Personal Data Protection and Privacy Policy
General Information About the Law on Personal Data
The Law on Protection of Personal Data No. 6698 (hereinafter referred to as KVKK) was accepted on March 24, 2016, and published in the Official Gazette No. 29677 dated April 7, 2016. Some parts of the KVKK came into force on the date of publication, while others came into force on October 7, 2016.
Information as Data Controller
As MIXXIT TURKEY, whose detailed corporate information is published below, in accordance with KVKK No. 6698 and in the capacity of Data Controller, your personal data will be recorded, stored, updated, disclosed/transferred to third parties when permitted by law, classified, and processed in the ways specified in the KVKK, within the framework explained on this page.
How Your Personal Data May Be Processed
In accordance with KVKK No. 6698, your personal data shared with MIXXIT TURKEY may be processed by us fully or partially, automatically, or non-automatically as part of any data recording system, by obtaining, recording, storing, modifying, reorganizing, in short, subject to any operation performed on the data. Any operation performed on data within the scope of KVKK is considered “processing of personal data.”
Purposes and Legal Reasons for Processing Your Personal Data
Your shared personal data will be processed:
- To fulfill the requirements of the services we provide to our customers, in accordance with the contract and technology, and to improve our products and services;
- To record identity, address, and other necessary information to identify the transaction owner within the scope of the Law on Regulation of Electronic Commerce No. 6563, the Law on Consumer Protection No. 6502, the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette No. 29457 dated 26.08.2015 based on these regulations, the Distance Contracts Regulation published in the Official Gazette No. 29188 dated 27.11.2014, and other relevant legislation;
- To organize all records and documents that will serve as a basis for payment systems, electronic contracts, or paper-based transactions mandatory in the banking and electronic payment fields; to comply with information storage, reporting, and notification obligations stipulated by legislation and other authorities;
- To provide information to prosecutor’s offices, courts, and relevant public officials upon request and as required by legislation, in matters related to public security and legal disputes;
- In accordance with KVKK No. 6698 and related secondary regulations.
Information on Third Parties or Organizations to Whom Your Personal Data May Be Transferred
For the purposes stated above, the persons/organizations to whom your personal data shared with MIXXIT TURKEY may be transferred are; our main shareholders, our direct or indirect domestic/international affiliates; primarily, but not limited to, Member firms using the MIXXIT TURKEY e-commerce infrastructure and persons and organizations related to the services provided, and also organizations with whom we receive services, cooperate, or are program partners, domestic/international organizations, and other 3rd parties, to carry out our activities and/or in the capacity of Data Processor.
Method of Collecting Your Personal Data
Your personal data can be processed and collected:
- Through forms on the MIXXIT TURKEY website and mobile applications and/or websites of Member Firms using the MIXXIT TURKEY E-Commerce infrastructure, including information such as name, surname, Turkish ID number, address, phone, business or personal e-mail address; preferences on pages accessed using a username and password, IP records of performed transactions, cookie data collected by the browser and data containing Browse times and details, and location data;
- Verbally, in writing, or electronically through our sales and marketing department employees, agencies, dealers, paper forms, business cards, digital marketing, and call center channels;
- From individuals who share their personal data for purposes such as establishing a commercial relationship with MIXXIT TURKEY, applying for a job, making an offer, through business cards, resumes (CVs), making offers, and other means, in a physical or virtual environment, face-to-face or remotely, verbally or in writing or electronically;
- Additionally, data obtained indirectly from different channels, from (micro) websites used for purposes such as websites, blogs, competitions, surveys, games, campaigns, and similar, and from social media, e-newsletter reading or clicking movements, data provided by publicly available databases, and publicly shared profiles and data from social media platforms (Facebook, Twitter, Google, Instagram, Snapchat, etc.).
Your Personal Data Obtained Before KVKK Came into Force
Your personal data obtained legally before April 7, 2016, the effective date of the KVKK, through membership, electronic communication consent, product/service purchase, and other forms, is also processed and stored in accordance with the terms and conditions set forth in this document.
Transfer of Your Personal Data Abroad
Your personal data collected by any of the methods listed above, processed in Turkey or to be processed and stored outside Turkey, may be transferred to service intermediaries located abroad (to countries accredited by the Personal Data Protection Board and where there is sufficient protection regarding the protection of personal data), provided that it remains within the scope of the KVKK and is in accordance with the contract purposes.
Storage and Protection of Personal Data
Your personal data will be kept confidential in the database and systems of MIXXIT TURKEY in accordance with Article 12 of the KVKK; it will not be shared with third parties under any circumstances, except for legal obligations and the regulations specified in this document.
MIXXIT TURKEY is obliged to prevent unlawful processing of personal data, to prevent unauthorized access by unauthorized persons, and to take software measures such as hashing, encryption, transaction logging, access management, and physical security measures to ensure their preservation, in accordance with Article 12 of the KVKK. If it is learned that personal data has been obtained by others through unlawful means, the situation will be immediately reported to the Personal Data Protection Board in accordance with legal regulations and in writing.
Keeping Personal Data Current and Accurate
In accordance with Article 4 of the KVKK, MIXXIT TURKEY has an obligation to keep your personal data accurate and up-to-date. In this context, for MIXXIT TURKEY to fulfill its obligations arising from the current legislation, our Customers must share their accurate and up-to-date data or update it via the website/mobile application.
Rights of the Personal Data Owner Under KVKK No. 6698
Article 11 of KVKK No. 6698 came into force on October 7, 2016, and in accordance with the relevant article, the rights of the Personal Data Owner after this date are as follows:
The Personal Data Owner, by applying to MIXXIT TURKEY (data controller), has the right to:
- Learn whether personal data is processed,
- Request information if personal data has been processed,
- Learn the purpose of processing personal data and whether they are used in accordance with their purpose,
- Know the third parties to whom personal data are transferred domestically or abroad,
- Request correction of personal data if it is incomplete or incorrectly processed,
- Request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,
- Request that these operations be notified to third parties to whom personal data are transferred, if personal data are corrected, deleted, or destroyed,
- Object to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems,
- Demand compensation for damages if personal data is processed unlawfully.
MIXXIT TURKEY, registered under the Istanbul Chamber of Commerce with registration number 158449-5, MERSIS number 0621082055100001, located at Ambarlı Mahallesi Dr. Sadık Ahmet Cd. No:143, 34315 Avcılar – İstanbul, is the Data Controller within the scope of the KVKK.
The Data Controller Representative to be appointed by MIXXIT TURKEY will be announced in the Data Controllers Registry and on the internet address where this document is located, when the legal infrastructure is provided.
Personal Data Owners can direct their questions, opinions, or requests to any of the following communication channels:
E-mail: info@mixxit.com.tr Phone: (0212) 559 63 74
MIXXIT TURKEY may respond positively/negatively to forwarded requests, provided they are reasoned and answered within 30 days, in writing or digitally. It is essential that the necessary procedures for requests are free of charge. However, if the procedures require a cost, MIXXIT TURKEY reserves the right to charge a fee. These fees are determined by the Personal Data Protection Board according to the tariff determined in accordance with Article 13 of the Personal Data Protection Law.