PERSONAL DATA PROTECTION NOTICE
This Personal Data Protection and Processing Information Notice has been prepared in accordance with Law No. 6698 on the Protection of Personal Data (KVKK) to fulfill the obligation of disclosure and to inform users. This notice explains:
• What types of data are collected through www.esracanikligil.com
• How the collected data is used
• With whom www.esracanikligil.com may share your data
• How you can change your preferences regarding receiving electronic commercial messages
• Your rights over the data processed by www.esracanikligil.com and how you can exercise these rights
This Information Notice may be updated and modified by www.esracanikligil.com. Any changes will be published on the website and will take effect from the date of publication.
Data Controller
This notice has been prepared in accordance with KVKK and the Regulation on the Procedures and Principles of Fulfilling the Obligation of Disclosure. The data controller is www.esracanikligil.com, which collects and processes personal data.
Collected Personal Data
Depending on the services and features used, www.esracanikligil.com collects various static (fixed) and dynamic (variable) data from users. Personal data as defined under KVKK, such as:
• Name and contact information
• Identity verification details
• Demographic data
• Usage data and preferences
• Location data
• Payment details
• Content data
These data are collected and processed accordingly.
Where and How Are Personal Data Stored and Processed?
Under KVKK, the personal data you share with our company may be stored domestically or internationally in locations where www.esracanikligil.com, its affiliates, subsidiaries, or service providers operate. Data processing is conducted in accordance with the purposes stated in this notice and within legal boundaries.
Any transaction performed on collected data within KVKK regulations is considered “processing of personal data.” Your personal data will be processed in compliance with the legal framework of the country where it is stored.
Purpose of Processing Personal Data
www.esracanikligil.com processes personal data:
• To continue its commercial activities and comply with legal obligations
• In accordance with Electronic Commerce Law No. 6563, Consumer Protection Law No. 6502, Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce, Regulation on Distance Contracts, and other relevant legislation
• To verify identity, record necessary information, and maintain transaction security
• To improve service quality, enhance user experience, and provide communication
• To fulfill legal obligations, issue invoices and tax documents, and comply with government regulations
• To provide marketing and campaign notifications (with consent)
• To ensure order fulfillment and manage customer requests, complaints, and feedback
• To conduct trend and statistical analysis
• To enhance website security and fraud prevention
Sensitive personal data collected under legal obligations will never be used beyond the intended purpose. The data controller will take the necessary security measures to protect sensitive personal data. By signing, approving, or reading this notice, you give explicit consent to the collection, processing, and storage of your personal data.
Personal Data Retention Period
www.esracanikligil.com will store personal data for as long as necessary to fulfill the obligations outlined in the Membership Agreement.
• As required by Electronic Commerce Law No. 6563, records of withdrawal of consent will be kept for 1 year, while commercial communication records (including messages and delivery details) will be stored for 3 years for regulatory purposes.
• After the retention period expires, personal data will be deleted, destroyed, or anonymized by the company or at the user’s request.
Sharing of Processed Personal Data
www.esracanikligil.com may share personal data to:
• Fulfill the Membership Agreement and provide services
• Improve user experience and security
• Detect and prevent fraud
• Enhance services and optimize platform performance
Personal data may be shared with the following third parties:
• Service providers, business partners, and suppliers
• Cargo companies (for product deliveries)
• Law firms (for legal matters)
• Security and fraud prevention software providers
• Authorized institutions, regulatory bodies, and courts when required by law
During payment transactions, personal data will be shared with payment service providers for identity verification, in compliance with regulations on Anti-Money Laundering and Counter-Terrorism Financing.
If cookies are used, personal data collected through cookies may be shared with third parties in accordance with this notice.
www.esracanikligil.com may transfer personal data domestically and internationally, but only within the limits and purposes defined in this notice.
Method of Collecting Personal Data
Personal data are collected in two ways:
1. Directly provided by users when interacting with www.esracanikligil.com.
2. Automatically collected through software and technological tools when users visit the platform.
Personal data collection is based on legal requirements, including:
• Membership Agreement and Terms of Use
• Tax Law and other financial regulations
• Consumer Protection Law and e-commerce regulations
• Legitimate business interests of www.esracanikligil.com
Data Security Measures and Commitments
www.esracanikligil.com is committed to:
• Preventing illegal access, processing, or disclosure of personal data
• Ensuring proper storage and security of personal data
• Implementing necessary technical and administrative security measures
Personal data will not be shared with unauthorized parties or used outside the stated purposes. External service providers handling personal data must comply with the security commitments outlined in this notice, and www.esracanikligil.com will conduct necessary audits to ensure compliance.
Users must ensure the accuracy and completeness of their personal information. If there are any updates, they must be promptly corrected through the website.
www.esracanikligil.com will not be responsible for issues arising from outdated or incorrect user information.
Rights of Data Owners Under Article 11 of KVKK
Under KVKK Article 11, data owners have the right to:
1. Know whether their personal data has been processed
2. Request information about the processed data
3. Learn the purpose of processing and whether it is used accordingly
4. Know the third parties to whom personal data has been transferred (domestically or internationally)
5. Request correction if data is incomplete or incorrect
6. Request deletion or destruction of data under KVKK Article 7
7. Request notification of correction, deletion, or destruction to third parties to whom data has been transferred
8. Object to automated processing results that are unfavorable
9. Claim compensation for damages caused by unlawful data processing
Users can submit requests by providing identity verification documents via:
• Notary service to the company’s Istanbul address
• Registered email to www.esracanikligil.com
• Other official methods recognized by the Personal Data Protection Authority
Before responding to a request, www.esracanikligil.com reserves the right to verify the identity of the requester.