Personal Data Protection Policy
1. Purpose of Personal Data Protection Policy
The purpose of the Personal Data Protection Policy is to provide information about the personal data processing activities carried out by E-trink in accordance with the Personal Data Protection Law No. 6698 (“Law”) and the systems adopted for the protection of personal data. In this context, it is aimed to enlighten the persons whose personal data are processed, especially our employees, suppliers, manufacturers, customers, employees, shareholders and officials of the institutions we cooperate with, and third parties.
2. Scope of the Policy
This policy text contains explanations about the content, categories, usage and processing methods of personal data processed by E-trink, storage conditions, transfer, rights of personal data owners and measures taken to protect personal data.
3. Processing of Personal Data
Personal data is processed in accordance with the principles of being in compliance with the law and the rules of honesty, being accurate and up-to-date when necessary, being processed for specific, clear and legitimate purposes, being related to the purpose for which they are processed, being limited and proportionate, and being retained for the period foreseen in the relevant legislation or required for the purpose for which they are processed. -carrying out applicable activities within the company to ensure that the products and services offered by trink can be offered to you, carrying out the necessary work with the relevant business unit and business partners in order to recommend suitable products and services by analyzing the consumption and purchasing habits of customers accurately and completely, marketing, advertising and carrying out promotional activities, providing customer-specific advantageous offers by obtaining information about customers’ needs and requests, carrying out activities to increase customer satisfaction and sending commercial electronic messages in this context, taking the necessary steps to enable E-trink to make commercial decisions, implement and realize it, -It is processed in accordance with Articles 5 and 6 of the Law for similar purposes, including but not limited to ensuring the legal security of the real persons with whom trink has established business relations in order to carry out its commercial activities and itself arising from such relations.
4.Processed Personal Data
User information:
Customer Transaction Information:
Delivery Information:
Payment information:
Transaction Security Information:
Audio Recording Information:
5. Transfer of Personal Data
E-trink takes care to process personal data in accordance with the principles of need to know and need to use, by ensuring the necessary data minimization and by taking the necessary technical and administrative security measures. Since the execution or control of business activities, ensuring business continuity, and the operation of digital infrastructures require continuous data flow with different stakeholders, the processed personal data is transferred to third parties for certain purposes. E-trink processes personal data within the scope of its activities through affiliates, service providers, third parties and business partners, regulatory and supervisory institutions, authorized public institutions and organizations such as courts and enforcement offices, lawyers, auditors, tax consultants, forensic IT experts, cyber security consultants. may share it with the seller or service provider of the product desired to be purchased, business partners providing call center services, service providers providing customer support services, business partners providing independent audit, customs, financial advisor/accounting services, private integrators, technology companies and banks.
6. Protection of Personal Data
The Company, as the data controller, is responsible for establishing the necessary organization and taking and adapting technical measures in order to protect the confidentiality and integrity of information in accordance with the relevant legislation in force. In order to fulfill its part, E-trink carries out penetration tests at periodic intervals in accordance with international and national technical standards regarding data privacy, and personal data transmitted to E-trink through the website, mobile site and mobile application is used using SSL (Secure Sockets Layer) technology. It carries out regular risk analyzes regarding personal data processing activities and takes actions to reduce risks, implements access and authorization controls to prevent unauthorized access to personal data, and updates data processing policies at regular intervals.
E-trink and its employees will not disclose the personal data they have learned to anyone else in violation of the provisions of the Law and will not use it for purposes other than processing. This obligation will continue after the employees leave their positions.
If the processed personal data is obtained by others through illegal means, E-trink will notify the relevant party and the Personal Data Protection Board within 72 hours so that the necessary precautions can be taken.
7. Deletion, Destruction or Anonymization of Personal Data
It is E-trink’s obligation to delete, destroy or anonymize personal data in cases where the reasons requiring processing are eliminated.
Within the framework of the Regulation on Deletion, Destruction and Anonymization of Personal Data, E-trink deletes, destroys or anonymizes personal data within the first 6 months following the date on which the obligation to delete, destroy or anonymize personal data arises.
8. Requests for Information on the Protection of Personal Data
Learning whether personal data is processed using E-trink’s communication channels, requesting information if processed, learning the purpose of processing personal data and whether they are used for their intended purpose, knowing the third parties to whom they are transferred domestically or abroad, personal data being processed incompletely or incorrectly. To request correction of your personal data within the framework of the conditions stipulated in the Law, to request the deletion or destruction of your personal data within the framework of the conditions stipulated in the Law, to request that the transaction in question be notified to third parties to whom personal data has been transferred, to request that personal data be notified to third parties to whom personal data has been transferred, to request that personal data be deleted or destroyed due to the processing of personal data contrary to the relevant legislation. In case of damage, you have the right to demand compensation for the damage suffered.
9. Changes to be Made in the Personal Data Protection Policy
E-trink may make changes to its personal data protection policy to the extent required by its activities or when legally required. These changes become valid when the amended policy text is published on www.e-trink.com.
