Data Privacy

Clarification Text on the Processing of Personal Data

Data Supervisor

BL Yazilim Bilisim E-Ticaret Egitim ve Dan. Hiz. Ltd. Sti. (Referred to as Blackline.)

            Blackline has the title of data supervisor within the scope of the "Personal Data Protection Law" (referred to as KVKK) numbered 6698, and the persons or institutions (referred to as the Customer) who visit or make transactions on the website www.venessauto.com (referred to as the Site) or is obliged to fulfill the rights and obligations of data owners regarding the processing, storage and transfer of their personal data, and to inform and enlighten the Customers or data owners about their rights.

Data Processed

            Name, surname, company name, date of birth, gender, Identity number, e-mail address, billing and delivery addresses, phone numbers, invoice, order, product and cargo information, call center voice recordings, written and visual messages transmitted via e-mail and request system, bank account/iban and encrypted credit card information, product reviews, warnings, information about judicial and administrative authorities, stamp and signature, IP addresses, Site entrance and exit and other traffic information, location information.

Personal Data of Special Nature

            Data on race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, disguise and dress, membership in associations, foundations or unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data are of special nature. defined as personal data.

            Under normal circumstances, Blackline does not request or collect sensitive personal data from users and customers. However, if you send us your identity, passport or any file or document containing your sensitive personal data specified here, these data will be processed in the ways specified in the KVKK.

Purposes of Personal Data Processing

            Your personal data is processed, stored and transferred when necessary due to the following reasons in accordance with the KVKK.

·      Execution of information security processes

·      Conducting audit and ethical activities

·      Execution of activities in accordance with the legislation

·      Execution of finance and accounting works

·      Execution of company, product and service commitment processes

·      Monitoring and execution of legal affairs

·      Execution of returns processes

·      Execution of communication activities

·      Execution and supervision of business activities

·      Execution of business continuity activities

·      Execution of after-sales support services for goods and services

·      Execution of goods and services sales processes

·      Execution of customer relationship management processes

·      Carrying out activities for customer satisfaction

·      Carrying out marketing analysis studies

·      Execution of advertising, campaign and promotion processes

·      Execution of risk management processes

·      Execution of storage and archiving activities

·      Execution of contract and membership processes

·      To carry out the necessary work by the business units in order to benefit from the products and services offered and to carry out the relevant business processes

·      Follow-up of requests and complaints

·      Execution of supply chain management processes

·      Planning and execution of commercial business strategies

·      Execution of marketing processes of products and services

·      Ensuring the security of data controller operations

·      

Providing information to authorized persons, institutions and organizations

Legal Reasons for Personal Data Processing

            Your personal data is processed in accordance with the 5th article of the KVKK and the conditions clearly stated below, in order to carry out the transactions under the heading of personal data processing purposes.

·      Clearly stipulated in laws

·      Provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract.

·      It is mandatory for the data supervisor to fulfill its legal obligation

·      Data processing is mandatory for the establishment, exercise or protection of a right

·      Data processing is mandatory for the legitimate interests of the data supervisor, provided that it does not harm the fundamental rights and freedoms of the data subject.

·      Explicit consent

            For cases not covered by the above purposes, your personal data is processed based on your explicit consent, the details of which are specified in the Commercial Electronic Message Illumination and Explicit Consent Text.

Collection Methods of Personal Data

            Your personal data specified under the title of processed data, all form fields on the Site, general Site infrastructure and software, your applications submitted via e-mail or request system, call center records, security cameras or other security equipment, contracts, third-party authentication systems ( Ex: Sign in with Google), social media platforms, are collected through printed or electronic documents from judicial and administrative authorities.

Transfer of Personal Data

            Your personal data is transferred in accordance with the rules specified in Articles 8 and 9 of the KVKK, in accordance with the necessary administrative and technical measures and only in accordance with the following articles for the realization of the relevant purpose.

·      To our affiliates and subsidiaries, limited to the above-mentioned purposes

·      Authorized public institutions and organizations

·      To suppliers (In order for the purchased product to be shipped.)

·      Cargo and transport companies (In order for the purchased product to be delivered.)

·      Banks and other payment institutions (In order to receive payment for the product or service.)

·      Bulk SMS or e-mail to our affiliates (In order to be informed about the product or service.)

·      To real or private legal entities (For disputes and dispute resolution.)

Storage of Personal Data

            Your personal data has to be stored for this period, if a maximum period of storage of the relevant data is determined in the KVKK or in the relevant laws or regulations.

            If the law or the relevant legislation does not specify a period for the storage of the relevant data, your personal data is stored for 10 years to be transferred upon the request of a possible court or an institution authorized by law. At the end of this period, your personal data is deleted, destroyed or anonymized. This period may be extended by 1 to 6 months depending on the periodic disposal dates.

            Your requests for the destruction of your personal data will be evaluated in accordance with the procedures set forth in the KVKK if you have valid reasons and make a written application, and if it is possible to destroy it, necessary actions will be taken within 30 days.

Your Rights About Your Personal Data

            We would like to state that you have the following rights set forth in the KVKK regarding the processing, storage and transfer of your personal data.

·      Learning whether your personal data is processed

·      If your personal data has been processed, requesting information about it

·      Learning the purpose of processing personal data and whether they are used in accordance with the purpose

·      Knowing the third parties to whom your personal data is transferred

·      Kişisel verilerinizin eksik veya yanlış işlenmiş olması halinde bunların düzeltilmesini isteme

·      Requesting correction of your personal data if it is incomplete or incorrectly processed

·      Requesting the deletion or destruction of your personal data within the framework of the conditions stipulated in the KVKK legislation

·      When you request the deletion or destruction of your personal data with the correction of incomplete or inaccurate data, requesting this situation to be notified to the third parties to whom we have transferred your personal data.

·      Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems

Application Procedures for Your Personal Data

            You can submit your requests regarding your personal data to us by filling out the attached application form.

            In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, name and surname, signature if the application is in writing, identification number (passport number if the applicant is a foreign national), domicile or workplace address for notification, e-mail address, if any. It is obligatory to include the postal address, telephone number and information on the subject of the request.

            The data subject should clearly and comprehensibly state the requested issue in the application, which includes explanations regarding the right to be exercised and requested by the data subject to exercise the above-mentioned rights. Information and documents related to the application must be attached to the application.

            Although the subject of the request must be related to the person of the applicant, if acting on behalf of someone else, the applicant must be specifically authorized in this regard and this authority must be documented (special power of attorney). In addition, the application must contain identity and address information, and documents confirming identity must be attached to the application. Requests made by unauthorized third parties on behalf of someone else will not be considered. Your claims regarding your personal data will be evaluated, and at the latest 3 days from the date they reach Blackline.

            Requests made by unauthorized third parties on behalf of someone else will not be considered.

            Your claims regarding your personal data are evaluated and answered within 30 days at the latest from the date they reach Blackline. In the event that your application is evaluated negatively, the reasons for the reasoned refusal will be communicated to you via e-mail or postal mail, if possible, to the address you specified in the application, by the method in which the request was made.

            Blackline reserves the right to charge fees for transactions to be made over the fee schedule of the Personal Data Protection Board regarding these requests.

Commercial Electronic Message Clarification and Explicit Consent Text

            Blackline, your e-mail address and phone number from your personal data shared as a result of the use of the Site, announcing various products, services and opportunities within the scope of the Law No. 6563 on the Regulation of Electronic Commerce, conducting customer satisfaction surveys, tracking requests and complaints, advertising, promotions, "Explicit consent" will be processed on the basis of legal reason, in line with your permission to send commercial electronic messages by sending e-mail and SMS or making a phone call in accordance with the relevant laws, for the purposes of sales and marketing, and to business partners of Blackline within the scope of the same purposes and legal reason. , authorized persons, institutions and organizations and İleti Yonetim Sistemi Anonim Sirketi. For detailed information about your rights in Article 11 of the KVKK and to change your preferences, you can use our Site or the attached application form.

            In the transactions carried out by Blackline on the Site, as per our security policies, the identity verification of the Site user is required, so there is a user registration requirement on our Site for all these transactions. Contact forms and e-mail submissions used for information purposes are not included in these transactions. Some of your personal data may need to be processed, stored and transferred for the purposes specified below, as detailed below, in order for you to be able to operate securely. Since some of these personal data are outside the conditions specified in the KVKK, they can only be processed, stored and transferred based on your express consent.

Data Processed Based on Your Consent

            Name, surname, company name, date of birth, gender, Identity number, e-mail address, billing and delivery addresses, phone numbers, invoice, order, product and cargo information, call center voice recordings, written and visual messages transmitted via e-mail and request system, bank account/iban and encrypted credit card information, product reviews, warnings, information about judicial and administrative authorities, stamp and signature, IP addresses, Site entrance and exit and other traffic information, location information.

Collection Methods of Personal Data

            Your personal data specified under the heading of data processed based on your explicit consent, all form fields on the Site, general Site infrastructure and software, applications submitted via e-mail or request system, call center records, security cameras or other security equipment, contracts, third party It is collected through identity verification systems (Ex: Sign in with Google), social media platforms, printed or electronic documents from judicial and administrative authorities.

Legal Reasons for Processing Personal Data

            Your data processed based on your explicit consent, by opening a user account on the Site with consent, creating special advertisements, promotions and campaigns for you, cross-selling transactions, target audience studies, user experience enhancing processes, infrastructure development processes, regardless of whether you are a customer or not, Personal targeting and analysis studies, internal reporting activities, market researches, customer satisfaction and customer relations management reasons may be processed, stored and transferred pursuant to the legal reason "Explicit consent" specified in Article 5 of the KVKK.

Transfer of Personal Data

            Your personal data is transferred in accordance with the rules specified in Articles 8 and 9 of the KVKK, in accordance with the necessary administrative and technical measures and only in accordance with the following articles for the realization of the relevant purpose.

·      To our affiliates and subsidiaries, limited to the above-mentioned purposes

·      Authorized public institutions and organizations

·      To suppliers (In order for the purchased product to be shipped.)

·      Cargo and transport companies (In order for the purchased product to be delivered.)

·      Banks and other payment institutions (In order to receive payment for the product or service.)

·      Bulk SMS or e-mail to our affiliates (In order to be informed about the product or service.)

·      To real or private legal entities (For disputes and dispute resolution.)           

Your Rights About Your Personal Data

            We would like to state that you have the following rights set forth in the KVKK regarding the processing, storage and transfer of your personal data.

·      Learning whether your personal data is processed

·      If your personal data has been processed, requesting information about it

·      Learning the purpose of processing personal data and whether they are used in accordance with the purpose

·      Knowing the third parties to whom your personal data is transferred

·      Requesting correction of your personal data if it is incomplete or incorrectly processed

·      Requesting the deletion or destruction of your personal data within the framework of the conditions stipulated in the KVKK legislation

·      When you request the deletion or destruction of your personal data with the correction of incomplete or inaccurate data, requesting this situation to be notified to the third parties to whom we have transferred your personal data.

·      Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems

We hereby declare that you have expressly consented to the processing, storage and transfer of all your personal data above, in the ways specified, when you create a user account on the Site, you will be deemed to have accepted.

Application form

Contact Information of Personal Data Owner;

Your Request within the Scope of KVKK; (Please explain in detail.)

...

            In the event that the information regarding your requests you will submit within the scope of this application form is not correct and up-to-date or an unauthorized application is made, Blackline will not be liable for such false information or requests arising from unauthorized applications.

            This application form should be sent to the info@venessauto.com e-mail address after it has been filled in completely. Submissions should be made from the registered e-mail address of the personal data owner or, if the customer is in the position, from the e-mail address of the registered account on the Site. The result of your application will be sent to your e-mail address within 30 days.

Firstname and Lastname  :

Application Date                :

Signature                            :