Doğuş Perakende Satış Giyim ve Aksesuar Ticaret A.Ş.

Clarification Text of Website

 

Pursuant to Law No. 6698 on the Protection of Personal Data ("LPPD"), your personal data may be processed by  Doğuş Perakende Satış Giyim ve Aksesuar Ticaret A.Ş. ("Company") within the scope described below. 

You can reach the brands in which our company operates at https://www.dogusperakende.com.tr/markalarimiz

Which Personal Data We Collect?

Your personal data collected are listed below:

Identity	Name, Surname, Turkish ID number
Contact	Phone number, e-mail address, address
Finance	Bank and card information
Customer Transaction	Billing information, order information, request and complaint information, user reviews regarding the products
Transaction Security	IP address information, website login/logout information, password and credential details
Marketing	Information obtained through shopping history information, survey and campaign work

 

How Do We Collect Your Personal Data? On What Legal Grounds and For What Purposes Do We Process Your Personal Data?

Your personal data may be collected in our websites, communication applications, online forms such as membership and sales forms, as well as online forms for suggestions, complaints, and inquiries.

Your personal data is collected and processed by the Company based on the personal data processing conditions specified in Article 5 of the LPPD for the purposes ("Purposes") and legal grounds set out below.

• Based on the legal reason for establishing a contract and fulfilling its requirements (Article 5/2/c of the LPPD):

By creating a membership, your identity, contact, financial, and customer transaction data may be processed for the purposes of creating membership accounts and managing membership transactions through our website; managing, completing, and processing orders, and facilitating communication with our customers; providing after-sales support services and warranty processes; and presenting products and services from the brands within our company through our websites.

Based on the legal ground that it is expressly provided for by the laws and is necessary for compliance with a legal obligation to which the Company is subject (Article 5/2/a and ç of the LPPD): Your identity, contact, financial, customer transaction, and transaction security data may be processed for the purposes of fulfilling our legal obligations under the Consumer Protection Law, the Retail Trade Regulation Law, the Electronic Commerce Regulation Law, and other applicable legal obligations to which our Company is subject; ensuring compliance with storage obligations required by the legislation; providing information/documents to the relevant authorities as required by legal obligations; conducting official correspondence; responding to individual requests in accordance with the legislation; and carrying out necessary actions.

• Based on the legal ground that data processing is necessary for the establishment, exercise or protection of any right (Article 5/2/e of the LPPD): Your identity, contact, customer transaction, finance and transaction security data may be processed for the purposes of evaluating requests and complaints, storing of personal data during the general statute of limitations in order to constitute evidence in possible future disputes.

• Based on the legal ground that processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject (Article 5/2/f of the LPPD): Your identity, contact, financial, customer transaction, transaction security, and marketing data may be processed for the purposes of conducting the necessary activities by the relevant business units for the execution of the commercial activities carried out by our Company, planning business strategies, and executing related business processes; ensuring the security of our website, implementing measures for information security strengthening; carrying out necessary activities by our business units to ensure that the relevant individuals benefit from the products and services offered by our Company, including sales and marketing activities of our products and services; conducting customer acquisition activities; providing information to third parties, whether individuals or legal entities, involved in business relationships with our Company; managing customer relationships and ensuring the accuracy and currency of customer communication information; ensuring the legal, technical, commercial, and operational security of our Company and the individuals in business relationships with our Company; determining and implementing our Company's commercial and business strategies; addressing your requests, questions, suggestions, and complaints, conducting all necessary research, development, corrective, and preventive activities to ensure they do not occur again; obtaining suggestions to expand the scope of services provided, planning and executing customer satisfaction and corporate communication activities.

• Based on your explicit consent (Article 5/1 of the LPPD):  

Your personal data collected will be processed in accordance with the purposes specified below, based on the legal grounds of explicit consent for commercial electronic communication approval as per Article 6 of the Turkish Electronic Communications Law and Article 5, paragraph 1 of the Personal Data Protection Law (LPPD), limited to activities related to sending electronic commercial communications.

You can withdraw your consent for the sending of electronic commercial communications at any time. For the purposes of carrying out loyalty or campaign programs, including those in which our Company is involved or will be involved, as well as the marketing processes for our products and services, profiling, and analysis activities, your identity, contact, and marketing data may be processed by our Company, our food and beverage subsidiaries, Doğuş Bilgi İşlem ve Teknoloji Hizmetleri A.Ş. and other affiliates. Additionally, your identity and contact data may be processed for the purpose of sending advertisements, promotions, campaigns, and similar commercial electronic communications to your contact information shared with our Company.

With Whom and For What Purposes May We Transfer Your Personal Data?

Your personal data collected may be processed within the framework of achieving the above-mentioned Purposes, under our legitimate interest, and shared with our business partners, suppliers, and, if you give explicit consent, for the purpose of providing personal advertising services with Doğuş Group companies and for the creation of loyalty and campaign programs and a shared data pool with Doğuş Bilgi İşlem ve Teknoloji A.Ş.; in accordance with the legal obligations and to comply with laws, may be shared with authorized public institutions and private individuals as clearly stipulated by the law; and with your explicit consent, your identity, contact, and customer transaction data may be transferred to Amazon Inc. located abroad due to the servers used for infrastructure services provided by Akinon Yatırım ve Proje Geliştirme A.Ş.; and for the purpose of customer communication, your identity and contact data may be transferred to WhatsApp LLC located abroad in order to send commercial electronic communications via WhatsApp; and may be transferred in accordance with the rules specified in Articles 8 and 9 of the LPPD related to the transfer of personal data, as stipulated in the 5th article of LPPD.

What Are Your Rights as a Data Subject? 

We would like to inform you that you are entitled to following rights set forth under Article 11 of the LPPD. (i) learning whether your personal data are being processed, (ii) requesting information if your personal data have been processed, (iii) learning the purpose of the processing of your personal data and whether they have been used accordingly, (iv) learning which third parties domestic or abroad your personal data has been transferred to,  (v) requesting rectification in case your personal data has been processed incompletely or inaccurately and notification of the operations made within this scope to third parties to whom your personal data has been transferred, (vi) demanding the erasure or destruction of your personal data and the notification to third parties whom your personal data has been transferred to in case the reasons requiring its processing have disappeared, although it has been processed in accordance with the LPPD and other relevant provisions of other laws (vii) objecting to negative consequences to you that are concluded, as a result of analysis of the processed personal data through solely automatic systems, (viii) demanding compensation for the damages that you have suffered as a result of unlawful processing of your personal data. 

You may convey your requests concerning your rights listed above to our Company via kvkk@dogushrg.com. Depending on the nature of your request, your application will be concluded by the data controller you have applied for free of charge and as soon as possible, within 30 (thirty) days at the latest. However, if the process requires additional costs, a fee may be demanded according to the tariff determined by the Personal Data Protection Board.