Protection of Personal Data
Harmas Group (referred to as "Harmas Group" or the "Company") regards the protection of privacy relating to the personal lives of our customers, suppliers, tenants, and landlords — most importantly the protection of their fundamental rights and freedoms — along with the establishment and safeguarding of information security, as being among our foremost principles, and we wish to inform you about the "Protection of Personal Data." Harmas Group reserves the right to update this text at any time within the framework of changes that may be made to applicable legislation.
Under Law No. 6698 on the Protection of Personal Data (the "Law"), published in Official Gazette No. 29677 dated April 7, 2016, your personal data (name, surname, mobile phone numbers, email addresses, date of birth, city of residence, address information, gender, marital status, shopping information, education level, interests, likes and preferences, image and voice recordings, payment information) shared with us within the scope of our Supplier Relationships, our Customer Communication and Satisfaction Program, and/or any micro-applications and micro-site memberships that may be launched, services such as money transfer and product financing offered at our stores, and agreements signed as tenant and landlord, will be stored, recorded, and updated by our Company in compliance with the Law, and may be transferred — in the manner permitted by legislation — to third parties such as the cargo companies with which we have a contractual relationship, banks for the purpose of virtual POS payment, e-commerce sites, social media platforms (such as Google, YouTube, Facebook, Instagram, Kariyer, Twitter, and LinkedIn), our suppliers, our Customer Communication and Satisfaction Program partners, and lawfully authorized public institutions and organizations, and may be processed in the manner set out in the Law.
Processing of Your Personal Data
Under the Law, any operation performed on data — whether the personal data is obtained, recorded, stored, preserved, altered, reorganized, disclosed, transferred, taken over, made retrievable, classified, or prevented from use, whether wholly or partly by automated means, or by non-automated means provided that it forms part of a data recording system — is considered "processing of personal data."
Method of Collecting Your Personal Data
Your personal data is stored through various methods — whether verbal, written, or electronic — via channels such as information you provide to us through our corporate websites, our mobile application, email, SMS, or other means, or during the course of our business relationships, at the stage of signing commercial agreements and/or during the course of the business relationship; technical communication files known as "cookies" (small files placed on your hard drive) that allow our systems to automatically recognize you when you visit our website; and physical forms.
Your personal data is processed based on the explicit consent of our customers and the legal grounds set out in Article 5 of Law No. 6698 on the Protection of Personal Data.
In order to provide better service to its customers and within the framework of its legal obligations, Harmas Group will collect, process, share with third parties, and securely store your browsing information, provided it is not used outside the purposes and scope set out in this Personal Data Protection notice.
Purpose of Processing Your Personal Data
Your collected personal data may be processed by Harmas Group for the purposes set out below, in accordance with the fundamental principles set out in the Law and within the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law:
- To promote the goods and services offered by our company, to get to know our members and enhance communication, to strengthen our image, to develop our products, services, and communications, and to use them for data analysis, research, statistical studies, understanding trends, and marketing and advertising services
- To carry out the necessary work by our relevant business units in order to conduct our company's commercial activities, and to manage the related business processes
- To plan and execute the company's commercial and/or business strategies
- To ensure the legal, technical, and commercial/business security of the company and of individuals who have a business relationship with the company
- To record address and other necessary information for communication purposes, and to prepare all records and documents that will form the basis of processing in electronic (internet/mobile, etc.) or paper form,
- To fulfill obligations undertaken pursuant to agreements we have entered into under applicable legislation, to meet our legal obligations, and to exercise our rights arising from applicable legislation,
- To provide information to public officials, upon request and as required by legislation, regarding matters relating to public security,
- To be used as evidence in the event of any disputes that may arise
Detailed information on the purposes for which your personal data is processed by Harmas Group is set out in the Harmas Group Personal Data Protection and Processing Policy.
Transfer of Your Personal Data
Your Personal Data is collected through various channels for the purpose of conducting the Company's activities, based on the legal grounds of ensuring compliance with legislation and Company policies. Your collected personal data may be transferred by Harmas Group, directly or indirectly, in accordance with the fundamental principles set out in the Law and within the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, for the purposes set out above, to our domestic and international business partners, our suppliers, social media platforms (such as Google, YouTube, Facebook, Instagram, Kariyer, Twitter, and LinkedIn), Harmas Group affiliates, lawfully authorized public institutions and organizations, and lawfully authorized private-law persons and group entities.
Your Rights as a Data Subject
By applying to Harmas Group in its capacity as data controller regarding the processing of your Personal Data, you have the following rights under Article 11 of Law No. 6698 on the Protection of Personal Data:
- a. To learn whether your personal data is being processed,
- b. To request information regarding your personal data if it has been processed,
- c. To learn the purpose for which your personal data is processed and whether it is used in accordance with that purpose,
- d. To know the third parties to whom your personal data is transferred, whether domestically or abroad,
- e. To request the correction of your personal data if it has been processed incompletely or incorrectly,
- f. To request the deletion or destruction of your personal data within the framework of the conditions set out in Article 7 of the Law,
- g. To request that the actions taken pursuant to items (e) and (f) above be notified to the third parties to whom your personal data has been transferred,
- h. To object to the emergence of a result against you through the analysis of processed data exclusively via automated systems, and
- i. To request compensation for damages in the event that you suffer harm due to the unlawful processing of your personal data in violation of the Law,
You may submit your applications regarding the rights listed above by completing the Harmas Group Data Subject Application Form in accordance with the instructions provided, and delivering a signed copy of the form in person, together with documents verifying your identity, to Musalla Bağları Mah. Kule Cad. Selçuklu Kule Plaza No: 2 Kat: 20 İç Kapı No: 31 Selçuklu / Konya / Turkey, or sending it via notary public or other methods specified in the Law, or by submitting the relevant form electronically with a secure electronic signature to info@harmas.com.tr. Depending on the nature of your request, your application will be concluded free of charge as soon as possible and no later than thirty days; however, the Company reserves the right to charge a fee, in accordance with the tariff to be determined by the Personal Data Protection Board, should any additional cost arise.