PRIVACY POLICY

1. Data Controller Identity

This Membership Personal Data Protection Policy; https://tabart.store/ website and
The owner of the TabartStore application is İstiklal Mah. Karadere Cad. No:30/C Serdivan/
Processing of personal data by Enes Kurt Person Company located in Sakarya
was created for its activities.
The data collected on the Tabart.store website and application is Enes Kurt Private Company.
is the data controller.

2. Your Processed Personal Data and Purpose and Basis for Processing Personal Data

6563 in order to provide better service to its users through the Tabart.store website.
Law No. on the Regulation of Electronic Commerce and relevant secondary legislation and No. 6698
arising from relevant legislation, especially the Personal Data Protection Law No.
Within the framework of its legal obligations and service standards; the purpose in question and the legal
to fulfill its obligations, to provide you with better service and to provide you with statistical
It requests your personal data to enable studies to be carried out. It's personal
data, based on your explicit consent, in order to benefit from TabartStore services.
Except for the purposes and scope determined by the Privacy/Personal Data Protection Policy
Provided that it is not used, it will be processed and stored by taking information security measures.

Purposes of Processing Personal Data by Our Company
•Our company uses personal data within the scope stated above for the following purposes:
operates:
• Planning, auditing and execution of information security processes
• Creating and managing information technology infrastructure
• Follow-up of financial and/or accounting affairs
• Follow-up of legal affairs
• Analyzes of effectiveness/efficiency and/or appropriateness of business activities
planning and/or execution of activities
• Planning and execution of business activities
• Planning and accessing information permissions of business partners and/or suppliers
execution
• Management of relationships with business partners and/or suppliers
• Planning and/or execution of business continuity activities
• Planning and execution of corporate communication activities
• Planning and execution of corporate governance activities
Planning and execution of logistics activities
• Planning and execution of member relations management processes
• Planning and/or execution of member satisfaction activities
• Follow-up of member requests and/or complaints
• Planning and execution of company audit activities
• Company activities are carried out in accordance with company procedures and/or relevant legislation.
Planning and planning the operational activities necessary to ensure the execution of
execution
• Ensuring the security of company operations
• Establishing loyalty to the products and/or services offered by the company and/or
Planning and/or execution of increasing processes
• Planning and/or planning the company's production and/or operational risk processes
execution
• Carrying out company and partnership law transactions
• Follow-up of contract processes and/or legal requests
• Execution of strategic planning activities
• Planning and execution of supply chain management processes
• Market research activities for sales and marketing of products and services
planning and execution
• Planning and execution of marketing processes of products and/or services
• Planning and execution of sales processes of products and/or services • Data processing
ensuring it is accurate and up to date
• Providing information to authorized institutions based on legislation
• For the creation and tracking of visitor records and all kinds of company operations
The data is maintained for the purpose of providing data that may be required.

Personal Data Protection Law No. 6698 (“Law”) came into force on April 7, 2016.
has entered. The law defines personal data as "data controller" and
Establishing a data recording system that determines the purposes and means of processing and
regarding the processing of personal data by real or legal persons responsible for managing
It reveals the procedures and principles.

Within the scope of the law, personal data is “any data relating to an identified or identifiable natural person.”
as “all kinds of information”; Processing is “the processing of personal data that is wholly or partially automated or
obtained by non-automatic means, provided that it is part of any data recording system
recording, recording, storing, preserving, changing, retrieving
organizing, disclosing, transferring, taking over, making available,
Any actions taken on data, such as classifying or preventing its use
defined as “all kinds of transactions”.

3. What Personal Data Do We Process?

If you use the website https://tabart.store/ and the TabartStore application, membership
If you register and participate in our campaigns, creating your registration, using the application
In case of any problems, problem detection, gifts tailored to your interests.
to present content, instant campaigns created based on location and
Specific information is provided for other processes such as informing of location-specific gifts.
Your information is collected.

Your collected information is subject to Articles 4, 5 and 6 of the Personal Data Protection Law No. 6988.
All your legal rights are protected by our company in accordance with its articles.
is being processed.

Catagorization of Personal Data Processed by Our Company TabartStore:
Identity Information: Driving license, identity card, residence, passport, lawyer ID, marriage certificate
information contained in documents such as, but not limited to, the information you provide
Contact Information: Including but not limited to e-mail, phone numbers, address information and
other information collected

Location Information: Location information generated when members use the application
Members' Digital Data: Your IP address, internet browser information and behavioral information
your data regarding your preferences and data of applications installed on the phone
Personnel Information: The basis for establishing the personnel rights of the employees of the Company's suppliers
personal data (all kinds of information and documents that must be entered into the personnel file by law)
Employee Candidate Information: Persons who share their information to apply for a job at our company.
Personal data belonging to data owners used in the application evaluation process (e.g. CV,
interview notes, personality test results, etc.)
Shared Data of Members in Other Mobile Applications: iOS Health App
Your name, surname and name information on Google Cloud Platform
Your name and surname information on the Facebook application.
Visual and Audio Data: Visual and audio records associated with the personal data owner (e.g.
photographs, camera recordings and audio recordings)
Marketing Information: Data to be used by our company in marketing activities (e.g.
showing the habits and tastes of the person collected to be used for marketing purposes
reports and evaluations, targeting information, cookie records, data enrichment
activities)
Request/Complaint Management Information: All requests or complaints directed to our company.
personal data regarding collection and evaluation (e.g. requests and complaints against the Company,
records and reports regarding these)
4.Your Personal Data Collected from Third Parties

Our company starts with the member application process and occurs while using the TabartStore website.
your personal data; name, surname, address, mobile phone number, e-mail, location information and this
All kinds of personal information, including but not limited to information, are legally reserved.
To develop our application with the parties our company cooperates with, provided that
In order to provide better service to our members, this protection of your personal data
policy, Personal Data Protection Law No. 6698 and other
may be shared with third parties in accordance with the law and regulations, or
Your necessary personal data can also be obtained by our company from the parties.

5. Transfer of Personal Data

We may share personal data with the following third parties:
• Business Partners: To provide you with the best services and to improve our relationship with you.
personal data to the extent necessary to manage or for the purposes described above.
We can share data with our business partners at home and abroad.
• Suppliers and service providers: Suppliers and service providers from whom we receive service.
for the fulfillment of the above-mentioned purposes and our instructions
personal data to suppliers and service providers to enable them to operate in line with
We share it with our providers.
• Mandatory disclosures and legal claims: Regulatory bodies or public authorities
claims or any legally enforceable claim or any court
personal data to comply with a subpoena, court order or other legal request.
we share. We may also violate our legal rights and safety or the rights and security of others.
to ensure or protect the security of personal data or to defend against legal claims
We share it with authorized public institutions and organizations.

6. Personal Data Storage Period

Retention periods of data owners' data No. 6698, Protection of Personal Data
In accordance with paragraph d of the 2nd paragraph of Article 4 of the Law, TabartStore company is responsible for the relevant subject.
retain the data for the period necessary for the purpose for which it is envisaged or processed.
can.

7. Responsibility

TabartStore uses the systems, servers and databases where your information is stored,
necessary technical and administrative measures to protect against security threats (cyber attack, hash, etc.).
takes precautions. TabartStore, which has taken the necessary precautions in this regard,
In order to protect the confidentiality and integrity of information in accordance with the provisions of the legislation
information on establishing the necessary organization and taking and adapting technical measures
assumed responsibility as the responsible person. We are aware of our obligation in this regard
aspect;
● Periodic monitoring in accordance with international and national technical standards regarding data privacy.
Penetration tests are carried out at regular intervals.
● Risk analyzes are carried out regularly regarding personal data processing activities and risks are
Actions are taken to reduce it.
● Access and authorization controls to prevent unauthorized access to personal data
is implemented.
● In this context, our data processing policies are adjusted according to the requirements of the changing and developing age.
time is getting stronger.

8. Changes to the Privacy Policy

TabartStore does not comply with legal requirements and/or personal data in this Privacy Policy.
may make changes at any time due to changes in its processing. This Privacy
Necessary information for you, our users, to be informed about policy changes.
will be done.

9. Your rights regarding your personal data

Your rights according to Article 11 of the Law No. 6698 on the Protection of Your Personal Data;
•Learning whether personal data about him or her is being processed,
• Requesting information about personal data if it has been processed,
• Purpose of processing personal data and whether they are used in accordance with their purpose
learning that it is not used,
• Knowing the third parties to whom personal data is transferred domestically or abroad,
• If personal data is incomplete or incorrectly processed,
asking for correction,
• It has been processed in accordance with the law and other relevant legal provisions.
However, if the reasons requiring processing are eliminated, personal
request deletion or destruction of data,
• Personal data of the transactions made as a result of correction, deletion and destruction requests
Requesting notification to third parties to whom the data has been transferred,
• Analyzing the processed data exclusively through automatic systems
Objecting to the emergence of a result that is unfavorable to oneself,
• Damage due to illegal processing of personal data
has the right to demand compensation for the damage.
•Paragraph 2 of Article 28 of the Law provides that in certain cases, the data owner may be asked by the data controller.
It has been regulated that no claim other than compensation for damages can be made. Accordingly;
• Personal data processing is for the prevention of crime or criminal investigation.
be necessary,
• Processing of personal data made public by the relevant person,
• Persons authorized to process personal data based on the authority granted by law.
public institutions and organizations and professions that are public institutions
disciplinary bodies by carrying out inspection or regulation duties.
is necessary for the investigation or prosecution,
• Personal data processing is subject to the State's responsibility for budget, tax and financial matters.
is necessary for the protection of their economic and financial interests, in cases where the relevant
The rights specified above cannot be exercised regarding the data.

10. Exercise of Your Rights

Our data owners have the following information in this Security Policy Regarding the Protection of Personal Data:
their rights and their rights according to other laws, especially KVK No. 6698.
Communication with information that will identify the personal information of the data owner for use,
address, in what capacity it is in the TabartStore application (Member, Business Partner, Visitor, Other)
and which requests you make within the Scope of the Personal Data Protection Law.
A copy with a wet signature must be made by hand or through a notary or in any other way specified in the Law.
methods Istiklal Mah. Karadere Cad. Enes located at No:30/C Serdivan/ Sakarya
It must be forwarded to the Kurt Personnel Company.
Data owner requests submitted via the above-mentioned method can be processed by our Company within a maximum of thirty years.
It is evaluated and answered within the day. Our company, especially the application
In order to evaluate whether the owner is the relevant data owner, additional information is required from the applicant.
reserves the right to request information and documents.
As a rule, data subject applications are made free of charge by our Company.
is evaluated. However, the Personal Data Protection Board determines that the data owner
If a fee is determined regarding the request, our Company may request payment based on this fee.
will have the right.
Rejection of the application by TabartStore company, finding the response inadequate
or in cases where the application is not responded to in due time; relevant person, data controller
thirty days from the date of learning the answer and in any case sixty days from the date of application
may file a complaint with the Board.
In accordance with Article 13 of the Personal Data Protection Law No. 6698, TabartStore
A complaint cannot be made to the KVKK board without applying to the relevant unit of the company. Personal rights
The right of those violated to compensation in accordance with general provisions is reserved.
For your questions other than the issues mentioned above, e-mail address: info@tabart.store
You can always reach TabartStore via.

11. Applicable Law, Competent Court and Enforcement Offices

This Privacy Policy, especially the Personal Data Protection Law No. 6698
It is subject to the laws and regulations of the Republic of Türkiye. Privacy Policy
It should be used as a priority in case of any problems that may arise from the implementation of
The authority is the relevant unit of the TabartStore company and the data owner whose complaint cannot be resolved at this stage
It is necessary to apply to the Personal Data Protection Board. If this problem is a
In case of a dispute, Sakarya Central Court and
Enforcement Offices are authorized.

12. Communication Permission

By accepting this Privacy/Personal Data Protection Policy, you agree to share it with us.
To improve the product and service using your personal data that you have consented to,
returning your feedback and providing you with various advantages
and all kinds of promotions, promotions, advertising, sales, marketing, surveys and similar purposes specific to you
electronic communication via telephone, short message (SMS), e-mail and similar means, and other
for the purpose of sending communication messages; collection, storage, processing,
to third parties with whom TabartStore has a contractual relationship.
You consent to the transfer.

Your questions regarding your personal data and your rights and rights in Article 11 of the KVKK
your requests as specified in the Communiqué on Application Procedures and Principles to the Data Controller.
e-mail registered in our system with a petition or application form prepared in accordance with the conditions.
You can send it to the e-mail address info@tabart.store via your address.