MERCHKIDS Personal Data Policy

General information about the Personal Data Law

Personal Data Protection Law No. 6698 (hereinafter referred to as the KVKK) was adopted on March 24, 2016, and published in the Official Gazette No. 29677 dated April 7, 2016. Some parts of the KVKK entered into force on the date of publication, while others entered into force on October 7, 2016.

Information as a Data Controller

In accordance with KVKK No. 6698 and as a Data Controller, your personal data will be recorded, stored, updated, disclosed/transferred to third parties where permitted by law, classified, and processed in the ways specified in the KVKK, within the framework described on this page.

How your personal data may be processed

In accordance with the Personal Data Protection Law No. 6698, the personal data you share with our company may be processed by us, in whole or in part, automatically, or non-automatically, provided that it is part of any data recording system, by obtaining, recording, storing, changing, and rearranging data. In short, any data processing performed under the Personal Data Protection Law is considered "processing of personal data."

Purposes and legal grounds for processing your personal data

The personal data you share:

To fulfill the requirements of the services we provide to our customers in accordance with the requirements of the contract and technology, and to improve our products and services;

To record the identity, address, and other necessary information to identify the transaction owner within the scope of Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on Consumer Protection, and the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce, published in Official Gazette No. 29457 dated August 26, 2015, which was prepared based on these regulations; the Distance Contracts Regulation published in Official Gazette No. 29188 dated November 27, 2014, and other relevant legislation;

To prepare all records and documents that will form the basis of payment systems, electronic contracts, or paper transactions required in the field of banking and electronic payments; to comply with information storage, reporting, and notification obligations stipulated by legislation and other authorities;

To provide information to prosecutors, courts, and relevant public officials upon request and as required by legislation in matters related to public security and legal disputes;

To be processed in accordance with the Personal Data Protection Law No. 6698 and relevant secondary regulations. Information about third parties or organizations to whom your personal data may be transferred: For the purposes specified above, the personal data you share with our Company may be transferred to the following persons/organizations: IdeaSoft Yazılım San. ve Tic. A.Ş., which provides our Company's e-commerce infrastructure; suppliers; individuals and organizations related to the services provided, such as cargo companies; program partner organizations we collaborate with from whom we receive services to carry out our activities and/or as Data Processors; domestic/international organizations; and other third parties.

How Your Personal Data Is Collected

Your personal data is collected through forms on our Company's website and mobile applications, including information such as your name, surname, Turkish ID number, address, telephone number, work or private email address; preferences on pages accessed using your username and password, IP records of transactions performed, cookie data collected by the browser, and data including browsing duration and details; and location data.

Data can be processed and collected verbally, in writing, or electronically through channels such as our sales and marketing department employees, branches, suppliers, other sales channels, paper forms, business cards, digital marketing, and call centers;

Data collected from individuals who share their personal data with our company through business cards, resumes (CVs), offers, or other means for purposes such as establishing a commercial relationship, applying for a job, or submitting an offer; whether in a physical or virtual environment, face-to-face or distanced, verbally, in writing, or electronically;

Data also obtained indirectly through other channels, such as (micro) websites and social media used for websites, blogs, contests, surveys, games, campaigns, and similar purposes, including e-bulletin reading or click-through behavior, data provided by public databases, and profiles and data available for sharing on social media platforms. Your personal data obtained before the KVKK came into force

Your personal data lawfully obtained before the KVKK's effective date of April 7, 2016, through membership, electronic message consent, product/service purchase, or other means, is also processed and stored in accordance with the terms and conditions set forth in this document.

Transfer of your personal data abroad

Processed in Turkey or processed and stored outside Türkiye