Personal Data Protection Law

Personal Data Protection Law Disclosure Notice

The Law on the Protection of Personal Data No. 6698 (hereinafter referred to as PDPL) was adopted on March 24, 2016, and published in the Official Gazette No. 29677 dated April 7, 2016. Some provisions of the PDPL entered into force on the date of publication, while others came into effect on October 7, 2016.

Information in the capacity of Data Controller

As Düzlem Metal Sanayi ve Ticaret Ltd. Şti., whose detailed corporate information is published below, and in our capacity as Data Controller pursuant to the PDPL No. 6698, your personal data may be recorded, stored, updated, disclosed/transferred to third parties where permitted by legislation, classified, and processed in the manner described on this page.

How your personal data may be processed

Pursuant to the PDPL No. 6698, your personal data shared with Düzlem Metal Sanayi ve Ticaret Ltd. Şti. may be processed by us wholly or partially, automatically or through non-automatic means provided that it forms part of a data recording system, by being obtained, recorded, stored, altered, reorganized — in short, by being subject to any and all operations performed on data. Under the scope of the PDPL, any operation performed on data is considered "processing of personal data."

Purposes and legal grounds for processing your personal data

Your shared personal data will be processed:

• To fulfill the requirements of the services we provide to our customers in accordance with contractual and technological requirements, and to improve our products and services;
• To record identity, address, and other necessary information to identify the transaction owner under Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on the Protection of Consumers, the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette No. 29457 dated 26.08.2015, the Regulation on Distance Contracts published in the Official Gazette No. 29188 dated 27.11.2014, and other relevant legislation;
• To arrange all records and documents that will serve as the basis for payment systems, electronic contracts, or paper-based transactions mandatory in the fields of Banking and Electronic Payment; and to comply with information retention, reporting, and disclosure obligations required by legislation and other authorities;
• To provide information to public prosecutors, courts, and relevant public officials upon request and as required by legislation in matters relating to public security and legal disputes; in accordance with the PDPL No. 6698 and related secondary regulations.

Information regarding third parties or organizations to whom your personal data may be transferred

For the purposes stated above, the parties to whom your personal data shared with Düzlem Metal Sanayi ve Ticaret Ltd. Şti. may be transferred include: our main shareholders; our direct or indirect domestic/foreign subsidiaries; Member companies using the Düzlem Metal Sanayi ve Ticaret Ltd. Şti. e-commerce infrastructure and, without limitation, persons and organizations related to the services provided; as well as domestic/foreign organizations and other third parties from whom we receive services and with whom we cooperate as Data Processors or program partners in the conduct of our operations.

How your personal data is collected

Your personal data may be collected and processed:

• Through forms on the Düzlem Metal Sanayi ve Ticaret Ltd. Şti. website and mobile applications and/or through the websites of Member Companies using the Düzlem Metal Sanayi ve Ticaret Ltd. Şti. commerce infrastructure, including information such as name, surname, Turkish ID number, address, phone number, business or personal email address; as well as preferences on pages accessed with a username and password, IP records of transactions performed, cookie data collected by the browser, browsing duration and details, and location data;
• Verbally, in writing, or electronically through our sales and marketing department employees, agents, dealers, paper forms, business cards, digital marketing, and call center channels;
• From data obtained indirectly through various channels, including (micro) websites used for purposes such as websites, blogs, competitions, surveys, games, campaigns; social media platforms (Facebook, Twitter, Google, Instagram, Snapchat, etc.); publicly available databases; and publicly shared profiles and data on social sharing platforms; as well as e-newsletter reading or click activity.

Your personal data obtained before the PDPL came into force

Personal data that was lawfully obtained prior to April 7, 2016 — the date the PDPL entered into force — through membership, electronic communication consent, product/service purchases, or other means, is also being processed and retained in accordance with the terms and conditions set out in this document.

Transfer of your personal data abroad

Your personal data collected by any of the methods listed above, whether processed in Turkey or to be processed and retained outside of Turkey, may also be transferred to service intermediaries located abroad (in countries accredited by the Personal Data Protection Board as providing adequate protection for personal data), provided it remains within the scope of the PDPL and is consistent with the purposes of the agreement.

Storage and protection of personal data

Your personal data will be kept confidentially in the databases and systems held by Düzlem Metal Sanayi ve Ticaret Ltd. Şti. pursuant to Article 12 of the PDPL, and will not be shared with third parties under any circumstances except as required by law and the regulations set forth in this document.

Pursuant to Article 12 of the PDPL, Düzlem Metal Sanayi ve Ticaret Ltd. Şti. is obliged to prevent unlawful processing of personal data in its systems and databases, to block unauthorized access, and to take software measures such as hashing, encryption, transaction logging, and access management, as well as physical security measures to ensure the safekeeping of such data. In the event that personal data is unlawfully obtained by others, the matter will be immediately reported to the Personal Data Protection Board in writing and in accordance with applicable legislation.

Keeping personal data accurate and up to date

Pursuant to Article 4 of the PDPL, Düzlem Metal Sanayi ve Ticaret Ltd. Şti. is obligated to keep your personal data accurate and up to date. Accordingly, our customers are required to share accurate and current data or update it via the website/mobile application in order for Düzlem Metal Sanayi ve Ticaret Ltd. Şti. to fulfill its obligations arising from applicable legislation.

Rights of personal data owners pursuant to the PDPL No. 6698

Article 11 of the PDPL No. 6698 entered into force on October 7, 2016. Pursuant to the relevant article, the rights of Personal Data Owners from that date onward are as follows:

1. The Personal Data Owner may apply to Düzlem Metal Sanayi ve Ticaret Ltd. Şti. (data controller) to:
2. Learn whether personal data is being processed,
3. Request information if personal data has been processed,
4. Learn the purpose of processing personal data and whether it is being used in accordance with that purpose,
5. Know the third parties to whom personal data has been transferred domestically or abroad,
6. Request correction of personal data if it has been processed incompletely or inaccurately,
7. Request deletion or destruction of personal data within the framework of the conditions set forth in Article 7 of the PDPL,
8. Request that the correction, deletion, or destruction of personal data be notified to third parties to whom the data has been transferred,
9. Object to the occurrence of a result against the data owner through the exclusive analysis of processed data by automated systems,
10. Request compensation for damages in the event of loss due to unlawful processing of personal data.

The Data Controller Representative to be appointed by Düzlem Metal Sanayi ve Ticaret Ltd. Şti. will be announced in the Data Controllers Registry and on the internet address where this document is published, once the legal infrastructure is established.

Personal Data Owners may direct their questions, comments, or requests to any of the following contact channels.

Email: info@volde.com