Personal Data Protection Law

VISITOR INFORMATION NOTICE

With this Information Notice, we aim to inform you about the procedures and principles regarding the processing of your personal data by Eternate (the “Company”), the data controller domiciled at “Dudullu OSB Imes A/102 No:1 34775 Istanbul / Turkey”, within the scope of the Law No. 6698 on the Protection of Personal Data (“Law”) and the relevant legislation.

1. Purposes of Processing Personal Data

Your personal data obtained within the scope of your visit to our website may be processed by our Company for the following purposes:

  • Evaluating and responding to requests, questions, suggestions, and complaints submitted via the contact form, contact portal, and/or our social media accounts,

  • Carrying out the necessary business processes to enable relevant persons to benefit from the products and services offered by our Company,

  • Developing and improving services and enhancing user experience,

  • Promoting and recommending products and services by customizing them in line with users’ interests, preferences, usage habits, and needs,

  • Conducting commercial activities, planning business processes, and determining and implementing the Company’s commercial and/or business strategies,

  • Resolving technical issues that may arise on the website or mobile applications,

  • Managing customer relations processes in order to provide higher-quality and more effective services,

  • Sending commercial electronic messages and enabling you to benefit from e-newsletter services, provided that you give your explicit consent,

  • Ensuring the legal, technical, and commercial/business security of the Company and persons who have a business relationship with the Company.

 

 

2. Method and Legal Basis for Collecting Personal Data

Your personal data are collected through cookies during your visit to our website, as well as through the completion of forms available on the website, by fully or partially automated or non-automated methods, in written and electronic environments.

Your collected personal data are processed based on the following legal grounds specified in Article 5 of the Law:

  • Being explicitly stipulated by laws pursuant to Article 5/2(a) of the Law,

  • Being mandatory for the data controller to fulfill its legal obligations pursuant to Article 5/2(ç) of the Law,

  • Being mandatory for the legitimate interests of the Company, provided that it does not harm your fundamental rights and freedoms, pursuant to Article 5/2(f) of the Law,

  • Fulfillment of obligations regarding the retention of traffic data within the scope of Law No. 5651.

 

3. Transfer of Personal Data

Your personal data may be transferred, limited to the purposes of processing and in accordance with the conditions stipulated in Articles 8 and 9 of the Law, to:

  • Our business partners,

  • Our outsourced service providers (including hosting service providers, and to abroad in cases where such service providers are located abroad),

  • Our Company affiliates,

  • Legally authorized public institutions and organizations and private persons.

 

4. Rights of the Data Subject and Application Methods

Pursuant to Article 11 of the Law, by applying to our Company, you have the right to:

  • Learn whether your personal data are processed,

  • Request information if your personal data have been processed,

  • Learn the purpose of processing and whether they are used in accordance with their purpose,

  • Learn the third parties to whom personal data are transferred domestically,

  • Request correction if personal data are incomplete or incorrectly processed,

  • Request deletion or destruction of personal data within the framework of Article 7 of the Law,

  • Request notification of these transactions to third parties to whom personal data have been transferred,

  • Object to the occurrence of a result against you through analysis exclusively by automated systems,

  • Request compensation for damages in case you suffer damage due to unlawful processing of personal data.

You may submit your applications regarding these rights, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, in writing to the address “Dudullu OSB Imes A/102 No:1 34775 Istanbul / Turkey” or via the e-mail address service@eternate.com.tr.

Our Company finalizes your requests free of charge as soon as possible and at the latest within thirty (30) days. However, if the process requires an additional cost, a fee may be charged. In case your request is rejected, the reason for rejection shall be notified to you in writing.

If the application is rejected, the response is deemed insufficient, or no response is provided within the prescribed period, you have the right to file a complaint with the Personal Data Protection Board within thirty (30) days following the notification of the response and, in any case, within sixty (60) days from the date of application. A complaint cannot be filed with the Board without exhausting the application procedure.

If the Board determines any illegality as a result of complaints or ex officio examination, it decides on the elimination of such violations, and these decisions are notified to the data controller. Said decisions shall be fulfilled without delay and at the latest within thirty (30) days from the date of notification.

Your personal data are protected with great care by our Company, and we thank you for the trust you place in us.