We, as celikhouse.com, would like to inform you that we attach importance to the protection of your Personal Data and have taken measures and steps in this regard in accordance with legal regulations. Our Company takes the necessary measures to protect the personal data of our esteemed members and customers, franchisees, dealers, business partners, shareholders, employees, and other real persons who establish a relationship with us by applying for a job, visiting our website, or in any other way. We have prepared this Personal Data Protection and Privacy Policy (the "Privacy Policy") to inform you about our Company's rules and policies on the processing of personal data and the use of cookies and similar technologies within the framework of the Personal Data Protection Law No. 6698 (the "PDPL"). We would like to remind you that as 1889’s and celikhouse.com website and mobile application, you will be subject to the privacy policy contained in this text regarding the confidentiality, protection, processing, use, modification, communications, and other matters of member and customer information, and that you should review this text to ensure that you accept the terms each time you use our website. Depending on the type and nature of the relationship between our Company as the data controller and the data subject, it may be possible for our Company to provide different personal data policies and/or notifications to the data subject. In this case, the specific policies and notifications provided to the data subject may contain different or additional provisions than those contained in this Privacy Policy, and the data subject must primarily consider the specific policies and notifications provided to them. LEGAL BASIS AND GENERAL PRINCIPLES The protection of personal data is regulated primarily by Law No. 6698, as well as by Law No. 5651 on the Regulation of Publications Made on the Internet and Combating Crimes Committed Through These Publications, Law No. 6563 on the Regulation of Electronic Commerce, and related secondary legislation. In addition, the Turkish Penal Code No. 5237 also provides for certain criminal sanctions for the protection of personal data. In this context, when examining the Law on the Protection of Personal Data, the definition of "personal data" refers to any information relating to an identified or identifiable natural person. This means that anonymous information, anonymized information, and other data that cannot be associated with a specific person are not considered personal data under this Privacy Policy. Data processing refers to any operation performed on personal data, such as obtaining, recording, storing, preserving, altering, reorganizing, disclosing, transferring, acquiring, making available, classifying, or preventing the use of personal data, whether wholly or partly by automatic means or as part of a data recording system by non-automatic means. Our Company processes personal data in accordance with the principles listed below within the scope of the purposes specified in this Privacy Policy, by taking the necessary measures for the protection of privacy and in accordance with all legal principles regarding the processing of personal data:
- Processing in accordance with law and good faith,
- Being accurate and, where necessary, up-to-date,
- Processing for specific, explicit, and legitimate purposes,
- Being relevant, limited, and proportionate to the purposes for which they are processed,
- Retention for the period stipulated in the relevant legislation or required for the purpose for which they are processed.
DATA PROCESSED BY 1889’s Our Company may process general and special categories of personal data with the explicit consent of the data subject or without explicit consent in the cases stipulated in Articles 5 and 6 of the PDPL. Although the general and special categories of data processed by our Company are exemplified below, which data will be processed for each data subject may vary depending on various factors such as the type of relationship between the data subject and our Company (member-customer, employee, business partner, service provider, etc.), the nature of the relationship, and the communication channels used. Our Company may process the following types of data in accordance with the relevant legislation and the principles set forth in this Privacy Policy, depending on the type (e.g., member-customer, employee, business partner, service provider, dealer, etc.) and nature of the relationship between the data subject and our Company:
- Data to identify the data subject, such as name, surname, profession, title, institution/organization worked for, educational background, work history, gender, marital status, citizenship status, tax liability status, and, if any, information about parent, guardian, and proxy,
- Data such as date of birth, place of birth, identification number, blood type, religion, and photograph contained in identity documents such as identity cards, passports, and driver's licenses,
- Contact information such as home, work, or temporary residence address, telephone, electronic mail, and fax number,
- Information that the data subject has consented to share through social media accounts when connected to our Company's website,
- Communication records such as telephone calls and e-mail correspondence regarding products purchased by the data subject (customer-member), as well as other audio and visual data,
- Information regarding internet protocol (IP) address, device ID, unique identifier information, device type, advertising ID, unique device icon, statistics on website views, inbound and outbound traffic information, referral URL, internet log information, location information, visited sites, and transactions and actions performed through our websites, platforms, internet network, and advertising and e-mail content.
Purposes of Use of Personal Data celikhouse.com may process personal data for the purposes stated below and retain it for the period required by these purposes, to the extent permitted by law.
- Fulfilling legal and administrative obligations and exercising rights arising from current legislation,
- Providing information to public officials upon request and as required by legislation regarding public safety matters,
- Negotiation, establishment, and performance of contracts concluded/to be concluded (e.g., establishment of a distance sales contract between our Company and member customers and performance of obligations undertaken under the distance sales contract and contracts concluded under the relevant articles of the Law on Consumer Protection),
- Confirmation of identity information of Customers who shop/have others shop through the website/mobile applications and recording necessary address and other necessary information for communication,
- Providing a better shopping experience to customers, identifying suitable products that customers may be interested in taking into account their interests and informing customers about suitable products, informing about campaigns, promotions, and advantages, and providing effective customer service,
- Our contracted institutions and solution partners offering suggestions and solutions to our customers and providing information to our customers about the services we provide,
- Contacting our customers regarding the terms, current status, and updates of the distance sales contract and contracts concluded under the relevant articles of the Law on Consumer Protection, and providing necessary information,
- Arranging all records and documents that will form the basis of processing in electronic (internet/mobile etc.) or paper environment,
- Increasing customer satisfaction, recognizing our customers who shop from the website and/or mobile applications and being able to use them in customer environment analysis, using them in various marketing and advertising activities, and conducting surveys in electronic and/or physical environments through contracted organizations within this scope,
- Evaluating customer complaints and suggestions regarding our products and services,
- Ensuring and improving coordination, cooperation, and efficiency within and between units within our Company,
- Ensuring the security of the website and other electronic systems and physical environments used by our Company,
- Notifying changes in legislation or rules and policies accepted by our Company or making other notifications concerning the data subject,
- Investigating, detecting, preventing, and reporting violations of contracts and laws to relevant administrative or judicial authorities,
- Resolving existing and potential legal disputes,
- Answering requests and questions,
- Providing employee needs within the framework of our Company's human resources policies and carrying out, developing, and improving recruitment processes,
- Evaluating and finalizing job applications and contacting candidates who have applied for a job,
- Developing and improving our Company's human resources, public relations, and marketing policies,
- Necessity of data processing for the establishment, exercise, or protection of a right,
- Protection of our Company's legitimate interests, provided that it does not harm the fundamental rights and freedoms of the data subject.
Protection, Security, and Audit of Your Personal Data Our Company, within the scope of relevant legal regulations, takes necessary technical and administrative measures as the data controller to ensure an appropriate level of security to prevent unlawful processing of personal data and unlawful access to data, and to ensure the protection of personal data. In this context, our Company ensures that business processes and activities are carried out in accordance with internal company policies and rules prepared for the protection of personal data. Efforts are made to raise awareness among employees regarding personal data protection legislation and internal company policies and rules prepared in this regard, and necessary declarations and commitments are obtained from employees and individuals and organizations processing data on behalf of our Company for the confidentiality and protection of data, and violations of these declarations and commitments are subject to specific sanctions. Necessary information security measures are implemented to prevent unauthorized access to personal data, and the adequacy of the measures taken is checked periodically to continuously improve the existing data security system. Sharing of Personal Data with Third Parties in Turkey/Abroad and Retention Period Subject to compliance with the general principles listed in Article 4 and the conditions stipulated in Articles 8 and 9 of the PDPL, and taking the necessary security measures, we may transfer personal data to third parties in Turkey and abroad for the purposes indicated under the heading "Purposes of Processing Personal Data" of this Privacy Policy, and process and store them on servers or other electronic media located in Turkey and abroad. In this context, your personal data may be shared with program partner institutions and organizations with which we cooperate to carry out our activities, with domestic/foreign individuals and institutions from which we receive physical server and/or cloud services for data storage, with domestic/foreign companies from which we receive services for sending commercial electronic messages, with interbank card centers, with our contracted banks, with internationally certified payment institutions, and with various domestic/foreign advertising companies, agencies, and survey companies within the scope of marketing activities to enhance customer experience and provide better service, or with our other domestic/foreign business partners. Unless a longer period is required or permitted by law, our Company retains personal data only for the period necessary to achieve the purposes specified in this Privacy Policy. Personal data whose retention period has expired is deleted, destroyed, or anonymized by our Company within the framework of Article 7 of the PDPL. Rights of the Data Subject within the Scope of the Personal Data Protection Law As a data subject, in accordance with Article 11 of the PDPL:
- to learn whether your personal data is processed,
- to request information if your personal data has been processed,
- to learn the purpose of processing personal data and whether they are used in accordance with their purpose,
- to know the third parties to whom personal data is transferred in Turkey or abroad,
- to request correction of personal data if it is incomplete or incorrectly processed,
- to request the deletion or destruction of personal data if the reasons requiring their processing cease to exist,
- to request notification of the correction and deletion operations to third parties to whom personal data has been transferred,
- to object to the emergence of a result against you by analyzing the processed data exclusively through automatic systems,
Method and Legal Basis for Collecting Personal Data Your personal data may be obtained in written, oral, audio or video recording or other physical or electronic forms for the purposes specified in this Privacy Policy, within the framework of the conditions set forth in Articles 5 and 6 of the KVKK Law. Personal data can be collected through stores and other physical environments, websites, mobile applications, social media and other public channels that data owners can contact, or through organized training, conferences and similar events, or by investigation. While we generally obtain personal data from data owners, it is also possible to obtain it through business partners with whom we work and individuals, institutions and organizations, recruitment platforms, the person and institutions represented by the data owner/representing the data owner, who are shown as references in job applications or are included in the applicant's work and education history, within the framework of the conditions specified in Articles 5 and 6 of the KVKK Law. USE OF COOKIES AND SIMILAR TECHNOLOGIES Small data files that allow certain data to be saved and collected on users' computers, mobile phones, tablets or other devices used can be placed during access to our company's website, electronic platforms, applications or electronic mail messages or advertisements sent by our company. These data files placed on computers and other devices may be cookies, pixel tags, flash cookies and web beacons, as well as other similar technologies for data storage purposes. The term "cookie" is used to refer to cookies and similar technologies that may be used by our Company. Cookies; store the information collected through log files, blank gif files and/or third-party sources to create a summary of your preferences and to make special promotions, offer promotions and marketing offers, improve the content of the website or mobile application according to you and/or determine your preferences; they can monitor your browsing information and/or your usage history on the site. On 1889's website (celikhouse.com), in addition to the e-mail addresses and personal information requested in membership forms through "cookies", it analyzes and interprets visitor movements and preferences during site usage. A cookie is a file, mostly consisting of letters and numbers, that allows the device being used to be identified by being stored in the internet browser or hard disk of the device. 1889's will collect, process, share with third parties and securely store your browsing information on its website (celikhouse.com) in order to provide better service to its visitors and within the framework of its legal obligation, provided that it is not used outside the purposes and scope specified in this Clarification Text on the Protection of Personal Data. Since all data collected through cookies may not be personal data, it should be taken into account that data obtained through cookies will be evaluated within the scope of this Privacy Policy and the KVKK Law only to the extent that they constitute personal data within the framework of Turkish law. Types of Cookies and Use of Third-Party Cookies Our company may match information collected from you on the website (celikhouse.com) through different methods or at different times, such as information collected online and offline, and may use this information together with information obtained from other sources, such as third parties. Cookies can be classified by duration or by the domain they belong to. When cookies are classified by duration, they are divided into two: session cookies and persistent cookies. Session cookies refer to cookies that are deleted when the user closes the browser, while persistent cookies are cookies that remain on the user's computer/device for a predetermined period. Our company's brand (1889's) uses session cookies and persistent cookies on its website and mobile applications. When cookies are classified by the domain they belong to, they are divided into two: first-party cookies and third-party cookies. Cookies placed by the visited domain are called first-party cookies, while cookies placed by a different domain visited are referred to as third-party cookies. Third-party cookies occur when persons outside the visited domain place cookies on the user's device through the visited domain. In this context, our Company may also use its cookies; to activate "advertising technology" in order to present you advertisements that it thinks might be of interest to you when you visit search engines, its website, mobile application and/or the websites where the website advertises. Advertising technology uses information about your previous visits to the website/mobile application and to the websites/mobile applications where the website advertises to present you personalized advertisements. When presenting these advertisements, a unique third-party cookie may be placed on your browser so that the website can recognize you. Purposes of Use of Cookies by Our Company Our company primarily uses cookies; it stores the information collected through log files, blank gif files and/or third-party sources to create a summary of your preferences and to make special promotions, offer promotions and marketing offers, improve the content of the website or mobile application according to you and/or determine your preferences; it uses cookies to monitor your browsing information and/or your usage history on the site and thus to provide better service and standards. In addition, our Company may use the cookies it uses on its website, platform, applications, advertisements and messages for the following purposes.
- Operational uses: Our company may use cookies it deems necessary for the administration and security of its website, platform, application and services. Examples of cookies used for operational purposes include technologies that allow the use of functions on the website, application and platforms, and cookies used to detect irregular behavior on these channels.
- Functional uses: Our company may use cookies to facilitate the use of its website, platform, application and services and to personalize them for users. Examples of cookies used for functional purposes include technologies that allow us to remember user information and preferences.
- Performance-oriented uses: Our company may also use cookies to increase and measure the performance of its website, application, platform and services. Examples of cookies used for this purpose include cookies that allow us to understand how users use our company's website, application, platform and services and to analyze user behavior, and technologies that allow us to understand whether the messages we send have been interacted with.
- Advertising uses: Our company or third-party websites, platforms and applications may use first-party cookies and third-party cookies to transmit advertisements and similar content to users' interests. Examples of advertising uses include cookies that measure the effectiveness of advertisements and cookies that show whether a particular advertisement has been clicked or how many times it has been viewed.
Rejecting and Deleting Cookies Although most browsers allow the use of cookies, users can reject or delete cookies by changing their browser settings at any time. You can remove persistent cookies and reject both session and persistent cookies by following the instructions in your internet browser's "help" file or by visiting "www.allaboutcookies.org" or "www.youronlinechoices.eu". However, the method of changing the settings varies according to the browser used, and how to disable cookies must be learned from the service provider for the browser used. If cookies are disabled. You can continue to use the website, mobile application, but you may not be able to access all functions of the website, mobile application or your access may be limited, so some features of our Company's website, application, platform and services may not be available. Authorized Service Providers Our company may receive help from some service providers we have authorized for the operation and promotion of its website, platform and applications and services. These service providers may also place cookies and similar technologies (third-party cookies) on users' computers/devices and collect information such as IP address, unique identifier and device identifier to identify the user's device. THIRD-PARTY SITES, PRODUCTS AND SERVICES Our company's website, platform and applications may contain links to third-party websites, products and services. These links are subject to third-party privacy policies, and we would like to inform you that third parties and third-party sites are independent of our Company and that our Company is not responsible for the privacy practices of third parties. If you visit linked websites, we recommend that you read the privacy policies of these sites. CHANGES Our company may change this Personal Data Protection and Privacy Policy at any time, and the change will become effective upon its publication on the website (celikhouse.com). The changes made by our company will be notified to the relevant parties through the website. For this reason, the current version of the Privacy Policy can be accessed from our Company's website, and changes to the Privacy Policy can be followed on our Company's website. Changes will generally be made by uploading them to our Company's website and will become effective as of this date, but our Company may also notify changes in other ways it deems appropriate. CONTACT AND CONSENT REGARDING PERSONAL DATA By accepting this Privacy/Personal Data Protection Policy and Communication Consent, you consent to the collection, storage, processing, use and transfer of your personal data that you have agreed to share with our Company for the purposes stated in this Privacy Policy (providing and offering various advantages and all kinds of electronic communication for personalized promotion, promotion, advertising, sales, marketing, surveys and similar purposes by phone, text message (SMS), e-mail and similar means, and sending other communication messages, etc.) to third parties with whom our Company has a contractual relationship and whose details are given above.
