This disclosure notice has been prepared to inform you about the processing of your personal data under the Personal Data Protection Law No. 6698 ("KVKK").
1. Data Controller
As INFUMAR, in accordance with the Personal Data Protection Law No. 6698, we may process, record, store, classify, update your personal data as Data Controller within the scope of the purposes explained below, and disclose/transfer them to third parties in cases permitted by legislation and/or limited to the purpose for which they were processed.
2. Definitions
Explicit Consent: Consent that is given for a specific matter, based on information and expressed freely.
Anonymization: Making personal data that was previously associated with a person impossible to associate with any identified or identifiable natural person, even when combined with other data.
Personal Data: Any information relating to an identified or identifiable natural person.
Sensitive Personal Data: Data relating to race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, dress, association, foundation or union membership, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data.
Data Subject: The natural person whose personal data is processed.
Data Processor: The natural or legal person who processes personal data on behalf of the data controller based on the authority given by them.
Data Controller: The person who determines the purposes and means of processing personal data and manages the place where data is systematically kept.
3. Personal Data Processed
The personal data we process includes:
- Identity information (name, surname, ID number)
- Contact information (phone number, email address, address)
- Account information (username, password)
- Financial information (bank account details, payment information)
- Social media information (follower count, engagement rates)
- Content information (photos, videos and other content shared)
- Location information
- IP address and device information
4. Purposes of Processing Personal Data
Your personal data is processed for the following purposes:
- Performing membership operations
- Providing platform services
- Communicating with users
- Processing payment transactions
- Fulfilling legal obligations
- Conducting statistical analysis
- Improving service quality
- Ensuring security
5. Legal Basis for Processing Personal Data
Your personal data is processed based on the following legal grounds specified in Articles 5 and 6 of KVKK:
- Your explicit consent
- Expressly provided by law
- Directly related to establishing or performing a contract
- Necessary for the fulfillment of legal obligations
- Necessary for our legitimate interests, provided that it does not harm your fundamental rights and freedoms
6. Transfer of Personal Data
Your personal data may be transferred to the following parties for the purposes stated above:
- Our business partners
- Our suppliers
- Legally authorized public institutions
- Our legal advisors
Transfers are made in accordance with the conditions specified in Articles 8 and 9 of KVKK.
7. Methods of Collecting Personal Data
Your personal data is collected through:
- Forms filled out on our website
- Our mobile application
- Email, phone and other communication channels
- Cookies
- Social media platforms
8. Rights of the Data Subject
Under Article 11 of KVKK, you have the following rights:
- To learn whether your personal data is being processed
- To request information if your personal data has been processed
- To learn the purpose of processing your personal data and whether they are used in accordance with their purpose
- To know the third parties to whom your personal data is transferred domestically or abroad
- To request correction of your personal data if it has been processed incompletely or incorrectly
- To request deletion or destruction of your personal data under the conditions stipulated in KVKK
- To request notification of correction, deletion or destruction operations to third parties to whom your personal data has been transferred
- To object to any result that arises against you through analysis of processed data exclusively by automated systems
- To claim compensation for damages arising from unlawful processing of your personal data
9. Retention Period of Personal Data
Your personal data is retained for the periods required by the purposes of processing and within the framework of our legal obligations. When the retention period expires or the purpose of processing ceases, your personal data will be deleted, destroyed, or anonymized.
10. Application Method
You can submit your requests under Article 11 of KVKK through the following methods in accordance with the "Communiqué on Procedures and Principles of Application to Data Controller":
Email: iletisim@infumar.com
The requests in your application will be concluded free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the process requires an additional cost, the fee determined by the Personal Data Protection Board may be charged.