PERSONAL DATA PROTECTION AND PRIVACY

Clarification Text Regarding the Processing of Personal Data

Data Controller
Ahmet Yılmaz, data officer of www.morkuzuny.com website, ahmety45tr@gmail.com

Within the framework of our activities arising from the Law on Protection of Personal Data No. 6698 (“KVKK”) and related legislation and legal regulations, we have prepared this Personal Data Processing Clarification Text (“Clarification Text”) in order to enlighten the data owner regarding the processing, storage and transfer of your personal data.

In addition to these, detailed information about the cookies and SDKs used in case you visit our website, mobile site and/or mobile application can be found in the Cookie Policy. Personal data processed through these are explained in this Clarification Text.

The Clarification Text will be valid as of the date of its publication. Changes can be made at any time, if necessary, in the Clarification Text. Changes to be made, the Clarification Text becomes effective immediately upon its publication.

Contacts

customers

DATA CATEGORIES

1- Credentials

Processed Personal Data:
Name – Surname, Date of Birth, Gender, TR Identity Number

Personal Data Processing Purposes:
Execution of Finance and Accounting Affairs, Execution of Communication Activities; Execution of Company / Product / Services Loyalty Processes; Execution of Activities in Compliance with the Legislation; Follow-up and Execution of Legal Affairs; Execution of Business Continuity Activities; Execution and Supervision of Business Activities; Execution of Goods / Services Sales Processes; Execution of Goods / Services After-Sales Support Services; Execution of Customer Relationship Management Processes; Execution of Activities for Customer Satisfaction; Execution of Advertising, Campaign and Promotion Processes; Execution of Storage and Archive Activities; Execution of Contract and Membership Processes; Follow-up of Requests / Complaints; Planning and Execution of Commercial and/or Business Strategies; Carrying out the Necessary Work by the Business Units and Executing the Related Business Processes to Benefit from the Offered Products and Services; Providing Information to Authorized Persons, Institutions and Organizations

Legal Reasons for Personal Data Processing
Your personal data within this scope are provided by Ahmet Yılmaz for the realization of the above-mentioned purposes, as specified in the relevant legislation and Article 5 of the KVKK;

clearly stipulated in the law,
Provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract,
It is mandatory for the data controller to fulfill its legal obligation, and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

processed for legal reasons. For cases not covered by the above purposes, your personal data is processed based on your explicit consent, the details of which are specified in the Consent Text.

Collection Methods of Personal Data:
The above-mentioned personal data are collected through the membership forms on our website, the fields in the content of my account page that can be filled depending on your preference, your requests and applications, contracts, campaigns and third-party authentication systems (Ex: Google Login, Facebook Login, etc.).

2- Contact Information

Processed Personal Data:
E-Mail Address, Billing & Delivery Addresses, Mobile Number

Personal Data Processing Purposes:
Execution of Finance and Accounting Affairs; Execution of Communication Activities; Conducting Business Activities; Execution of Company / Product / Services Loyalty Processes; Follow-up and Execution of Legal Affairs; Execution of Goods/Service Sales Processes; Execution of Goods / Services After-Sales Support Services; Execution of Customer Relationship Management Processes; Execution of Activities for Customer Satisfaction; Conducting Marketing Analysis Studies; Execution of Advertising, Campaign and Promotion Processes; Follow-up of Requests / Complaints; Execution of Marketing Processes of Products / Services; Execution of Storage and Archive Processes; Providing Information to Authorized Persons, Institutions and Organizations

clearly stipulated in the law,
Provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract,
It is mandatory for the data controller to fulfill its legal obligation, and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

processed for legal reasons. For cases not covered by the above purposes, your personal data is processed based on your explicit consent, the details of which are specified in the Consent Text.

Collection Methods of Personal Data:
The above-mentioned personal data can be filled in the content of our website, especially on the membership pages, contracts, my account page, your requests and applications, contracts, campaigns and third-party authentication systems (Ex: Google Login, Facebook Login, etc.). ) are collected via

3- Legal Transaction Information

Processed Personal Data:
In Case of Dispute, Information in the Case File, Warnings, Correspondence with Judicial and Administrative Authorities

Personal Data Processing Purposes:
Follow-up and Execution of Legal Affairs; Execution and Supervision of Business Activities; Providing Information to Authorized Persons, Institutions and Organizations; Execution of Activities in Compliance with the Legislation; Execution of Storage and Archive Activities; Execution of Risk Management Processes; Execution of Contract Processes; Follow-up of Requests / Complaints; Ensuring the Security of Data Controller Operations

It is mandatory for the data controller to fulfill its legal obligation,
Data processing is mandatory for the establishment, exercise or protection of a right, and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

processed for legal reasons.

Collection Methods of Personal Data:
The above-mentioned personal data are collected through official letters and other printed / electronic documents from judicial and administrative authorities.

4- Customer Transaction Information

Processed Personal Data:
Billing Information, Request Information, Order Information, Customer Comments, Product Information, Cargo Information, Authorized Service Information

Personal Data Processing Purposes:
Execution of Supply Chain Management Processes; Execution and Supervision of Business Activities; Providing Information to Authorized Persons, Institutions and Organizations; Execution of Activities in Compliance with the Legislation; Execution of Finance and Accounting Affairs; Execution of Storage and Archive Activities; Execution of Contract Processes; Execution of Goods / Services Sales Processes; Execution of Goods / Services After-Sales Support Services; Execution of Customer Relationship Management Processes; Execution of Activities for Customer Satisfaction; Conducting Marketing Analysis Studies; Execution of Advertising, Campaign and Promotion Processes; Follow-up of Requests / Complaints, Execution of Marketing Processes of Products / Services

clearly stipulated in the law,
Provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract,
It is mandatory for the data controller to fulfill its legal obligation, and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

processed for legal reasons. For cases not covered by the above purposes, your personal data is processed based on your explicit consent, the details of which are specified in the Consent Text.

Collection Methods of Personal Data:
The personal data mentioned above are collected through printed/electronic forms, call center records, e-mails and digital data processing programs.

5- Transaction Security Information

Processed Personal Data:
IP Address Information, Website Login and Exit Information, Username Information, Password Information, Traffic Data (Connection Time / Duration etc.)

Personal Data Processing Purposes:
Execution of Information Security Processes; Conducting Audit / Ethical Activities; Execution and Supervision of Business Activities; Execution of Storage and Archive Activities; Ensuring the Security of Data Controller Operations; Providing Information to Authorized Persons, Institutions and Organizations; Execution of Activities in Compliance with the Legislation; Follow-up and Execution of Legal Affairs; Execution of Goods / Services Sales Processes; Follow-up of Requests / Complaints

clearly stipulated in the law,
It is mandatory for the data controller to fulfill its legal obligation, and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

processed for legal reasons. For cases not covered by the above purposes, your personal data is processed based on your explicit consent, the details of which are specified in the Consent Text.

Collection Methods of Personal Data:
The personal data mentioned above are collected through information security systems and electronic devices.

6- Financial Information

Processed Personal Data:
Encrypted Credit Card Information, Bank Account / IBAN Number Information

Personal Data Processing Purposes:
Execution of Activities in Compliance with the Legislation; Follow-up and Execution of Legal Affairs; Execution of Finance and Accounting Affairs; Execution of Return Processes; Execution and Supervision of Business Activities; Execution of Goods / Services Sales Processes; Execution of Storage and Archive Activities; Execution of Risk Management Processes; Execution of Contract Processes; Providing Information to Authorized Persons, Institutions and Organizations

Provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract, and
Obligatory for the data controller to fulfill its legal obligation

processed for legal reasons.

Collection Methods of Personal Data:
The above-mentioned personal data are collected through printed and electronic forms, e-mails and requests and messages on the website.

7- Location Information

Processed Personal Data:
Location Information

Personal Data Processing Purposes:
Execution of Customer Relationship Management Processes; Conducting Marketing Analysis Studies; Execution of Advertising / Campaign / Promotion Processes; Execution of Activities for Customer Satisfaction; Execution of Marketing Processes of Products / Services; Execution of Goods / Services Sales Processes; Execution of Goods / Services Production and Operation Processes

Legal Reasons for Personal Data Processing
Your personal data in this context, for the realization of the above-mentioned purposes by Ahmet Yılmaz, the details of which are specified in the relevant legislation and Article 5 of the KVKK, you can access from the Consent Text;

Open Consent

processed on a legal basis.

Collection Methods of Personal Data:
The above-mentioned personal data is collected according to your preference in the internet browser you use and the mobile application of our Company.

TRANSFERRING PERSONAL DATA

Personal data belonging to customers are only available to the extent necessary for the realization of the relevant purpose, by following the rules in Article 8 titled "Transfer of Personal Data" and/or Article 9 titled "Transferring Personal Data Abroad" and by taking the necessary technical and administrative measures;

To our affiliates and subsidiaries limited to the above-mentioned purposes,
Again, within the scope of the agreements between us for the purposes mentioned above, the seller of the purchased product (for the delivery of the product) in accordance with the legislation, cargo companies (for the delivery of the product), banks (for the payment of the product) and bulk SMS / (to provide information on delivery, etc.) To our business partners that we work with in e-mail sending and (for after-sales services when necessary) to our suppliers and product authorized services, to business partners with whom we cooperate and joint campaigns,
In order to fulfill our legal obligation, it can be transferred to authorized persons and official institutions in accordance with legal regulations and legislation, and
It can be recorded in our programs and/or systems provided / made available to us by our infrastructure suppliers in the field of technology.

Online Users

DATA CATEGORIES

1- Transaction Security Information

Processed Personal Data:
IP Address Information, Website Login and Exit Information, Password and Password Information Computer Screen Records, Device IMEI Number, Device MAC Address

Personal Data Processing Purposes:
Execution of Information Security Processes; Execution of Activities in Compliance with the Legislation; Managing Customer Relationship Management Processes; Follow-up of Requests and Complaints; Providing Information to Authorized Persons, Institutions and Organizations

clearly stipulated in the law,
It is mandatory for the data controller to fulfill its legal obligation, and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

processed for legal reasons.

Collection Methods of Personal Data:
Your personal data mentioned above are collected through internet applications, information systems and electronic devices (telecommunication infrastructure, computers and telephones, etc.) and other documents declared by you.

TRANSFERRING PERSONAL DATA

Personal data belonging to Online Users, in accordance with the rules in Article 8 titled "Transfer of Personal Data" and/or Article 9 titled "Transfer of Personal Data Abroad" and by taking the necessary technical and administrative measures, only to the extent necessary for the realization of the relevant purpose;

In order to fulfill our legal obligation, it can be transferred to authorized persons and official institutions in accordance with legal regulations and legislation, and
It can be recorded in our programs and/or systems provided / made available to us by our infrastructure suppliers in the field of technology.

Storage of Personal Data, Your Rights and Application

Storage and Disposal

Our company has established a Retention and Disposal Policy for the storage and deletion of personal data. Storage and destruction of your personal data is carried out within the scope of this policy. Accordingly, if a period has been determined for the storage of data in the KVKK or in the relevant laws and other relevant legislation, the said data must be kept for at least this period.

The storage period is determined by adding a period of 6 months to 1 year to the periods stipulated in the legislation for the storage of your data, taking into account the possibility that a possible court request or a request of an administrative authority authorized by law regarding the relevant data reaches us late, or that a conflict that we may be a party to occurs. At the end of the period, the data in question is deleted, destroyed or anonymized.

If the legislation does not foresee a period for the storage period of the data we process, your data will be deleted, destroyed or anonymized without any request, after the 10-year statute of limitations from the end of our legal relationship, taking into account possible disputes as a requirement of the relationship between us.

If all the processing conditions for personal data have been eliminated or the storage period declared by us or determined within the scope of the legislation has expired, your data will be deleted, destroyed or anonymized ex officio on the first periodic destruction date or within 6 months at the latest. If you request the deletion of your data for a valid reason, your data will be deleted within 30 days at the latest to the extent legally possible. If you request the deletion or destruction of your data, the retention period of which is determined in the legislation, before the stipulated periods, your request will not be fulfilled.

Your rights

Regarding your personal data within the scope of KVKK and related legislation;

Learning whether your personal data is processed or not,
If your personal data has been processed, requesting information about it,
Learning the purpose of processing personal data and whether they are used in accordance with the purpose,
Knowing the third parties to whom your personal data is transferred,
Requesting correction of your personal data if it is incomplete or incorrectly processed,
Requesting the deletion or destruction of your personal data within the framework of the conditions stipulated in the KVKK legislation,
When you request the deletion or destruction of your personal data with the correction of incomplete or inaccurate data, requesting that this situation be notified to the third parties to whom we have transferred your personal data,
Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems, and
If you suffer damage due to unlawful processing of personal data, you have the right to demand that this damage be remedied.

Application

If you wish, your applications and requests regarding your personal data You can send it to our ahmety45tr@gmail.com e-mail address by using a registered e-mail (KEP) address and a secure electronic signature or mobile signature.

In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, in these applications of the persons concerned, name - surname, signature if the application is written, TR identity number (passport number if the applicant is a foreigner), domicile or workplace address for notification, e-mail basis for notification, if any. address, telephone number and fax number and information on the subject of the request are mandatory.

The data subject should clearly and comprehensibly state the requested issue in the application, which includes explanations regarding the right to be exercised by the data subject to use the above-mentioned rights. Information and documents related to the application must be attached to the application.

Although the subject of the request must be related to the person of the applicant, if acting on behalf of someone else, the applicant must be specifically authorized in this regard and this authority must be documented (special power of attorney). In addition, the application must include identity and address information, and documents confirming identity must be attached to the application.

Requests made by unauthorized third parties on behalf of someone else will not be considered.

Your claims regarding your personal data are evaluated and answered within 30 days at the latest from the date they reach our Company. In case your application is evaluated negatively, the reasons for the reasoned refusal will be communicated to you via e-mail or postal mail, if possible, to the address you specified in the application, by the method in which the request was made.

Commercial Electronic Messages

Commercial Electronic Message Illumination Text

The Commercial Electronic Message Clarification Text has been prepared for the purpose of informing you, our customers, about the commercial electronic messages to be sent by morkuzu.ny@gmail.com in the capacity of Data Controller, within the scope of the Personal Data Protection Law. From the contact information you shared with us during the interview, to your phone number and e-mail information, announcing various products/services and opportunities within the scope of the Law No. 6563 on the Regulation of Electronic Commerce, conducting customer satisfaction surveys, tracking requests/complaints, promotion, advertisement, promotion, for sales and marketing purposes; "Explicit consent" will be processed based on the legal reason, in line with the permission you give, in order to send commercial electronic messages by sending an e-mail, SMS or phone call in accordance with the relevant laws by Ahmet Yılmaz.

Cookie Policy

We use cookies in some areas of our website at www.morkuzuny.com ("Site") and our mobile application (collectively referred to as "Platform"). In addition, SDKs (Software Development Kit) with similar functions to the cookies used on the Site are also used in our mobile application. This Cookie Policy (“Policy”) is valid for the Platform managed by Ahmet Yılmaz and cookies and SDKs will be used as described in the Policy.

Consent Text Regarding the Processing of Personal Data

There is no membership requirement to shop on the www.morkuzuny.com website. Therefore, membership on our platform is not offered as a service condition. Unlike the option to shop without being a member, the membership option; It is designed for users who want to get a personalized service by following and evaluating their habits, shopping history and reviews. In order to offer these personalized advantages, some of your personal data may need to be processed for the purposes specified below, shared with our contracted professional business partners, and recorded in our programs and/or systems provided by our technology suppliers. Some of your personal data that needs to be processed in order to ensure the satisfaction of our customers; Since it is not within the scope of the data processing conditions in the Law on the Protection of Personal Data and not subject to consent, it is only subject to the express consent of our customers. If you do not want to give consent, you can shop without registering on our site with the "Continue Without Membership" option.

Depending on your express consent;

a. Processed Personal Data and Collection Methods:
Your identity information (name, surname, date of birth, nationality, TR identity number, gender, passport validity date, passport number), contact information (e-mail address, billing and delivery addresses, mobile phone numbers) shared by our Customers online and/or through printed forms. phone number); Your customer transaction information (demand information, order information, billing information, customer comments, miles&smiles number, hes code), financial information (credit card information), marketing information (cookie records, shopping history, explicit or implicit user ratings) collected during your use of our website ), transaction security information (IP Address Information, Website Login and Exit Information, User Name Information, Password Information, Traffic Data such as Connection Time / Duration) and the location that can be collected according to your preferences in your internet browser and/or our company's mobile application or your internet browser while using our website. your data will be processed.

b. Processing Purposes and Legal Reasons of Processed Personal Data:
Your personal data listed above, if you consent to become a member of www.morkuzuny.com; Creating advertisements, promotions and campaigns tailored for you, cross-selling, determining the target audience, executing activities to increase your user experience by tracking your customer movements, and improving the functioning of the website and mobile application of www.morkuzuny.com and personalizing it according to customer needs, directly and including for the purposes of conducting non-direct marketing, tailor-made marketing and remarketing activities, conducting personalized segmentation, targeting, analysis and internal reporting activities, planning and executing market research, customer satisfaction activities, and customer relationship management processes. planning and executing the sales and marketing processes of the products and/or services of www.morkuzuny.com and its contracted professional business partners with www.morkuzuny.com, creating loyalty to the products and/or services offered by www.morkuzuny.com and/v Within the scope of planning and executing the processes of increasing or increasing the number of items, and carrying out communication activities with you in all these described scopes; Paragraph 1 of Article 5 of the KVKK may be processed depending on the legal reason of "explicit consent" and may be shared with third parties in the country within the scope of the same purposes and legal reason, and with third parties abroad, our business partners/suppliers in accordance with the rules in Article 9 of the KVKK.

c. Transfer of Personal Data Abroad:
In case you become a member of www.morkuzuny.com by giving consent; identity (name, surname), contact (e-mail address, mobile phone number), personnel, legal action, professional experience, audio-visual records, customer, business partner transaction, customer transaction (ticket information, cargo information, membership information, order information, delivery information, comment information, payment information, bank account information, card information, billing information, amount information), marketing (campaign information, product information, gift check information) and transaction security (IP address) data, KVKK's “Personal Information” Due to the fact that we do not have domestic alternatives to ensure the service quality and service continuity that we offer you, by complying with the rules in Article 9 titled "Transferring the Data Abroad" and by taking the necessary technical and administrative measures, Google (Google, which is our cloud services infrastructure suppliers in the field of technology and whose servers are located abroad) Google LLC.), Dynamics (Microsoft Co.), Braze (Braze Inc.), Jungle Works (Click Labs Inc.), and Akamai (“Orange”) Business) Data Processors") to our programs and/or systems provided / made available to us; It can be recorded for the purposes of executing information security processes, executing communication activities, executing and auditing business activities, executing goods and service sales processes, executing activities for customer satisfaction, executing customer relations management processes, executing marketing activities, executing storage and archiving activities, and tracking requests and complaints. and therefore can be transferred abroad. These companies chosen by www.morkuzuny.com take data security measures according to internationally accepted standards and undertake to provide the security level to their customers, therefore www.morkuzuny.com, in accordance with these standards. In addition, many international legislation regarding personal data, especially the European Union General Data Protection Regulation (GDPR), legally guarantees that this data is not processed by Data Processors (companies that own the above-mentioned infrastructures) other than the requests and purposes of www.morkuzuny.com. is under. Your personal data, which we transfer abroad due to the use of software provided by Data Processors, is not shared with other third parties abroad, except for the purposes stated above.

D. Your Rights Regarding Processed Personal Data:
Within the scope of Article 11 of KVKK;

Learning whether your personal data is processed or not,
If your personal data has been processed, requesting information about it,
Learning the purpose of processing your personal data and whether they are used in accordance with the purpose,
Knowing the third parties to whom your personal data is transferred, in the country or abroad,
Requesting correction of your personal data if it is incomplete or incorrectly processed,
Requesting the deletion or destruction of your personal data within the framework of the conditions stipulated in the KVKK legislation,
When you request the deletion or destruction of your personal data with the correction of incomplete or incorrect data, requesting that this situation be notified to the third parties to whom your personal data has been transferred,
Objecting to the result in case of an adverse result by analyzing your processed data exclusively through automated systems, and
In the event that your personal data is damaged due to unlawful processing, you have the right to demand the removal of this damage.

By clicking the "create my account" button on the sign-up page, you will be deemed to have accepted that you expressly and without any pressure, consent to the processing of all your personal data above, limited to the processing purposes specified.