Personal Data Protection Law

QETY STORE (hereinafter referred to as QETY) places great importance on the security of your personal data. With this awareness, we take great care to ensure that all kinds of personal data belonging to you are processed and stored in the best possible way. In line with this responsibility, we act as a Data Controller under the Law on the Protection of Personal Data No. 6698 (hereinafter referred to as the “Law”) and relevant legislation, and process your personal data within the scope described below.

Within the scope of the Law, data processing refers to any operation performed on personal data, such as obtaining, recording, storing, updating, classifying, sharing with authorized third parties, or transferring personal data, whether fully or partially by automatic means or by non-automatic means provided that it is part of a data recording system.

COLLECTION, PROCESSING AND PURPOSES OF PERSONAL DATA

In order to provide you with high-standard services, your personal data may be processed, depending on the nature of the service, for the following purposes:

  • To provide the products and services offered by the Company within the legal framework, and to ensure that the Company fulfills its contractual and legal obligations completely and accurately
  • To carry out the necessary work by our business units so that you can benefit from the products and services offered by our Company, and to customize and recommend products and services according to your preferences, usage habits, and needs
  • Ensuring the legal and commercial security of persons in a business relationship with the Company (administrative operations related to communication carried out by the Company, etc.)
  • Ensuring the physical security and supervision of Company locations, customer evaluation/complaint management processes, reputation research processes, event management, legal compliance processes, audit and financial affairs, etc.
  • Determining and implementing the Company’s commercial and business strategies and ensuring the execution of human resources policies
  • Continuation of the Company’s training activities

Within the scope of Articles 5 and 6 of the Law, your personal data may be obtained verbally, in writing, visually, or electronically through contracts, physical environments, or similar channels.

Accordingly, within all activities carried out by our Company, the following general and special categories of personal data may be collected:

  • Identity data such as name, surname, Turkish ID number, passport number or temporary ID number for non-citizens, place and date of birth, marital status, gender, and copies of ID or driver’s license
  • Contact data such as address, phone number, and email address
  • Financial data such as bank account number and IBAN
  • Health reports and certificates required under occupational safety regulations
  • Responses and comments shared for service evaluation purposes
  • CCTV footage from surveillance systems
  • Vehicle plate information
  • Browsing data, IP address, browser information collected during website usage, and location data provided with consent

These personal data may be processed within the scope of Articles 5 and 6 of the Law for the purposes listed below:

  • Sharing information with public institutions such as the Social Security Institution, law enforcement, and other authorized authorities
  • Fulfilling legal and regulatory requirements
  • Verifying identity by Sales and Support departments
  • Planning and managing internal company operations
  • Providing training by Human Resources
  • Monitoring and preventing abuse and unauthorized transactions
  • Risk management and quality improvement by IT departments
  • Invoicing for services by Finance departments
  • Verifying relationships with contracted institutions
  • Responding to inquiries and complaints
  • Ensuring system and application security and taking necessary technical and administrative measures
  • Designing and delivering personalized content and marketing communications
  • Measuring and improving customer satisfaction
  • Carrying out training and education activities through partner institutions

All personal and sensitive data may be stored in physical and electronic archives with due care and in compliance with legal requirements by QETY STORE and external service providers.

TRANSFER OF PERSONAL DATA

Your personal data may be shared in accordance with Law No. 6698 and relevant regulations, for the purposes stated above, with our business partners, suppliers, company officials, shareholders, legally authorized public institutions, and private entities, including:

  • Ministry of Health and affiliated units
  • Private insurance companies (health, pension, life insurance, etc.)
  • Social Security Institution
  • General Directorate of Security and other law enforcement agencies
  • Directorate of Population Registry
  • Judicial authorities
  • Authorized legal representatives
  • Lawyers, tax advisors, auditors, and other consultants
  • Regulatory and supervisory authorities
  • Your employer
  • Service providers, support companies, archive services, and business partners with whom we cooperate

METHOD AND LEGAL BASIS OF DATA COLLECTION

Your personal data is collected in all kinds of verbal, written, visual, or electronic environments in order to carry out activities within the scope of QETY STORE operations and to fulfill legal and contractual obligations. The legal basis for collecting your personal data is primarily Law No. 6698 and other relevant legislation.

YOUR RIGHTS REGARDING PERSONAL DATA

Under the Law and relevant regulations, you have the right to:

  • Learn whether your personal data is processed
  • Request information if your data has been processed
  • Access and request your health data
  • Learn the purpose of processing and whether it is used accordingly
  • Know third parties to whom your data is transferred domestically or abroad
  • Request correction of incomplete or incorrect data
  • Request deletion or destruction of your data
  • Request notification of such corrections or deletions to third parties
  • Object to outcomes arising from automated processing
  • Claim compensation for damages in case of unlawful processing

DATA SECURITY AND APPLICATION RIGHT

Your personal data is protected with appropriate technical and administrative measures. You may submit your requests regarding your rights under Article 13 of the Law by providing identity verification and relevant explanations to:

Your request will be processed free of charge within 30 days depending on its nature. If additional costs arise, a fee may be charged in accordance with the tariff set by the Personal Data Protection Board.