Terms and Conditions

HERANTALYA DATA PROCESSING AND PROTECTION INFORMATION NOTICE

DATA CONTROLLER
Your personal data will be processed by HERANTALYA DANIŞMANLIK HİZMETLERİ İLETİŞİM SATIŞ SANAYİ VE TİCARET LİMİTED ŞİRKETİ, acting as the data controller, within the scope described below, in accordance with the Personal Data Protection Law No. 6698 ("Law"). Detailed information on the processing of your personal data by HERANTALYA can be accessed from the Privacy Policy ("Policy") available at https://herantalya.com/en/privacy-policy.

PURPOSES FOR PROCESSING YOUR PERSONAL DATA
Your collected personal data will be processed by the fundamental principles stipulated in the Law and within the personal data processing conditions outlined in Article 5 of the Law, as part of your membership with HERANTALYA, for the following purposes:

• Management of customer relations, planning and execution of customer satisfaction and corporate communication activities,
• Execution of informational and promotional activities about HERANTALYA,
• Updating HERANTALYA membership information,
• Facilitating communication between service providers and users within the scope of HERANTALYA services,
• Creation and management of your HERANTALYA membership,
• Provision and modification of services offered through the website,
• Customization of products and services offered by demands; updating and development in response to customer needs, legal and technical developments,
• Compliance with requests from official institutions,
• Providing information to authorized institutions by legal obligations,
• Ensuring compliance with data retention obligations stipulated by law,
• Evaluating and concluding applications you have submitted to the Company regarding your rights related to your data as stipulated in Article 11 of the Law and performing necessary actions in compliance with the law,
• Retaining records for the statute of limitations to serve as evidence in potential future disputes,
• Assigning service provider or user identifications specific to the offered products and services,
• Tracking financial transactions,
• Conducting necessary work by our business units to benefit relevant individuals from HERANTALYA services, including contests, raffles, campaigns, and promotional activities, and executing related business processes,
• Performing necessary work by our business units to carry out the commercial activities conducted within the scope of HERANTALYA and executing related business processes,
• Determining and implementing HERANTALYA's commercial and business strategies,
• Resolving issues encountered during the use of the website,
• Improving the website's visitor, usage, navigation, and purchase experiences to provide higher-quality services,
• Tracking and managing legal affairs,
• Receiving, evaluating, and resolving your requests and complaints,
• Establishing communication,
• Conducting reporting within the scope of cooperation,
• Developing and planning the Company's commercial strategies,
• Conducting communication for satisfaction surveys by HERANTALYA,
• Registering participants for events/competitions organized by HERANTALYA, issuing certificates/participation documents, determining and delivering awards/prizes,
• Managing account verification, including ensuring account management and security,
• Managing information security processes,
• Conducting and analyzing market surveys and marketing strategies,
• Recognizing you as a valued customer and offering you digital rewards, as well as conducting raffles, campaigns, promotions, and competitions for HERANTALYA customers,
• Detecting or preventing fraud if you use the mobile payment function to benefit from HERANTALYA services,
• Ensuring the security of the Company’s Website and Applications,
• Analyzing the use of the Website,
• Creating a personal data inventory,
• Evaluating, responding to, and addressing all written, verbal, or electronic inquiries, requests, suggestions, complaints, and applications related to personal data,
• If you provide your explicit consent, processing your identity, contact, and product tracking data to customize and recommend the Company's products and services according to the preferences, usage habits, and needs of relevant individuals,
• If you accept, send commercial electronic messages, such as advertisements and promotions, to the specified contact details.

PARTIES TO WHOM YOUR PERSONAL DATA IS TRANSFERRED AND THE PURPOSES OF TRANSFER
Your collected personal data may be transferred, by the personal data processing conditions specified in Article 8 of the KVKK, and for the purposes mentioned above, to our business partners, company managers/employees, and suppliers with whom we cooperate and receive services for the delivery and promotion of our services and activities, to regulatory and supervisory institutions, courts and enforcement offices, and other official institutions, as well as to legally authorized public institutions and organizations, and legally authorized private law entities. If you provide your explicit consent, your identity, contact, and product tracking data may be shared with contracted service providers for the purposes of customizing HERANTALYA’s products and services according to preferences, usage habits, and needs, and for the storage of your data within the framework of the personal data processing conditions and purposes set forth in Article 9 of the Law.

METHOD AND LEGAL BASIS FOR COLLECTING YOUR PERSONAL DATA
Your personal data may be processed by our Company through electronic means, such as our website and mobile application, as part of your communication with us via the channels through which you have contacted us to complete your HERANTALYA membership transactions, based on the following legal grounds and within the scope of the personal data processing conditions set forth in Article 5 of the Law. Based on the legal grounds that processing is necessary for the establishment or performance of a contract, that it is explicitly provided for by laws, that it is required for compliance with a legal obligation to which the data controller is subject, and that the processing is necessary for the performance of a contract to which the data subjects are party:

• Updating HERANTALYA membership information,
• Creation and management of your HERANTALYA membership,
• Facilitating communication between service providers and users within the scope of HERANTALYA services,
• Compliance with requests from official institutions,
• Providing information to authorized institutions by legal obligations,
• Ensuring compliance with data retention obligations stipulated by law,
• Evaluating and concluding applications you have submitted to the Company regarding your rights related to your personal data as stipulated in Article 11 of the Law and performing necessary actions in compliance with the law. Based on the legal grounds that processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject:
• Management of customer relations, planning and execution of customer satisfaction and corporate communication activities,
• Execution of informational and promotional activities about HERANTALYA,
• Tracking financial transactions,
• Conducting necessary work by our business units to benefit relevant individuals from HERANTALYA services, and executing related business processes,
• Performing necessary work by our business units to carry out the commercial activities conducted within the scope of HERANTALYA and executing related business processes,
• Determining and implementing HERANTALYA's commercial and business strategies,
• Tracking and managing legal affairs,
• Managing account verification, including ensuring account management and security,
• Managing information security processes,
• Conducting and analyzing market surveys and marketing strategies,
• Recognizing you as a valued customer and offering you rewards, such as conducting raffles, campaigns, promotions, and competitions for HERANTALYA customers,
• Receiving, evaluating, and resolving your requests and complaints,
• Retaining personal data for the duration of the statute of limitations to serve as evidence in potential future disputes.

In the presence of your explicit consent:

• If you provide your explicit consent, processing your identity, contact, and product tracking data to customize and recommend the Company's products and services according to the preferences, usage habits, and needs of relevant individuals,
• If you accept, send commercial electronic messages, such as advertisements and promotions, to the specified contact details.

YOUR RIGHTS AS A DATA SUBJECT UNDER ARTICLE 11 OF THE LAW
As a data subject, we hereby inform you that, pursuant to Article 11 of the Law, you have the following rights:

• To learn whether your personal data is being processed,
• To request information if your personal data has been processed,
• To learn the purpose of the processing of your personal data and whether your data is being used in accordance with this purpose,
• To know the third parties to whom your personal data is transferred, within Turkey or abroad,
• To request correction of your personal data if it is incomplete or incorrectly processed, and to request that the transaction made in this context be notified to third parties to whom your personal data has been transferred,
• To request the deletion or destruction of your personal data in the event that the reasons requiring its processing no longer exist, even if it has been processed in accordance with the Law and other relevant legal provisions, and to request that the transaction made in this context be notified to third parties to whom your personal data has been transferred,
• To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems,
• To request compensation for damages in case you suffer damage due to unlawful processing of your personal data.

You can submit your requests regarding your rights listed above by filling out the Data Subject Application Form available at https://herantalya.com/contact-us and sending it to our Company. Your application will be concluded free of charge as soon as possible and within a maximum of thirty days, depending on the nature of your request; however, if the transaction incurs an additional cost, a fee may be charged to you according to the tariff to be determined by the Personal Data Protection Board. Your application will be answered in accordance with the relevant provisions of the KVKK, and our company may request some verification information from you to confirm that the applicant is the correct person; this information will be requested solely to determine who the true data subject is and to ensure that the results of the application are shared with the correct person.

As HERANTALYA, we would like to remind you that there are links to other sites within www.herantalya.com and that HERANTALYA's privacy policies are only applied on our platform at www.herantalya.com, and we have no responsibility for other sites linked within our platform.