MR DIY WEBSITE CLARIFICATION TEXT

In this Clarification Text, in accordance with the Personal Data Protection Law No. 6698 (“Law”) and the relevant legislation, the data controller MRDIY RETAIL EV GEREÇLERİ VE YAPI MALZEMELERİ PERAKENDE SATIŞ A.Ş. (the “Company”) which is located at the address of “Esentepe Mah. Büyükdere Cad. Ferko Signature Blok No: 175 İç Kapı No: 7 Şişli/ İstanbul”, the principles regarding within its processing are determined below.

 

1.The Purpose of Processing Personal Data

Your voice recordings and personal data obtained as a result of visiting our website and calling customer service may be processed for the purposes listed below:

• In case of a request from the communication portal or social media accounts, the necessary activities are performed by our business units, and the relevant business processes are executed in order to benefit from the services offered by the Company,
• Planning and executing the activities necessary for the recommendation and promotion of the services offered by the Company according to the tastes, usage habits, and needs of the persons concerned,
• To perform the necessary activities by our relevant business units for the realization of commercial activities performed by the Company and to execute the related business processes,
• Planning and execution of the Company's commercial and/or business strategies,
• Execution of after-sales support services for goods/services,
• Execution of goods/service sales processes,
• Execution of goods/service production and operations and processes,
• Execution of customer relationship management processes,
• Performing activities for customer satisfaction,
• Performing marketing analysis studies,
• It is processed for the purposes of executing advertisement/campaign/promotional processes and contacting you within this scope.

 

2. Places and Purpose of Transfer of Processed Personal Data

Your personal data obtained, in accordance with the purposes of processing your personal data, to our business partners (such as outsourcing service providers, hosting service providers, research companies, call centers, etc.), legally authorized public institutions, and private individuals and entities, in accordance with Articles 8 and 9 of the Law, may be transferred within the specified personal data processing conditions and purposes.

 

3. Collection Method of Personal Data and Legal Reason

Your personal data is collected automatically by our Company through cookies, which are technical communication files, due to your visit to our website and through the forms you fill in for the purposes specified in this Policy. For detailed information about cookies, please review the Cookie Notice.

 

Your personal data is processed in accordance with the following legal reasons:

• Pursuant to the provision of Article 5/2 (f), data processing is mandatory for the Company's legitimate interests, provided that it does not harm your fundamental rights and freedoms,
• Pursuant to the provision of Article 5/2 (c), the processing is necessary due to the fact that it is directly related to the establishment or performance of the contract (for the Terms of Use, etc., the performance of the contract, the protection of the right).

 

4. How to Apply to the Data Controller and Your Rights

In accordance with Article 11 of the Law, by applying to our Company, you have the right to ; a) learn whether it has been processed, b) request information if it has been processed, c) learn the purpose of the processing and whether it is used in accordance with its purpose, d) learn the parties to which it has been transferred in the country / abroad, e) request correction if it has been processed incompletely / incorrectly, f) request deletion/destruction within the framework of the conditions stipulated in Article 7, g) request notification of the transactions made in accordance with subparagraphs (e) and (f) listed above, to the third parties to which it has been transferred, h) object to the emergence of a result against you because it is analyzed exclusively by automatic systems, and i) the right to demand compensation for the damage in case you suffer damage due to unlawful processing.

You can submit your information and application requests regarding your rights mentioned above to the Data Controller in accordance with the Communique On The Principles And Procedures For The Request To Data Controller. You can also send your information and application requests to "Esentepe Mah. Buyukdere Cad. Ferko Signature Blok No: 175 Interior Door No: 7 Sisli/Istanbul” address and you can send it to us via e-mail at [email protected].

Our Company will finalize your requests as soon as possible and within thirty days at the latest, with the first request free of charge, depending on the nature of the request. However, in subsequent requests on the same subject or in the first request, if the transaction requires a separate cost, a fee may be charged. Our Company may accept and process the request or reject the request in written form by explaining the reason.

In cases where the application made by following the above-mentioned procedure is rejected, the answer given is insufficient, or the application is not answered in due time; has the right to file a complaint with the Personal Data Protection Board (the "Board") within thirty days following the notification of the reply, and possibly within sixty days from the date of application. However, a complaint cannot be made without exhausting the remedy.

The Board, upon complaint or ex officio, incase it learns about the alleged violation, makes the necessary examination on the matters falling within its scope. Upon the complaint, the Board examines the request and gives an answer to the relevant parties. If no response is received within sixty days from the date of the complaint, the request is deemed to have been rejected. In the event that the existence of a violation is understood as a result of the examination made upon the complaint or ex officio, the Board decides that the illegalities it detects will be eliminated by the data controller and notifies the relevant parties. This decision shall be fulfilled without delay and within thirty days at the latest, following the notification. The Board may decide to suspend the processing of data or the transfer of data abroad, in case of irreparable or impossible damage and in case of a clear violation of the law.

We would like to state that your data has been protected cautiously within our Company, and thank you for your trust in us.