In order to provide better service to its customers, Isstp requests some personal information (name, age, e-mail, etc.) from you in order to complete the membership system or shopping.

We keep the personal information of customers and visitors in accordance with the principle of confidentiality. Your personal information (your name, e-mail address, delivery address, telephone, orders and purchased products, etc...) will never be given to third parties or organisations.

Only you can access and change all the information you provide while becoming a member. If you protect your member login information securely, it is not possible for others to access and change information about you. For this purpose, we act within the 128 bit SSL security area during membership transactions.

Customer information may only be disclosed to the official authorities if such information is duly requested by the official authorities and in cases where it is obliged to disclose to the official authorities in accordance with the provisions of the legislation in force.

Your credit card information used in your payment transactions is not kept in the site database. Your credit card information is transmitted to the relevant bank units for authorisation purposes. During this transmission, it is encrypted with SSL 128 bit encryption method, which is the highest encryption technique available. Your credit card information cannot be seen by us!

Data Controller

Pursuant to the Law No. 6698 on the Protection of Personal Data ("Law"), your personal data may be processed by Isstp ("Isstp" or "Company") as the data controller within the scope described below.

Purposes and Legal Grounds for Processing Personal Data

Your collected personal data may be processed for the following purposes ("Purposes") and legal reasons within the scope of the personal data processing conditions and purposes specified in Article 5 of the Law.

Based on the legal reason that the processing of personal data of the parties to the contract is necessary, provided that it is directly related to the establishment or performance of a contract;

• Updating customer contact information,
• Opening sales records and performing invoicing activities,
• The establishment or performance of a sales contract due to your purchase of our company's products and services,
• Provision of after-sales support services,
• Execution of customer membership processes and relations.

Based on the legal reason that it is clearly stipulated by law and is mandatory for the data controller to fulfil its legal obligation;

• Fulfilment of official institution requests,
• Providing information to authorised institutions due to legislation,
• Ensuring compliance with the custody obligations stipulated in the legislation,
• Responding to the relevant person applications in accordance with the legislation and carrying out the necessary procedures.

 

Based on the legal reason that data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject;

• Execution of customer membership processes and relations,
• Follow-up of financial transactions,
• Event management,
• Carrying out the necessary work by our business units and carrying out the relevant business processes in order to benefit the relevant persons from the products and services offered by our Company, including the sales and marketing activities of our products and services,
• Carrying out the necessary work by our relevant business units for the realisation of the commercial activities carried out by our Company and carrying out the related business processes,
• Ensuring the legal, technical and commercial-business security of our Company and the relevant persons who have a business relationship with our Company,
• Determining and implementing the commercial and business strategies of our company,
• Follow-up and execution of legal affairs,
• Execution of information security processes,
• Carrying out audit and ethics activities,
• Planning and execution of customer satisfaction and corporate communication activities,
• Carrying out sweepstakes, campaigns, competitions, promotions or advertising activities,
• Retention of personal data during the general statute of limitations in order to constitute evidence in possible future disputes.

Based on the legal reason that data processing is mandatory for the establishment, exercise or protection of a right;

• Receiving, evaluating and finalising your requests and complaints,
• Retention of personal data during the general statute of limitations in order to constitute evidence in possible future disputes.

In the presence of your explicit consent,

• Identity information, contact information, financial transaction, survey data, location data obtained within the scope of the processes related to the execution of customer satisfaction processes, management of the call centre, receiving memberships through our website and offering products and services through online channels are shared with SAP [Germany], Microsoft [USA], Google LLC.(USA), and Amazon [USA], whose servers are located abroad in order to be stored in the cloud environment,
• Processing of your [contact information, identity information, transaction security, shopping transaction information] data for the purpose of contacting you and carrying out the marketing processes of our Company's products and services, recommending and promoting the products and services offered by our Company, including profiling and analysis activities, to the relevant persons by customising them according to the tastes, usage habits and needs of the relevant persons,
• Sending commercial electronic messages such as advertisements, promotions, etc. of your preferred contact information of your identity and contact data.

To whom and for what purpose the processed personal data can be transferred

 

 

Method of Personal Data Collection

Your personal data are collected electronically through our website, online participation form/contact form/application form, call centre, mobile applications, social media accounts, text messages, e-mails and physically through interviews, visits to our stores and forms in cases where you contact our Company.

Rights of the Relevant Person Listed in Article 11 of the Law

We inform you that you have the following rights regarding your personal data in accordance with Article 11 of the Law:

• To learn whether your personal data is being processed,
• Request information if your personal data has been processed,
• To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom your personal data is transferred domestically or abroad,
• To request correction of your personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom your personal data has been transferred,
• Although it has been processed in accordance with the provisions of the Law and other relevant laws, to request the deletion or destruction of your personal data in the event that the reasons requiring its processing disappear and to request notification of the transaction made within this scope to third parties to whom your personal data has been transferred,
• Object to the occurrence of a result to your detriment by analysing your processed data exclusively through automated systems,
• To request compensation for damages in case you suffer damage due to unlawful processing of your personal data.