KVKK Information Notice

This Internet Site Member and Visitor Information Notice (the “Notice”) has been prepared by Test Giyim San. ve Tic. Ltd. Şti., located at Nişancı Mahallesi, Eyüp Sultan Boulevard, No: 58, Inner Door No: 1, Eyüpsultan, Istanbul, as the data controller operating and managing shop.ketroy.com (the “Site”), in order to inform and enlighten Members registered on the Site and Visitors who access the Site (together, the “Users”) about the terms and conditions of the use of data obtained and/or to be obtained in any way from Users within the scope of services provided through the Site, as well as the ways such data are processed.

The Company collects personal data via the Site, social media accounts, e-mail, mail, call center, fax, notifications from administrative and judicial authorities, and other communication channels, in audio, electronic, or written form, in accordance with the personal data processing conditions stipulated in the Law, and based on the legal grounds and purposes stated in this Notice.

During visits to the Site by Users, cookies are used by the Company. For more detailed information regarding the use of cookies, please review our Cookie Policy.

Member
Identity Information
Name, Surname, National ID Number, Date of Birth
Customer Transactions
Order Information
Contact Information
Username, email address, phone number, residential address, country and city of residence
Transaction Security
IP address, ID information, log records, website entry/exit information, password and credentials, transaction date and time.
Marketing
Site browsing information, past usage information, reaction information to purchases/campaigns, hobbies, shopping preferences, other cookie records collected by third parties through the Company.
Location Information
Information on the location accessed via platforms

Visitor
Identity Information
Gender, age group
Transaction Security
IP address, ID information, log records, website entry/exit information, transaction date and time.
Location Information
Information on the location accessed via platforms
Marketing
Site browsing information, past usage information, reaction information to purchases/campaigns, hobbies, shopping preferences, other cookie records collected by third parties through the Company

The personal data specified above may be processed in accordance with the purposes listed below, consistent with the principles set forth in Article 4 of the Law and repeated in this Notice, and within the scope of the personal data processing conditions specified in Articles 5 and 6 of the Law. The legal grounds applicable for each data category are explicitly stated below:

Member
Identity Information
Contact Information
• Necessary for the establishment or performance of a contract, provided that it is directly related to the parties of the contract.
• Necessary for the establishment, exercise, or protection of a right.

Customer Transactions
Transaction Security
Location
• Explicitly stipulated by law,
• Necessary for the establishment or performance of a contract, provided that it is directly related to the parties of the contract,
• Necessary for compliance with the Company’s legal obligations,
• Necessary for the establishment, exercise, or protection of a right.

Marketing
• Necessary for the Company’s legitimate interests, provided that fundamental rights and freedoms of the data subject are not harmed,
• Data made public by the data subject.

Visitor
Identity Information
Transaction Security
Location Information
Marketing
• Necessary for compliance with the Company’s legal obligations,
• Necessary for the Company’s legitimate interests, provided that fundamental rights and freedoms of the data subject are not harmed,
• Data made public by the data subject.

Within the scope of this Notice, the personal data of data subjects listed in Article 2 are processed in compliance with the general conditions set forth in this Notice for the following purposes:

Member
Identity Information
Contact Information
• Conducting information security processes
• Conducting audit/ethical activities
• Managing access authorizations
• Following and conducting legal processes
• Conducting communication activities
• Creating surveys for customer satisfaction
• Conducting contract processes
• Handling requests and complaints
• Conducting marketing processes of products/services

Customer Transactions
Transaction Security
Location
• Conducting information security processes
• Conducting audit/ethical activities
• Managing access authorizations
• Ensuring compliance with legislation
• Following and conducting legal processes
• Conducting logistics operations
• Providing information to authorized persons, institutions, and organizations
• Conducting communication activities
• Conducting contract processes

Marketing
• Conducting loyalty processes related to products/services
• Ensuring business continuity
• Conducting customer satisfaction activities
• Conducting marketing analysis
• Conducting advertising, campaign, and promotion processes
• Conducting marketing processes of products/services

Visitor
Identity Information
Transaction Security
Location Information

The Company may transfer the personal data of data subjects obtained within the scope of fulfilling services provided through the Company’s platforms and fulfilling its obligations declared in this Notice, to its domestic servers and suppliers. The Company may also transfer the personal data of data subjects to third parties for the following purposes:

Member
• Sharing identity, contact, and transaction security information with authorized public institutions and organizations for the purposes of ensuring compliance with legislation, following and conducting legal processes, and providing information to authorized persons, institutions, and organizations;
• Conducting communication activities
• Sharing with suppliers benefiting from services in business processes for the purpose of conducting and auditing business activities
• Conducting marketing analysis
• Conducting logistics operations
• Conducting after-sales support services
• Conducting advertising, campaign, and promotion processes
• Sharing with storage service providers for the purposes of storage and archiving
• Conducting supply chain management processes

Visitor
• Conducting marketing analysis
• Conducting advertising, campaign, and promotion processes
• Sharing with storage service providers for the purposes of storage and archiving
• Sharing site usage preferences and browsing history with suppliers for segmentation purposes.

As personal data subjects, you may exercise your rights regarding your personal data by filling in the “Data Subject Application Form” and submitting it via the Company’s e-mail address -------------------- with a secure electronic signature, through your personal e-mail address, or in writing personally or via notary public to the Company at Nişancı Mahallesi, Eyüp Sultan Boulevard, No: 58, Inner Door No: 1, Eyüpsultan, Istanbul. Necessary changes, updates, and/or deletions, as well as related requests, can be made this way. Depending on the nature of your request, the Company will finalize it as soon as possible and within a maximum of thirty days, free of charge. However, if the process incurs a separate cost, the Company may charge the fee set by the Personal Data Protection Board. Within this scope, personal data subjects have the following rights:

1. To learn whether personal data are being processed,
2. If processed, to request information regarding such processing,
3. To learn the purpose of processing personal data and whether they are used in line with their purpose,
4. To know the third parties to whom personal data are transferred, domestically or abroad,
5. To request correction if personal data are incomplete or incorrectly processed,
6. To request deletion or destruction of personal data within the framework of Article 7 of the Law,
7. To request notification of the transactions carried out pursuant to subparagraphs (d) and (e) to third parties to whom personal data are transferred,
8. To object to any adverse result arising exclusively from automated data analysis,
9. To demand compensation in case of damages arising from unlawful processing of personal data.

In order to exercise the above-mentioned rights as a personal data subject, your application must clearly state the right you wish to exercise, be related to you personally, or if acting on behalf of another person, you must be specifically authorized and provide documentation of this authority. The application must include identity and address information and be accompanied by documents verifying your identity.

The Company may make changes to this Notice at any time. Such changes shall become effective immediately upon publication of the revised Notice. You will be duly informed of such changes.