DATA PRIVACY STATEMENT AND PERSONAL DATA PROTECTION AND PROCESSING POLICY DISCLOSURE TEXT

Data Controller

The website www.sendheap.com (“Website”) is operated by Tekrom Teknoloji A.Ş. (“Company”) located at Esentepe Mah. Haberler Sok. No:13 ŞİŞLİ / ISTANBUL. The COMPANY, as the data controller, is responsible for determining the purposes and means of processing personal data, establishing and managing the data recording system.

We value the protection of your personal data. In accordance with the Personal Data Protection Law (“KVKK”), we would like to inform you about the collection, storage, and transfer of data obtained in connection with your use of the “Company Website,” including but not limited to the processing of such data and the purpose of such processing.

Processing and Transfer of Personal Data

The COMPANY requests some personal data from users during the membership stage or while using the Company Website. Personal data refers to any information that identifies or makes an individual identifiable. Such information may include, for example, your name, address, email address, or phone number. Information collected through cookies that does not directly identify you, such as how you use the Company Website, may also be considered personal data if it is collected, stored, and analyzed in a personalized manner based on a user-assigned identity. Non-personal data is information that is aggregated, summarized, collected, analyzed, and anonymized in such a way that it cannot be associated with an individual.

Your personal data is collected by our company through the demo request form, contact form, newsletter form, support system, call center, and membership form, as required by the nature of the business. To identify system-related issues and quickly resolve any problems or disputes arising from the services provided, our company records and uses members' IP addresses. IP addresses may also be used to generally identify users and gather comprehensive demographic information.

Our company may use the requested information beyond the purposes and scope defined by the Membership Agreement for direct marketing purposes by itself or with collaborators. Personal information may also be used to contact the user when necessary. Information requested by our company, provided by the user, or related to transactions made through the Company Website may also be used by our company and its collaborators for various statistical assessments, database creation, and market research without disclosing the identity of our members, beyond the purposes and scope defined by the “Membership Agreement.”

From time to time, our company may send notifications to customers and members about campaign information, new packages, promotional offers, and similar matters. Our members can choose whether or not to receive such information when they become a member, and they can change this choice later from the management panel after logging in as a member or by using the link in the notification message they receive.

Purposes of Processing Personal Data

Our company processes Personal Data for specific, explicit, and legitimate purposes. In this context, Personal Data may be processed for the following purposes:

  • Providing and modifying the services offered through the website,
  • Customizing the products and services offered according to requests; updating and improving due to customer needs, legal and technical developments,
  • Making user identifications in systems related to the products and services offered,
  • Announcing new or existing products, services, and campaigns, conducting sales and marketing activities,
  • Conducting market research,
  • Creating statistics and analyzing uses,
  • Payment of product, service, and service fees, collection, selection of collection methods,
  • Fulfilling information obligations arising from Law No. 6563 on Regulation of Electronic Commerce and other relevant legislation,
  • Delivering advertisements of the Company’s website and products and services in line with the purpose of data processing, providing information about products, services, promotions, and campaigns,
  • Resolving issues encountered during the use of the Website,
  • Improving visit, usage, page transition, and purchase experiences on the website, providing higher quality service,
  • Establishing contact/communication,
  • Managing commercial relationships with collaborating companies, suppliers, resellers, and service providers,
  • Reporting within the scope of collaboration,
  • Developing and planning the company's commercial strategies,
  • Contacting for satisfaction measurement surveys conducted by the Company,
  • Creating participant registrations in events/training/contests organized by the COMPANY,
  • Issuing certificates/participation documents, determining award/gift recipients, and delivering awards/gifts,
  • Managing judicial/administrative processes, responding to requests from public institutions,
  • Fulfilling legal obligations in accordance with legal regulations, resolving legal disputes,
  • Managing investor relations,
  • Ensuring the results of legal actions arising from the merger, division, or transfer of all or part of the company with another company,
  • Promoting the Company’s employees, real customers, and relevant parties in social media posts,
  • Conducting job interviews, evaluating job applications,
  • Establishing, executing, and terminating employment relationships/contracts,
  • Providing employees with the benefits arising from their employment contracts,
  • Evaluating performance and work,
  • Opening user accounts for employees,
  • Creating participant registrations in events organized on behalf of the company,
  • Creating records of employee training participation and certificates,
  • Ensuring the security of the Company Website and Applications,
  • Analyzing the usage of the Website,
  • Creating a personal data inventory,
  • Evaluating and responding to all written, verbal, or electronic inquiries, requests, suggestions, complaints, and applications, including those related to personal data.
  • Transferring to systems located in Turkey or other relevant countries, especially European Union countries, for the performance of the contract, data security, compliance with company policies, and other purposes mentioned above (for more detailed information, you can apply to our company in writing).
Method and Legal Reason for Collecting Personal Data

Data related to current and potential users of the Company Website is collected either fully or partially through automatic or non-automatic methods, for contractual or statutory reasons as required by the nature of our business.

Personal Data Processed Without Explicit Consent

According to KVKK;

We may process and share personal information that you have made public without your explicit consent if it is shared publicly by you.

If there are provisions in the legislation that make it lawful to process your personal data without explicit consent, we may process and share it without your explicit consent.

If it is necessary to fulfill our legal obligations, including information required to be disclosed under current laws, regulations, or court orders, we may process your personal data without explicit consent.

If processing your personal data is mandatory for the establishment, exercise, or protection of a legal right, we may process your personal data without your explicit consent.

Data Transferred to Third Parties

Your personal data may be shared with Company employees, company officials, legal, financial, and tax advisors, auditors, cloud companies located abroad, including the United States and European countries, IBM Softlayer Data Center, Amazon Web Services, Inc. (AWS), consultants, affiliated organizations, educational institutions, advertising and marketing agencies working with the Company, and real or legal persons for the purpose of providing targeted advertisements. This sharing is done while reserving the rights under KVKK, and you provide explicit consent to the Data Controller for this sharing.

Network Server Log

When you access the Company Website, your web browser is technically set to automatically transfer the following data ("log data") to our web server, and we record the following information in the log data records even without your approval:

  • Date of access
  • Time of access
  • URL of the accessed website
  • Files received
  • Amount of data transmitted
  • Browser type and version
  • Operating system
  • IP address
  • Domain name of your internet service provider

This information is necessary for technical purposes to ensure that the content you requested is delivered correctly and is an inevitable part of using websites. The log data is analyzed solely for statistical purposes to improve our website and underlying technology and is subsequently deleted.

The log data is stored separately from other data collected as part of your use of the Company Website.

Cookies

Like many other websites, we use "cookies." Cookies are small text files transmitted to your hard drive by a web page server. This way, we automatically obtain certain data such as IP address, browser used, operating system on your computer, and internet connection. The mentioned technical communication file facilitates the use of the Internet by storing site status and preferences. The technical communication file is not designed to obtain data or other personal information from your main memory or email. Additionally, cookies cannot be used to run programs or send viruses to your computer.

We use cookies and similar technologies to recognize you across different services, gain insights into your interests on and off our services, enhance your experience, increase security, measure the use and effectiveness of our services, obtain statistical information about how many people visit the site, for what purpose, and how long they stay on the site, and to assist in dynamically creating ads and content from user pages tailored to individual users. We may use cookies to offer different discount and campaign offers, advertise and promote, personalize the Company Website for you, provide a personalized Company.com experience, and track your navigation on the Company Website and activities in your membership account. We may also analyze your personal data collected on the Company Website or third-party sites and mobile applications using various methods.

In any case, the data we collect cannot be shared with third parties without your consent. Of course, you can always view our website without cookies. Browsers are generally set to accept cookies. You can control cookies and stop their use at any time through browser settings and other tools. To learn how to change these settings, please use your browser's help function. Please note that some features of our website may not work if you disable cookies.

Use of Social Plugins in the Context of Social Media

THE COMPANY uses social plugins ("plugins") from social networks such as Facebook, operated by Facebook Inc., Palo Alto, CA, USA; YouTube, operated by YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066 USA; Twitter, operated by Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103 USA; and Instagram, operated by Instagram, LLC, Arbitration Opt-out 1601 Willow Rd. Menlo Park, CA 94025 USA.

When you visit a page on our website that includes such plugins, they are inactive initially. The plugins only become active if you click the specified button. By activating the plugins, you connect with these social networks and consent to the transfer of data. If you are logged into these social networks, they may associate this visit with your account on the respective social network. When you click the relevant button, the corresponding information is directly transmitted to the social network and stored there by your browser.

For information on the scope and purpose of data collection, processing, and use by the respective social networks, as well as your rights and settings to protect your privacy, please refer to the data protection notices of the relevant social networks. If you do not want these social networks to collect data about you via our website, you should log out of these networks before visiting our site.

Your Rights Regarding Your Personal Data

According to the legislation concerning personal data, you have the rights to: learn whether your personal data is being processed, request information about the processing of your personal data if it is being processed, learn the purpose of processing and whether your data is being used for that purpose, know the third parties to whom your personal data is transferred within or outside the country, request correction of your personal data if it is incomplete or inaccurate, request deletion or destruction of your personal data, request notification to third parties to whom your personal data has been transferred of the correction, deletion, or destruction of your personal data, object to a result that is analyzed exclusively through automated systems that is detrimental to you, and seek compensation for damages if your personal data is processed unlawfully.

Exercise of Rights, Application, and Contact

You may submit requests regarding the above rights under KVKK to THE COMPANY in writing, with identification verification, either personally or in accordance with legal regulations (e.g., via notarization) to the address provided above.

Data Security

THE COMPANY has taken technical and administrative measures as far as possible to ensure data security under KVKK. Details about the measures taken are outlined under the title Personal Data Protection, Storage, Processing, and Destruction Policy.

Data Concerning Minors

Personal data of minors should not be sent without the consent of their parent or guardian.

Links to Other Websites

The Company Website contains links to other websites. We have no influence over whether the operators of these sites comply with data protection provisions. THE COMPANY is not responsible for the content of linked sites (or the content of sites linked to those sites) and has no authority to interfere with the content of the linked sites.

Changes to the Privacy Statement and Personal Data Protection and Processing Policy This “Privacy Statement and Personal Data Protection and Processing Policy” may be amended to announce changes related to our data protection services, such as new services and to comply with current legal requirements.

User Access

Unless invited by you, no one has access to your account. Only authorized THE COMPANY personnel may access your data for support purposes in case of technical or system failures, with your permission.

Data Sharing

Data transfer is not shared with partners without your consent and without adequate security.

Data Backup

Your data is backed up daily to protect against potential technical problems.

Intervention in Security Breaches

Despite our best efforts, no transmission method over the Internet and no electronic storage method is completely secure. We cannot guarantee absolute security. However, if THE COMPANY becomes aware of a security breach, we will alert affected users to take appropriate protective measures. Our breach notification procedures are consistent with our obligations under legal regulations and all industry rules or standards we comply with. Notification procedures include providing email notifications or posting a notice on our website if a breach occurs.

Your Responsibilities

Keeping your data secure also depends on you ensuring the security of your account by using sufficiently complex passwords and storing them securely. You should ensure that the computer, tablet, or phone you use to access THE COMPANY's services has adequate security.