PRIVACY AND PERSONAL DATA POLICY
PRIVACY NOTICE
Update Date: 15 August 2022
This Privacy and Personal Data Policy and Privacy Notice (Policy) has been prepared to inform and enlighten the Users aboutthe terms and conditions on usage of the data obtained and/or to be obtained in any way within the scope of Services provided through www.bajjari.com domain name managed and operated by Bajjari Fur Fashion- Ziyaddin Nergiz (Bajjari or Company) and the data processing methods used by Bajjari.
- Definitions and General Explanations
Each term referred in this Policy shall have the meanings assigned next to them:
Terms of Use: The terms of use on the Platform that the Users have agreed to by accessing the Platform,
Service(s): All of the services specified in the User Agreement, distance contracts and the Platform,
Platform: The website with the domain name www.bajjari.com owned by the Company or other websites operating under another domain name by the Company,
User(s): The real person who uses Platform without making any registration,
Member(s): The person who registers the Platform by starting an account on the Platform and expressly accepts the Terms of Use,
Law: Turkish Law on Protection of Personal Data No. 6698,
Data Controller: The person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data filing system.
Capitalized terms not further defined in this Policy shall have their meanings in Terms of Use.
BAJJARİ adopts this Policy regarding the confidentiality, use and other related issues of the information processed regarding the Users and Members it has started to provide services to. BAJJARİ places importance on confidentiality of data and takes care to be transparent about the storage of information. This Policy includes information on what kind of data is collected, how this data is used, with whom this information is shared if necessary, what the rights regarding personal data are and how these rights can be exercised, and the principles adopted by BAJJARİ regarding confidentiality.
Personal data is processed following the following basic principles as regulated in the Law:
- Lawfulness and fairness,
- Being accurate and up-to-date when necessary,
- Being processed for specific, explicit and legitimate purposes,
- Being relevant, limited and proportionate to the purpose of processing,
- Being stored for the period stipulated in the relevant legislation or the period necessary for the purpose of data processing.
Personal data refers to any information relating to an identified or identifiable natural person. For this reason, the regulations regarding personal data in this text shall be applicable if the relevant information belongs to a natural person. If the relevant information belongs to legal entities, provisions excluding those regarding personal data in this Policy shall be applicable.
Platform may contain links to other websites whose content is unknown to BAJJARİ and not managed by BAJJARİ. These linked websites may contain different terms and conditions than BAJJARİ‘s texts. BAJJARİ shall not be held responsible for the use or disclosure of information that these websites may process. Likewise, BAJJARİ shall not have any responsibility when a link is provided to this website belonging to BAJJARİ from other sites.
- Enlightening and Informing the Data Subject
BAJJARİ is obliged to enlighten/inform the Data Subjects whose data will be processed during the acquisition of personal data . The scope of this enlightenment obligation is as follows:
- The identity of the data controller and its representative, if any,
- The purpose of personal data processing,
- To whom and for which purposes the processed personal data may be transferred,
- The method and legal basis of collection of personal data,
- Rights of the data subject.
In this context, BAJJARİ aims to provide the necessary information with this Policy.
- Collection of Personal Data, Collection Method, and Legal Reasons
The information that the Data Subjects send, share and/or provide in an accessible form to BAJJARİ while accessing the Platform or using the Services, or collected through the Platform by automatic means, may be included in the scope of personal data. For example, if you use the Services offered by BAJJARİ or access the Platform, we collect the following information about you and your use of our Services from various sources:
Member Registration information: If you create a “Membership Registration” on the Platform, in such a case, Members must sign the Terms of Use and become a member of the Platform in order to benefit from Platform services. To register, you must enter your e-mail address, name-surname information, your phone number and the password you will use on the Platform as a Member.
Service information: Details of the products and services purchased, order dates and order history information can be recorded on the Platform in order for Members to benefit from the Services, .
Usage data: Usage data is collected about you every time you use our Services or access the Platform without using our Services. Data regarding your visit of the Platform, what you click on, when you perform these actions, etc. may be included. It also contains data on the nature of each access, such as source IP addresses, internet service providers, files displayed on the Platform (eg HTML pages, graphics, etc.), operating system versions and timestamps.
Device data: Data such as your IP address, operating system version, device type, system and performance information, and browser type are collected from the devices and applications you use to access our Services.
- Data Categories and Data Types
| 1. | Member | Identity Information | Name-surname |
| Contact Information | Email, phone number | ||
| Financial Information | Bank account information, IBAN number, billing information, payment information | ||
| Customer Transaction | Request and complaint information, order information, requested and received service information, comments made on Platform. | ||
| Process Security | Data collected through PC/e-mail/system and Platform user transaction information (username and password), internet traffic data (network movements, IP address, visit data, time and date information), cookies | ||
| 2. | User/Visitor | Process Security | PC/device information, internet traffic data (network movements, IP address, visit data, time and date information), data collected through cookies |
- Legal Reasons
Your above-mentioned personal data shall be processed in accordance with the conditions and principles in Article 4 of the Law and processing conditions specified in Articles 5 and 6 of the Law for the purposes subject of your disclosure of this data to BAJJARİ and listed below. The legal reasons for each data category are clearly stated below:
| Member | Identity Information Contact Information Financial Information | Processing is expressly stipulated by the lawsIn situations where it is necessary to process the data subjects’ personal data in order to build a contractual relationship or processing is directly related to the execution or performance of the agreement Processing is necessary to fulfill our legal obligations Processing is necessary for our legitimate interests, provided that fundamental rights and freedoms of data subjects are not harmed |
| Customer Transaction | In situations where it is necessary to process the data subjects’ personal data in order to build a contractual relationship or processing is directly related to the execution or performance of the agreement Data processing is necessary for our legitimate interests, provided that fundamental rights and freedoms of data subjects are not harmed | |
| Process Security | Processing is expressly stipulated by the lawsProcessing is necessary to fulfill our legal obligations | |
| User/Visitor | Process Security | Processing is expressly stipulated by the laws. Processing is necessary to fulfill our legal obligations |
- For What Purpose Personal Data Will Be Processed
Within the scope of this text, the personal data of the data subjects are processed for the following purposes in accordance with the above general conditions:
| Member | Identity Information | Execution of activities in compliance with the legislationExecution of finance and accounting activitiesExecution of company/product / service loyalty processesExecution / supervision of business activitiesExecution of goods / services sales processesExecution of goods / services production and operation processesExecution of storage and archive activitiesExecution of contract processesInforming authorized persons, institutions and organizations |
| Contact Information | Execution of activities in compliance with the legislationExecution of company / product / service loyalty processesConducting legal affairsConducting communication activitiesExecution / supervision of business activitiesExecution of after-sales support services for goods / servicesExecution of goods / services sales processesExecution of goods / services production and operation processesExecution of customer relationship management processesCarrying out activities for customer satisfactionExecution of advertising / campaign / promotion processesExecution of storage and archive activitiesExecution of contract processesInforming authorized persons, institutions and organizations | |
| Financial Information | Execution of finance and accounting activitiesExecution / supervision of business activitiesExecution of after-sales support services for goods / servicesExecution of goods / services sales processesExecution of contract processes | |
| Customer Transaction | Execution of finance and accounting activitiesExecution / supervision of business activitiesExecution of after-sales support services for goods / servicesExecution of goods / services sales processesExecution of contract processesFollow-up of requests / complaints | |
| Process Security | Execution of information security processesConducting audit/ethical activitiesExecution of access authorizationsExecution/supervision of business activitiesCarrying out business continuity activitiesProviding information to authorized persons, institutions and organizations | |
| Visitor/User | Process Security | Execution of information security processesConducting audit/ethical activitiesExecution of access authorizationsExecution/supervision of business activitiesCarrying out business continuity activitiesInforming authorized persons, institutions and organizations |
- Administrative and Technical Measures Taken to Ensure Personal Data Security
BAJJARİ undertakes to take all necessary administrative and technical measures and to show due diligence to ensure the confidentiality, integrity and security of your personal data. In this context, it takes the necessary measures to prevent the unlawful processing of your personal data, unauthorized access to your personal data, and unlawful disclosure, modification or destruction of your personal data.
In case your personal data is damaged or in the hands of unauthorized third parties as a result of attacks on the Platform or the Company system, despite the Company taking the necessary information security measures, the Company notifies the Data Subjects and authorized public institutions and organizations within the periods stipulated in the relevant legislation and takes the necessary precautions.
- Transfer of Your Personal Data
Your collected personal data can be transferred to, processed and stored in servers abroad for storage or legal purposes stipulated in this text. BAJJARİ may transfer Users’ information, including personal data, to another country and jurisdiction that does not have the same/similar data protection laws in their jurisdiction.
BAJJARİ complies with the obligations stipulated in the relevant legislation while performing this operation. Therefore, your personal information may be subject to different privacy rules than in your country of residence. However, the data shall still be processed to the extent provided in this text.
BAJJARİ by taking into account its legal obligations may transfer your personal data with companies that provide services, (such as data processing centers, third-party business partners or customer service centers that provide services under the contracts concluded between you and BAJJARİ). These service providers are responsible for protecting this information.
Your personal data may be shared with public institutions and organizations authorized to request personal data for BAJJARİ to fulfill its obligations under the law (in cases where there is an obligation to provide information such as the fight against crime and the threat of state and public security).
- Cookies
Cookies are small data files that we store on the device you use to access our services so that we can recognize regular users. All cookies expire after a certain time, depending on why we use them. Cookies are used for several reasons:
- To make the Platform easier to use: we may store your username in a cookie if you use the “Remember me” feature to speed up your account login.
- Security reasons: We use cookies to verify your identity (or, for example, to determine if your session is still open on the Platform).
- To provide you with personalized content: We may store user preferences, such as the default language, in cookies to personalize the content you view.
- To improve our services: We use cookies to measure your use of the Platform, track referral data and sometimes show you different versions of content. This information helps us develop and improve our services and optimize the content we offer users.
Please review our Cookie Policy for detailed information and our policy regarding cookies.
It should be noted that if you do not make the necessary browser and/or e-mail settings to disable cookies, you will be deemed to have given your consent for the use of cookies by us.
- Changes and Updates
BAJJARİ has the right to change the Policy on the condition that it complies with the Law and that personal data is better protected.
This Policy may be revised and updated as new features are added to digital platforms or new suggestions are received from users. However, we will notify you by publishing the changes on the Platform in this case. In addition, in specific critical issues, we may notify you of such changes by e-mail or by any other conspicuous method reasonably designed to notify you, with additional notices as appropriate. If you continue to access the Platform and continue to use the services offered by BAJJARİ after the notification period, upon being notified of these changes, you will be deemed to have consented to the changes in the Policy. If you do not accept the terms of this Policy or an updated privacy policy and personal data text, you reserve the right to close your account at any time (if any) or not respond to surveys. Therefore, we recommend you to review the Policy each time you access the Platform. This document was last updated on the date mentioned above. Changes on the Policy provisions become effective on the date of publication.
- Your Rights as a Data Subject
As Data Subjects, you have the following rights in accordance withlegislation on the protection of personal data:
- To learn whether your personal data is processed or not,
- To request information regarding the processing of your personal data,
- To understand the purpose of processing your personal data and whether they are used for the intended purposes,
- To know the third parties to whom personal data is transferred domestically or abroad,
- To request the rectification of your personal data if it is incomplete or incorrectly processed or changed,
- To request the erasure or destruction of your personal data in accordance with the conditions stipulated in the Law,
- To request notification to third parties to whom personal data has been transferred, that your personal data that has been processed incompletely or incorrectly has been corrected and that your personal data has been deleted or destroyed,
- To object to the processing, exclusively by automatic systems, of the personal data, which leads to an unfavorable consequence for the person,
To request compensation for the damages arising from the unlawful processing of your personal data. As Data Subjects, to state your requests regarding your rights and to exercise your rights over your personal data; you can file your request in a way that meets the minimum application conditions in the Communique on The Principles And Procedures For The Request To Data Controller and take actions such as making necessary changes, updates and/or deletion and related requests by sending an email to the Company’s official e-mail address bajjarifashion@outlook.com or the Company’s registered address.
In the application containing your explanations regarding the right you have as the Data Subjects and that you will make and request to use the above-mentioned rights; the matter you request must be clear and understandable, the subject you request is related to yourself or if you are acting on behalf of someone else, you must be specifically authorized in this regard and document your authority, and the application must meet the minimum application requirements in the relevant legislation.
If you submit your requests to us through the specified methods, BAJJARİ will conclude the request free of charge as soon as possible and within thirty days at the latest, depending on the nature of your request. However, if the transaction requires an additional cost, BAJJARİ will charge the tariff determined as per the relevant legislation.
Company Title: Bajjari Fur Fashion- Ziyaddin Nergiz
Address: Telsiz Mahallesi 80/1 Sokak, Sazıyaman Apt. No:16-18C Zeytinburnu/İstanbul
E-mail: bajjarifashion@outlook.com