PERSONAL DATA PROTECTION AND PRIVACY POLICY (CLARIFICATION TEXT)
As Evcil Teknoloji A.Ş., the security of your data is not just a legal obligation for us, but the cornerstone of our technological infrastructure. In accordance with the Personal Data Protection Law No. 6698 (“KVKK”), we would like to inform you transparently about the collection method, processing purposes, the parties to which your personal data is transferred, and your rights.
1. IDENTITY OF DATA CONTROLLER
Information about our company acting as "Data Controller" under KVKK is below:
2. WHICH DATA DO WE PROCESS?
Due to the nature of the services we provide (Muzayede.io, Diji.vet, and other technology solutions), the following data categories are processed:
Identity Information
Name, Surname, T.R. Identity Number. (Important: Due to the "Fair Trade" principle on the Muzayede.io platform; T.R. Identity verification is mandatory for KYC purposes to prevent bot software, prevent manipulation, and ensure only verified real persons can transact.)
Contact Information
Email address, GSM number, delivery address.
Financial Security Information
Masked credit card information (Token), invoice details, and payment history for transaction security. (Your credit card data is not stored directly on our systems, but on the secure infrastructure of licensed payment institutions.)
Transaction Security Data
IP addresses, access logs, user transaction timestamps.
3. FOR WHAT PURPOSES DO WE PROCESS YOUR DATA?
Your personal data is processed in accordance with Articles 5 and 6 of the KVKK for the following purposes:
Service Fulfillment
Managing bidding processes, defining purchase rights, fulfillment processes, and providing clinic management services on Diji.vet.
Security and Verification
Preventing software that will create unfair competition such as "House Bot" or "User Bot" on the platform and ensuring account security.
Legal Compliance
Fulfilling official obligations under Law No. 5651 (Publications on the Internet), E-Commerce Law No. 6563, and Tax Procedure Law.
4. PARTIES TO WHOM PROCESSED DATA CAN BE TRANSFERRED
Your data may be shared with the following parties only to the extent necessary for the execution of the service and within the framework of Articles 8 and 9 of the KVKK:
Global Affiliates
With our London-based affiliate Fapps Ltd. for the management of global operations and technological infrastructure, by obtaining the necessary data security commitments.
Service Providers
With payment infrastructure (BDDK licensed institutions), cargo/logistics companies, and e-invoice integrators.
Official Institutions
With law enforcement units, Prosecutor's Offices, Courts, and authorized public institutions in case of a legal obligation.
5. METHOD AND LEGAL REASON FOR DATA COLLECTION
Your personal data is collected digitally via our website, mobile application, or email channels. This collection process is based on the legal grounds: "being directly related to the establishment or performance of a contract", "legal obligation of the data controller", and "legitimate interest of the data controller provided it does not harm the fundamental rights of the data subject".
6. OUR TECHNICAL SECURITY MEASURES
We take measures above industry standards to protect your data:
- Sensitive data is stored with cryptographic methods (Encryption) in our databases.
- Our systems are regularly subjected to penetration tests.
- All data access is recorded and monitored (Audit Logs).
7. YOUR RIGHTS (KVKK ARTICLE 11)
By applying to our company, you have the right to; a) Learn whether it is being processed, b) Request info if processed, c) Learn processing purpose and whether it is used accordingly, d) Know 3rd parties transferred to domestically/abroad, e) Request correction if incompletely/incorrectly processed, f) Request deletion/destruction within KVKK Article 7.
8. APPLICATION CHANNELS
To exercise your rights under KVKK, you can send your requests;
In writing: To Maslak Mah. AOS 55. Sk. 42 Maslak AVM Residence B Suite: 7 Sarıyer / Istanbul,
Via Email: To [email protected] (via your registered email in the system).