General information about the Personal Data Law

Personal Data Protection Law No. 6698 (hereinafter referred to as KVKK) was accepted on March 24, 2016 and published in the Official Gazette No. 29677 dated April 7, 2016. Some parts of KVKK entered into force on the date of publication, while others entered into force on October 7, 2016.

Information as data controller

As FOREST YAPI, whose detailed corporate information is published below, in accordance with the KVKK numbered 6698 and as the Data Controller, your personal data will be recorded, stored, updated, disclosed / transferred to third parties in cases permitted by the legislation, classified and processed in the ways listed in the KVKK within the framework explained on this page.

How your personal data may be processed

In accordance with the KVKK numbered 6698, your personal data that you share with FOREST YAPI may be processed by us, in whole or in part, automatically or non-automatically provided that it is part of any data recording system, by obtaining, recording, storing, changing, reorganizing, in short, by any kind of transaction performed on the data. Any transaction performed on the data within the scope of the KVKK is considered as “processing of personal data”.

Purposes and legal reasons for processing your personal data

Personal data you share,

• In order to fulfill the requirements of the services we provide to our customers in accordance with the requirements of the contract and technology and to improve our products and services;
• To record the identity, address and other necessary information to identify the transaction owner within the scope of the Law on Regulation of Electronic Commerce numbered 6563, the Law on Protection of Consumers numbered 6502 and the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette dated 26.08.2015 and numbered 29457, which was prepared based on these regulations, the Distance Contracts Regulation published in the Official Gazette dated 27.11.2014 and numbered 29188 and other relevant legislation;
• To organize all records and documents that will form the basis of payment systems, electronic contracts or paper transactions that are mandatory in the field of Banking and Electronic Payments; to comply with the information storage, reporting and notification obligations stipulated by legislation and other authorities;
• To provide information to prosecutors, courts and relevant public officials on matters related to public security and legal disputes, upon request and as required by law;

It will be processed in accordance with the KVKK numbered 6698 and relevant secondary regulations.

Information about third parties or organizations to which your personal data may be transferred

For the purposes specified above, the persons/organizations to whom your personal data that you have shared with FOREST YAPI may be transferred are; our main shareholders, our direct or indirect domestic/international affiliates; Member companies using FOREST YAPI e-commerce infrastructure, and persons and organizations related to the service provided, primarily but not limited to these, program partner organizations, domestic/international organizations and other 3rd parties from whom we receive services and cooperate in order to carry out our activities and/or as Data Processors.

How your personal data is collected

Your personal data,

• Through the forms on the FOREST YAPI website and mobile applications and/or through the websites of the Member Companies using the FOREST YAPI E-Commerce infrastructure, information such as name, surname, Turkish identity number, address, telephone, business or private e-mail address; preferences on the pages accessed using the user name and password, IP records of the transactions performed, cookie data collected by the browser and data including browsing duration and details, in the form of location data;
• Verbally, in writing or electronically through our sales and marketing department employees, agencies, dealers, paper forms, business cards, digital marketing and call center channels;
• Received from persons who share their personal data with FOREST YAPI for purposes such as establishing a commercial relationship, applying for a job, making an offer, through business cards, CVs, making an offer, and other means, in a physical or virtual environment, face to face or at a distance, verbally or in writing or electronically;
• In addition, data obtained indirectly from different channels, from (micro) websites and social media used for similar purposes such as websites, blogs, competitions, surveys, games, campaigns, e-bulletin reading or clicking movements, data provided by public databases, profiles and data open to sharing on social networking sites such as social media platforms (Facebook, Twitter, Google, Instagram, Snapchat, etc.) can be processed and collected.

Your personal data obtained before the KVKK came into force

Your personal data obtained lawfully through membership, electronic message permission, product/service purchase and other means before the effective date of the KVKK, April 7, 2016, are also processed and stored in accordance with the terms and conditions set out in this document.

Transfer of your personal data abroad

Your personal data collected through any of the methods listed above, to be processed in Turkey or to be processed and stored outside Turkey, may also be transferred to service intermediaries located abroad (in countries accredited by the Personal Data Board and with sufficient protection in terms of the protection of personal data), provided that it remains within the scope of the KVKK and in accordance with the contractual purposes.

Storage and protection of personal data

Your personal data will be kept confidential in the database and systems of FOREST YAPI in accordance with Article 12 of the KVKK and will not be shared with third parties in any way except for legal obligations and the regulations specified in this document.

FOREST YAPI is obliged to prevent the unlawful processing of personal data and to prevent unauthorized access to the systems and databases where your personal data is stored, in accordance with Article 12 of the KVKK; to take software measures such as hashing, encryption, transaction logging, access management and physical security measures in order to ensure their preservation. In the event that it is learned that personal data has been obtained by others through illegal means, the situation will be reported immediately, in accordance with the legal regulation and in writing to the Personal Data Protection Board.

Keeping personal data up to date and accurate

In accordance with Article 4 of the KVKK, FOREST YAPI is obliged to keep your personal data accurate and up-to-date. In this context, in order for FOREST YAPI to fulfill its obligations arising from the current legislation, our Customers must share their accurate and up-to-date data or update it via the website / mobile application.

Rights of personal data owners pursuant to KVKK No. 6698

Article 11 of the KVKK No. 6698 entered into force on October 7, 2016, and pursuant to the relevant article, the rights of the Personal Data Owner after this date are as follows:

1. The Personal Data Owner can apply to FOREST YAPI (data controller) and request the following information regarding himself/herself:
2. Learning whether personal data is being processed,
3. To request information regarding the processing of personal data,
4. To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
5. To know the third parties to whom personal data is transferred, either domestically or abroad,
6. To request correction of personal data if it is processed incompletely or incorrectly,
7. Request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,
8. To request that, in case of correction, deletion or destruction of personal data, these operations be notified to third parties to whom personal data has been transferred,
9. To object to a result that is to the detriment of the person himself/herself, as a result of the analysis of the processed data exclusively through automatic systems,
10. In case of damage caused by unlawful processing of personal data, the person has the right to demand compensation for the damage.

FOREST YAPI, registered with the Istanbul Chamber of Commerce under the registry number 257248-5, with the MERSİS number 0388142590700001, located at Adnan Kahveci Mahallesi, Çamlıtepe Caddesi Dora Park 5 Evleri A3 Blok Office No: 17/12 Beylikdüzü– İstanbul, is the Data Controller within the scope of KVKK.

The Data Controller Representative to be appointed by FOREST YAPI will be announced in the Data Controllers Registry and on the internet address where this document is located once the legal infrastructure is provided.

Personal Data Owners may direct their questions, opinions or requests to any of the following communication channels:

E-mail: [email protected]

Telephone: (0212) 431 62 32

FOREST YAPI may give a positive/negative response to the submitted requests in writing or digitally, provided that it is reasoned and responds within 30 days. It is essential that the necessary procedures regarding the requests are free of charge. However, if the procedures require a cost, FOREST YAPI reserves the right to request a fee. These fees are determined by the Personal Data Protection Board according to the tariff determined in accordance with Article 13 of the Personal Data Protection Law.