Privacy Policy

PRIVACY POLICY

As “UĞUR YILMAZEL VANILLAFEST”, our business attaches utmost importance to ensuring the security of your personal data and information that you have transmitted to us, whether by using our online sales websites or by other means.

The Law on the Protection of Personal Data No. 6698 (“KVKK”) was adopted by the Parliament on March 24, 2016 and entered into force by being published in the Official Gazette dated April 07, 2016. In order to fulfill the disclosure obligation arising from Article 10 of the Personal Data Protection Law No. 6698 (“KVKK”), we bring the following explanations to the attention of our customers and third parties who use our website and/or mobile applications. Our company reserves the right to update this Information on the Protection of Personal Data at any time within the framework of the changes that can be made in the current legislation.

Because the privacy and security of your personal data are among our top priorities. Personal data means any information that makes your identity specific or identifiable.

For this reason, “Vatan Mah. Carsi Cad. No:38B 34035 Bayrampaşa/İstanbul” is considered as a Data Controller within the scope of KVKK in terms of personal information received from you during its activities. As the Data Controller, your personal information may be recorded, stored, updated, classified, disclosed and/or transferred to third parties and/or abroad where permitted by the legislation, and processed in other ways listed in the PDPL, within the framework described below. The Data Controller Representative to be appointed by us will be announced in the Data Controllers Registry and the internet address where this document is located, when the legal infrastructure is provided.

MEMBERSHIP AND OFFERS

Persons who enter the website by accepting the membership conditions on the site platform and follow and / or buy the products on the platform are defined as "Members".

Due to the nature of the business, our Store collects some personal information about the members (such as name-surname, company information, telephone, address or e-mail addresses) by filling out various forms and surveys on the Membership or our Store.

In this direction, our company may send campaign information, information about new products, promotional offers to its customers and members in certain periods. Our members can make all kinds of choices about whether or not to receive such information while becoming a member, then this selection can be changed in the account information section after logging in as a member, or they can make a notification with the link in the information message they receive.

During the approval process carried out through our store or by e-mail, personal information transmitted to our store electronically by our members will not be disclosed to third parties, except for the purposes and scope determined by the consumer transactions we make with our Members.

Our company records and uses the IP address of its members in order to identify system-related problems and quickly resolve any problems or disputes that may arise regarding the service provided. IP addresses can also be used to identify users in a general way and to gather comprehensive demographic information.

Our company may use the requested information for direct marketing purposes, either by itself or by the people it cooperates with, except for the purposes and scope determined by the Membership Agreement. Personal information can also be used to contact the user when necessary. Information requested by our company or information provided by the user or information about transactions made through our Store; It can be used in various statistical evaluations, database creation and market research without disclosing the identity of our members, even outside the purposes and scope determined by the "Membership Agreement" by our company and its collaborators.

Our company, to keep confidential information strictly private and confidential, to consider it a confidentiality obligation, to ensure and maintain confidentiality, to take all necessary measures and take all necessary care to prevent all or any part of confidential information from entering the public domain or unauthorized use or disclosure to a third party. commits to show

1-Which personal data is processed by our site?

If you are a member, the following personal data can be processed.

• Your Identity Information: your name, surname, gender and age information, ID,
• Your Contact Information: your mobile phone number, delivery address, e-mail address,
• Your Customer Transaction Information: your order and billing information, your delivery transaction information.

2-What are the purposes of processing your personal data and the collection methods?

Your identity, contact and customer transaction information; Within the scope of our contractual relationship, it is collected and processed automatically from you, from the website, in electronic environment, for the following purposes.

• Execution of the processes for the establishment and performance of the contract,
• Execution and supervision of finance and accounting processes,
• Execution of invoicing processes,
• Execution of logistics, cargo activities and follow-up of delivery processes,
• Making purchases on the website and confirming the identity information of the transaction,
• Conducting communication activities,
• Presenting products that you may be interested in, taking into account your interests,
• Contacting and informing about the conditions, current status and updates of contracts concluded on our platform pursuant to the relevant articles of the Law on Distance Sales Contract and Consumer Protection,
• Informing you about developments, opportunities and innovations within our body, if you have your express consent,
• Ensuring the security of operations regarding this platform,
• Ensuring that the activities are carried out in accordance with the legislation,
• Follow-up and execution of legal affairs,
• Providing information to authorized persons, public institutions and organizations.

<<Your transaction security information; Within the scope of our contractual relationship, it is collected and processed automatically from you, from the website, in electronic environment, for the following purposes.

• Execution of the processes for the establishment and performance of the contract,
• Making purchases on the website and confirming the identity information of the transaction,
• Increasing customer satisfaction, getting to know our customers who shop from the platform and using them in customer environment analysis, Carrying out activities for the development and improvement of the products and services offered by our Company,
• Execution of information security processes,
• Ensuring the security of operations regarding this platform,
• Ensuring that the activities are carried out in accordance with the legislation,
• Providing information to authorized persons, institutions and organizations.

<<Your legal transaction information; Within the scope of our contractual relationship, it is collected and processed automatically from you, from the website, in electronic environment, for the following purposes.

• Execution of the processes for the establishment and performance of the contract,
• Ensuring the security of operations regarding this platform,
• Ensuring that the activities are carried out in accordance with the legislation,
• Follow-up and execution of legal affairs,
• Providing information to authorized persons, institutions and organizations.

3-What is the legal reason for the processing of your personal data?

Your personal data is processed by our site for the above-mentioned purposes, based on the legal compliance reasons stated in Articles 5, 8 and 9 of the KVKK and listed below.

• Based on the legal reason that it is clearly stipulated in the legislation to which our company is subject, especially the Law on the Regulation of Electronic Commerce 6563, the Turkish Commercial Code No. 6102, the Turkish Penal Code No. 5237 and the Law on the Protection of the Consumer No. 6502; Fulfilling our obligations arising from the legislation, especially the activities to ensure the security of the operations on the company platform, to carry out the information security processes, to ensure that the activities are carried out in accordance with the legislation,
• Based on the legal reason that it is necessary to process your personal data, provided that it is directly related to the establishment or performance of the contract; Carrying out the activities of establishing contracts concluded on our platform under the relevant articles of the Law on the Protection of the Consumer, such as distance sales contracts, carrying out activities for the realization of your purchases, conducting and controlling the business activities of the company, tracking the delivery processes, submitting your requests, complaints and suggestions regarding our products and services. evaluation, execution and control of finance and accounting processes, execution of communication activities,
• Based on the legal reason that it is compulsory for our company to fulfill its legal obligation; Fulfilling the legal obligations specified in the decisions, guides and guides published by the competent authorities and/or in the secondary legislation to which our Company is subject, especially the Regulation on Distance Contracts and the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce, and informing authorized persons, institutions and organizations Ensuring that the activities are carried out in accordance with the legislation, following and executing the legal affairs, executing the financial and accounting works,
• Based on the legal reason that data processing is mandatory for the establishment, exercise or protection of a right; execution of legal and litigation affairs,
• Based on the legal reason that data processing is mandatory for the legitimate interests of our company, provided that it does not harm fundamental rights and freedoms; Carrying out activities for the development and improvement of the products and services offered by our company.

4-To whom is your personal data transferred and for what reasons?

Our company takes care to process your personal data in accordance with the "need to know" and "need to use" principles, by ensuring the necessary data minimization and by taking the necessary technical and administrative security measures. Since the execution or control of business activities, ensuring business continuity, operation of digital infrastructures necessitate continuous data flow with different stakeholders, we have to transfer the personal data we process to third parties for certain purposes. In addition, it is very important that your personal data is accurate and up-to-date so that we can fully and properly fulfill our contractual and legal obligations.

Your personal data, conducting the marketplace operation, carrying out the delivery processes of the products you ordered, managing your help and support requests for your processes, carrying out activities to increase your experience and satisfaction, carrying out activities for the development and improvement of the products and services offered by our company, providing you with a better shopping experience and To the extent necessary, especially for the purposes of carrying out activities to increase your satisfaction, ensuring business continuity, ensuring information security, fulfilling legal obligations, and limited to the purposes specified in the second article of this clarification text: on the basis of legal grounds that it is necessary for the establishment or performance of the contract;

• In order to carry out logistics activities and to follow up the delivery processes, you and / or the person to whom the product will be delivered on behalf of the seller of the purchased product, cargo companies and private couriers,
• With our consultants and service providers, banks, financial advisors in order to carry out invoicing processes,
• With our relevant business partners, consultants and service providers, banks, financial advisors for the management of financial and accounting processes, identification and evaluation of risks, and prevention of fraud,
• With the e-invoice business partner to send the e-invoice to the customer electronically; With cargo and courier companies for the delivery of physical contracts or invoices, with our business partners who provide private integrator, independent audit, customs, financial advisor/accounting services,
• In order to fulfill the tax obligations, the invoices and collection receipts of the T.C. With the officials of the Ministry of Treasury and Finance,
• With our business partners and service providers who provide, operate or provide services to our IT infrastructure, Based on legal grounds that data processing is mandatory for the establishment, exercise or protection of a right, it is expressly stipulated in the legislation to which our company is subject, and it is compulsory for the fulfillment of its legal obligations;
• With lawyers, auditors, forensic experts, cyber security consultants, tax consultants and other third parties and business partners from whom we receive consultancy and service within the scope of fulfilling legal obligations,
• With authorized public institutions and organizations such as regulatory and supervisory institutions and courts and enforcement offices.

HOW DO WE PROTECT YOUR PERSONAL DATA?

Personal data shared with “www.vanillafest.com” is under our supervision and control. In accordance with the provisions of the relevant legislation in force, WE have undertaken the responsibility as the data controller to establish the necessary organization and to take and adapt the technical measures in order to protect the confidentiality and integrity of the information. Being aware of our obligation in this regard;

• Penetration tests are carried out at periodic intervals in accordance with international and national technical standards on data privacy.
• Your personal data that you transmit to us via the website and mobile site are protected using SSL (Secure Sockets Layer) technology.

CREDIT CARD AND EMAIL SECURITY CREDIT CARD SECURITY

Our company prioritizes the security of credit card holders who shop at our shopping sites. Your credit card information is not stored in any way our system. When you enter the transaction process, there are two things you need to pay attention to to understand that you are on a secure site. One of them is a key or lock icon on the bottom line of your browser. This indicates that you are on a secure website and all your information is encrypted and protected. This information is only used depending on the sales process and in the direction of your instructions.

The information about the credit card used during shopping is encrypted with 128-bit SSL (Secure Sockets Layer) protocol, independent of our shopping sites, and sent to the relevant bank for questioning. If the card availability is approved can be sustained for shopping. Since no information about the card can be viewed and recorded by us, third parties are prevented from obtaining this information under any circumstances. The reliability of payment/invoice/delivery address information of orders placed online by credit card is audited by our company against Credit Card Fraud. Therefore, the accuracy of financial and address/telephone information must first be confirmed in order for customers who order from our shopping sites for the first time to arrive at the procurement and delivery stage. In order to control this information, if necessary, the customer who has the credit card or the relevant bank is contacted.

Only you can access and change all the information you provide while becoming a member. If you protect your member login information securely, it is not possible for others to access and change information about you. For this purpose, it is acted within the 128-bit SSL security area during membership transactions. This system is an international encryption standard that cannot be broken. Internet shopping sites with an information line or customer service service and where full address and telephone information are specified are more preferred today. In this way, you can get detailed information about all the issues that come to your mind, and you can get healthier information about the reliability of the company that provides online shopping service. Note: We recommend paying attention to the full address and telephone number of the company on internet shopping sites.

If you are going to shop, make a note of all the phone/address information of the store where you bought the product before you do your shopping. Confirm by phone before shopping if you do not trust. All information about our company and the location of the company are indicated on all our online shopping sites.

MAIL ORDER CREDIT CARD INFORMATION SECURITY

Your identity and credit card information, which you will send to us by credit card mail-order method, will be kept by our company according to the principle of confidentiality. This information is kept for 60 days against possible credit card withdrawal objections with the bank and then destroyed. If any amount other than the cost of the mail-order form approved by you, which you will send to us in return for the price of the products you ordered, is withdrawn from your card, you can naturally object to the bank and it does not pose a risk as you can prevent the payment of this amount.

THIRD PARTY WEBSITES AND APPS

Our store may link to other sites within the website. Our company does not bear any responsibility for the privacy practices and contents of the sites accessed through these links. Advertisements published on the website of our company are distributed to our users through our advertising partners. The Privacy Policy Principles in this agreement are only for the use of our Store and do not cover third party websites.

EXCEPTIONAL CIRCUMSTANCES

In the limited cases specified below, our company may disclose the information of users to third parties, except for the provisions of this "Privacy Policy". These cases are limited in number;

1. To comply with the obligations imposed by the laws, decrees, regulations, etc., issued by the competent legal authority and in force;
2. In order to fulfill the requirements of the "Membership Agreement" and other agreements concluded by our store with users and to put them into practice;
3. Requesting information about users for the purpose of conducting an investigation or investigation duly carried out by the competent administrative and judicial authority;
4. These are the cases where it is necessary to provide information to protect the rights or security of users.

EMAIL SECURITY

Never write down your credit card number or passwords in the e-mails you send to our store's Customer Service regarding any of your orders. Information contained in e-mails can be viewed by third parties. Our company cannot guarantee the security of the information transferred from your e-mails under any circumstances.

BROWSER COOKIES

Our company can obtain information about the users visiting our store and the use of the website by using a technical communication file (Cookie). The technical communication files mentioned are small text files that a website sends to the user's browser to be stored in the main memory. The technical communication file facilitates the use of the Internet by storing the status and preferences about the site. The technical communication file helps to obtain statistical information about how many people visit the site, for what purpose, how many times a person visits the site and how long they stay on the site, and to dynamically generate advertisements and content from specially designed user pages for users. The technical communication file is not designed to retrieve data or any other personal information from the main memory or your e-mail. Most of the browsers are initially designed to accept the technical communication file, but users can change the settings so that the technical communication file does not arrive or a warning is given when the technical communication file is sent. Our company may change the provisions of this "Privacy Policy" at any time by posting it on the site or by sending an e-mail to users or publishing it on its site. If the terms of the Privacy Policy are changed, they will take effect on the date of publication.

YOUR RIGHTS TO PROTECT YOUR PERSONAL DATA

By applying to us through the methods listed in the "Communication for Your Rights and Requests" section of this Clarification Text,

• Learning whether your personal data is processed,
• If it has been processed, requesting information about it,
• To learn the purpose of processing your personal data and whether they are used in accordance with the purpose,
• Requesting correction of personal data if it is incomplete or incorrectly processed,
• Requesting the deletion or destruction of your personal data within the framework of the conditions stipulated in the KVKK,
• Requesting notification of the transactions made in accordance with your rights in the form of correction, deletion and destruction mentioned above, to third parties to whom personal data has been transferred,
• Objecting to the emergence of a result against you by analyzing your processed personal data exclusively with automated systems,
• You have the right to demand the compensation of your damage in case you suffer damage due to the processing of your personal data in violation of the relevant legislation.

CONTACT FOR YOUR RIGHTS AND REQUESTS

You can reach your questions and requests regarding your personal data with a petition prepared in accordance with the conditions specified in the Communiqué on Application Procedures and Principles to the Data Controller, or the application form here.

*Relevant Persons who will apply for the "Personally Written Application" are required to submit documents proving their identity.

In this context, “Vatan Mah. Carsi Cad. No:38B 34034 Bayrampaşa/İSTANBUL", we kindly request that only the front side of the ID photocopy (without the blood type and religion section) be submitted together with the application form in your personal written applications.

**We kindly request you to write “Relevant Person Request for the Law on the Protection of Personal Data” in the notification envelope of the application form or in the subject of the e-mail. As personal data owners, if you submit your requests regarding your rights to us, our website will conclude your request free of charge within 30 (thirty) days at the latest. However, if the response to your application requires a cost in accordance with the legislation, we may charge the fee in the tariff determined by the Personal Data Protection Board.

ABOUT THE PRIVACY POLICY

The right to update the text of this Statement on the Protection of Personal Data at any time within the framework of the changes that can be made in the current legislation is reserved.