Pack Smile Personal Data Policy

General information about the Personal Data Protection Law

The Personal Data Protection Law No. 6698 (hereinafter referred to as KVKK) was adopted on March 24, 2016, and published in the Official Gazette No. 29677 on April 7, 2016. Some parts of the KVKK entered into force on the date of publication, and others on October 7, 2016.

Information as a data controller

In accordance with the KVKK No. 6698 and in the capacity of Data Controller, your personal data may be recorded, stored, updated, disclosed/transferred to 3rd parties in cases permitted by the legislation, classified, and processed in the manners listed in the KVKK, within the framework explained on this page.

How your personal data may be processed

In accordance with the KVKK No. 6698, your personal data that you share with our Company may be processed by us by obtaining, recording, storing, modifying, or rearranging, in short, by being subject to any kind of processing performed on the data, whether fully or partially automatically or by non-automatic means provided that it is part of any data recording system. Any operation performed on data within the scope of the KVKK is considered "processing of personal data."

Purposes and legal grounds for processing your personal data

The personal data you share,

• In order to fulfill the requirements of the services we provide to our customers, in accordance with the requirements of the contract and technology, and to improve our products and services offered;
  
  
• In order to record identity, address, and other necessary information to identify the transaction owner within the scope of the Law on the Regulation of Electronic Commerce No. 6563, the Law on the Protection of Consumers No. 6502, and the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette dated 26.08.2015 and numbered 29457, the Regulation on Distance Contracts published in the Official Gazette dated 27.11.2014 and numbered 29188, and other relevant legislation;
  
  
• To regulate all records and documents that will serve as a basis for payment systems, electronic contracts, or paper-based transactions, which are mandatory in the fields of Banking and Electronic Payment; to comply with information storage, reporting, and notification obligations stipulated by legislation and other authorities;
  
  
• To provide information to public prosecutors, courts, and relevant public officials upon request and as required by legislation in matters related to public security and legal disputes;

will be processed in accordance with the KVKK No. 6698 and related secondary regulations. Information about third parties or organizations to which your personal data may be transferred For the purposes specified above, the persons/organizations to which your personal data that you share with our Company may be transferred; primarily IdeaSoft Yazılım San. ve Tic. A.Ş., which provides the e-commerce infrastructure of our Company, are suppliers, cargo companies, and other persons and organizations related to the services provided, partner organizations from which we receive services to conduct our activities and/or act as Data Processors, domestic/international organizations, and other 3rd parties.

Method of collecting your personal data

Your personal data,

• Through forms on our Company website and mobile applications, with information such as name, surname, Turkish ID number, address, telephone, business or private e-mail address; in the form of preferences on pages logged into using a username and password, IP records of the transactions performed, data containing navigation duration and details collected by cookies, and location data;

• Orally, in writing, or electronically through our sales and marketing department employees, branches, suppliers, other sales channels, paper forms, business cards, digital marketing, and call centers;

• From persons who share their personal data for purposes such as establishing a commercial relationship with our Company, applying for a job, or submitting an offer, through business cards, resumes (CVs), submitting offers, and other means, in a physical or virtual environment, face-to-face or remote, orally or in writing, or electronically;

• Furthermore, data obtained indirectly through different channels, data obtained from websites, blogs, contests, surveys, games, campaigns, and similar (micro) websites used for similar purposes and social media, e-newsletter reading or clicking actions, data provided by publicly available databases, and profiles and data open for sharing from social media platforms can be processed and collected.

Your personal data obtained before the KVKK entered into force

Your personal data, which was obtained in accordance with the law before April 7, 2016, the effective date of the KVKK, through membership, electronic communication permission, product/service purchase, and other means, is also processed and stored in accordance with the terms and conditions regulated in this document.

Transfer of your personal data abroad

Your personal data collected by any of the methods listed above may also be transferred to service intermediaries located abroad (to countries accredited by the Personal Data Protection Board where there is sufficient protection regarding the protection of personal data), provided that it remains within the scope of the KVKK and in accordance with the purposes of the contract, for processing in Turkey or for processing and storage outside of Turkey.

Storage and protection of personal data

Your personal data will be kept confidential in the database and systems of our Company in accordance with Article 12 of the KVKK; it will not be shared with third parties in any way except for legal obligations and the regulations specified in this document. Our Company is obliged to take software measures such as access management and physical security measures to prevent illegal processing of personal data, to prevent unauthorized access, and to ensure the security of the systems and databases where your personal data is hosted, as required by Article 12 of the KVKK. In the event that it is learned that personal data has been obtained by others through illegal means, the situation will be reported to the Personal Data Protection Board immediately, in writing and in accordance with legal regulations.

Keeping personal data up-to-date and accurate

In accordance with Article 4 of the KVKK, our Company has the obligation to keep your personal data accurate and up-to-date. In this context, for our Company to fulfill its obligations arising from the current legislation, our Customers must share their accurate and up-to-date data or update it via the website / mobile application.

Rights of the personal data owner in accordance with the KVKK No. 6698

Article 11 of the KVKK No. 6698 entered into force on October 07, 2016, and in accordance with the relevant article, the rights of the Personal Data Owner after this date are as follows: The Personal Data Owner may apply to our Company (data controller) regarding themselves to;

1. Learn whether personal data has been processed,
2. Request information if personal data has been processed,
3. Learn the purpose of processing personal data and whether they are used in accordance with their purpose,
4. Know the third parties to whom personal data is transferred domestically or abroad,
5. Request correction of personal data in case of incomplete or incorrect processing,
6. Request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,
7. Request that the operations performed in case of correction, deletion, or destruction of personal data be notified to third parties to whom personal data has been transferred,
8. Object to the emergence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,
9. Request the compensation of damages in case of loss due to illegal processing of personal data,