Personal Data Protection
DATA PRIVACY STATEMENT AND DISCLOSURE NOTICE ON THE POLICY FOR THE PROTECTION AND PROCESSING OF PERSONAL DATA
Data Controller
The website at www.stilefit.com (“Stilefit”) is operated by Burcu Aydın BRC Elektronik Ticaret Proje Danışmanlık (the “Company”), located at Damlar Mah. Azak Sokak No:18 Başiskele Kocaeli. As the data controller, the COMPANY is responsible for determining the purposes and means of processing personal data and for establishing and managing the data filing system.
We care about protecting your personal data. In accordance with the Personal Data Protection Law (‘’KVKK’’), we would like to inform you about the processing of data obtained in connection with your use of the “Company Website,” including but not limited to its collection, storage and transfer, and about the purpose of such processing.
Processing and Transfer of Personal Data
The COMPANY requests certain personal data from customers using the Company Website during registration or while they use the Company Website. Personal data is any information that makes a person identified or identifiable. Such information may include, for example, your name, address, email address or phone number. Information collected through cookies that does not directly allow you to be identified, such as how you use the Company Website, may also qualify as personal data if it is based on an identifier assigned to the user and is therefore collected, stored and evaluated in an individualized way. Non-personal data is information that is only aggregated, can be described as big data, and is summarized, collected, evaluated and anonymized so that it cannot be associated with a real person.
Your personal data is collected by our Company, by the nature of the business, through the Data Subject filling in the information on the registration form. To identify system-related problems and quickly resolve any problems or disputes related to the service provided, our company records and uses the IP addresses of its members. IP addresses may also be used to identify users in a general way and to collect comprehensive demographic information.
Our company may also use the requested information, beyond the purposes and scope set out in the Membership Agreement, for direct marketing by itself or by the parties it cooperates with. Personal information may also be used to contact the user when necessary. Information requested by our company, information provided by the user, or information about transactions made on the Company Website may also be used by our company and the parties it cooperates with, beyond the purposes and scope set out in the “Membership Agreement,” for various statistical evaluations, database creation and market research, without disclosing our members' identities.
From time to time, our company may send its customers and members notifications such as campaign information, information about new packages and promotional offers. Our members can make any choice about whether or not to receive such information when they sign up, and can later change this choice from the account panel after logging in, or notify us via the link in the notification message they receive.
Purposes of Processing Personal Data
Our company processes Personal Data for specific, explicit and legitimate purposes. Within this scope, Personal Data may be processed for the purposes listed below:
Method and Legal Basis of Personal Data Collection
Data relating to current and potential users of the Company Website is collected, as required by our line of business, through partially or fully automated or non-automated means, for contractual reasons or other reasons determined within the framework of the legislation.
Personal Data Processed Without Explicit Consent
Under the KVKK:
We may process personal information that you have made public by sharing it publicly without your explicit consent, and may share it with third parties within this scope.
Where the legislation contains provisions that explicitly make processing your personal data without explicit consent lawful, we may process it without your explicit consent and share it with third parties within this scope.
We may process your personal data without your explicit consent where this is necessary to fulfill our legal obligations, including information that must be disclosed under applicable laws or regulations, a court decision or an administrative order.
We may process your personal data without your explicit consent where data processing is necessary for the establishment, exercise or protection of a right.
Data Transferred to Third Parties
Without prejudice to our rights under the KVKK, and within the scope of commercial activities on the Company Website, we may share your personal data with Company employees, company officers, legal, financial and tax advisors, auditors, providers of services that complement or extend the Company's activities, Tekrom Teknoloji Anonim Şirketi, from which the Company receives e-commerce software infrastructure services, cloud companies located abroad, primarily in the United States and European countries, to carry out data processing activities (please contact the Company for detailed information), Amazon Web Services, Inc (AWS), consultants and contracted organizations it cooperates with, educational institutions, advertising and marketing agencies the Company works with, and, in anonymized form, real persons or legal entities for the purpose of offering the Data Subject advertisements they may be interested in. You give your explicit consent to the Data Controller regarding this sharing.
Web Server Data Log
When you access the Company Website, your web browser is technically set to automatically transfer the following data (“data log”) to our web server, and we then record the following information in the data log records even without your consent:
Access date
Access time
URL of the referring website
Files retrieved
Amount of data transmitted
Browser type and version
Operating system
IP address
Domain name of your internet service provider
This information is required for technical purposes so that the content you request can be delivered correctly, and collecting it is an unavoidable aspect of using websites. The data log is analyzed only for statistical purposes to improve our website and the underlying technology, and is then deleted.
The data log is stored separately from other data collected as part of your use of the Company Website.
Cookies
Like many other websites, we use “cookies.” Cookies are small text files sent to your hard drive by a web page server. In this way, we automatically obtain certain data such as your IP address, the browser used, the operating system on your computer and your internet connection. This technical communication file makes using the Internet easier by storing status and preferences about the site. The technical communication file is not designed to retrieve data or any other personal information from main memory or from your email. In addition, cookies cannot be used to run programs or send viruses to your computer.
We use cookies and similar technologies to recognize you across different Services, learn about your interests on and off our Services, improve your experience, increase security, measure the use and effectiveness of our Services, obtain statistical information about how many people visit the site, for what purpose and how long they stay, and help dynamically generate advertising and content from user pages designed specifically for users. To make various discount and campaign offers, advertise and promote, personalize the Company Website for you and offer a personalized Şirket.com experience, we may track your browsing on the Company Website and your activity in your member account through cookies, and may analyze together your personal data collected through various methods on the Company Website or on third-party sites and mobile applications.
In any case, the data we collect cannot be shared with third parties without your consent. Of course, you can always view our website without cookies. Web browsers are always set to accept cookies. You can control cookies and stop their use at any time through your browser settings and other tools. To learn how to change these settings, please use your browser's help function. Please remember that when you stop the use of cookies, certain features of our website may not work.
Use of Social Plugins in the Context of Social Media
The COMPANY uses social plugins (“plugins”) from the following social networks: the social network Facebook, operated by Facebook Inc., Palo Alto, CA, USA; the YouTube video platform, operated by YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066 USA; the social network Twitter, operated by Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103 USA; and the social network Instagram, operated by Instagram, LLC, Arbitration Opt-out 1601 Willow Rd. Menlo Park, CA 94025 USA.
If you visit a page on our website that contains such plugins, they are initially inactive. The plugins cannot become active unless you click the designated button. By activating the plugins, you connect with these social networks and give your consent to the transfer of data to them. If you are logged in to these social networks, they may associate the visit with your account on the relevant social network. If you press the relevant button, the corresponding information is transferred by your browser directly to the relevant social network and stored there.
For the scope and purpose of data collection, the further processing and use of data by the relevant social networks, your rights and the settings you can make to protect your privacy, please refer to the Data Protection notices of the relevant social networks. If you do not want these social networks to collect data about you through our website, you must log out of the relevant social networks before visiting our site.
Your Rights Regarding Your Personal Data
Under the legislation on your processed personal data, you have the right to: learn whether your personal data is processed; request information if your personal data has been processed; learn the purpose of processing personal data and whether it is used in accordance with that purpose; know the third parties in Turkey or abroad to whom personal data is transferred; request the correction of personal data if it has been processed incompletely or inaccurately; request the deletion or destruction of personal data; request that third parties to whom personal data has been transferred be notified of the correction of incompletely or inaccurately processed personal data and/or of the deletion or destruction of personal data; object to a result against you arising from the analysis of processed data exclusively through automated systems; and request compensation for damages if you suffer damage due to the unlawful processing of personal data.
Exercising Your Rights, Applications and Contact
You may submit your requests regarding your rights under the KVKK stated above to the COMPANY in writing, in person or in accordance with the legislation (for example, through a notary), to our address stated above, provided that your identity is verified.
Data Security
Within the scope of the KVKK, the COMPANY has taken technical and administrative measures regarding data security to the extent possible. Information about the measures taken is detailed under the heading Policy on the Protection, Storage, Processing and Destruction of Personal Data.
Data of Minors
Personal data of minors should not be submitted without the permission of their parent or guardian.
Links to Other Websites
The Company Website contains links to other websites. We have no influence over whether the operators of these sites comply with data protection provisions. The COMPANY is not responsible for the content of the sites it links to (or the content of other sites those sites link to) and has no authority to interfere with the content of linked sites.
Changes to the Data Privacy Statement and Disclosure Notice on the Policy for the Protection and Processing of Personal Data
This “Data Privacy Statement and Disclosure Notice on the Policy for the Protection and Processing of Personal Data” will be amended when necessary to announce changes to our data protection-related services, for example when offering new services, and to fulfill applicable legal requirements.
User Access
No one has access to your account unless invited by you. Only in the event of a technical or system failure will authorized COMPANY personnel access your relevant data for support purposes, with your permission.
Data Sharing
Data is not transferred without your consent and is not shared with business partners that do not have adequate security. Tekrom Teknoloji A.Ş., from which we receive e-commerce software infrastructure services, is outside the scope of this clause.
Data Backup
Your data is backed up daily to guard against possible technical problems.
Responding to Security Breaches
Despite our best efforts, no method of transmission over the Internet and no method of electronic storage is completely secure. We cannot guarantee absolute security. However, if the COMPANY becomes aware of a security breach, we will notify affected users so they can take appropriate protective steps. Our breach notification procedures are consistent with our obligations under legal regulations and all industry rules or standards we comply with. Notification procedures include providing email notifications or posting a notice on our website in the event of a breach.
Your Responsibilities
Keeping your data safe also depends on you ensuring the security of your account by using sufficiently complex passwords and storing them securely. You should make sure that the computer, tablet or phone you use to access the COMPANY service has adequate security.
Data Controller
The website at www.stilefit.com (“Stilefit”) is operated by Burcu Aydın BRC Elektronik Ticaret Proje Danışmanlık (the “Company”), located at Damlar Mah. Azak Sokak No:18 Başiskele Kocaeli. As the data controller, the COMPANY is responsible for determining the purposes and means of processing personal data and for establishing and managing the data filing system.
We care about protecting your personal data. In accordance with the Personal Data Protection Law (‘’KVKK’’), we would like to inform you about the processing of data obtained in connection with your use of the “Company Website,” including but not limited to its collection, storage and transfer, and about the purpose of such processing.
Processing and Transfer of Personal Data
The COMPANY requests certain personal data from customers using the Company Website during registration or while they use the Company Website. Personal data is any information that makes a person identified or identifiable. Such information may include, for example, your name, address, email address or phone number. Information collected through cookies that does not directly allow you to be identified, such as how you use the Company Website, may also qualify as personal data if it is based on an identifier assigned to the user and is therefore collected, stored and evaluated in an individualized way. Non-personal data is information that is only aggregated, can be described as big data, and is summarized, collected, evaluated and anonymized so that it cannot be associated with a real person.
Your personal data is collected by our Company, by the nature of the business, through the Data Subject filling in the information on the registration form. To identify system-related problems and quickly resolve any problems or disputes related to the service provided, our company records and uses the IP addresses of its members. IP addresses may also be used to identify users in a general way and to collect comprehensive demographic information.
Our company may also use the requested information, beyond the purposes and scope set out in the Membership Agreement, for direct marketing by itself or by the parties it cooperates with. Personal information may also be used to contact the user when necessary. Information requested by our company, information provided by the user, or information about transactions made on the Company Website may also be used by our company and the parties it cooperates with, beyond the purposes and scope set out in the “Membership Agreement,” for various statistical evaluations, database creation and market research, without disclosing our members' identities.
From time to time, our company may send its customers and members notifications such as campaign information, information about new packages and promotional offers. Our members can make any choice about whether or not to receive such information when they sign up, and can later change this choice from the account panel after logging in, or notify us via the link in the notification message they receive.
Purposes of Processing Personal Data
Our company processes Personal Data for specific, explicit and legitimate purposes. Within this scope, Personal Data may be processed for the purposes listed below:
- Providing and modifying the services offered through the website,
- Customizing the products and services offered in line with requests; updating and improving them due to customer needs and legal and technical developments,
- Creating user definitions in systems for the products and services offered,
- Announcing new or existing products, services and campaigns, and carrying out sales and marketing activities,
- Conducting market research,
- Generating statistics and analyzing usage,
- Payment and collection of product and service fees, and selection of the collection method,
- Fulfilling the disclosure obligations arising from Law No. 6563 on the Regulation of Electronic Commerce and other relevant legislation,
- Delivering advertisements for products and services relevant to the Company website and the purpose of data processing to the Data Subject, and providing information about products, services, promotions and campaigns,
- Resolving problems encountered while using the Website,
- Improving the visit, usage, page navigation and purchase experience on the website, and providing better-quality service,
- Establishing contact/communication,
- Managing commercial relationships with partner companies, suppliers, resellers and service providers,
- Reporting within the framework of cooperation,
- Developing the Company's commercial strategies and making plans,
- Contacting you for satisfaction surveys conducted by the Company,
- Registering participants in events/trainings/competitions organized by the COMPANY, issuing certificates/certificates of participation, determining prize/gift winners and delivering prizes/gifts,
- Managing judicial/administrative processes and responding to requests from public institutions and organizations,
- Fulfilling legal obligations under legal regulations and resolving legal disputes,
- Managing investor relations,
- Ensuring the consequences of the legal transaction in the event of a merger, demerger, or full or partial transfer of the Company with another company,
- Featuring Company employees, Individual Customers and their related parties in social media posts,
- Conducting job interviews and evaluating job applications,
- Establishing, managing and terminating employment relationships/contracts,
- Providing COMPANY employees with the primary and secondary rights arising from their employment contracts, and evaluating their performance and work,
- Opening user accounts for employees,
- Registering participants when attending an organization on behalf of the Company,
- Creating records of employees' participation in trainings and certificates,
- Ensuring the security of the Company Website and Applications,
- Analyzing Website usage,
- Creating a personal data inventory,
- Evaluating and responding to all questions, requests, suggestions, complaints and applications submitted in writing, verbally or electronically, including those related to personal data.
- For the performance of the contract, data security, compliance with our company's policies and the other purposes stated above, data is transferred to systems located in Turkey or in other relevant countries, primarily European Union countries (for more detailed information, you may apply to our company in writing).
Method and Legal Basis of Personal Data Collection
Data relating to current and potential users of the Company Website is collected, as required by our line of business, through partially or fully automated or non-automated means, for contractual reasons or other reasons determined within the framework of the legislation.
Personal Data Processed Without Explicit Consent
Under the KVKK:
We may process personal information that you have made public by sharing it publicly without your explicit consent, and may share it with third parties within this scope.
Where the legislation contains provisions that explicitly make processing your personal data without explicit consent lawful, we may process it without your explicit consent and share it with third parties within this scope.
We may process your personal data without your explicit consent where this is necessary to fulfill our legal obligations, including information that must be disclosed under applicable laws or regulations, a court decision or an administrative order.
We may process your personal data without your explicit consent where data processing is necessary for the establishment, exercise or protection of a right.
Data Transferred to Third Parties
Without prejudice to our rights under the KVKK, and within the scope of commercial activities on the Company Website, we may share your personal data with Company employees, company officers, legal, financial and tax advisors, auditors, providers of services that complement or extend the Company's activities, Tekrom Teknoloji Anonim Şirketi, from which the Company receives e-commerce software infrastructure services, cloud companies located abroad, primarily in the United States and European countries, to carry out data processing activities (please contact the Company for detailed information), Amazon Web Services, Inc (AWS), consultants and contracted organizations it cooperates with, educational institutions, advertising and marketing agencies the Company works with, and, in anonymized form, real persons or legal entities for the purpose of offering the Data Subject advertisements they may be interested in. You give your explicit consent to the Data Controller regarding this sharing.
Web Server Data Log
When you access the Company Website, your web browser is technically set to automatically transfer the following data (“data log”) to our web server, and we then record the following information in the data log records even without your consent:
Access date
Access time
URL of the referring website
Files retrieved
Amount of data transmitted
Browser type and version
Operating system
IP address
Domain name of your internet service provider
This information is required for technical purposes so that the content you request can be delivered correctly, and collecting it is an unavoidable aspect of using websites. The data log is analyzed only for statistical purposes to improve our website and the underlying technology, and is then deleted.
The data log is stored separately from other data collected as part of your use of the Company Website.
Cookies
Like many other websites, we use “cookies.” Cookies are small text files sent to your hard drive by a web page server. In this way, we automatically obtain certain data such as your IP address, the browser used, the operating system on your computer and your internet connection. This technical communication file makes using the Internet easier by storing status and preferences about the site. The technical communication file is not designed to retrieve data or any other personal information from main memory or from your email. In addition, cookies cannot be used to run programs or send viruses to your computer.
We use cookies and similar technologies to recognize you across different Services, learn about your interests on and off our Services, improve your experience, increase security, measure the use and effectiveness of our Services, obtain statistical information about how many people visit the site, for what purpose and how long they stay, and help dynamically generate advertising and content from user pages designed specifically for users. To make various discount and campaign offers, advertise and promote, personalize the Company Website for you and offer a personalized Şirket.com experience, we may track your browsing on the Company Website and your activity in your member account through cookies, and may analyze together your personal data collected through various methods on the Company Website or on third-party sites and mobile applications.
In any case, the data we collect cannot be shared with third parties without your consent. Of course, you can always view our website without cookies. Web browsers are always set to accept cookies. You can control cookies and stop their use at any time through your browser settings and other tools. To learn how to change these settings, please use your browser's help function. Please remember that when you stop the use of cookies, certain features of our website may not work.
Use of Social Plugins in the Context of Social Media
The COMPANY uses social plugins (“plugins”) from the following social networks: the social network Facebook, operated by Facebook Inc., Palo Alto, CA, USA; the YouTube video platform, operated by YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066 USA; the social network Twitter, operated by Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103 USA; and the social network Instagram, operated by Instagram, LLC, Arbitration Opt-out 1601 Willow Rd. Menlo Park, CA 94025 USA.
If you visit a page on our website that contains such plugins, they are initially inactive. The plugins cannot become active unless you click the designated button. By activating the plugins, you connect with these social networks and give your consent to the transfer of data to them. If you are logged in to these social networks, they may associate the visit with your account on the relevant social network. If you press the relevant button, the corresponding information is transferred by your browser directly to the relevant social network and stored there.
For the scope and purpose of data collection, the further processing and use of data by the relevant social networks, your rights and the settings you can make to protect your privacy, please refer to the Data Protection notices of the relevant social networks. If you do not want these social networks to collect data about you through our website, you must log out of the relevant social networks before visiting our site.
Your Rights Regarding Your Personal Data
Under the legislation on your processed personal data, you have the right to: learn whether your personal data is processed; request information if your personal data has been processed; learn the purpose of processing personal data and whether it is used in accordance with that purpose; know the third parties in Turkey or abroad to whom personal data is transferred; request the correction of personal data if it has been processed incompletely or inaccurately; request the deletion or destruction of personal data; request that third parties to whom personal data has been transferred be notified of the correction of incompletely or inaccurately processed personal data and/or of the deletion or destruction of personal data; object to a result against you arising from the analysis of processed data exclusively through automated systems; and request compensation for damages if you suffer damage due to the unlawful processing of personal data.
Exercising Your Rights, Applications and Contact
You may submit your requests regarding your rights under the KVKK stated above to the COMPANY in writing, in person or in accordance with the legislation (for example, through a notary), to our address stated above, provided that your identity is verified.
Data Security
Within the scope of the KVKK, the COMPANY has taken technical and administrative measures regarding data security to the extent possible. Information about the measures taken is detailed under the heading Policy on the Protection, Storage, Processing and Destruction of Personal Data.
Data of Minors
Personal data of minors should not be submitted without the permission of their parent or guardian.
Links to Other Websites
The Company Website contains links to other websites. We have no influence over whether the operators of these sites comply with data protection provisions. The COMPANY is not responsible for the content of the sites it links to (or the content of other sites those sites link to) and has no authority to interfere with the content of linked sites.
Changes to the Data Privacy Statement and Disclosure Notice on the Policy for the Protection and Processing of Personal Data
This “Data Privacy Statement and Disclosure Notice on the Policy for the Protection and Processing of Personal Data” will be amended when necessary to announce changes to our data protection-related services, for example when offering new services, and to fulfill applicable legal requirements.
User Access
No one has access to your account unless invited by you. Only in the event of a technical or system failure will authorized COMPANY personnel access your relevant data for support purposes, with your permission.
Data Sharing
Data is not transferred without your consent and is not shared with business partners that do not have adequate security. Tekrom Teknoloji A.Ş., from which we receive e-commerce software infrastructure services, is outside the scope of this clause.
Data Backup
Your data is backed up daily to guard against possible technical problems.
Responding to Security Breaches
Despite our best efforts, no method of transmission over the Internet and no method of electronic storage is completely secure. We cannot guarantee absolute security. However, if the COMPANY becomes aware of a security breach, we will notify affected users so they can take appropriate protective steps. Our breach notification procedures are consistent with our obligations under legal regulations and all industry rules or standards we comply with. Notification procedures include providing email notifications or posting a notice on our website in the event of a breach.
Your Responsibilities
Keeping your data safe also depends on you ensuring the security of your account by using sufficiently complex passwords and storing them securely. You should make sure that the computer, tablet or phone you use to access the COMPANY service has adequate security.