GDPR
YEŞİLEKO RAW MATERIAL PLASTIC AND INDUSTRY TRADE LTD.
PERSONAL DATA PROTECTION CLARIFICATION TEXT
As Yeşileko Raw Material Plastic and Industry Trade Ltd. (referred to as "Yeşileko" or "the Company"), the privacy and security of your personal data are among our top priorities. In this context, in order to fulfill our obligation to provide information arising from Article 10 of the Personal Data Protection Law No. 6698 ("KVKK"), we would like to inform you about your personal data. Personal data means any information that makes you identifiable or identifiable. The personal data processed by Yeşileko, their processing purposes, the groups of recipients to whom they may be transferred, the collection method, the legal reason, and your rights related to these personal data are listed below. You can access our "Personal Data Protection and Processing Policy" at https://www.yesileko.com and obtain detailed information.
What personal data of yours is processed by Yeşileko?
- Your Identity Information: Your name, surname, and gender.
- Your Contact Information: Your mobile phone number, address, and email address.
- Your Customer Transaction Information: Your order and invoice details, delivery transaction details, transaction history related to your purchases.
- Your Transaction Security Information: IP address information, passwords, cookie information.
What are the purposes of processing your personal data and the methods of collection?
Your identity, contact, and customer transaction information are collected and processed automatically from you through mobile applications or the website in the electronic environment for the following purposes as part of our contractual relationship:
- To carry out the processes related to the establishment and performance of the contract,
- To carry out and audit financial and accounting processes,
- To carry out and audit the company’s business activities,
- To carry out the invoicing processes,
- To track logistics and delivery processes,
- To process and confirm the transaction on the website/mobile applications,
- If you give your explicit consent, to use your data for various marketing and advertising activities, to offer products suitable for your preferences, and to provide a better shopping experience and increase your satisfaction,
- To increase customer satisfaction, to understand our customers, and to analyze the customer base, to improve and develop our products and services,
- To carry out strategic analysis studies,
- To carry out communication activities,
- To offer products you may be interested in based on your interests,
- To contact you and provide necessary information regarding the conditions, current status, and updates of the contracts concluded through our application under the Distance Sales Contract and the relevant provisions of the Consumer Protection Law,
- If you give your explicit consent, to provide you with information regarding developments, opportunities, and innovations at Yeşileko,
- To carry out activities for customer base analysis and to conduct surveys through affiliated organizations electronically and/or physically,
- To evaluate your requests, complaints, and suggestions regarding our products and services,
- To provide information about products,
- To carry out information security processes,
- To ensure compliance with regulations in activities,
- To track and carry out legal processes,
- To provide information to authorized persons, public institutions, and organizations.
Your transaction security information is collected and processed automatically from you through mobile applications or the website in the electronic environment for the following purposes:
- To carry out the processes related to the establishment and performance of the contract,
- To carry out and audit the company’s business activities,
- To process the purchase transaction and verify the identity of the person making the transaction on the website/mobile applications,
- If you give your explicit consent, to use your data for various marketing and advertising activities, to offer products suitable for your preferences, and to provide a better shopping experience and increase your satisfaction,
- To increase customer satisfaction, to understand customers making purchases on the platform, and to analyze the customer base, to improve and develop the company’s products and services,
- To carry out information security processes,
- To ensure compliance with regulations in activities.
What is the legal basis for the processing of your personal data?
The personal data mentioned under "What personal data of yours is processed by Yeşileko?" is processed based on the lawful grounds specified in Articles 5, 8, and 9 of the KVKK, as listed below:
- Based on the legal basis that is clearly foreseen in the legislation to which the company is subject, such as the Law on Electronic Commerce No. 6563, the Turkish Commercial Code No. 6102, the Turkish Penal Code No. 5237, and the Consumer Protection Law No. 6502, for ensuring the security of operations on the platform, carrying out information security processes, ensuring compliance with regulations in activities, and fulfilling our obligations arising from the law,
- Based on the legal basis that the processing of your personal data is necessary for the establishment or performance of the contract, such as carrying out transactions under the Distance Sales Contract, conducting purchase operations, managing delivery processes, evaluating requests, complaints, and suggestions regarding products, financial and accounting processes, communication activities,
- Based on the legal necessity for the company to fulfill its legal obligations, such as complying with regulations in the Distance Contracts Regulation and Electronic Commerce Service Providers and Intermediary Service Providers Regulation, and meeting secondary legislation and decisions, guides, and manuals published by authorized bodies, providing information to authorized persons, ensuring compliance with regulations, tracking and carrying out legal processes,
- Based on the legal necessity of processing for the establishment, exercise, or defense of a legal claim, such as conducting legal and litigation processes,
- Based on the legal necessity of processing personal data for the legitimate interests of the company, provided it does not harm fundamental rights and freedoms, such as activities for improving products and services,
- Based on your explicit consent, for transferring personal data abroad.
Who does Yeşileko transfer your personal data to and for what reasons?
Our company processes your personal data in accordance with the principles of "need to know" and "need to use," ensuring data minimization and taking necessary technical and administrative security measures. Since business operations or auditing, ensuring business continuity, and operating digital infrastructures require continuous data flow with various stakeholders, we must transfer the personal data we process to third parties for specific purposes. Additionally, in order to fulfill our contractual and legal obligations, it is crucial that your personal data is accurate and up to date. For this reason, we work with various business partners and service providers.
Your personal data is transferred to third parties to ensure the smooth operation of the marketplace, the execution of your order delivery processes, handling your support and assistance requests, enhancing your experience and satisfaction, improving the application, products, and services we offer, and ensuring business continuity, information security, and legal compliance as outlined in the second paragraph of this clarification text.
The transfer is based on the legal grounds that the company is required to meet the obligations explicitly foreseen in the legislation to which it is subject and to fulfill its legal obligations, as well as the necessity of processing personal data for the establishment or performance of the contract:
- To execute purchase and payment processes with the seller and service provider of the product,
- For logistics operations and tracking of delivery processes with you and/or the recipient’s address, the seller of the purchased product, and private couriers,
- For invoicing processes with our business partners, the seller of the purchased product, our consultants, and service providers, and with banks,
- To provide goods and after-sales support services with call center partners and other service providers,
- For quality control, complaint management, and risk analysis services with service partners and providers,
- For financial and accounting processes, risk identification, evaluation, and fraud prevention with relevant business partners, consultants, service providers, banks, legal advisors, and tax consultants,
- To send the e-invoice electronically to the customer with the e-invoice partner, and for physical contract or invoice delivery with courier and shipping companies,
- To meet tax obligations with tax offices, and during tax audits, with the Ministry of Treasury and Finance authorities regarding invoices and receipts,
- With IT infrastructure providers, operators, or service providers,
- For risk management and financial reporting with service partners.
For the establishment, use, or protection of a right, based on the necessity of processing data, the company processes data in accordance with the legal grounds clearly foreseen in the applicable laws and fulfills its legal obligations:
- For legal obligations, with lawyers, auditors, and law enforcement authorities for investigation,
- With governmental agencies for compliance with applicable legal obligations.
What are your rights as a data subject?
As the data subject, you have the following rights regarding the personal data processed by Yeşileko:
- To learn whether your personal data is being processed,
- To request information if your personal data has been processed,
- To learn the purpose of processing your personal data and whether they are used according to the purpose,
- To know the third parties to whom your personal data is transferred,
- To request the correction of your personal data if it is inaccurate or incomplete,
- To request the deletion or destruction of your personal data,
- To request the correction of your personal data if inaccurate or incomplete,
- To object to the processing of your personal data under certain conditions,
- To request compensation for damages caused by the unlawful processing of your personal data.
To exercise your rights, you can submit your request to us in accordance with the method and procedures specified in our Personal Data Protection and Processing Policy.
This clarification text was prepared on March 26, 2025.