Privacy Policy
Ahlatcı Holding A.Ş. takes the highest possible level of security measures in order to ensure that your personal data is collected, stored and shared in accordance with the law, and to protect your privacy. Our aim, in accordance with Article 10 of the Law No. 6698 on the Protection of Personal Data and in line with your satisfaction, is to inform you in the most transparent manner about the ways your personal data is collected, the purposes of processing, the persons with whom it is shared, the legal reasons and your rights.
1) Data Controller
Pursuant to the Law No. 6698 on the Protection of Personal Data (the “Law No. 6698”), your personal data will be collected and processed by Ahlatcı Holding A.Ş. (“AHLATCI”), as the data controller, within the scope explained below.
2) The Purposes for Which Personal Data Will Be Processed
AHLATCI may collect personal data in categories such as identity information, contact information, customer information, customer transaction information, transaction security information, legal proceedings and compliance information, and marketing/sales information from parties such as its customers, employees, potential customers, job candidates, business partners and suppliers. Your collected personal data will be processed for the following purposes:
- To offer AHLATCI’s products and services to you, to fulfil our obligations towards you, to prepare records and documents, and to comply with information-retention, reporting, notification, tax and other obligations foreseen by local and international legislation,
- To provide you with personalised advertising, campaigns, advantages and other benefits within sales and marketing activities aimed at increasing the quality of services and products,
- To communicate in order to convey the necessary information to you regarding IT requirements, the systemic structure, the necessity of the IT support services received, and these services and products,
- To carry out traffic measurement, statistical analyses, segmentation/profiling and CRM activities for sales and marketing purposes,
- To measure and increase customer satisfaction, to manage complaints, to receive your opinions and suggestions regarding new services and products, to receive your problem/error notifications, and to provide you with information regarding products and services and your complaints and requests,
- To manage your membership related to online sales, to receive your orders, to carry out your payment transactions, to provide product delivery through logistics cooperation with third parties, to recommend products and services that may interest you, and for online behavioural advertising and marketing, customer portfolio management, measuring and improving service quality, communication, optimisation, audit, risk management and control, promotion, analysis, determination of areas of interest, scoring, profiling, marketing, sales, advertising and communication,
- To be used in comparative product and/or service offers, modelling, existing or new product studies and/or developments, and in all kinds of products and services to be offered to you within the scope of the law and relevant legislation regulating the business written in the AHLATCI articles of association that is the subject of your disclosure of personal data to AHLATCI,
- To comply with information-retention, reporting and notification obligations foreseen by official institutions, to fulfil the requirements of contracts, and to perform the legal obligations to which AHLATCI is subject regarding the use of these services,
- To manage the finance operations, communication, market research and social responsibility activities, purchasing operations (request, offer, evaluation, order, budgeting, contract), in-house system and application management operations, and legal operations carried out by AHLATCI, for the purpose of determining and implementing AHLATCI’s commercial and business strategies,
- To review, evaluate and respond to requests coming from official authorities or from you,
Your personal data will be processed within the personal data processing conditions and purposes set out in Articles 5 and 6 of the Law No. 6698.
3) To Whom and For What Purpose the Processed Personal Data May Be Transferred
Your collected personal data, limited to the realisation of the purposes stated above, may be transferred to:
- AHLATCI’s business partners, shareholders and affiliates,
- Persons or organisations permitted by the provisions of the Turkish Commercial Code, the Code of Obligations and other legislation,
- Legally authorised public institutions and organisations, administrative authorities and legal authorities,
- Overseas companies and affiliates,
- Real or legal persons from whom we receive services or with whom we cooperate for product/service comparison, analysis, evaluation, advertising and the realisation of the above-mentioned purposes; program-partner institutions and organisations; institutions with which we have agreements for sending messages to our customers; and cargo companies that deliver the orders placed through our online store, within the framework of the personal data processing conditions and purposes set out in Articles 8 and 9 of the Law No. 6698.
4) Method of Collecting Personal Data and the Legal Reason
Your personal data is collected verbally, in writing or electronically through channels such as our stores, our website and mobile application, our call centres and our social media accounts, as well as other channels that may be established/created in the future; by AHLATCI, within the framework of the legislation, for the purposes stated above and within the performance of the contract.
5) Your Rights as a Data Subject under Article 11 of Law No. 6698
As a data subject, if you submit your requests regarding your rights through the methods set out below, AHLATCI will conclude the request as soon as possible and within thirty days at the latest, depending on the nature of the request. No fee will be charged for responses of up to ten pages. A processing fee of 1 Turkish Lira will be charged for each page over ten pages. If the response to the application is provided on a recording medium such as a CD or flash memory, the fee that may be requested by our company will not exceed the cost of the recording medium.
In this context, data subjects have the right to:
- Learn whether their personal data is being processed,
- Request information if their personal data has been processed,
- Learn the purpose of processing personal data and whether it is used in accordance with its purpose,
- Know the third parties to whom personal data is transferred domestically or abroad,
- Request the correction of personal data in case it is processed incompletely or incorrectly, and request that the transaction carried out within this scope be notified to the third parties to whom the personal data has been transferred,
- Request the deletion or destruction of personal data in the event that the reasons requiring its processing cease to exist, even though it has been processed in accordance with the Law No. 6698 and other relevant legal provisions, and request that the transaction carried out within this scope be notified to the third parties to whom the personal data has been transferred,
- Object to the emergence of a result against the person by analysing the processed data exclusively through automated systems,
- Request compensation for the damage in the event that they suffer damage due to the unlawful processing of personal data.
You may submit your request regarding the exercise of the rights stated above, in Turkish and in writing, or by using a registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the electronic mail address previously notified to AHLATCI and registered in our system, in accordance with Article 13/1 of the Law No. 6698 and the Communiqué on the Procedures and Principles of Application to the Data Controller dated 10.03.2018 and numbered 30356. AHLATCI reserves the right to verify your identity before responding.
Your application must contain:
- Your name, surname and, if the application is written, your signature,
- Your Turkish Republic ID number if you are a citizen of the Republic of Türkiye; your nationality, passport number or ID number (if any) if you are a foreigner,
- Your residence or workplace address for notification,
- Your electronic mail address, telephone and fax number for notification, if any,
- The subject of your request,
and, if any, the information and documents related to the subject must also be attached to the application.
You can send your applications that you wish to make by post to the address of Ahlatcı Holding A.Ş., as the data controller, at Eğridere Caddesi No:17 Merkez-Çorum.
You can make your applications that you wish to submit by e-mail to ahlatci@ahlatci.com.tr or to the Registered Electronic Mail (KEP) address ahlatci@hs03.kep.tr.