KVKK Illumination Text
This Disclosure Text has been prepared by DARKLİGHT AYDINLATMA SANAYİ VE TİCARET ANONYMOUS COMPANY, which is the data controller in accordance with the Law on the Protection of Personal Data No. 6698 (" LPPD "), in relation to the use of personal data obtained from Personal Data Owners and/or third parties in relation to the website www.darklight.com.tr (hereinafter referred to as the "site"), in order to inform and enlighten you in a transparent manner about the ways your personal data is collected, the purposes and legal reasons of personal data processing activities, the principles related to this if personal data is transferred, and your rights as a data owner.
In accordance with the KVKK, your Personal Data that you share as a personal data owner will be collected and processed by the Company determined as the Data Controller within the scope specified below.
1. DEFINITIONS AND ABBREVIATIONS
In this Disclosure Text;
Company : İkitelli Osb Mah. Süleyman Demirel Boulevard Sinpaş İş Modern Industrial Site J 16 34490 Başakşehir / İstanbul
resident DARKLİGHT LIGHTING INDUSTRY AND TRADE JOINT STOCK COMPANY,
Personal Data: Any information relating to an identified or identifiable natural person,
Processing of Personal Data: Any operation performed on personal data, such as obtaining, recording, storing, preserving, changing, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data, in whole or in part, by automatic means or non-automatic means provided that it is part of any data recording system,
Personal Data Owner: The natural person whose personal data is processed,
KVKK: Personal Data Protection Law No. 6698, which entered into force upon publication in the Official Gazette on April 7, 2016.
Data Processor: The natural or legal person who processes Personal Data on behalf of the Data Controller based on the authority granted to him,
Data Controller: The natural or legal person who determines the purposes and means of processing Personal Data and is responsible for the establishment and management of the data recording system.
Internet Site : Refers to www.darklight.com.tr.
2. PERSONAL DATA PROCESSED
Although the types and numbers of your personal data processed depending on the relationship between you and the Company will vary depending on the reason for processing; Personal Data that you share with the Company or that is obtained by the Company from third parties consist of the following.
Categories of Personal Data | Personal Data We Collect |
Identity Data | Users' name, surname information, Turkish identity number, date of birth, gender |
Contact Data | Address information, phone numbers and e-mail addresses of users, |
Financial Data | Credit Card Information, bank information, bank card or credit card number, expiration date and CVV code |
Cookie Information | Behaviors on the site, location, browser information, operating system information, site visit times, habits, areas of interest, IP address information. |
Marketing Data | Shopping history information, Survey Information, Campaign Participation Information, Website Usage Data |
Audio and Visual Recordings | Camera recordings if there have been visits to our stores, voice recordings for calls made to our call center and contact numbers, voice and camera recordings in support applications. |
Transaction Security Data | Internet system logs, User session information. |
Your personal data is processed in accordance with the general principles set out in Article 4 of the KVKK, in accordance with the law and rules of honesty, accurately and, when necessary, up-to-date, for specific, clear and legitimate purposes, in connection with the purpose for which they are processed, limited and proportionate, and kept for the period stipulated in the relevant legislation or necessary for the purpose for which they are processed.
According to Article 5 of the LPPD, personal data cannot be processed without the explicit consent of the Data Owner. However, according to the same article, if one of the following conditions is met, personal data can be processed without the explicit consent of the Data Owner:
- It is clearly stated in the laws,
- If it is necessary for the protection of the life or physical integrity of a person or someone else who is unable to give his consent due to a physical impossibility or whose consent is not legally valid,
- The processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract,
- It is mandatory for the Data Controller to fulfill its legal obligations,
- Personal data has been made public by the Data Owner himself,
- Data processing is mandatory for the establishment, exercise or protection of a right,
- Data processing is mandatory for the legitimate interests of the Data Controller, provided that it does not harm the fundamental rights and freedoms of the Personal Data Owner.
3. GENERAL PRINCIPLES ON PROCESSING PERSONAL DATA, CONDITIONS AND PURPOSES OF PROCESSING PERSONAL DATA
Your personal data is processed in accordance with the general principles set out in Article 4 of the KVKK, in accordance with the law and rules of honesty, accurately and, when necessary, up-to-date, for specific, clear and legitimate purposes, in connection with the purpose for which they are processed, limited and proportionate, and kept for the period stipulated in the relevant legislation or necessary for the purpose for which they are processed.
According to Article 5 of the LPPD, personal data cannot be processed without the explicit consent of the Data Owner. However, according to the same article, if one of the following conditions is met, personal data can be processed without the explicit consent of the Data Owner:
- It is clearly stated in the laws,
- If it is necessary for the protection of the life or physical integrity of a person or someone else who is unable to give his consent due to a physical impossibility or whose consent is not legally valid,
- The processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract,
- It is mandatory for the Data Controller to fulfill its legal obligations,
- Personal data has been made public by the Data Owner himself,
- Data processing is mandatory for the establishment, exercise or protection of a right,
- Data processing is mandatory for the legitimate interests of the Data Controller, provided that it does not harm the fundamental rights and freedoms of the Personal Data Owner.
The Company shall process your personal data subject to this Disclosure Text in order to fulfill the obligations arising from the legislation, to ensure that the relevant persons benefit from the products and services offered by our shopping site and to carry out the relevant business processes, to carry out the necessary studies by the relevant business units in order to carry out the commercial activities carried out by our shopping site and to carry out the related business processes, to plan and execute the commercial and/or business strategies of our shopping site, to ensure the legal, technical and commercial-business security of the relevant persons who have a business relationship with our shopping site and to plan and execute the activities required for the customization of the products and services offered by us according to the tastes, usage habits and needs of the relevant persons and to recommend and introduce them to the relevant persons, to establish the possible rights and receivables of the relevant persons, to provide information to the authorized institutions arising from the legislation, to create and follow up visitor records, to ensure that the obligations are fulfilled within the scope of the Law on the Protection of Consumers, the Law on the Regulation of Retail Trade and other legal legislation by our Company and our branches, call center, affiliated companies on behalf of our Company or through our websites and social media pages or through all kinds of channels, including but not limited to these, It operates for the purposes of providing better service to customers, providing and presenting various advantages, providing information about sales, marketing, information, promotions, providing information about campaigns and conditions, conducting surveys and customer satisfaction research, ensuring and accelerating your purchasing transactions, receiving and delivering your orders, creating campaigns for customers, making cross-selling, determining the target audience, tracking customer movements and carrying out activities that increase the user experience, improving the operation of the website and mobile application of our shopping site and personalizing them according to customer needs, carrying out direct and indirect marketing, personalized marketing and remarketing activities, carrying out personalized segmentation, targeting, analysis and in-house reporting activities, market research, planning and executing customer satisfaction activities and planning and executing customer relations management processes, including planning and executing the sales and marketing processes of the products and/or services of our shopping site, planning and executing the processes of creating and/or increasing loyalty to the products and/or services offered by our shopping site.
4. METHODS OF COLLECTING PERSONAL DATA AND LEGAL REASONS
Your Personal Data is processed by the Company.
www.baloglukuruyemis.com , E-mail, call center, store, camera, mobile application
Personal data may be collected, processed and transferred in accordance with the basic principles stipulated by the KVKK, through channels such as these, for the purposes specified in this Information Text within the scope of the Personal Data Processing Conditions specified in Articles 5 and 6 of the KVKK.
Your personal data subject to this Disclosure Text is processed on the legal basis that it is directly related to the establishment or performance of a contract and that it is necessary for the legitimate interests of the Data Controller.
5. TRANSFER OF PERSONAL DATA, TRANSFER PURPOSES AND PERIODS
Categories of Personal Data | Transferred Institutions | Transfer Purposes | Storage Period |
Identity Data | Cargo, bank, company stakeholders, company officials, subsidiaries and affiliates, official institutions and organizations, in-house departments, suppliers | It is conveyed for the purpose of supplying the products or services sold, delivering the products or services to you in a healthy manner, keeping customer management data, ensuring payment transactions for services or products, informing about campaigns, resolving disputes that may arise, and performing internal transactions. | Contracts are valid for 10 years from the end of the relationship. |
Contact Data | Cargo, company stakeholders, company officials, subsidiaries and affiliates, official institutions and organizations, in-house departments, suppliers | It is conveyed for the purpose of supplying the products or services sold, delivering the products or services to you in a healthy manner, keeping customer management data, informing about campaigns, resolving disputes that may arise, and performing in-house transactions. | If they do not contract, 10 years from the end of the relationship |
Financial Data | Bank, internal departments, company stakeholders, company officials, subsidiaries and affiliates | It is transferred to ensure and control financial transactions related to products or services. | If they do not contract, 10 years from the end of the relationship |
Marketing Data | Analysis companies, advertising companies, research companies, infrastructure companies | It is transferred in order to be able to offer campaigns according to the user's records and behaviors, to suggest different products according to their behaviors and to sell the products. | 10 years |
Audio and Visual Recordings | Company stakeholders, company officials, subsidiaries and affiliates, official institutions and organizations, in-house departments, infrastructure providers | It is transferred in order to provide support for products or services and to resolve disputes and resolve legal issues if requested. | 5 Years |
Transaction Security Data | Company stakeholders, company officials, subsidiaries and affiliates, official institutions and organizations, in-house departments, infrastructure providers | It is transferred in order to provide support for products or services and to resolve disputes and resolve legal issues if requested. | 10 Years |
Cookies and IP Address | Analysis companies, advertising companies, research companies, infrastructure companies | It is transferred in order to be able to offer campaigns according to the user's records and behaviors, to suggest different products according to their behaviors and to sell the products. | Please review the Privacy and Cookies policy text. |
6. SECURITY OF YOUR PERSONAL DATA
To protect your personal data, the Company takes appropriate measures consistent with relevant privacy and data security laws and regulations and, depending on the state of technology, implementation costs and the content of the data to be protected, implements technical and organizational measures to prevent risks such as destruction, loss, alteration, unauthorized disclosure or unauthorized access to your data.
The personal data subject to this Disclosure Statement is kept within the Company and accessible only to limited persons. At the end of the processing period, these personal data will be deleted, destroyed or anonymized as indicated in the Company's Personal Data Protection and Destruction Policy.
7. RIGHTS AND OBLIGATIONS OF THE PERSONAL DATA OWNER
7.1. Personal data owners are responsible for ensuring that the personal data they share with the Company is accurate, complete and up-to-date, and if personal data belonging to other persons is shared, that this data is collected in a valid and legally compliant manner. The personal data owner is obliged to inform the other persons to whom they have provided their personal data to the Company about the content of this Notice and to obtain their consent for the use of their personal data by the Company in the manner specified in this Notice (including transfer and disclosure).
7.2. Personal Data Owners within the scope of KVKK and relevant legislation;
· Learning whether your personal data is being processed,
· Request information regarding the processing of personal data,
· Learning the purpose of processing personal data and whether they are used in accordance with their purpose,
· Knowing the third parties to whom personal data is transferred, either domestically or abroad,
· To request correction of personal data if it is processed incompletely or incorrectly and to request notification of the action taken to third parties to whom personal data is transferred,
· Request the deletion or destruction of personal data in case the reasons requiring processing are eliminated, even though it has been processed in accordance with the provisions of Law No. 6698 and other relevant laws, and request that the process carried out within this scope be notified to third parties to whom personal data has been transferred,
· To object to the emergence of a result against the person by analyzing the processed data exclusively through automatic systems,
· In case of damage caused by unlawful processing of personal data, the person has the right to demand compensation for the damage.
As Personal Data Owners, you can submit your application, which includes your requests regarding your rights, in a clear and understandable manner and by attaching documents that identify you and your address information; in writing and with a wet signature, by hand, by post or through a notary public, to the address of the Data Controller Company specified below, or you can forward it to the PTT KEP address specified below.
The Company reserves the right to verify your identity before responding, and in your application;
Your name, surname and signature if the application is in writing,
·For citizens of the Republic of Türkiye, your Turkish identity number, if you are a foreigner, your nationality, passport number or ID number if you have one,
·Your residence or workplace address for notification,
·Your e-mail address, telephone and fax number, if any, for notification purposes.
·Your request subject,
It is mandatory to have it and if there is any information and documents related to the subject, they should be added to the application. If you submit your requests to the Company as stated above, the Company will finalize the request as soon as possible and within thirty days at the latest, depending on the nature of the request.
COMPANY CONTACT INFORMATION:
Company Name: DARKLİGHT LIGHTING INDUSTRY AND TRADE JOINT STOCK COMPANY
Address :Address : İkitelli Osb Mah. Süleyman Demirel Boulevard Sinpaş İş Modern Industrial Site J 16
34490 Basaksehir / Istanbul
Phone: 0 212 603 02 02
Fax: 0 212 603 02 03
E-mail: info@darklight.com.tr
Cap: darklightaydinlatma@hs01.kep.tr