Doraks Technological Products Industry and Trade Ltd. Co. Personal Data Policy

General information about the Personal Data Law

The Personal Data Protection Law No. 6698 (hereinafter referred to as KVKK) was adopted on March 24, 2016, and published in the Official Gazette No. 29677 on April 7, 2016. Parts of the KVKK came into force on the publication date, and other parts on October 7, 2016.

Information as a data controller

Pursuant to KVKK No. 6698 and in the capacity of Data Controller, your personal data may be recorded, stored, updated, disclosed/transferred to third parties where permitted by legislation, classified, and processed in the ways enumerated in the KVKK, within the framework described on this page.

How your personal data may be processed

Pursuant to KVKK No. 6698, your personal data shared with our company may be processed by being fully or partially automated or by non-automated means, provided that it is part of any data recording system. Any operation performed on data within the scope of the KVKK is considered as "processing of personal data".

Purposes and legal reasons for processing your personal data

Your personal data shared with us will be processed in order to meet the requirements of the services we provide to our customers, in accordance with the requirements of the contract and technology, and to develop our products and services;

• To record identity, address, and other necessary information for identifying the transaction owner within the scope of the Law No. 6563 on the Regulation of Electronic Commerce, the Law No. 6502 on the Protection of Consumers, and the regulations based on these laws, such as the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette No. 29457 dated 26.08.2015, the Regulation on Distance Contracts published in the Official Gazette No. 29188 dated 27.11.2014, and other relevant legislation;
• To arrange all records and documents that will be the basis for the transaction in the banking and electronic payment fields, whether in electronic or paper form; to comply with information retention, reporting, and information obligations stipulated by legislation and other authorities;
• To provide information to public prosecutors, courts, and relevant public officials upon request and as required by law on issues related to public security and legal disputes;
• To be processed in accordance with KVKK No. 6698 and relevant secondary regulations.

Information on third parties or organizations to which your personal data may be transferred

Your personal data shared with our company for the above purposes may be transferred to persons/organizations such as our company's e-commerce infrastructure provider IdeaSoft Software Industry and Trade Inc., suppliers, cargo companies, and other relevant third parties for the services provided, to program partner organizations with whom we cooperate, domestic/foreign organizations and other third parties acting as Data Processors or with whom we cooperate to conduct our activities.

How your personal data is collected

Your personal data may be collected in the following ways:

• Through forms on our company's website and mobile applications, such as name, surname, TR identity number, address, phone number, business or personal email address; preferences on pages accessed using username and password, IP records of performed transactions, cookie data collected by the browser, browsing duration and details, and location data;
• Orally, in writing, or electronically through our sales and marketing department employees, branches, suppliers, other sales channels, paper forms, business cards, digital marketing, and call center channels;
• From persons who share their personal data with our company for purposes such as establishing a business relationship, applying for a job, making a proposal, through business cards, resumes (CVs), proposals, and other ways, in a physical or virtual environment, face-to-face or remotely, orally or in writing, or electronically;
• Additionally, from public databases, social media platforms with open profiles and data, micro-websites and social media for purposes such as competitions, surveys, games, campaigns, and similar purposes, e-bulletin reading or click actions, and other indirect means.

Your personal data obtained before the enactment of KVKK

Your personal data obtained lawfully before the enactment date of KVKK, April 7, 2016, through membership, electronic communication permission, product/service purchase, and other means, are also processed and maintained in accordance with the terms and conditions set out in this document.

Transfer of personal data abroad

Your personal data collected by any of the methods listed above may be transferred to service intermediaries abroad (to countries accredited by the Personal Data Protection Board and where sufficient protection for personal data is provided) for processing or storage purposes, in accordance with KVKK and for contractual purposes.

Storage and protection of personal data

Your personal data will be kept confidential in the database and systems of our company in accordance with Article 12 of KVKK and will not be shared with third parties except for legal obligations and the regulations specified in this document. Our company is obliged to take software and physical security measures to prevent unauthorized access and to protect your personal data from unlawful processing, in accordance with Article 12 of KVKK. In case it is learned that personal data is obtained by others unlawfully, the situation will be immediately reported in writing to the Personal Data Protection Board in accordance with legal regulations.

Keeping personal data accurate and up-to-date

Our company is required to keep your personal data accurate and up-to-date according to Article 4 of KVKK. Therefore, in order for our company to fulfill its obligations arising from the current legislation, our customers need to share their accurate and up-to-date data with us or update them via the website/mobile application.

Rights of the personal data owner under KVKK No. 6698

Article 11 of KVKK No. 6698, which entered into force on October 7, 2016, states that personal data owners have the following rights after this date:

• To learn whether personal data is processed or not,
• If personal data has been processed, to request information regarding this,
• To learn the purpose of processing personal data and whether it is used in accordance with its purpose,
• To know the third parties to whom personal data is transferred domestically or abroad,
• If personal data is processed incompletely or inaccurately, to request correction,
• To request the deletion or destruction of personal data under the conditions set forth in Article 7 of KVKK,
• To request notification of the transactions made as per items (e) and (f) to third parties to whom personal data has been transferred,
• To object to the emergence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,
• If personal data is processed unlawfully and causes harm, to request the compensation of the damage.

Doraks Technological Products Industry and Trade Ltd. Co., registered with the Istanbul Chamber of Commerce under the number 562802, MERSİS number 0310050302500010, located at K. Bakkalköy Mh. Ozan Veysel Sk. No:9-2 Ataşehir ISTANBUL / Turkey, is the Data Controller under KVKK. When the legal infrastructure is provided, the Data Controller Representative to be appointed by our company will be announced in the Data Controllers Registry and on the internet address where this document is located. Personal Data Owners can direct their questions, opinions, or requests to any of the following communication channels:

Email: info@doraks.com.tr
Phone: +90 216 577 28 48
Fax: +90 216 577 28 48