Confidentiality Agreement

Protection of personal data is an important issue for maxmerter.com. maxmerter.com, as the data controller, adopts the principles stipulated by the KVK Law in order to comply with the Personal Data Protection Law No. 6698 ("KVK Law"), processing, deleting, destroying, anonymizing, transferring personal data, and informing the relevant person. and fulfills its obligations regarding ensuring data security. In this context, the Privacy and Personal Data Protection Policy is made available to natural persons whose personal data is processed ("Relevant Person").

1. Scope and Purpose of the Privacy and Personal Data Protection Policy

This Privacy and Personal Data Protection Policy;

Methods and legal reasons for collecting personal data,

Which person groups' personal data are processed (Data Subject Person Group Categorization),

Which categories of personal data are processed regarding these groups of people (Data Categories) and sample data types,

In which business processes and for what purposes this personal data is used,

Technical and administrative measures taken to ensure the security of personal data,

To whom and for what purpose personal data may be transferred,

Personal data retention periods,

Profiling and Segmentation

What are the rights of Relevant Persons regarding their personal data and how they can exercise these rights,

How Relevant Persons can change their positive or negative preferences regarding receiving electronic commercial messages,

Sharing personal data with official authorities

Cookie Use and Management

explains.

a. Personal Data Collection Methods and Legal Reasons

maxmerter.com personal data is specified in Article 5 of the Personal Data Protection Law No. 6698.

clearly stipulated in law

It is necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract.

It has been made public by the person concerned

Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned.

Data processing is mandatory for the establishment, exercise or protection of a right

Based on legal reasons, it collects audio, electronically or in writing through websites, websites' mobile applications, social media accounts, cookies, call center, notifications from administrative and judicial authorities and other communication channels.

b. Data Subject Person Group Categorization

maxmerter.com categorizes the groups of data subjects whose personal data are processed in personal data processing processes and activities related to these processes, as follows. In addition, personal data of other groups of individuals (consultants, educators, bloggers) may also be processed in accordance with the personal data processing conditions specified in Articles 5 and 6 of the KVK Law and in line with the legal reasons specified in this Privacy/Personal Data Protection Policy.

c. Data Categories and Sample Data Types

a) Member Customer

Identity Information: Name, surname, date of birth, gender, TR ID. identification number

Location Information: City, district (delivery address of purchases made through maxmerter.com)

Contact Information: mobile phone, e-mail address, address, postal code, landline phone

Financial Information: Tax office, invoice information

Customer/Member Information: Membership information, membership ID number

Customer/Member Transaction Information: Product/s purchased, shopping amount, shopping date, call center call records, commercial communication permission, campaigns/competitions used, coupons used, order-related information.

Risk Management Information: IP address

Transaction Security Information: Password, password information

Marketing Information: Cookie records, targeting information, reviews showing habits and tastes

Audio Data: Call center call recordings

Legal Transaction and Compliance Information: Start and end time of the service provided, type of service used, amount of data transferred, commercial electronic message permission given by the Relevant Person electronically, membership agreement approved, corporate membership agreement, which enables the use of services offered by maxmerter.com. other legal texts and agreements

Marketing Information: Marketing SMS, e-mail messages or calls made by the call center, sent based on the commercial electronic message permission given by the relevant person.

Request/Complaint Management/Reputation Management Information: Records regarding the complaints and/or requests submitted by the relevant person through the website, mobile application, social media accounts or call center regarding the product or service purchased by the relevant person, and the transactions carried out during the evaluation or management of these requests.

Online Visitor

Transaction Security Information: Password, mobile phone, password information

Legal Action Information/Risk Management Information: IP address

Legal Transaction and Compliance Information: Start and end time of the service provided, type of service used, amount of data transferred.

Person to whom the purchased product will be delivered

Identity Information: Name, surname, date of birth, gender, TR ID. identification number

Location Information: City, district (delivery address of purchases made through maxmerter.com)

Contact Information: mobile phone, e-mail address, address, postal code, landline phone

Financial Information: Tax office, invoice information

Seller/Supplier/Seller Candidate/Seller or Supplier Employee or Official

Identity Information: TR ID Number, Name and Surname

Contact Information: e-mail address, telephone, KEP address, address, mobile phone

Financial Information: Account Number, Tax office, Tax Identification Number, tax plate, IBAN

Legal Transaction and Compliance Information: Signature circular, activity certificate,

Special Personal Data/Legal Process Information: Signature

Visual Information: Photo

In Which Business Processes and For What Purposes are Personal Data Used?

a) Member Customer Personal Data

Carrying out membership transactions,

“maxmerter.com” e-commerce platforms (“platform”) operated by maxmerter.com; Improving the services offered through, developing new services and providing information about them,

For the purpose of fulfilling the Membership Agreement established with the Member Customer, for Member Customers who have commercial electronic message approval; Analyzing the Member Customer's preferences, tastes and needs and providing special promotions, opportunities and benefits to the Member Customer,

Promoting and marketing applications, goods/products and services in line with the Member Customer's preferences and liking by performing remarketing, targeting, profiling and analysis in line with the Member Customer's explicit consent,

Resolving Member Customer problems and complaints,

Improving the Member Customer experience on both the platform and mobile application,

Follow-up of accounting and purchasing transactions,

Legal processes and compliance with legislation,

Answering information requests from administrative and judicial authorities,

Ensuring information and transaction security and preventing malicious use,

Making necessary arrangements to ensure that the processed data is up-to-date and accurate

b) Guest Customer (users who shop on the site without being a member) Personal Data

Being able to shop from the platforms as a "guest",

Improving the services offered through the platforms, developing new services and providing information about them,

For Guest Customers who have commercial electronic message approval; Analyzing preferences, tastes and needs and providing special promotions, opportunities and benefits to Guest Customers,

Promoting and marketing applications, goods/products and services in line with the Guest Customer's preferences and tastes by performing remarketing, targeting, profiling and analysis in line with the Guest Customer's explicit consent,

Resolving Guest Customer problems and complaints,

Improving the Guest Customer experience on both the platform and mobile application,

Follow-up of accounting and purchasing transactions,

Legal processes and compliance with legislation,

Answering information requests from administrative and judicial authorities,

Ensuring information and transaction security and preventing malicious use,

Making the necessary arrangements to ensure that the processed data is up-to-date and accurate,

Fulfillment of legal obligations

Online Visitor Personal Data

Processing of online visitor data within the scope of Law No. 5651,

Legal processes and compliance with legislation,

Answering information requests from administrative and judicial authorities,

Ensuring information and transaction security and preventing malicious use,

Fulfillment of legal obligations

Personal Data of the Person to whom the Purchased Product will be Delivered

Execution of product delivery processes,

Follow-up of accounting and purchasing transactions,

Legal processes and compliance with legislation,

Answering information requests from administrative and judicial authorities,

Ensuring information and transaction security and preventing malicious use,

Making the necessary arrangements to ensure that the processed data is up-to-date and accurate,

Fulfillment of legal obligations

Personal Data of Seller/Supplier/Seller Candidate/Seller or Supplier Employee or Official

Execution of contract processes,

Follow-up of accounting and purchasing transactions,

Legal processes and compliance with legislation,

Answering information requests from administrative and judicial authorities,

Ensuring information and transaction security and preventing malicious use,

Making the necessary arrangements to ensure that the processed data is up-to-date and accurate,

Fulfillment of legal obligations,

Online Visitor Personal Data

Processing of online visitor data within the scope of Law No. 5651,

Legal processes and compliance with legislation,

Answering information requests from administrative and judicial authorities,

Ensuring information and transaction security and preventing malicious use,

Fulfillment of legal obligations

Personal Data of the Person to whom the Purchased Product will be Delivered

Execution of product delivery processes,

Follow-up of accounting and purchasing transactions,

Legal processes and compliance with legislation,

Answering information requests from administrative and judicial authorities,

Ensuring information and transaction security and preventing malicious use,

Making the necessary arrangements to ensure that the processed data is up-to-date and accurate,

Fulfillment of legal obligations

Personal Data of Seller/Supplier/Seller Candidate/Seller or Supplier Employee or Official

Execution of contract processes,

Follow-up of accounting and purchasing transactions,

Legal processes and compliance with legislation,

Answering information requests from administrative and judicial authorities,

Ensuring information and transaction security and preventing malicious use,

Making the necessary arrangements to ensure that the processed data is up-to-date and accurate,

Fulfillment of legal obligations

Technical and Administrative Measures Taken to Ensure the Security of Personal Data

maxmerter.com undertakes to take all necessary technical and administrative measures and to show due care to ensure the confidentiality, integrity and security of your personal data.

maxmerter.com takes the necessary precautions to prevent unauthorized access to personal data, misuse, unlawful processing, disclosure, alteration or destruction of personal data. maxmerter.com uses generally accepted security technology standards such as firewalls and Secure Socket Layer (SSL) encryption when processing personal data. In addition, when sending your personal data to maxmerter.com through the website, mobile application and mobile site, this data is transferred using SSL.

Regarding preventing unlawful access to personal data processed by maxmerter.com, preventing unlawful processing of these data and ensuring the protection of personal data:

All areas on the website or mobile application where personal data is collected are protected by SSL.

Creates and implements access authorization and control matrices for its employees to prevent unlawful processing of personal data collected from the website or mobile application,

To ensure that personal data is not accessed unlawfully; performs periodic penetration tests, tests the system's resistance to unauthorized access,

It uses the Pseudonymization method for all secondary data processing other than the primary processing purpose. In order to ensure that pseudonymous data makes it impossible to identify the relevant person, it uses encryption methods in the systems where this data is located and applies a stricter access authorization and control policy to this data,

It ensures that personal data in paper form is kept in locked cabinets and can only be accessed by authorized persons.

Personal data processed through cookies belonging to third parties from whom services are received are deleted from third party systems if the membership is terminated.

Although maxmerter.com takes the necessary information security measures, in the event that personal data is damaged or falls into the hands of unauthorized third parties as a result of attacks on the platforms operated by maxmerter.com or the maxmerter.com system, maxmerter.com will immediately notify you and the Personal Data Protection Board of this situation. Notifies and takes necessary precautions.

f. To Whom and For What Purposes Personal Data Can Be Transferred

maxmerter.com transfers personal data to third parties only for the purposes specified in this Privacy and Personal Data Protection Policy and in accordance with Articles 8 and 9 of the KVK Law. In this context, the Member Customer/Guest Customer data processed and the person to whom the purchased product will be delivered are shared with the seller and the cargo company, and these data can also be accessed by the call center when necessary. The information of the person on whose behalf the invoice will be issued is shared with the cargo company in order to send the invoice to the relevant person.

Member Customer/Guest Customer's mobile phone number and/or e-mail address; Based on the commercial electronic message approval, it is shared with the commercial electronic message service provider in order to be able to promote, advertise, and offer benefits and opportunities in line with shopping preferences, tastes and habits.

Website or mobile application usage preferences and navigation history are shared with our domestic/international business partners who receive cookie services for the purpose of segmentation and communicating with Member Customers/Guest Customers in line with their likes and preferences. Personal data transfers carried out in this context are carried out through the secure environment and channels provided by the relevant third party. Depending on the content and scope of the service received from third parties; In all cases where there is no need to transfer the personal data of the Member Customer/Guest Customer, the transfer is made using Pseudonymous data (pseudonymous data).

In order to increase Member Customer/Guest Customer satisfaction and loyalty, Member Customer/Guest Customer data is shared with companies that will conduct market research.

Within the scope of reporting and statistical studies, Member Customer/Guest Customer data is not shared with anyone.

Your personal data will additionally be shared with our business partners abroad for the purposes of providing business development services, providing statistical and technical services and carrying out customer relations.

If a Member Customer/Guest Customer/Online Visitor reaches maxmerter.com via the corporate WhatsApp line, he/she will be sending his/her personal data abroad since the Whatsapp platform is a service offered abroad. If the Member Customer/Guest Customer/Online Visitor does not want to send their personal data abroad using Whatsapp, they will be able to use other communication opportunities offered by maxmerter.com.

Personal data subject to domestic and international transfer as mentioned above, in addition to technical measures to ensure their security; Considering that the other party of the legal relationship is the data controller or data processor, it is also legally protected thanks to the provisions compatible with the KVK Law included in our contracts.

While sharing information as stated above and transferring personal information to countries other than Turkey, the data is transferred in accordance with this policy and as permitted by the applicable law regarding data protection.