1. Purpose and Scope of Privacy Policy
Personal Data within the scope of KVK Law; means any information relating to an identified or identifiable natural person. According to the provisions of the KVKK, the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system is defined as the data controller. In terms of KVKK, our company's position is Data Controller.
This document (“Policy”) has been written in order to enlighten the real persons whose personal data our Company processes as a data controller within the scope of Article 10 of the KVKK. Beta reserves the right to update the text of this Statement on the Protection of Personal Data at any time within the framework of the changes that can be made in the current legislation.
2. Methods of Collection of Personal Data and Legal Basis
Beta Store collects personal data from betastore.com.tr website, the website's mobile applications, social media accounts, cookies, call center, notifications from administrative and judicial authorities and other communication channels to establish commercial relations with our company in audio, electronic or written form. KVK Law, in a physical or virtual environment, face-to-face or distance, verbally or in writing or electronically, received from people who share their personal data with business cards, CVs, bids and other ways for purposes such as applying for a job, making an offer, etc. in accordance with the personal data processing conditions specified in the .
There are regulations in various laws regarding the use of personal data. In the first place, the principles of protection of personal data were determined with KVKK. In addition, the Law No. 6563 on the Regulation of Electronic Commerce includes a provision on the protection of personal data. Penal sanctions are envisaged in some cases for the protection of personal data through the provisions of the Turkish Penal Code No. 5237.
3. Purposes of Processing Personal Data
In accordance with the law, as a rule, personal data cannot be processed without the explicit consent of the data owner. Beta Store will be able to record, store, update, disclose, transfer, classify and process your personal information to third parties in cases and to the extent permitted by the legislation.
Your personal data is used for the following purposes:
• Confirming the identity information of the registrant/registered via the website/mobile applications,
• To record the address and other necessary information for communication,
• To provide information to public officials on matters related to public safety, upon request and in accordance with the legislation,
• To provide a better service to our customers, to provide information to our customers about our products that may be of interest to our customers, "taking into account the interests of our customers", to convey announcements, information and malfunction situations,
• To increase customer satisfaction, to be able to recognize our customers who make wishes and complaints on the website and/or mobile applications and to use them in customer environment analysis, to use them in various marketing and advertising activities, and to organize surveys in electronic and/or physical environment through contracted institutions in this context,
• To be able to evaluate customer complaints and suggestions about our services,
• To be able to fulfill our legal obligations and to use our rights arising from the current legislation.
• To collect the work permit form, information and documents of the companies that will work on our lines, stations, campuses and vehicles, as well as the occupational safety training and identity information of their employees, to verify this information, to follow the training and working time and processes,
• Personal data of our employees can be processed without consent as far as necessary in terms of business relations. However, Beta Store ensures the confidentiality and protection of the data of its employees. According to the Law, data related to race, ethnic origin, political thought, philosophical belief, religion, sect or other beliefs, disguise and dress, membership to associations, foundations or unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data is personal data of special nature. Beta Store also takes adequate measures determined by the Board, in addition to the consent of the person concerned, in the processing of sensitive personal data. Special categories of personal data can be processed without the consent of the person, but only in relation to the cases permitted by the Law and in a limited manner.
4. Our Company's Rights and Obligations arising from the Law
Personal data by our company, in accordance with Article 20 of the Constitution and Article 4 of the Personal Data Protection Law (KVKK),
• Compliant with the law and honesty rules,
• Accurately and up-to-date when necessary,
• Pursuing specific, clear and legitimate purposes,
• Related to the purpose,
• In a limited and measured way,
• By keeping it for as long as required by the laws or for the purpose of processing personal data,
• It is processed based on one or more of the conditions specified in Article 5 of the KVKK.
Personal data shared with Beta Store is under the supervision and control of Beta Store. Beta Store, as a data controller, is responsible for establishing the necessary organization and taking and adapting technical measures in order to protect the confidentiality and integrity of information in accordance with the applicable legislation provisions. Being aware of our obligation in this regard, we would like to state that we have taken the following administrative and technical security measures. In this context, we inform you that we always update our data processing policies.
• All data received via our web or mobile applications are transferred from your computer or mobile device to our application servers with a 256-bit RSA SSL certificate compatible with TLS 1.2 standard. Your critical information is not kept on the servers of our application in any way, it is encrypted in the standards required by the relevant payment system and transmitted to the relevant system infrastructure.
• Penetration tests are carried out periodically and the system's resistance to unauthorized access is tested.
• Access authorization and control matrices have been established for employees in order to prevent illegal processing of personal data collected from the website or mobile application.
• Personal data in paper media are always kept in locked cabinets and only authorized persons have access.
The rights you have in accordance with the KVKK are the obligations of Beta Store. We would like to inform you that we process your personal data with this awareness and to the extent required by the legislation, in case of legal changes, we will update this information on our page in accordance with the new legislation, and you can easily follow the updates on this page at any time.
In accordance with Article 4 of the KVKK, Beta Store has an obligation to keep your personal data accurate and up-to-date. In this context, in order for Beta Store to fulfill its obligations arising from the current legislation, our customers are required to share accurate and up-to-date data with Beta Store. If your data is changed in any way, we request you to update your data by contacting us through the communication channels listed below.
Our company stores the personal data it processes for the periods determined by the legislation, and in the absence of a separate period specified in the legislation; Personal data are stored for the period that requires processing in accordance with the practices of our Company and the practices of commercial life, depending on the services our company provides while processing that data, and after this period, only for the periods that are necessary in practice in order to constitute evidence in possible legal disputes. After the expiry of the specified periods, the personal data in question are deleted, destroyed or anonymized. (Anonymization of personal data means that personal data cannot be associated with an identified or identifiable natural person under any circumstances, even by matching them with other data.)
5. Rights of Data Owners Arising from Law
According to Article 11 of the Law, personal data owners;
• To learn whether personal data about himself is processed,
• If personal data about him/her has been processed, requesting information about it,
• To learn the purpose of processing personal data and whether they are used in accordance with the purpose,
• Knowing the third parties to whom personal data is transferred in the country or abroad,
• Requesting correction of personal data in case of incomplete or incorrect processing,
• Requesting the deletion or destruction of personal data in the event that the reasons requiring processing disappear, although it has been processed in accordance with the provisions of the law and other relevant laws,
• Requesting notification of the transactions made as a result of rectification, deletion and destruction requests to third parties to whom personal data has been transferred,
• Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
• It has the right to demand the compensation of the damage in case of loss due to unlawful processing of personal data.
Paragraph 2 of Article 28 of the Law regulates that in certain circumstances, the data owner cannot make a claim from the data controller other than the compensation of the damages. According to this,
• The processing of personal data is necessary for the prevention of crime or for criminal investigation,
• Processing of personal data made public by the person concerned,
• Personal data processing is required by the authorized and authorized public institutions and organizations and professional organizations in the nature of public institutions for the execution of supervisory or regulation duties and for disciplinary investigation or prosecution, based on the authority given by the law,
• The processing of personal data is necessary for the protection of the economic and financial interests of the State with regard to budget, tax and financial matters,
In such cases, the above-mentioned rights cannot be used for the relevant data.
6. Transfer of Personal Data
The sharing of personal data of our customers with third parties takes place within the framework of the consent of the customers and as a rule, personal data is not transferred to third parties without the consent of our customers.
However, due to and limited to our legal obligations, personal data is shared with courts and other public institutions. In addition, personal data is transferred to contracted third parties in order to provide the services we undertake and to control the quality of the services provided.
Necessary technical and legal measures are taken to prevent violations of rights during data transfer to third parties. However, Beta Store is not responsible for violations that occur in the risk area of the third party's data protection policies and the third party's responsibility.
Your personal data To be able to provide better service to you and to ensure customer satisfaction, with the institutions and organizations that Beta Store cooperates with in order to carry out its activities, with domestic/foreign individuals and institutions where we get data storage services in the cloud environment, and with domestic/foreign organizations that we have contracted to send commercial electronic messages to our customers. It can be shared with various domestic and foreign agencies, advertising companies and survey companies, other domestic/foreign third parties and our relevant business partners, within the scope of various marketing activities for our company.
Personal data by our company; After the declaration of foreign countries with adequate protection by the Personal Data Protection Board, it will only be transferred to these countries. For countries that are declared not to have sufficient protection; In cases where data controllers in Turkey and the relevant foreign country undertake in writing to provide adequate protection and the Board has permission, personal data will be transferred.