASTER STYLE'S LIGHTING OBLIGATION

In order to fulfill the obligation to inform within the scope of Article 10 of the Law and the Communiqué on the Procedures and Principles to be Applied in Fulfilling the Obligation to Inform ("Communiqué") , Master Stil provides information texts and, if necessary, explicit consent texts to the relevant persons on the basis of the process and the persons whose data are processed.

Within the framework of the aforementioned disclosure obligation, information is provided to the Relevant Persons on the following matters in accordance with the Law:

• The identity of the data controller and its representative, if any,

• The purpose for which Personal Data will be processed,

• To whom and for what purpose the processed Personal Data can be transferred,

• The method and legal reason for collecting Personal Data,

• Other rights listed in Article 11 of the KVKK.

 

PERSONAL DATA CATEGORIES PROCESSED

MEMBER CUSTOMER

Your Identity Data: Name, surname, date of birth, gender, Turkish ID number

Your Contact Data: Address, email, mobile phone number

Your Location Data: Location information

Your Financial Data: Account number, IBAN number, credit card usage information

Your Customer Transaction Data: Purchased product information, photos, logos, and text added when personalizing the product, order records, shopping history, special day records, commercial electronic message permission, campaigns used, cargo delivery information, message and call center records.

Your Marketing Data : Cookie records, records of users' past actions, targeting, habits and likes

Your Legal Transaction Data: Request and complaint records, commercial electronic message consent, legal transaction file records, notices, information in correspondence with judicial and administrative authorities.

Your Transaction Security Data: IP Address, password information, traffic data, website login and logout information, username information

Risk Management Data: IP address, password and username information

Visual and Audio Data: Call center records, photos and/or images added by the user when personalizing the product

 

PURPOSES AND LEGAL REASONS FOR PROCESSING YOUR PERSONAL DATA

Below, we provide you with information regarding the purposes for which we process your personal data categorized above and on what legal grounds we rely:

Reasons for processing Member Data

• To communicate with our customers regarding the conditions and current status of the contracts we have concluded under the relevant articles of the Distance Selling Contract and the Consumer Protection Law and to provide the necessary information.

• Creating invoices and accounting records for orders

• Preparation of all records and documents that will form the basis of the transaction in electronic (internet/mobile etc.) or paper environment.

• Improving and developing the services offered to our members and carrying out business development processes.

• Responding to information requests from competent authorities

• Carrying out advertising, marketing and promotional activities tailored to our members' specific preferences and interests by conducting market analysis, targeting, profiling and analysis studies, and sending commercial electronic messages to our members for promotional, marketing, advertising, campaign and celebration purposes.

• Improving the experience of our members who shop on the website, carrying out loyalty processes for products and services, carrying out activities to ensure member satisfaction, and conducting surveys electronically and/or physically through contracted organizations.

• Ensuring information and transaction security while using our services

• Execution and control of our business activities

• Fulfilling our legal obligations and exercising our rights arising from the current legislation

• Carrying out advertising, marketing and promotional activities based on the specific preferences and interests of potential product or service buyers by conducting market analysis, targeting and analysis studies.

• Carrying out the delivery processes of products purchased through the website

LEGAL REASONS REQUIRING PROCESSING AND DELETION/ANONYMIZATION OF PERSONAL DATA

The legal reasons requiring the destruction of personal data are as follows:

• Amendment or repeal of relevant legislative provisions stipulating the processing or storage of personal data,

• The conditions requiring the processing of personal data in Articles 5 and 6 of the Law are eliminated,

• The purpose requiring the processing and/or storage of personal data disappears,

• In cases where explicit consent is required for the processing of personal data, the Data Subject must withdraw his consent,

• Master Stil accepts the application of the Data Subject for the deletion, destruction or anonymization of his/her Personal Data within the framework of his/her rights in subparagraphs (e) and (f) of Article 11 of the Law,

• If the application made by the Data Subject for the destruction of his/her personal data is rejected by Master Stil, a complaint should be made to the Personal Data Protection Board ("Board") and this request should be approved by the Board,

 

PERSONAL DATA STORAGE PERIOD

Master Stil retains the personal data it processes in accordance with the Law for the periods stipulated in the relevant legislation or required by the purpose of processing.

 

 

TECHNICAL AND ADMINISTRATIVE MEASURES TAKEN TO SECURELY STORAGE PERSONAL DATA AND PREVENT UNLAWFUL PROCESSING AND ACCESS

1. Authority Control

2. Access Logs

3. User Account Management

4. Network Security

5. Application Security

6. Encryption

7. Intrusion Detection and Prevention Systems

8. Log Records

9. Data Masking

10. Backup

11. Firewalls

12. Current Anti-Virus Systems

13. Establishing two-factor authentication systems and offering them to users as an alternative security measure starting from the membership application stage,

14. In case users log in to their accounts from devices other than those that provide frequent access, ensuring that the login information is sent to the contact addresses of the relevant persons via methods such as e-mail/SMS, etc.

15. Protecting applications with HTTPS (Hypertext Transfer Protocol Secure) or a method that provides the same level of security,

16. Limiting the number of unsuccessful login attempts from the IP (Internet Protocol Address) address,

17. If third-party software or services are used to access the data controllers' systems, the security updates of these software and services should be performed regularly and the necessary checks should be carried out.

TRANSFER OF PERSONAL DATA

Your personal data,

It is transferred to Authorized Public Institutions and Organizations for the purposes of carrying out activities in accordance with the legislation within the scope stipulated by the legal regulation, providing information to authorized persons, institutions and organizations, following up and carrying out legal affairs. It is transferred to Business Partners with whom we operate in cooperation during the sales process, cargo companies that provide the cargo shipment process, independent auditing firms from which services are received during the audit and control process, financial consultancy firms and intermediary service providers, Suppliers such as Private Law Legal Entities such as banks and payment institutions that are active in the management of financial affairs, Affiliates and Subsidiaries.

WHAT ARE YOUR RIGHTS AS A CONCERNED PERSON?

Regarding your personal data within the scope of KVKK and relevant legislation;

• Learning whether your personal data is being processed,

• Request information regarding your personal data if it has been processed,

• To learn the purpose of processing personal data and whether they are used in accordance with their purpose,

• Knowing the third parties to whom your personal data is transferred, whether domestically or abroad,

• Request correction of your personal data if it is processed incompletely or incorrectly,

• Request the deletion or destruction of your personal data within the framework of the conditions stipulated in the KVKK legislation,

• When you request the correction of incomplete or inaccurate data or the deletion or destruction of your personal data, you may request that this situation be notified to third parties to whom we have transferred your personal data,

• To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems, and

If you suffer damage due to the unlawful processing of personal data, you have the right to demand compensation for this damage.

Master Stil takes the necessary measures prescribed by the Board regarding the transfer of personal data abroad and complies with Article 9 of the Law.

 

HOW CAN YOU EXERCISE YOUR RIGHTS?

If you wish, you can submit your applications and requests regarding your personal data;

• Through the Personal Data Protection Law (KVK) APPLICATION FORM available on our website masterstil.com ;

• By sending an e-mail to kvkk@masterstil.com using the e-mail address provided when becoming a member of Master Stil and registered in its system,

• By applying in person with a valid ID document,

• With a wet signature and a photocopy of the ID, Ferah Mah. Kartal Sk. No: 1 İç Kapı No: 3 Üsküdar/ ISTANBUL

• by sending it to the address,

• By signing with a mobile signature or secure electronic signature and sending an e-mail to kvkk@masterstil.com,

• You can forward it to Master Stil by sending it to hukuk@registered electronic mail (KEP) address using your registered electronic mail (KEP) address and secure electronic signature or mobile signature.

• INFORMATION TO INCLUDED IN YOUR APPLICATION

In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, the following information is required.

• Name, surname, signature if the application is in writing,

• Turkish ID number (if the applicant is a foreigner, his/her nationality, passport number or ID number, if any),

• Residence or workplace address for notification,

• If available, the e-mail address, telephone number and fax number for notification

• Subject to demand.

To exercise the rights specified above, the Data Subject must clearly and comprehensibly state the requested matter in the application, including explanations of the right they are requesting to exercise. Information and documents related to the application must be attached to the application.

While the request must be personal to the applicant, if the applicant is acting on behalf of someone else, the applicant must be specifically authorized to do so, and this authority must be documented (power of attorney). The application must also include identity and address information, and documents confirming identity must be attached.

Requests made by unauthorized third parties on behalf of someone else will not be taken into consideration.

HOW LONG WILL IT TAKE TO ANSWER YOUR REQUESTS REGARDING THE PROCESSING OF YOUR PERSONAL DATA?

Your requests regarding your personal data will be evaluated and responded to within 90 days of receipt. If your application is rejected, justified reasons for rejection will be sent to the address you provided in your application, via email or postal mail, as chosen by you.

UPDATE OF MEMBER INFORMATION TEXT

The Information Text may change in line with changing services and conditions and legal developments within the scope of the MasterStil by Master Stil platform, and you can access our most up-to-date Information Text on our website www.masterstil.com .