Personal Data Disclosure Statement

As the Data Controller, in line with our emphasis on the security of your personal data, all kinds of your personal data processed in our company are being processed, stored, and transferred in accordance with the Personal Data Protection Law No. 6698 (KVKK).

The purpose of the communiqué published in the Official Gazette dated 10.03.2018 and numbered 30356, regarding the Procedures and Principles to be Followed in the Fulfillment of the Obligation to Inform, is defined as 'to determine the procedures and principles to be followed within the scope of the obligation to inform that must be fulfilled by data controllers or persons authorized by them pursuant to Article 10 of the Personal Data Protection Law No. 6698.'

This information notice has been prepared by our company as the data controller for individuals whose personal data is collected, stored, and processed;

for Individual Customers of Hipposoft; in accordance with Article 10 titled 'Obligation of the Data Controller to Inform' of the Personal Data Protection Law and the Communiqué on the Procedures and Principles to be Followed in the Fulfillment of the Obligation to Inform, it has been prepared for the purpose of providing information.

THE PURPOSES OF PROCESSING YOUR PERSONAL DATA

Your personal data is processed in accordance with the principles contained in Article 4 of the Personal Data Protection Law, which includes the General Principles, namely Compliance with Law and Integrity Rules, Being Accurate and Up-to-date When Necessary, Being Processed for Specific, Clear, and Legitimate Purposes, Being Relevant, Limited, and Proportional to the Purpose for which they are Processed, and Being Retained for as long as required by the Relevant Legislation or for the Purpose for which they are Processed.

Information on the purposes of processing your personal data and which of the processing conditions specified in Articles 5 and 6 of the Law they are processed based on are provided below. The categorized information may have multiple processing purposes and different legal processing conditions depending on its use.

Your Identity Information;

Name, surname, T.R. ID number:

.          In order to fulfill legal obligations required or mandated by legal regulations; Legal basis: KVKK Article 5/2-a: Due to the legal reason envisaged in laws.

.          To perform transactions related to signed contracts, manage relationships with customers, carry out the purchasing/sales and financial processes of goods and services, and provide information about services; Legal basis: KVKK Article 5/2-c: It is necessary to process personal data of the parties to the contract directly related to the conclusion or performance of a contract.

Your Contact Information;

Business address, phone number, mobile phone number, email address,

.          In order to perform transactions related to signed contracts, Legal basis: KVKK Article 5/2-c: It is necessary to process personal data of the parties to the contract directly related to the conclusion or performance of a contract.

Contact information;

.          For the purpose of carrying out sales processes of goods and services; Legal basis: KVKK Article 5/2-e) Necessity of processing data for the establishment, use, or protection of a right.

Name-surname, phone number, mobile phone number, email address,

.          For the purpose of providing post-sale support services, informing the customer about transactions; Legal basis: KVKK Article 5/2-f: It is necessary for the legitimate interests of the data controller provided that it does not harm the fundamental rights and freedoms of the person.

Your name, surname, phone number, mobile phone number, and email address,

.          To follow up on requests and complaints, manage customer satisfaction practices;

.          Legal basis: KVKK Article 5/2-f: It is necessary for the legitimate interests of the data controller provided that it does not harm the fundamental rights and freedoms of the person.

 Your mobile phone number, email and IP address;

.          For the purpose of complying with the Law on Regulation of Electronic Commerce No. 6563 and the relevant legislation, Legal basis: KVKK Article 5/2-a: Due to the legal reason envisaged in laws.

Your mobile phone number and email address;

.          To use your communication channels (SMS, email, phone) for promotion, advertising, product offers, promotions, campaigns, customer satisfaction assessment studies, and conveying our company announcements, provided that your explicit consent is obtained.

Your customer and membership agreements,

.          To fulfill the requirements of the contracts made with customers,

.          To carry out the purchase/sale and financial processes, to ensure compliance with the legal structure of purchase/sale transactions and the regulations regarding consumer protection, Legal basis: KVKK Article 5/2-c: It is necessary to process personal data of the parties to the contract directly related to the conclusion or performance of a contract.

 

Your Legal Transaction Information;

.          To carry out the enforcement and follow-up of legal affairs, to fulfill our legal obligations to the competent public institutions and organizations and courts, and to use as evidence in potential disputes;

.          Legal basis: KVKK Article 5/2-a: Due to being envisaged in laws and KVKK Article 5/2-ç: It is necessary to fulfill the legal obligation of the data controller.

 

Your Financial Information;

Tax number, tax office, bank account number, bank IBAN number, invoice details, e-invoice information, credit card information, payment date, payment method with identity and contact information;

.          For the purpose of issuing invoices and bills under Article 229 of the Tax Procedure Law, recording financial documents, carrying out payment and collection processes, and providing information requested by legally authorized institutions, Legal basis: KVKK Article 5/2-a: Due to being envisaged in laws,

Your Mobile Access Information;

(With your Identity and Contact information), information about the visitor's device concerning location, browser information, time zone, country, operating system and email, IP address;

.          For the purpose of ensuring information security, conducting marketing activities, improving the performance of the website and enhancing user experience,

.          Provided that your explicit consent is obtained,

Your Identity Information, Contact Information, Mobile Access Information, Legal Information, Financial Information;

.          For the purpose of carrying out the operations of providing goods/services, storage, preservation, archiving; ensuring information security, improving website performance, increasing user experience, conducting digital marketing, sales, customer relations and logistics processes, and carrying out online payment transactions, provided that your explicit consent is obtained,

They are processed.

THE TRANSFER OF YOUR PERSONAL DATA TO THIRD PARTIES AND ITS PURPOSE

Our company acts in accordance with the provisions in Article 5 of the Law, the provisions regarding the processing of Special Categories of Personal Data in Article 6 and the regulations regarding the transfer of personal data specified in Articles 8 and 9, as well as the decisions published by the Personal Data Protection Board.

Special category data are not processed or transferred without the explicit consent of the data subject.

The individuals and institutions to which your personal data is transferred and for what purposes are provided below.

The following data will be transferred to overseas service providers (Microsoft Azure, Microsoft 365, Google Analytics, Google Ads, Hotjar, One Signal, Brevo, Craftgate, Cloudflare) with your explicit consent for the specified purposes.

METHOD AND LEGAL BASIS FOR THE COLLECTION OF YOUR PERSONAL DATA

Your identity information;  (Name, surname, Turkish Republic identity number) is collected digitally through filling out the membership and distance sales contract on the website and via our call center,

Article 5/2-c) It is necessary to process personal data related to the parties to the contract, provided that it is directly related to the establishment or performance of a contract, and

Article 5/2-e: The legal reasons for the necessity of data processing for the establishment, use, or protection of a right.

 

Your contact information:  (Delivery address, business address, phone number, mobile phone number, email address, IP address) is collected digitally through filling out the membership and distance sales contract on the website and via our call center,

5/2-c) It is necessary to process personal data related to the parties to the contract, provided that it is directly related to the establishment or performance of a contract, for legal reasons,

Your customer and membership contracts; are filled out digitally through the membership contract on the website, 5/2-c) It is necessary to process personal data related to the parties to the contract for legal reasons, provided that it is directly related to its establishment or performance,

Your legal transaction information;  is sent non-automatically through the delivery of notifications, communications, and documents via digital means or postal cargo channel,

Article 5/2-e: The legal reasons for the necessity of data processing for the establishment, use, or protection of a right.

Your financial information; (tax number, tax office, bank account number, bank IBAN number) is collected digitally by selecting the payment method information section from the order creation area on our website

YOUR RIGHTS

OFIX OFFICE SUPPLIES INC. notifies the rights of the personal data owner in accordance with Article 10 of the Personal Data Protection Law, providing guidance on how to use these rights.

The rights of the relevant person are regulated in Article 11 of the KVKK.

Pursuant to Article 11 of the KVKK, you can apply to our company;

a) To learn whether personal data is processed,

b) If personal data has been processed, to request information regarding it,

c) To learn the purpose of processing personal data and whether these data are used in accordance with their purpose,

ç) To know third parties to whom personal data is transferred domestically or abroad,

d) To request the correction of personal data if they are processed incompletely or inaccurately,

e) To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7,

f) To request the notification of the processes carried out under (d) and (e) to the third parties to whom personal data is transferred,

g) To object to the emergence of a result against the person by means of exclusively automated systems by analyzing the processed data,

ğ) You have the right to request compensation for damages in case of being harmed due to the unlawful processing of personal data.

 

IF YOU WISH TO EXERCISE YOUR RIGHT TO APPLY UNDER ARTICLE 13 OF THE KVKK;

You can deliver your application in writing and with a wet signature personally to the address İOSB Ziya Gökalp, 8. Cd. No:1/A Başakşehir/ISTANBUL, send it via notary, or send it to [email protected] (KEP) with a secure electronic signature, or via the email previously notified by you to our company and registered in our system,

In applications;

The name, surname, and signature of the Personal Data Owner/Relevant Person if the application is in writing,

For Turkish Republic citizens, T.C. identity number, for foreigners, nationality, passport number, or identity number if available,

The address for notifications or business address,

If applicable, the email address for notifications, phone and fax number,

The subject of the request; should be specified, and information and documents related to the subject should be attached to the application.

Applications will be accepted following the identity verification to be carried out by OFIX OFFICE SUPPLIES A.Ş., and a response will be provided in writing or electronically within legal periods.

Your requests in your application will be finalized free of charge within thirty (30) days at the latest, depending on the nature of the request.

INFORMATION OF THE DATA CONTROLLER

Company Title             : HİPPOSOFT YAZILIM LTD.ŞTİ.

Phone                       : 0850 288 63 49

Address                        : İOSB Ziya Gökalp, 8. Cd. No:1/A Başakşehir/ISTANBUL

Email                       : [email protected]

KEP Address                 : [email protected]