Information Notice on the Protection and Processing of Personal Data
Your personal data is important to us. During the processing of your personal data, necessary measures are taken to ensure an appropriate level of security in accordance with applicable legislation, to prevent unlawful use and ensure protection of your data.
DATA CONTROLLER
This Information Notice on the Protection and Processing of Personal Data (“Information Notice”) has been prepared by Giya Kuyumculuk Limited Company (“Company”) in its capacity as “Data Controller,” in accordance with the Law on the Protection of Personal Data (“Law”) and the Communiqué on the Principles and Procedures to be Followed in Fulfillment of the Obligation to Inform.
Company Title: Giya Kuyumculuk Limited Şirketi
MERSİS No: 3960201223
Address: Atatürk Mah. Ertuğrul Gazi Sk. D8 Blok No:2 Ataşehir/İstanbul
Phone Number: 0544 957 2709
E-mail Address: [email protected]
The following personal data that you provide to our Company may be processed by automated or non-automated means, wholly or partially, as part of any data recording system, in accordance with the Law and relevant regulations: Turkish ID number, name, surname, gender, date of birth, wedding anniversary, mobile phone number, email address, postal address, shopping information, campaign and coupon usage, device type used, IP address, membership information (if registered), and ring size.
PURPOSES OF PROCESSING PERSONAL DATA
Your personal data may be processed for the following purposes:
- Providing and promoting our products and services
- Offering after-sales support
- Communicating regarding purchased or to-be-purchased products/ services
- Performing membership transactions and benefits
- Enabling resale opportunities
- Ensuring quality standards
- Fulfilling contractual obligations
- Conducting marketing and analysis studies
- Personalizing promotions and content based on your preferences and interests
- Creating invoices and accounting records
- Managing loyalty and customer relations processes
- Handling requests, suggestions, and complaints
- Enhancing user experience on our website
- Conducting electronic and other commercial/social communications with your consent
- Performing analysis and internal reporting
- Ensuring transaction security and fulfilling our legal obligations.
PARTIES TO WHOM YOUR PERSONAL DATA MAY BE TRANSFERRED AND PURPOSES
Your personal data may be shared domestically and internationally in accordance with the fundamental principles of the Law, with the following parties and for the purposes outlined below:
- Business partners, suppliers, affiliates, shareholders, and group companies
- Audit and consultancy firms
- Payment institutions
- Public authorities and institutions
- Authorized private legal entities
METHOD AND LEGAL BASIS FOR COLLECTING PERSONAL DATA
Your personal data may be collected through various channels including the online store (www.giyamucevherat.com / www.giya.com.tr) during membership registration, when placing orders, during the use of products and services, through call centers, contracts, warranty, and certification processes.
The processing of your data is based on the legal grounds specified in Article 5 of the Law, including:
- Explicitly prescribed by law
- Necessity for the establishment or performance of a contract
- Fulfillment of legal obligations
- Establishment, exercise, or protection of a right
- Legitimate interests
If these conditions are not met, your explicit consent is obtained for the processing of personal data.
EXPLICIT CONSENT
Your personal data is processed within the scope of this Information Notice. In cases requiring explicit consent, I acknowledge and agree to the processing and transfer of my personal data to third parties as outlined in this Information Notice.
RIGHTS OF THE DATA SUBJECT
According to Article 11 of the Law, as the personal data owner, you have the following rights:
- To learn whether your personal data is being processed
- To request information if your data has been processed
- To learn the purpose of processing and whether it is used in accordance with that purpose
- To know the third parties to whom the data is transferred, domestically or abroad
- To request correction if your data is incomplete or incorrectly processed
- To request deletion or destruction of your data within the legal framework
- To request notification of correction or deletion to third parties to whom the data has been transferred
- To object to the analysis of your data by automated systems
- To request compensation if you suffer damages due to unlawful processing of your personal data
APPLICATION METHOD
To exercise your rights, you may contact us in writing via [email protected] or through other methods specified by applicable legislation.
Your requests will be concluded free of charge within 30 days at the latest.
POLICY UPDATES
This Clarification Text may be revised from time to time in accordance with legislative changes or updates to company policies. The most current version is available on our website.