GDPR

PERSONAL DATA DISCLOSURE TEXT

Update Date: August 15, 2022

This Privacy and Personal Data Policy Personal Data Disclosure Text (Policy) has been prepared to inform and enlighten Users about the terms and conditions regarding the use of data obtained and/or to be obtained from Users in any way within the scope of Services offered through the Platform operating under the www.bajjari.com domain name, managed and operated by Bajjari Fur Fashion- Ziyaddin Nergiz, and the methods of data processing.

Definitions and General Explanations
In this Policy:

Terms of Use: The Terms of Use located on the Platform, which Users have accepted by accessing the Platform.

Service(s): All services specified in the Terms of Use, distance contracts, and on the Platform.

Platform: The website owned by the Company with the domain name www.bajjari.com or websites operated by the Company under another domain name.

User(s)/Visitors: A real person who uses the Platform without registering.

Member(s): A person who creates an account on the Platform, registers as a member, and explicitly accepts the Terms of Use.

Law: Law No. 6698 on the Protection of Personal Data.

Data Controller: Refers to the person who determines the purposes and means of processing personal data, and is responsible for the establishment and management of the data recording system.

Terms used in capital letters in this Policy and not otherwise defined herein shall have the meanings ascribed to them in the Terms of Use.

Bajjari adopts this Policy regarding the privacy, use, and other related matters of processed information concerning Users and Members to whom it begins to provide services. Bajjari values data privacy and strives to be transparent about information storage. This Policy is a privacy policy that includes what types of data are collected, how this data is used, with whom this information is shared if necessary, what rights related to personal data are, how these rights can be exercised, and the principles Bajjari adopts regarding privacy.

Personal data is processed in accordance with the basic principles set out in the Law, as follows:

Lawfulness and fairness,
Accuracy and, where necessary, kept up to date,
Processed for specified, explicit, and legitimate purposes,
Relevant, limited, and proportionate to the purposes for which they are processed,
Stored for the period stipulated in the relevant legislation or required for the purpose for which they are processed.
Personal data refers to any information relating to an identified or identifiable real person. For this reason, the regulations regarding personal data contained in this text will apply if the relevant information belongs to a real person. If the relevant information belongs to legal entities, regulations other than those regarding personal data in this Policy will apply.

The Platform may contain links directing to other websites unknown to Bajjari, the content of which is not controlled. These linked websites may contain different terms and conditions than those of Bajjari. Bajjari cannot be held responsible for the use or disclosure of information that these websites may process. Likewise, Bajjari will not have any responsibility when links are provided from other sites to this website belonging to Bajjari.

Informing and Enlightening the Data Subject
Bajjari is obliged to enlighten/inform the Data Subjects whose data will be processed, in accordance with the Law, during the acquisition of personal data. The scope of this disclosure obligation is as follows:

The identity of the data controller and, if any, its representative,
The purpose for which personal data will be processed,
To whom and for what purpose the processed personal data can be transferred,
The management and legal reason for collecting personal data, and
The rights of the data subject.
In this context, Bajjari aims to provide the necessary disclosures with this Policy.

Collection of Personal Data, Method of Collection, and Legal Reasons
Information sent, shared, and/or provided in an accessible form by Data Subjects to Bajjari when accessing the Platform or using the Services, or collected automatically via the Platform, may fall within the scope of personal data. If you benefit from the Services offered by Bajjari or access the Platform, we collect the following information about you and related to your use of our Services from various sources:

Member Registration Information: If you create a "Membership Account" on the Platform, in such a case, Members must conclude the Terms of Use and become a member of the Platform to benefit from the Platform's services. To register, as a Member, your email address, first and last name, phone number, and the password you will use on the Platform must be entered.
Service information: Details about the products and services purchased by Members to benefit from the Services, order dates, and order history information may be recorded on the Platform.
Usage data: Each time you use our Services or access the Platform without using them, usage data about you is collected. This may include data such as when you visited the Platform, what you clicked, when you performed these actions, etc. It also includes data about the nature of each access, such as source IP addresses, internet service providers, files viewed on the Platform (e.g., HTML pages, graphics, etc.), operating system versions, and timestamps.
Device data: Data such as your IP address, operating system version, device type, system and performance information, and browser type are collected from the device and applications you use to access our Services.
Data Categories and Data Types
1. Member Identity Information First-name, last-name
Contact Information Email, phone number
Financial Information bank account details, IBAN number, invoice details, payment details
Customer Transaction Request and complaint information, order information, requested and received service information, comments made via the platform.
Transaction Security PC/email/system and Platform user transaction information (username and password), internet traffic data (network activities, IP address, visit data, time and date information), data collected via cookies
2. User/Visitor Transaction Security PC/device information, internet traffic data (network activities, IP address, visit data, time and date information), data collected via cookies
Legal Reasons
Your personal data mentioned above may be processed for the purposes listed below, which are subject to your disclosure of this data to Bajjari, in accordance with the conditions and principles set forth in Article 4 of the Law; within the scope of personal data processing conditions specified in Articles 5 and 6 of the Law. The legal reasons for each data category are explicitly stated below:

Member Identity Information Contact Information Financial Information The process in which we process your personal data is explicitly foreseen in the Laws.The processing of your personal data is necessary provided that it is directly related to establishing a contractual relationship with you or our performance obligations arising from this contract.Situations where it is mandatory to fulfill our legal obligation.The processing of data is mandatory for our legitimate interests, provided that it does not harm your fundamental rights and freedoms.
Customer Transaction The processing of your personal data is necessary provided that it is directly related to establishing a contractual relationship with you or our performance obligations arising from this contract.The processing of data is mandatory for our legitimate interests, provided that it does not harm your fundamental rights and freedoms.
Transaction Security The process in which we process your personal data is explicitly foreseen in the Laws.Situations where it is mandatory to fulfill our legal obligation.
User/Visitor Transaction Security The process in which we process your personal data is explicitly foreseen in the Laws.Situations where it is mandatory to fulfill our legal obligation.
Purpose of Personal Data Processing
Within the scope of this text, the personal data of relevant individuals are processed for the following purposes, in accordance with the general conditions above:

Member Identification Information Conducting activities in compliance with legislationConducting finance and accounting affairsConducting loyalty processes for company / product / servicesConducting business activities / auditingConducting goods / service sales processesConducting goods / service production and operation processesConducting storage and archiving activitiesConducting contract processesProviding information to authorized persons, institutions, and organizations
Contact Information Conducting activities in compliance with legislationConducting loyalty processes for company / product / servicesMonitoring and conducting legal affairsConducting communication activitiesConducting business activities / auditingConducting goods / service after-sales support servicesConducting goods / service sales processesConducting goods / service production and operation processesConducting customer relationship management processesConducting activities aimed at customer satisfactionConducting advertising / campaign / promotion processesConducting storage and archiving activitiesConducting contract processesProviding information to authorized persons, institutions, and organizations
Financial Information Conducting finance and accounting affairsConducting business activities / auditingConducting goods / service after-sales support servicesConducting goods / service sales processesConducting contract processes
Customer Transaction Conducting finance and accounting affairsConducting business activities / auditingConducting goods / service after-sales support servicesConducting goods / service sales processesConducting contract processesTracking requests / complaints
Transaction Security Conducting information security processesConducting audit/ethics activitiesConducting access authorization processesConducting business activities/auditingConducting business continuity activitiesProviding information to authorized persons, institutions, and organizations
User/Visitor Transaction Security Conducting information security processesConducting audit/ethics activitiesConducting access authorization processesConducting business activities/auditingConducting business continuity activitiesProviding information to authorized persons, institutions, and organizations
Administrative and Technical Measures Taken to Ensure Personal Data Security
Bajjari undertakes to take all necessary administrative and technical measures and to show due diligence to ensure the confidentiality, integrity, and security of your personal data. In this context, it takes necessary precautions to prevent unlawful processing of your personal data, unauthorized access to your personal data, unlawful disclosure, alteration, or destruction of your personal data.

Despite the Company taking necessary information security measures, in the event that your personal data is damaged or falls into the hands of unauthorized third parties as a result of attacks on the Platform or the Company's system, the Company will notify the Data Subjects and the relevant authorized public institutions and organizations within the periods stipulated in the relevant legislation and take the necessary precautions.

Transfer of Your Personal Data
Your collected personal data may be transferred, processed, and stored on servers abroad for the purpose of storing this data or for lawful purposes stated in this text. Bajjari may transfer Users' information, including personal data, to another country and jurisdiction that does not have the same/similar data protection laws as the jurisdiction in which they are located.

Bajjari complies with the obligations stipulated in the relevant legislation when performing this process. Therefore, your personal information may be subject to different privacy rules than those in your country of residence. However, the data will still be processed within the scope specified in this text.

Bajjari may share your personal data with companies providing services (such as data processing centers, third-party business partners providing services under contracts concluded between you and Bajjari, or customer service centers) to fulfill its legal obligations. These service providers are obliged to protect this information.

Your personal data may be shared with public institutions and organizations authorized to request personal data for Bajjari to fulfill its obligations under the law (in situations where there is an obligation to provide information, such as combating crime and threats to state and public security).

Cookies
Cookies are small data files that we store on the device you use when accessing our services to recognize continuous users. All cookies expire after a certain period, depending on our reason for using them. Cookies are used for several reasons:

To make the Platform easier to use: If you use the "Remember me" feature to speed up logging into your account, we may store your username in a cookie.
Security reasons: We use cookies to verify your identity (or, for example, to understand if your session is still open on the Platform).
To provide you with personalized content: We may store user preferences, such as the default language, in cookies to personalize the content you view.
To improve our Services: We use cookies to measure your use of the Platform, track referral data, and sometimes show you different content versions. This information helps us develop and improve our services and optimize the content we show to users.
For our policy on cookies and detailed disclosure, please review our Cookie Policy.

It should be noted that if you do not adjust your browser and/or email settings to disable cookies, you will be deemed to have consented to our use of cookies.

Changes and Updates
Bajjari reserves the right to amend the Policy in accordance with the Law and on condition that personal data is better protected.

This Policy may be re-edited and updated as new features are added to digital platforms or as new suggestions are received from our Users. However, in this case, we will inform you by publishing the changes on the Platform. We may notify you of such changes, in some important cases, by email or by other prominent means reasonably designed to inform you, with additional notifications as appropriate. If you continue to access the Platform and benefit from Bajjari's services after the notification period, you will be deemed to have agreed to the changes in the Policy. If you do not accept the terms of this Policy or an updated privacy policy and personal data text (if any), you reserve the right to close your account at any time or not to answer surveys. Therefore, we recommend that you review the Policy each time you access the Platform. This document was last updated on the date stated in the introduction. If the Policy provisions change, they will come into force on the date they are published.

Your Rights as a Data Subject
Within the scope of personal data protection legislation

To learn whether your personal data is processed,
To request information if your personal data has been processed,
To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
To know the third parties to whom your personal data is transferred domestically or abroad,
To request correction of your personal data if it is incomplete or incorrectly processed or has changed,
To request the deletion or destruction of your personal data in accordance with the conditions stipulated in the Law,
To request that the third parties to whom your personal data has been transferred be notified of the correction of your incomplete or incorrectly processed personal data and the deletion or destruction of your personal data,
To object to the emergence of a result against you by analyzing your processed data exclusively through automated systems,
You have the right to demand compensation for damages if you suffer damage due to unlawful processing of your personal data.
As Data Subjects, to state your requests regarding your rights and to exercise your rights over your personal data; you can carry out necessary operations such as change, update, and/or deletion and related requests by submitting your application to the Company's official email address bajjarifashion@outlook.com or the Company's central address, ensuring that it meets the minimum application requirements specified in the Communiqué on the Procedures and Principles of Application to the Data Controller.

In your application, which contains your explanations regarding the right you wish to exercise and request, as Data Subjects, it is required that the matter you request is clear and understandable, that the matter you request concerns you personally or that you are specifically authorized to act on behalf of someone else and document your authorization, and that the application meets the minimum application requirements stated in the relevant legislation.

If you submit your requests to us through the specified methods, Bajjari will conclude your request as soon as possible, free of charge, and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the fee specified in the tariff within the scope of the relevant legislation will be charged.

Company Name: Bajjari Fur Fashion- Ziyaddin Nergiz

Address: Telsiz Mahallesi 80/1 Sokak, Sazıyaman Apt. No:16-18C Zeytinburnu/İstanbul

Email: bajjarifashion@outlook.com