PRIVACY POLICY

PERSONAL DATA PROTECTION AGREEMENT

INFORMATION TEXT

This Privacy Policy, the Personal Data Protection Agreement and the Disclosure Text are valid for all persons using the www.kiiro.com.tr website belonging to the private company Latif Çimen.

1. The Company does not share personal data and information given to it by users, obtained through the Website or otherwise transmitted to it by users with third parties, except for the cases specified in this Privacy Policy and the "Information Text on Personal Data" below, and does not use or transfer to third parties any commercial purposes other than the specified purposes.
2. Personal data and confidential information belonging to Users will only be disclosed to official authorities if requested by official authorities and in cases where disclosure is required in accordance with the provisions of the mandatory legislation in force.
3. For the security of the information provided to the Company by the Users or obtained by the Company and all transactions made through the Website, appropriate technical and administrative measures have been taken by our Company or the relevant organization in the systems and internet infrastructure, within the technological possibilities and cost elements, depending on the nature of the information and transaction.
4. The personal data shared by the User with the Company is deemed to belong to the User.
5. The Company may update, change or repeal the provisions of this Privacy Policy at any time. Each updated, changed or repealed provision will be effective for the User on the date of publication. The User's continued use of the Website after the change will be deemed to be consent to the changes.

INFORMATION TEXT ON PERSONAL DATA

As KİİRO, this Disclosure Text aims to fulfill our obligation to inform within the scope of the Law on the Protection of Personal Data and the Communiqué on the Procedures and Principles to be Complied with in Fulfilling the Disclosure Obligation.

DATA CONTROLLER

KIIRO

Latif ÇİMEN

Hoca Ahmet Yesevi Street No:27/A Central Sivas

Site Tax Office – 32110725764

storekiiro@gmail.com

www.kiiro.com.tr 

It is the recording, processing, classification, disclosure, transfer, anonymization and assignment of the data of the personal data owner by automatic or non-automatic means in accordance with the Law No. 6698 on the Protection of Personal Data. In this sense, the subject of this agreement, which is accepted as an ANNEX to the Distance Sales Agreement dated …/…/…… concluded between the parties, is the determination of the limits and conditions of confidentiality that will prevent the disclosure, access, delivery and leakage of personal data, special personal data and general data to any third party real and/or legal entity without the approval of the data controller or the explicit consent of the personal data owners regarding the information and documents given for the order registration regarding the distance sales made through the www.kiiro.com.tr website.

OBLIGATIONS OF THE PARTIES

The Data Controller accepts and undertakes to fulfil all its obligations within the scope of the Distance Selling Agreement.

The Data Controller accepts and undertakes that the website users cannot be held responsible for any deficiencies, delays or disruptions that may occur due to the incomplete or incorrect confidential information disclosed.

The data controller accepts and undertakes that he/she is aware that the information and documents disclosed to him/her by the website users are confidential and therefore only he/she will know the confidential information in question and that third parties, institutions or organizations that are likely to contribute to the fulfillment of the contract requirements will only be aware of the confidential information to the extent necessary for the job and that these information and documents will not be disclosed to third parties, real and/or legal entities or organizations, without the user's permission, for purposes other than work.

The Data Controller accepts and undertakes that it will be responsible for the actions of third parties, institutions or organizations that are likely to contribute to the fulfillment of the requirements of the contract, in violation of the confidentiality principles set forth in this contract, that it will comply with the confidentiality principles of the third parties, institutions or organizations in question, and that it will immediately and in writing notify the user of such non-conformity if it becomes aware of such non-conformity.

In case confidential information and personal data are disclosed, accessed, leaked or similar behaviors are used to obtain information in violation of this agreement, the user has the right to take all legal action and demand compensation for any damages suffered from the responsible parties, provided that the expenses are borne by the data controller.

FOR WHICH PURPOSES WILL PERSONAL DATA BE PROCESSED?

Your collected personal data may be processed for the purposes set out below and in accordance with the personal data processing conditions and purposes specified in Article 5 of the Law, within the scope of the purpose of carrying out the necessary work by our units and carrying out the relevant processes in order to enable the relevant persons to benefit from the services offered by the Company:

• Updating user contact information,
• Opening user records and performing billing activities,
• Providing eInvoice, eArchive Invoice, eLedger, eLedger Storage, eDelivery Note, eFreelance Receipt products and services,
• Establishment or execution of the sales contract and its follow-up due to your receipt of our company's services,
• Providing after-sales support services.
• Fulfilling the requests of official institutions,
• Providing information to authorized institutions based on legislation,
• Ensuring compliance with the storage obligations stipulated in the legislation,
• Responding to relevant person applications in accordance with the legislation and carrying out the necessary procedures,
• Conducting user-company relations,
• Monitoring financial transactions,
• Event management,
• To ensure that the relevant persons benefit from the services offered by our Company, including the promotional activities of our services, the necessary work is carried out by our units and the relevant processes are carried out,
• Carrying out the necessary work and related processes by our relevant units in order to carry out the commercial activities carried out by our company,
• Ensuring the legal, technical and commercial-occupational security of our Company and the relevant persons who have business relations with our Company,
• Determining and implementing our company's commercial and business strategies,
• Monitoring and execution of legal affairs,
• Carrying out information security processes,
• Carrying out audit and ethical activities,
• Planning and execution of user satisfaction and corporate communication activities,
• Carrying out sweepstakes, campaigns, competitions, promotions or advertising activities,
• Storing personal data for the general statute of limitations in order to constitute evidence in possible disputes that may arise in the future,
• Receiving, evaluating and finalizing your requests and complaints.

TO WHOM AND FOR WHAT PURPOSES PERSONAL DATA MAY BE TRANSFERRED

Your collected personal data may be transferred to our service provider suppliers, companies from which we receive technical support, banks with which we have agreements within the scope of payment services, legally authorized public institutions and legally authorized private persons within the scope of fulfilling our legal obligations and in accordance with the personal data processing conditions and purposes specified in Article 8 of the Law in line with the realization of the above-mentioned Purposes.

METHOD AND LEGAL REASON FOR COLLECTING PERSONAL DATA

Your personal data is collected by our Company electronically and by registration within the scope of the distance sales contract within the scope of the fulfillment of the above-mentioned Purposes.

Your personal data is collected and processed by our Company for the following purposes and legal reasons, based on the personal data processing conditions specified in Article 5 of the Law.

Based on the legal reason that the processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract;

• Updating contact information,
• Opening service records and performing billing activities,
• Establishment or execution of the sales contract and its follow-up due to your receipt of our company's services,
• Providing eInvoice, eArchive Invoice, eLedger, eLedger Storage, eDelivery Note, eFreelance Receipt products and services,
• Providing after-sales support services.

Based on the legal reason that it is clearly prescribed by law and is necessary for the data controller to fulfill its legal obligations;

• Fulfilling the requests of official institutions,
• Providing information to authorized institutions based on legislation,
• Ensuring compliance with the storage obligations stipulated in the legislation,
• Responding to relevant person applications in accordance with the legislation and carrying out the necessary procedures.

Based on the legal reason that data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person;

• Conducting user-company relations,
• Monitoring financial transactions,
• Event management,
• To ensure that the relevant people benefit from the products and services offered by our Company, including the promotional activities of our services, our units carry out the necessary work and carry out the relevant processes,
• Carrying out the necessary work by our relevant business units and carrying out the related business processes in order to carry out the commercial activities carried out by our company,
• Ensuring the legal, technical and commercial-occupational security of our Company and the relevant persons who have business relations with our Company,
• Determining and implementing our company's commercial and business strategies,
• Monitoring and execution of legal affairs,
• Carrying out information security processes,
• Carrying out audit and ethical activities,
• Planning and execution of user satisfaction and corporate communication activities,
• Carrying out sweepstakes, campaigns, competitions, promotions or advertising activities,
• Storing personal data for the general statute of limitations in order to constitute evidence in possible disputes that may arise in the future.

Based on the legal reason that data processing is mandatory for the establishment, exercise or protection of a right;

• Receiving, evaluating and finalizing your requests and complaints,
• Storing personal data for the general statute of limitations in order to constitute evidence in possible disputes that may arise in the future.

RIGHTS OF THE PERSONAL DATA OWNER AS STATED IN ARTICLE 11 OF THE LAW

We hereby inform you that, as a personal data owner, you have the following rights in accordance with Article 11 of the Law:

• Request information regarding your personal data if it has been processed,
• To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom your personal data is transferred, either domestically or abroad,
• To request correction of your personal data if it is processed incompletely or incorrectly and to request that the third parties to whom your personal data is transferred be notified of the action taken in this context,
• To request the deletion or destruction of your personal data in case the reasons requiring processing are eliminated, even though it has been processed in accordance with the Law and other relevant legal provisions, and to request that the actions taken in this context and in case your personal data is processed incompletely or incorrectly be notified to third parties to whom your personal data has been transferred,
• To object to a result that is to your detriment as a result of your processed data being analyzed exclusively through automated systems,
• To request compensation if you suffer damage due to the unlawful processing of your personal data.

DURATION

This agreement, which is an ANNEX to the Distance Selling Agreement, will enter into force on the date it is signed by the parties, and the obligations arising from this agreement will continue as long as the distance selling agreement remains valid.

Even in the event of termination of the Distance Sales Contract, this contract will remain valid as the confidentiality and protection of personal data indefinitely, except for the processing and anonymization of personal data and information with the permission of the user, and with the consent of the personal data owner, as of the termination date of the service contract.

CONTRACT CHANGE

This agreement replaces all written and/or verbal agreements that may have been made by the parties, especially regarding confidentiality (excluding information not listed herein and patent and similar invention agreements). Changes to the agreement can only be made in writing.

LIMITED TO PURPOSE AND INSTRUCTIONS

Within the scope of the contract, the parties may be in the position of “data controller” or “data processor” depending on the processes. In cases where one of the parties processes Personal Data on behalf of the other party, the relevant party will be considered as “data processor” within the scope of the Law on Protection of Personal Data No. 6698. In this case, the said party is obliged to process the Personal Data exclusively in accordance with the instructions of the other party and cannot carry out any data processing activity outside the instructions and/or on its own behalf.

Personal Data may be processed by the party to whom the data is transferred, solely for the purpose of transferring the data to itself. Any processing of Personal Data beyond the aforementioned scope is subject to the written consent of the party transferring the data.

Personal Data transferred during the contract period will be deleted or destroyed in accordance with the relevant legislation upon termination of the service relationship between the parties, unless a separate legal/contractual relationship is established with the relevant data owner. If each of the parties has a legal obligation to store Personal Data, the party obliged to store Personal Data may store Personal Data for a limited period of time and for a limited purpose within the scope of the relevant legislation.

The parties are obliged to take the measures prescribed by the legislation to prevent unauthorized access, processing and use of Personal Data for purposes other than the purpose for which it was transferred, either by their own personnel or by third parties. Within this framework, each party declares, accepts and undertakes that it will fully and completely fulfill all obligations prescribed by the Law, relevant legislation and the Personal Data Protection Board, otherwise it will be responsible for all damages that will occur and/or may occur.

Any dispute that may arise in this regard will be resolved through negotiation between the parties; if this is not possible, Sivas Courts and Enforcement Offices will have exclusive jurisdiction.

You can apply for these rights by sending your petition containing your request and documents proving your identity to Hoca Ahmet Yesevi Caddesi No:27/A Merkez/Sivas in writing or by using a secure electronic signature, mobile signature or your e-mail address previously notified to the Company and registered in the Company's system (In this context, you can reach the Company via the e-mail address storekiiro@gmail.com ) or through a software or application developed for the purpose of application.