[NARPIEM] PERSONAL DATA POLICY

The Personal Data Protection Law No. 6698 (hereinafter referred to as PDPL/KVKK) was adopted on March 24, 2016, and published in the Official Gazette No. 29677 dated April 7, 2016. Some parts of the PDPL came into force on the date of publication, while others came into force on October 7, 2016.

In accordance with Law No. 6698 (PDPL) and in our capacity as the Data Controller, your personal data will be recorded, stored, updated, disclosed/transferred to third parties where permitted by legislation, classified, and processed in the manners specified in the PDPL within the framework explained on this page.

In accordance with Law No. 6698 (PDPL), your personal data shared with our Company may be processed by us, either fully or partially, by automatic means or non-automatic means provided that they are part of any data recording system, by obtaining, recording, storing, changing, rearranging, and in short, being subject to any operation performed on the data. Any operation performed on data within the scope of the PDPL is considered as "processing of personal data."

Personal data shared by you will be processed for the following purposes:

• To fulfill the requirements of the services provided to our customers in accordance with the contract and technology, and to improve the products and services offered;
• To record identity, address, and other necessary information to identify the transaction owner within the scope of Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on the Protection of Consumers, and the Regulation on Service Providers and Shared Service Providers in Electronic Commerce, the Regulation on Distance Contracts, and other relevant legislation;
• To organize all records and documents that will be the basis of the transaction in the field of banking and electronic payments, whether electronic or paper-based; to comply with information storage, reporting, and information obligations envisaged by the legislation and other authorities;
• To provide information to prosecutors, courts, and relevant public officials upon request and in accordance with the legislation regarding matters of public safety and legal disputes;

Personal data will be processed in accordance with Law No. 6698 (PDPL) and relevant secondary regulations. Information about third parties or organizations to which your personal data may be transferred: For the purposes stated above, the persons/organizations to which your personal data shared with our Company may be transferred include; IdeaSoft Yazılım San. ve Tic. A.Ş., which provides the e-commerce infrastructure of our Company, suppliers, cargo companies, persons and organizations related to the services provided, program partner organizations from which services are received in the capacity of Data Processor, domestic/international organizations, and other third parties.

Your personal data is collected as follows:

• Through forms on our Company's website and mobile applications, information such as name, surname, Turkish ID number, address, telephone, business or private e-mail address; preferences on pages logged in using username and password, IP records of performed transactions, cookie data collected by the browser, and data including navigation time and details, and location data;
• Orally, in writing, or electronically through our sales and marketing department employees, branches, suppliers, other sales channels, paper forms, business cards, digital marketing, and call center channels;
• In a physical or virtual environment, face-to-face or at a distance, orally or in writing or electronically, from persons who share their personal data for purposes such as establishing a commercial relationship with our Company, making a job application, or submitting a proposal;
• In addition, data obtained indirectly from different channels, from (micro) websites and social media used for websites, blogs, contests, surveys, games, campaigns, and similar purposes, e-bulletin reading or clicking movements, data provided by public databases, and profiles and data open to sharing from social media platforms.