With this KVKK policy, MADE BY CAT adopts the principles stipulated by the Personal Data Protection Law No. 6698 (“KVK Law”) to ensure compliance with the KVK Law, and fulfills its obligations regarding the processing, deletion, destruction, anonymization, transfer of personal data, informing the relevant person, and ensuring data security.

 

1) Purpose and Scope of the Policy

 

This Personal Data Protection Policy of Cookiespool;

a) The methods and legal reasons for collecting personal data,
b) The groups of individuals whose personal data is processed (Data Subject Categorization),
c) The categories of personal data processed and sample data types related to these groups,
d) The processes and purposes for which these personal data are used,
e) The technical and administrative measures taken to ensure the security of personal data,
f) To whom and for what purposes personal data can be transferred,
g) The retention periods of personal data,
h) What the rights of the Relevant Persons are over their personal data and how they can exercise these rights, are explained.

a) Methods and Legal Reasons for Collecting Personal Data

MADE BY CAT collects personal data through its website, cookies, notifications from administrative and judicial authorities, and other communication channels in audio, electronic, or written form, in accordance with the conditions specified in the KVK Law and the legal reasons stated in this Personal Data Protection Policy.

b) Data Subject Group Categorization

MADE BY CAT categorizes the groups of individuals whose personal data is processed in the personal data processing processes and activities associated with these processes as follows. In addition, other groups of individuals’ personal data may be processed in accordance with the personal data processing conditions specified in Articles 5 and 6 of the KVK Law and the legal reasons stated in this Personal Data Protection Policy.

1. Customer
2. Potential Customer
3. Online Visitor
4. Website Users

c) Data Categories and Sample Data Types

1. Customer,
• Identity Information: Name, surname,
• Contact Information: mobile phone, email address, address,
• Financial Information: Tax office, invoice details
• Customer/Member Transaction Information: Purchased product and amount,
• Risk Management Information: IP address
• Transaction Security Information: Password, password information
• Marketing Information: Cookie records, targeting information, evaluations showing habits and preferences
• Legal Transaction and Compliance Information: Start and end time of the service provided, type of service used, commercial electronic communication permission given by the Relevant Person in electronic environment, legal texts and contracts within the scope of the service provided

2. Potential Customer

• Identity Information: Name, surname
• Contact Information: email address
• Risk Management Information: IP address

3. Online Visitor

• Legal Transaction Information/Risk Management Information: IP address
• Legal Transaction and Compliance Information: Start and end time of the service provided, type of service used, amount of data transferred

4. Person submitting request/complaint

• Identity Information: Name, surname
• Contact Information: email address,
• Transaction Information: Subject of the message, content of the message

d) The Processes and Purposes for Which Personal Data Are Used

Personal data;

• Processing of online visitor data in accordance with relevant legislation,
• Carrying out customer transactions,
• Providing special promotions, opportunities, and benefits to existing customers with commercial electronic communication approval,
• Resolving customer issues and complaints,
• Creating customer satisfaction, loyalty, and attachment,
• Making statistical evaluations and market research,
• Determining and implementing Dataspool’s commercial and business strategies,
• Tracking accounting and purchasing transactions,
• Legal processes and compliance with legislation,
• Responding to information requests from administrative and judicial authorities,
• Planning internal reporting and business development activities,
• Ensuring information and transaction security and preventing malicious use,
• Making necessary arrangements to ensure that processed data is up-to-date and accurate,
and all these processes are used to carry out related activities.

e) Technical and Administrative Measures Taken to Ensure the Security of Personal Data

MADE BY CAT commits to taking all necessary technical and administrative measures to ensure the confidentiality, integrity, and security of your personal data and to show the necessary care.

MADE BY CAT takes the necessary measures to prevent unauthorized access, misuse, unlawful processing, disclosure, alteration, or destruction of personal data.

In relation to preventing unlawful access to personal data processed by MADE BY CAT, preventing unlawful processing of these data, and ensuring the preservation of personal data:

• All areas on the website where personal data is collected are protected with SSL,
• Authorization and control matrices for access rights are created and implemented for employees to prevent unlawful processing of personal data collected from the website,
• Ensures that personal data is not unlawfully accessed.

Despite taking necessary information security measures, if personal data is damaged or accessed by unauthorized third parties as a result of attacks on its system, MADE BY CAT immediately notifies you and the Personal Data Protection Board and takes the necessary measures.

f) To Whom and For What Purpose Personal Data May Be Transferred

MADE BY CAT transfers personal data to third parties only in accordance with the purposes stated in the Personal Data Protection Policy and in compliance with Articles 8 and 9 of the KVK Law.

The personal data subject to domestic and international transfers mentioned above are protected legally through provisions in our contracts in compliance with the KVK Law, considering that the counterparty of the legal relationship is a data controller or data processor, along with the technical measures taken to ensure their security.

g) Retention Periods for Personal Data

MADE BY CAT retains personal data processed in compliance with the KVK Law for the periods stipulated in the relevant legislation or required by the purpose of processing.

Customer records	10 years	Law No. 6098
All records related to accounting and financial transactions	10 years	Law No. 6102, Law No. 213
Traffic information related to online visitors	2 years	Law No. 5651
Personal data related to customers	10 years after the end of the legal relationship;	Law No. 6098, Law No. 213, Law No. 6502

 

You can review our Cookie Policy for the retention periods of personal data obtained through cookies.

h) What the Rights of the Relevant Persons Are Over Their Personal Data and How They Can Exercise These Rights

The rights of the Relevant Person regarding personal data processed by MADE BY CAT in accordance with Article 11 of the KVK Law are listed below:

• To learn whether personal data is processed,
• To request information if personal data has been processed,
• To learn the purpose of processing personal data and whether they are used in accordance with its purpose,
• To know the third parties to whom personal data is transferred domestically or abroad,
• To request the correction of personal data if it is incomplete or incorrectly processed,
• To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVK Law,
• To request notification of the transactions made pursuant to subparagraphs (d) and (e) to third parties to whom personal data has been transferred,
• To object to the occurrence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,
• To request compensation for the damage in case of damage due to unlawful processing of personal data.

In accordance with Article 13 of the KVK Law, you can exercise your rights by sending an email to info@dataspool.com.tr.

2) Conditions for Deletion, Destruction, and Anonymization of Personal Data

MADE BY CAT retains personal data processed through its website and mobile site for the periods stipulated in the KVK Law, Article 7, Article 17, and the Turkish Penal Code Article 138, or for the periods required by the purpose of processing. After these periods expire, it will delete, destroy, or anonymize personal data in accordance with the provisions of the Regulation on the De