Codes of Conduct
Privacy and Personal Data Protection Policy;
Special to Your Personal Use is an important issue for POLMEK Group. In order to comply with the Law No. 6698 on the Protection of Personal Data (‘KVK Law’), POLMEK Group adopts the principles stipulated by the KVK Law and fulfils the obligations of processing, deleting, destroying, anonymising and transferring personal use. Please review the details of the Privacy and Personal Data Protection Policy.
SCOPE AND PURPOSE OF THE POLICY ON PRIVACY AND PROTECTION OF PERSONAL DATA
Methods and Legal Grounds for Collecting Personal Data
Polmek Group collects personal data through websites, mobile applications of websites, social media graphics in audio, electronic or written form.
Polmek Group personal data are collected electronically or in writing using websites, mobile applications of websites, social media graphics, cookies, call centre, notifications from administrative and judicial authorities and other communication guides, among the legal reasons in the KVK Law / Personal Data Protection Policy.
Data Subject Person Group Categorization
Polmek Group in personal data processing processes and activities related to these processes. In accordance with the personal data processing conditions in Articles 5 and 6 of the KAHK Law and for legal reasons for this Privacy / Personal Data Protection Requirement.
Data Categories and Sample Data Types
Customer / Member, Potential Customer / Member
• Identity Information: Name, surname, Title, Date of birth, gender, TR ID number, Tax Identification Number
• LOCATION Information: City, district of residence
• Contact Information: Mobile phone, e-mail address, address, postal code, landline phone
• Financial Information: Tax office, Invoice information
• Customer / Member Information: Membership information, membership ID number
• Customer / Member Transaction Information: Information about the product(s) purchased, shopping amount, shopping date, call center call records, commercial communication permission, campaigns used, coupons used, order information.
• Risk Management Information: IP address
• Transaction Security Information: Password, password information
• Marketing Information: Cookie records, targeting information, reviews showing habits and tastes
• Audio Data: Call center call recordings
• Legal Transaction and Compliance Information: Type of service to be used, type of service used, amount of data transferred, Commercial electronic communication permission for the Relevant Person's electronic service, approval membership agreement, corporate membership agreement, distance sales agreement and Polmek Group other legal texts and agreements.
• Marketing Information: Calls made by the call center or SMS for marketing purposes sent based on commercial electronic message permission for relevant information.
• Registration procedures / Request / Complaint Management / Reputation Management Information: Relevant Website
Online Visitor
• Transaction Security Information: Password, mobile phone, password information
• Legal Action Information / Risk Management Information: IP address
• Legal Transaction and Compliance Information: Type of service to be used, amount of data transferred.
texts and contracts
Person to whom the purchased product will be delivered
• Identity Information: Name, surname, date of birth, gender, TR ID number, Tax Identification Number
• LOCATION Information: City of residence,
• Contact Information: mobile phone, e-mail address, address, postal code, landline phone
• Financial Information: Tax office, invoice information
Seller / Seller Candidate / Seller Employee or Official
• Identity Information: TR ID Number, Name and Surname
• Contact Information: e-mail address, telephone, KEP address, address, mobile phone
• Financial Information: Account Number, Tax office, Tax Identification Number, tax plate, IBAN
• Legal Transaction and Compliance Information: Signature circulars, activity certificate,
• Special Personal Data / Legal Process Information: Signature
• Visual Information: Photo
In Which Business Processes and For What Purposes are Personal Data Used?
You can review your activities regarding all processes on the personalized platforms operated by Polmek Group.
Relevant legislation review of online visitor data,
Being able to browse these platforms as a "member",
Carrying out membership transactions,
For the improvement of services through the platforms, the list of new services and information about them,
It is for the execution of the Membership Agreement associated with the Customer, commercial electronic message approval is for existing customers; Analyzing Customer / Member preferences, tastes and needs and special promotions, opportunities and benefits for Customer / Member,
Detailed relationship, commercial electronic message approval is for existing customers; Trip marketing, digital marketing, remarketing, targeting, profiling and analysis to find the preferences and tastes of the Customer / Member, promotion and marketing of goods / products and services,
Resolving customer / member problems and complaints,
Communicating with the Customer / Member based on commercial electronic message permission, improving the Customer / Member experience of both the platform and the mobile application,
Creating customer/member satisfaction, loyalty and commitment,
Evaluate statistical evaluations and market research,
Corporate reputation management,
Reviewing Polmek Group's commercial and business strategies,
Follow-up of accounting, finance and purchasing transactions,
Legal processes and compliance with legislation,
Answering information requests from administrative and judicial authorities,
Planning internal reporting and business development activities,
For information and transaction security and prevention of malicious use,
Planning and execution of the operational activities necessary to ensure your choice in accordance with Polmek Group's procedures and policies prepared within the scope of the KVK Law,
It is how to make the necessary arrangements to determine that the processed data is up-to-date and accurate.
Technical and Administrative Measures Taken to Ensure the Security of Personal Data
Polmek Group undertakes to take all necessary technical and administrative measures and to show due care for the confidentiality, integrity and security of personalized information.
Polmek Group specifies the necessary measures to prevent unauthorized access, misuse, unlawful processing, disclosure, alteration or destruction of personal data. Polmek Group uses generally acceptable security technology standards such as firewalls and Secure Socket Layer (SSL) encryption. In addition, when you send your personal characteristics to Polmek Group to design websites, mobile applications and mobile sites, the options are transferred via SSL on this site.
Polmek Group provides the following conditions for preventing unlawful access to personal data for business purposes, preventing unlawful processing of this feature, and preserving personal opinions:
Protecting all areas of the website or mobile application where personal data is collected with SSL,
Creates and operates access and control matrices for its employees to ensure that personal characteristics collected from the website or mobile application are not processed unlawfully,
It ensures that personal data is not accessed unlawfully; performs periodic penetration tests, tests the system's resistance to unauthorized access,
All secondary data operational purposes other than the primary processing purpose involve the Pseudonymization (pseudonymised data) method. The syntax uses the encryption methods of these systems by using the encryption methods of the data in your respective system.
Personal use in paper media ensures that it is kept in locked archives and can only be accessed by authorized persons.
Personally received data is deleted from third party systems.
Although Polmek Group takes Information Security measures, in the event that personal data is damaged or obtained by unauthorized third parties as a result of attacks on the platforms operated by Polmek Group or the Polmek Group system, Polmek Group immediately notifies you of this situation and takes the necessary measures. reports.
To Whom and For What Purpose Personal Data Can Be Transferred
Polmek Group transfers the personal data specified in the KVK Law ONLY to third parties for the purposes in accordance with the articles of this Privacy Policy 8.9. Protection of Personal Data.
In this context, the Customer / Member data processed and the person to whom the purchased product will be delivered are shared with the seller and the cargo company, and these data can also be accessed by the call center. You share the information of the person on whose behalf the invoice will be issued with the cargo company to send the invoice to the relevant person.
Customer parameters also; Providing benefits and opportunities for promotion, advertising purposes in order to select the customer's commercial electronic communication approval, shopping preferences, tastes and habits.
On the website or mobile application usage preferences and navigation screen, share the necessary login, cookie (cookie) services related to segmentation and to use the Customer / Member's likes and preferences with the third parties from whom the service is received. In this context, personal data transfers that you can use by the relevant third party take place between secure environments and channels. Depending on the content and scope of the service received from third parties; Transfer is made using pseudonymous data (pseudonymous data).
It shares anonymous data of Customers/Members, where customer satisfaction and loyalty needs to be increased, with companies that will conduct market research.
Polmek Group San Ve Tic., which belongs to the Customer / Member, in reporting and statistical studies. Ltd. Ltd. shares with.
In addition to technical measures to choose personalized security; Due to the provisions compatible with the KVK Law, the party must be the data controller or data processor.
Personal Data Storage Periods
Polmek Group preserves the personal data it processes in accordance with the KVK Law for the periods stipulated in the relevant legislation or required by the purpose of processing. Regarding personal data retention periods.
These periods are approximately detailed for your Personal Data Storage and Destruction Policy information:
Call Center voice recordings 3 years Law No. 6563 and relevant secondary legislation
Records regarding membership and orders 10 years Law No. 6098
All records regarding accounting and financial transactions 10 years Law No. 6102, Law No. 213
Cookies Maximum 540 days
Commercial electronic message approval records 1 year from the date of withdrawal of approval Law No. 6563 and relevant secondary legislation
Traffic information regarding online visitors 2 years Law No. 5651
Information and/or CVs received due to job application are valid for 1 year
On the personal page for customers: 10 years after the end of the legal relationship; 3 years in accordance with Law No. 6563 and relevant secondary legislation Law No. 6563, Law No. 6102, Law No. 6098, Law No. 213, Law No. 6502
In the personal case of suppliers, after 10 years after the legal relationship ends, Law No. 6102, Law No. 6098 and Law No. 213.
Personal data collected for usability testing research 2 weeks
You can review our Cookie Policy regarding the retention periods of personal data we obtain through cookies.
Profiling and Segmentation
Within the scope of profiling and segmentation studies, Customer/Member's personal data, especially their name and surname, mobile phone, e-mail or address information, are not used directly, instead transactions are carried out with the Customer/Member IDs assigned to them. Thanks to the use of Customer ID or, in other words, pseudonymous data, the personal data of the Customer/Member is protected.
Using the personal data Polmek Group processes regarding the Customer/Member;
Regarding the Customer/Member who has given his/her consent to receive commercial electronic messages, profiling and segmentation is carried out in order to prepare content more suitable for the Customer/Member's tastes and preferences, and to provide advertisements, promotions and discounts.
By profiling and segmenting the Customer/Member who has not given commercial electronic message approval;
Making product improvements (determining the best-selling or unsold product categories),
Modeling is done by analyzing shopping preferences and organizing campaigns for customer groups that have the potential to buy a certain product and uploading them to the system,
Studies such as taking actions to increase sales potential are being carried out.
Within the scope of profiling and segmentation studies, Customer/Member's personal data, especially their name and surname, mobile phone, e-mail or address information, are not used directly, instead transactions are carried out with the Customer/Member IDs assigned to them. Protecting the personal data of the Customer/Member is ensured through the use of Customer ID or, in other words, pseudonymous data. Customer/Member IDs are accessible only to relevant persons or departments within Polmek Group. These IDs assigned to the Customer/Member are kept encrypted within the system by Polmek Group, and access to this section is only granted to limited people.
What are the Rights of Relevant Persons on their Personal Data and How Can They Use These Rights?
Polmek Group. The Relevant Person has the right to request information regarding personal data processed in accordance with Article 11 of the KVK Law and to request deletion and correction of personal data processed by. Regarding the rights in question and the application mechanism.
Polmek Group. The rights that the Relevant Person has on the personal data processed by KVK Law, pursuant to Article 11, are listed below:
Technical and Administrative Measures Taken to Ensure the Security of Personal Data
Polmek Group undertakes to take all necessary technical and administrative measures and to show due care for the confidentiality, integrity and security of personalized information.
Polmek Group specifies the necessary measures to prevent unauthorized access, misuse, unlawful processing, disclosure, alteration or destruction of personal data. Polmek Group uses generally acceptable security technology standards such as firewalls and Secure Socket Layer (SSL) encryption. In addition, when you send your personal characteristics to Polmek Group to design websites, mobile applications and mobile sites, the options are transferred via SSL on this site.
Polmek Group provides the following conditions for preventing unlawful access to personal data for business purposes, preventing unlawful processing of this feature, and preserving personal opinions:
Protecting all areas of the website or mobile application where personal data is collected with SSL,
Creates and operates access and control matrices for its employees to ensure that personal characteristics collected from the website or mobile application are not processed unlawfully,
It ensures that personal data is not accessed unlawfully; performs periodic penetration tests, tests the system's resistance to unauthorized access,
All secondary data operational purposes other than the primary processing purpose involve the Pseudonymization (pseudonymised data) method. The syntax uses the encryption methods of these systems by using the encryption methods of the data in your respective system.
Personal use in paper media ensures that it is kept in locked archives and can only be accessed by authorized persons.
Personally received data is deleted from third party systems.
Although Polmek Group takes Information Security measures, in the event that personal data is damaged or obtained by unauthorized third parties as a result of attacks on the platforms operated by Polmek Group or the Polmek Group system, Polmek Group immediately notifies you of this situation and takes the necessary measures. reports.
To Whom and For What Purpose Personal Data Can Be Transferred
Polmek Group transfers the personal data specified in the KVK Law ONLY to third parties for the purposes in accordance with the articles of this Privacy Policy 8.9. Protection of Personal Data.
In this context, the Customer / Member data processed and the person to whom the purchased product will be delivered are shared with the seller and the cargo company, and these data can also be accessed by the call center. You share the information of the person on whose behalf the invoice will be issued with the cargo company to send the invoice to the relevant person.
Customer parameters also; Providing benefits and opportunities for promotion, advertising purposes in order to select the customer's commercial electronic communication approval, shopping preferences, tastes and habits.
On the website or mobile application usage preferences and navigation screen, share the necessary login, cookie (cookie) services related to segmentation and to use the Customer / Member's likes and preferences with the third parties from whom the service is received. In this context, personal data transfers that you can use by the relevant third party take place between secure environments and channels. Depending on the content and scope of the service received from third parties; Transfer is made using pseudonymous data (pseudonymous data).
It shares anonymous data of Customers/Members, where customer satisfaction and loyalty needs to be increased, with companies that will conduct market research.
Polmek Group San Ve Tic., which belongs to the Customer / Member, in reporting and statistical studies. Ltd. Ltd. shares with.
In addition to technical measures to choose personalized security; Due to the provisions compatible with the KVK Law, the party must be the data controller or data processor.
Personal Data Storage Periods
Polmek Group preserves the personal data it processes in accordance with the KVK Law for the periods stipulated in the relevant legislation or required by the purpose of processing. Regarding personal data retention periods.
These periods are approximately detailed for your Personal Data Storage and Destruction Policy information:
Call Center voice recordings 3 years Law No. 6563 and relevant secondary legislation
Records regarding membership and orders 10 years Law No. 6098
All records regarding accounting and financial transactions 10 years Law No. 6102, Law No. 213
Cookies Maximum 540 days
Commercial electronic message approval records 1 year from the date of withdrawal of approval Law No. 6563 and relevant secondary legislation
Traffic information regarding online visitors 2 years Law No. 5651
Information and/or CVs received due to job application are valid for 1 year
On the personal page for customers: 10 years after the end of the legal relationship; 3 years in accordance with Law No. 6563 and relevant secondary legislation Law No. 6563, Law No. 6102, Law No. 6098, Law No. 213, Law No. 6502
In the personal case of suppliers, after 10 years after the legal relationship ends, Law No. 6102, Law No. 6098 and Law No. 213.
Personal data collected for usability testing research 2 weeks
You can review our Cookie Policy regarding the retention periods of personal data we obtain through cookies.
Profiling and Segmentation
Within the scope of profiling and segmentation studies, Customer/Member's personal data, especially their name and surname, mobile phone, e-mail or address information, are not used directly, instead transactions are carried out with the Customer/Member IDs assigned to them. Protecting the personal data of the Customer/Member is ensured through the use of Customer ID or, in other words, pseudonymous data.
Using the personal data Polmek Group processes regarding the Customer/Member;
Regarding the Customer/Member who has given his/her consent to receive commercial electronic messages, profiling and segmentation is carried out in order to prepare content more suitable for the Customer/Member's tastes and preferences, and to provide advertisements, promotions and discounts.
By profiling and segmenting the Customer/Member who has not given commercial electronic message approval;
Making product improvements (determining the best-selling or unsold product categories),
Modeling is done by analyzing shopping preferences and organizing campaigns for customer groups that have the potential to buy a certain product and uploading them to the system,
Studies such as taking actions to increase sales potential are being carried out.
Within the scope of profiling and segmentation studies, Customer/Member's personal data, especially their name and surname, mobile phone, e-mail or address information, are not used directly, instead transactions are carried out with the Customer/Member IDs assigned to them. Protecting the personal data of the Customer/Member is ensured through the use of Customer ID or, in other words, pseudonymous data. Customer/Member IDs are accessible only to relevant persons or departments within Polmek Group. These IDs assigned to the Customer/Member are kept encrypted within the system by Polmek Group, and access to this section is only granted to limited people.
What are the Rights of Relevant Persons on their Personal Data and How Can They Use These Rights?
Polmek Group. The Relevant Person has the right to request information regarding personal data processed in accordance with Article 11 of the KVK Law and to request deletion and correction of personal data processed by. Regarding the rights in question and the application mechanism.
Polmek Group. The rights that the Relevant Person has on the personal data processed by KVK Law, pursuant to Article 11, are listed below:
Learning whether personal data is processed or not,
Requesting information if personal data has been processed,
Learning the purpose of processing personal data and whether they are used for their intended purpose,
Knowing the third parties to whom personal data is transferred at home or abroad,
Requesting correction of personal data if it is incomplete or incorrectly processed,
Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVK Law,
Requesting that the transactions carried out in accordance with paragraphs (d) and (e) be notified to third parties to whom personal data is transferred,
Objecting to the emergence of a result that is unfavorable to the individual by analyzing the processed data exclusively through automatic systems,
Request compensation for damages in case of damage due to unlawful processing of personal data.
In order to exercise your rights over your personal data; You can access your account from the "My Account" section of the Polmek Group website, mobile application and mobile site and make necessary changes, updates and/or deletions. Also, Polmek Group. You can make your application and exercise your rights using the methods specified in the "Application Form" prepared in accordance with Article 13 of the KVK Law on the website or mobile application of the electronic commerce platforms operated by .
How Relevant Persons Can Change Their Positive or Negative Preferences About Receiving Electronic Commercial Messages
Polmek Group. You can change or update your positive or negative preferences regarding receiving commercial electronic messages, which you have given while subscribing to the website or mobile application of the electronic commerce platforms operated by , or at a later time, at any time by accessing the "My Account" section.
Termination of membership does not mean withdrawing your consent to receive commercial electronic messages. For this reason, please also make sure that you have completed all the procedures regarding withdrawing your consent.
Regarding cookie management, you can follow the steps specified in our Cookie Policy.
Personal Data Sharing with Official Authorities
Polmek Group. Your personal data and traffic information such as your navigation information regarding your visit or membership to electronic commerce platforms and mobile applications operated by; Polmek Group. may legally request this information in order to fulfill its obligations under the law (in cases where Polmek Group. has a legal or administrative obligation to notify or provide information, including but not limited to the fight against crime, threat to state and public security, etc.). may be shared with public institutions and organizations authorized to do so.
Cookie Use and Management
You can review our Cookie Policy for detailed information about the cookies used by Polmek Group, cookie types, purposes, storage periods and cookie management.
Conditions for Deletion, Destruction and Anonymization of Personal Data
Polmek Group stores the personal data it processes through its website, mobile application or mobile site for the periods stipulated by the relevant laws and/or the periods required by the purpose of processing, in accordance with Articles 7, 17 of the KVK Law and Article 138 of the Turkish Penal Code.
If these periods expire, it will delete, destroy or anonymize it in accordance with the provisions of the Regulation on Deletion, Destruction or Anonymization of Personal Data.
Polmek Group. Deletion of personal data refers to the process of making personal data inaccessible and unusable for the relevant users in any way. Polmek Group. For this purpose, it creates and implements an access authorization and control matrix at the user level. It takes the necessary measures to perform deletion in the database.
Polmek Group. Destruction of personal data refers to the process of making personal data inaccessible, irretrievable and unusable by anyone.
Polmek Group. Personal anonymization by, do not identify yourself in any way, even when paired with another option for personal use.
Polmek Group has been prepared as the Regulation on Deletion, Destruction or Anonymization of Personal Data. In the Policy, the time period for the periodic destruction foreseen by the Regulation is designed as 6 months.