Personal Data Protection

STATEMENT ON PROTECTION OF PERSONAL DATA AND PRIVACY POLICY

This Personal Data Information Statement has been prepared in order to inform you on the collection, processing and transfer of your personal data in accordance with the Personal Data Protection Law number 6698 (the “Law”), and on your rights under the Law.

We at BiAltın Teknoloji Anonim Şirketi domiciled at the address Bebek Mah. İbriktar Aralığı Sok. No:20/7 Beşiktaş, İstanbul (our “Company” or “GLDBase”) process your personal data as data controller within the scope described below, in accordance with the Law and relevant legislation.

Personal Data Processed by us

To achieve our goals of processing personal data as stated in this Information Statement, we may process your personal data mentioned below:

  • Your ID information including Name, Surname, Date and Place of Birth, TR ID no. and other information on your ID card/driving licence/passport;
  • your contact details including e-mail, phone number, cell phone;
  • your location details including home and office address details;
  • Photograph
  • your customer transaction information including customer orders, requests and complaints; 
  • your transaction security information including IP address and internet site login and logout data;
  • your financial information including debit card, credit card, IBAN details, and digital wallet information (public key);
  • your marketing information including usage habits, prior product/service purchases and cookie logs;
  • your transaction security information including IP address and internet site login and logout data;
  • your financial information including bank account and IBAN details;
  • results of queries received from public authorities, and risk/suspected transaction notifications 

Our Purposes of Processing Personal Data 

We process your personal data, limited to the following purposes:

  • Conducting goods/services (GLDB) sale processes,
  • Conducting after-sale support services for goods/services (GLDB),
  • Conducting purchase (repurchase) processes for goods/services (GLDB),
  • Conducting goods/services (GLDB) production and operational processes,
  • Conducting Customer Relations management processes,
  • Conducting activities for Customer satisfaction,
  • Conducting Firm/product/service loyalty processes,
  • Conducting Contract processes,
  • Conducting/supervising Business activities,
  • Conducting Communication activities 
  • Conducting Finance and accounting works,
  • Conducting Activities in accordance with the legislation,
  • Conducting Marketing analysis studies,
  • Conducting Advertisement/campaign/promotional processes,
  • Conducting Product/ service marketing processes,
  • Tracking requests/complaints,
  • Tracking and Conducting legal affairs
  • Conducting Audit/ethical activities,
  • Informing competent persons /institutions and authorities,
  • Conducting Information security processes 
  • Conducting Access activities processes
  • Conducting Risk management processes

Our Method of Collecting Personal Data 

We collect your personal data through the automatic and non-automatic channels listed below:

  • E-mail, SMS, business card,
  • Phone,
  • Cookies and similar tracking technologies,
  • our website,
  • Mail, cargo or courier services,
  • Other physical and electronic media.

Legal Basis of Processing

We process your personal data according to the conditions of processing as stated in articles 5 and 6 of the Law.

  • processing of personal data of the parties to an agreement on the basis of being necessary, to the extent directly related to establishing or execution of the agreement as stated in article 5/2(c) of the Law,
  • being mandatory for our Company to fulfil a legal requirement as stated in article 5/2(ç) of the Law,
  • the personal data being made public by the data subject as stated in article 5/2(d) of the Law,
  • processing of data being mandatory for legitimate interests of our Company, provided that fundamental rights and liberties of data subjects are not prejudiced, as stated in article 5/2(f).

Transfer of Your Personal Data 

We may transfer your personal data for the purposes of processing as stated in article 8 of the Law, limited to the purposes mentioned above, with our employees, business partners, shareholders, domestic suppliers, company representatives and agents and legally competent public/private institutions and entities.

Your Rights related to your Personal Data 

In accordance with article 11 of the Law, you have the following rights in relation with your personal data:

  • to learn whether your personal data are processed or not, 
  • to request information if your personal data are processed, 
  • to learn the purpose of your data processing and whether this data is used for intended purposes, 
  • to know the third parties to whom your personal data is transferred within or outside Turkey, 
  • to request the rectification of the incomplete or inaccurate data, if any, and to request notification of such operations to the third parties to whom your personal data has been transferred, 
  • to request the erasure or destruction of your personal data upon cessation of reasons to process, despite being processed in accordance with the Personal Data Protection Law number 6698 and other relevant legal provisions, and to request notification of such operations to the third parties to whom your personal data has been transferred,
  • to object to the processing of your personal data by exclusively automated systems, which leads to an unfavourable consequence for you, 
  • to request compensation for the damage arising from the unlawful processing of your personal data.

You may submit your requests related to these rights via application forms on our website. Your application will be fulfilled free of charge. However, if the requested process entails additional cost, then the fee stated in the tariff specified by Personal Data Protection Board may be charged.