General Information on the Personal Data Protection Law
The Personal Data Protection Law No. 6698 (hereinafter referred to as PDPL) was adopted on March 24, 2016, and published in the Official Gazette
No. 29677 on April 7, 2016. Some provisions of the PDPL came into effect on the date of publication, while others took effect on October 7, 2016.
Information as the Data Controller
In accordance with PDPL No. 6698, and in the capacity of Data Controller, your personal data will be processed within the scope outlined on this page. Your data may be
recorded, stored, updated, disclosed or transferred to third parties in cases permitted by legislation, classified, and processed in the ways specified under the PDPL.
How Your Personal Data May Be Processed
In accordance with PDPL No. 6698, the personal data you share with our company may be fully or partially processed automatically or through non-automated means, provided it is part of any data recording system. This includes obtaining, recording, storing, altering, rearranging, or performing any action on the data. Under the PDPL, all such actions performed on data are considered as "processing of personal data."
Purposes and Legal Grounds for Processing Your Personal Data
The personal data you provide may be processed for the following purposes:
To fulfill the requirements of the services we provide to our customers, in accordance with the terms of the contract and technological necessities, and to improve the products and services we offer;
To record identity, address, and other necessary information of the transaction owner, as required by relevant legislation, including the Law No. 6563 on the Regulation of Electronic Commerce, the Law No. 6502 on Consumer Protection, the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette No. 29457 dated August 26, 2015, the Regulation on Distance Contracts published in the Official Gazette No. 29188 dated November 27, 2014, and other related regulations;
To prepare all records and documents required as a basis for transactions in banking and electronic payment systems, electronic contracts, or paper-based agreements, and to comply with information retention, reporting, and disclosure obligations mandated by law and other authorities;
To provide information to prosecutors, courts, and relevant public officials on matters of public security and legal disputes when requested and required by legislation.
Your personal data will be processed in compliance with the Personal Data Protection Law No. 6698 and relevant secondary regulations.
Information About Third Parties or Organizations to Whom Your Personal Data May Be Transferred
For the purposes mentioned above, the personal data you share with our company may be transferred to the following parties:
- Organizations directly involved in the services provided, including IKAS Teknoloji A.Ş., which supplies the e-commerce infrastructure of our company;
- Suppliers, courier companies, and other related parties necessary for the services offered;
- Program partner organizations with which we collaborate or receive services in the capacity of Data Processor to conduct our business activities;
- Domestic or international organizations and other third parties.
How Your Personal Data is Collected
Your personal data may be collected in the following ways:
Through forms on our company’s website and mobile applications, including information such as name, surname, ID number, address, phone number, business or personal email address; preferences made on pages accessed using a username and password, IP logs of transactions, cookie data collected by the browser, browsing durations and details, as well as location data;
Verbally, in writing, or electronically via our sales and marketing department staff, branches, suppliers, other sales channels, paper-based forms, business cards, digital marketing, and call center channels;
From individuals who share their personal data with our company to establish a commercial relationship, apply for a job, submit a proposal, or for other purposes, via business cards, resumes (CVs), proposals, and similar methods in physical or virtual environments, face-to-face or remotely, verbally, in writing, or electronically;
Indirectly through various channels such as data obtained from websites, blogs, contests, surveys, games, campaigns, and similar micro-websites and social media; data derived from newsletter reading or click activities; public databases; and profiles and data shared publicly on social media platforms.
These methods enable the processing and collection of your personal data.
Personal Data Obtained Before the Enforcement of the PDPL
Personal data lawfully obtained before the enforcement date of the Personal Data Protection Law (PDPL) on April 7, 2016, through membership, electronic communication consent, product/service purchases, and other means, are also processed and stored in accordance with the terms and conditions outlined in this document.
Transfer of Personal Data Abroad
Personal data collected through any of the methods mentioned above may be processed in Turkey or transferred abroad for processing and storage. This transfer will comply with the PDPL and align with the purposes of the agreement. The data may be shared with service providers located in countries accredited by the Personal Data Protection Board and that provide adequate protection for personal data.
Storage and Protection of Personal Data
Your personal data will be stored confidentially in the databases and systems maintained by our company in accordance with Article 12 of the Personal Data Protection Law (PDPL). Except for legal obligations and the provisions specified in this document, your personal data will not be shared with third parties under any circumstances.
Our company is obligated, under Article 12 of the PDPL, to take the necessary software measures, such as access management, and physical security precautions to prevent the unlawful processing of personal data and unauthorized access to systems and databases where your personal data is stored.
If it is learned that personal data has been obtained by others through illegal means, the situation will be promptly reported in writing to the Personal Data Protection Board, in accordance with legal regulations.
Keeping Personal Data Accurate and Up-to-Date
In accordance with Article 4 of the Personal Data Protection Law (PDPL), our company is obligated to keep your personal data accurate and up-to-date. For this purpose, our customers are required to share their accurate and updated data or update their information through the website or mobile application to ensure that our company fulfills its obligations under the applicable legislation.
Rights of the Personal Data Owner under Law No. 6698
Article 11 of Law No. 6698 came into effect on October 7, 2016. According to this article, the rights of the Personal Data Owner after this date are as follows:
The Personal Data Owner may apply to our company and:
- Learn whether their personal data is being processed,
- Request information if their personal data has been processed,
- Learn the purpose of the processing of their personal data and whether it is being used in accordance with the intended purpose,
- Know the third parties to whom their personal data is transferred, whether domestically or abroad,
- Request the correction of incomplete or inaccurate personal data,
- Request the deletion or destruction of personal data under the conditions set forth in Article 7 of the PDPL,
- Request notification of corrections, deletions, or destruction of personal data to third parties to whom the data has been transferred,
- Object to any adverse results arising solely from the analysis of processed data through automated systems,
- Request compensation for damages if they suffer harm due to the unlawful processing of their personal data.
Mahmut Sözkesen Sole Proprietorship (Laydshome), located at İnkilap Mahallesi, Çeşminaz Sokak No.1, Apartment 30, Ümraniye, Istanbul, is the Data Controller under the PDPL. The Data Controller Representative to be appointed by our company will be announced in the Data Controllers Registry and on the website where this document is available once the legal infrastructure is established.
Personal Data Owners can direct their questions, opinions, or requests through any of the following communication channels: