PERSONAL DATA PROTECTION LAW CLARIFICATION TEXT
Data Controller: Üçdal Tekstil Sanayi Ve Ticaret Limited Şirketi
**Address:** Firuzköy Bulvarı No:108 Avcılar/İstanbul
INFORMATION AS A DATA CONTROLLER:
In accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”), published in the Official Gazette dated April 7, 2016, and numbered 29677, your personal data will be processed by Üçdal Tekstil Sanayi Ve Ticaret Limited Şirketi, as the Data Controller, for business purposes within the framework outlined below.
This text targets all natural persons visiting the www.brix.com.tr website and whose personal data is processed by Üçdal Tekstil Sanayi Ve Ticaret Limited Şirketi, with the aim of obtaining their explicit consent.
PROCESSED PERSONAL DATA
Your personal data, collected via forms on the www.brix.com.tr website, including name, surname, Turkish ID number, address, phone number, business or private email address, and data including preferences on pages accessed using a username and password, IP records of transactions performed, cookie data collected by the browser, navigation times and details, and location data, can be processed and collected electronically for the purposes stated in Articles 5 and 6 of the Law and in this Personal Data Protection Text.
PURPOSE AND LEGAL REASONS FOR PROCESSING DATA
In accordance with KVKK, the personal data you share with our company may be processed in whole or in part, automatically or through non-automated means, provided that it is a part of any data recording system, by obtaining, recording, storing, changing, reorganizing, essentially any transaction performed on the data. Any transaction performed on data within the scope of KVKK is considered "processing of personal data."
For the cases where the personal data processing conditions specified in Articles 5/2 and 6/3 of the Law cannot be met, the explicit consent of the customers is required to process personal data. The personal data you share will be processed for the following purposes
- To fulfill the requirements of our services to our customers, in accordance with the requirements of the contract and technology, and to develop our products and services;
- To record identity, address, and other necessary information for the identification of the transaction owner, in accordance with the Law No. 6563 on the Regulation of Electronic Commerce, the Law No. 6502 on the Protection of the Consumer, and the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette dated 26.08.2015 and numbered 29457, the Regulation on Distance Contracts published in the Official Gazette dated 27.11.2014 and numbered 29188, and other relevant legislation;
- To arrange all records and documents that will be the basis of electronic payment systems, electronic contracts, or paper transactions in the field of Banking and Electronic Payment;
- To comply with information retention, reporting, and information obligations stipulated by legislation and other authorities;
- To provide information to public officials upon request and in accordance with the legislation on matters related to public safety and legal disputes;
- To provide various opportunities to our members or to share such opportunities with persons or institutions within the legal framework;
- To be processed in accordance with the KVKK and related secondary regulations.
TRANSFER OF YOUR PERSONAL DATA
Your personal data collected by any of the methods mentioned above, processed in Turkey, or processed and stored outside of Turkey, can be transferred to service intermediaries located abroad (to countries accredited by the Personal Data Protection Board and where adequate protection is provided for the protection of personal data) in compliance with the KVKK and in line with the purposes of the contract.
Your personal data can be transferred to:
- Our business partners, suppliers, banks, financial institutions, TBB Risk Center, and other real or legal persons with whom we cooperate for the presentation and promotion of products and services;
- Authorized institutions that will detect your location in case of emergency calls;
- Investors, incubation centers, accelerators, and large organizations in the ecosystem;
- Your proxies and representatives authorized by you;
- Regulatory and supervisory institutions, courts, and enforcement offices, other official institutions requesting your personal data;
- Legal entities that have your phone number and with whom Üçdal Tekstil Sanayi Ve Ticaret Limited Şirketi has a commercial relationship;
- Banks and financial institutions for the security and identity verification of transactions and information performed through your mobile lines during banking and similar transactions;
- Financial institutions, telecommunications institutions, investors, incubation centers, municipalities, and similar legal entities with various information to reach you for critical notifications and promotion, marketing, etc., if you have an approved account on www.brix.com.tr.
STORAGE AND PROTECTION OF YOUR PERSONAL DATA
Our company is obliged to take necessary software measures (such as hashing, encryption, transaction records, access management) and physical security measures to ensure that your personal data is stored securely and prevent it from being unlawfully processed or accessed by unauthorized persons in accordance with Article 12 of the KVKK. In case of learning that your personal data has been obtained by others through unlawful means, the situation will be immediately reported to the Personal Data Protection Board in accordance with the legal regulations and in writing.
ACCURACY AND UP-TO-DATE STATUS OF YOUR PERSONAL DATA
In accordance with Article 4 of the KVKK, Brix is obliged to keep your personal data accurate and up-to-date. In this context, our customers are required to share their accurate and up-to-date data with our company or update them via the website to fulfill our obligations arising from the current legislation.
RIGHTS OF THE PERSONAL DATA OWNER UNDER THE LAW NO. 6698
The rights of the Personal Data Owner who comes into force as of October 7, 2016, in accordance with Article 11 of the KVKK, are as follows
The Personal Data Owner can contact Üçdal Tekstil Sanayi Ve Ticaret Limited Şirketi (data controller) and inquire about:
- Learning whether personal data is processed,
- Requesting information if personal data has been processed,
- Learning the purpose of processing personal data and whether they are used in accordance with their purpose,
- Knowing the third parties to whom personal data is transferred domestically or abroad,
- Requesting the correction of personal data if it is incomplete or incorrectly processed,
- Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,
- Requesting the notification of the transactions made pursuant to subparagraphs (d) and (e) to the third parties to whom personal data has been transferred,
- Objecting to the occurrence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,
- Requesting compensation for the damage if he/she incurs damage due to the unlawful processing of personal data.
CONTACT AND APPLICATION METHOD
You can submit your application and requests regarding your personal data to Brix by:
- Sending an electronic mail to [email protected] from the email address you have notified to www.brix.com.tr,
- Personally applying to Üçdal Tekstil Sanayi Ve Ticaret Limited Şirketi with a valid identification document,
- Sending a wet-signed application form and a photocopy of your ID to Firuzköy Bulvarı No:108 Avcılar/İstanbul,
- Signing with a mobile signature or secure electronic signature and sending an email to [email protected].
In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, the Relevant Person must include the following information in the application: name, surname, signature if the application is written, T.C. identification number (passport number or identity number if the applicant is a foreigner), the address of notification based on residence or workplace address, the email address for notification, phone number, and fax number, if any, and information on the subject of the request.
The Relevant Person must clearly and understandably state the matter requested in the application and include information and documents related to the subject of the request in the application.
The subject of the request must be related to the applicant’s own personal data. If acting on behalf of another person, the applicant must have a special power of attorney in this regard and the authority must be documented (power of attorney). Additionally, the application must include identity and address information and be accompanied by documents proving the applicant’s identity. Unauthorized third-party requests will not be considered.