The Customer acknowledges that ORBİFO processes the Customer's personal data, including spending and invoice information, phone number, TCKN, name, surname, and other identification information, address, contact information and its currency, limit information, risk, transaction information, and related personal data, in order to fulfill its legal obligations under the legislation, risk assessment/determination, legitimate interests, ensuring service quality, and to provide ORBİFO Services, and that this information is processed mutually by ORBİFO Corporate Services Inc. and ORBİFO Group Companies, and may also be shared with Member Merchants/Payment Service Providers/Organizations/Business Partners/Representatives/External Service Providers/relevant Financial Institutions/Banks that provide goods and services to the Customer.
 

The Customer has the right to learn whether their personal data is being processed, request information if it has been processed, learn the purpose of processing and whether it is used in accordance with its purpose, know the third parties to whom personal data is transferred domestically or abroad, request the correction of incomplete or inaccurate personal data, request the deletion or destruction of personal data, and request notification of these transactions to third parties to whom the personal data has been transferred in accordance with the Personal Data Protection Law. These rights can be exercised by submitting a written request to the .......@.......... address. ORBİFO may respond to the above-mentioned requests with a reasoned affirmative/negative response, either in writing or electronically. In principle, no fee will be charged for the necessary procedures related to requests. However, if the procedures require a cost, a fee may be charged based on the tariff determined by the Personal Data Protection Board in accordance with Article 13 of the Personal Data Protection Law. The Customer can revoke the data processing consent at any time through the Call Center. Revocation of data processing consent does not prevent the processing and sharing of personal data necessary for the provision of the ORBİFO Service and/or the fulfillment of the legal obligations of ORBİFO and the relevant ORBİFO Group Company within the scope of the Personal Data Protection Law.
 

ORBİFO CORPORATE SERVICES INC. PERSONAL DATA PROTECTION INFORMATION

As ORBİFO CORPORATE SERVICES INC. ("Company"), we place the utmost importance on the security of your personal data. With this awareness, we attach great importance to the processing and storage of any personal data of individuals associated with the Company, including those who benefit from our products and services, in accordance with the Personal Data Protection Law No. 6698 ("KVKK") and related legislation. As a "data controller" defined under the KVKK, we process personal data within the framework described below and within the limits mandated by the legislation.

a. Data Controller and Representative

In accordance with the KVKK, your personal data may be processed by our Company as the data controller within the scope explained below.

b. Purpose of Processing Personal Data, To Whom and For What Purpose It Can Be Transferred

Your personal data collected may be processed and transferred to our business partners, suppliers, group companies, company officials, shareholders, legally authorized public institutions, and private persons within the scope of the conditions and purposes of personal data processing specified in Articles 5 and 6 of the KVKK, limited to the purposes of correctly planning, executing, and managing the commercial collaborations, management, and communication activities and strategies of our Company, conducting the necessary work to benefit personal data owners from our products and services in the best possible way by our business units, making personalized recommendations based on their requests, needs, and desires, ensuring the highest level of data security, developing the services offered on our website and correcting the errors on the site, communicating with personal data owners who have submitted requests and complaints, and managing request and complaint management, event management, providing information to authorized organizations in accordance with the legislation, creating and tracking visitor records, ensuring the legal and commercial security of our Company, group companies, and the individuals with whom our Company has a business relationship (administrative operations related to communication conducted by our Company, ensuring the physical security and supervision of locations belonging to the Company, evaluation processes of business partners/customers/suppliers/authorized persons/employees, reputation research processes, legal compliance process, audit, financial affairs, etc.), determining and implementing the commercial and business strategies of our Company, and ensuring the implementation of our human resources policies. Your personal data collected may also be processed and transferred within the scope of the conditions specified in Articles 8 and 9 of the KVKK. If the processing activity carried out for the aforementioned purposes does not meet any of the conditions stipulated in the Law, your explicit consent is obtained for the relevant processing activity.

c. Method and Legal Reason for Collecting Personal Data

Your personal data is collected by our Company through various channels such as suppliers, customers, internet sites, and physical channels, through technical and procedural methods carried out within these channels, in order to provide you with our commercial services and to conduct our commercial activities within this framework. Personal data is processed based on the legal reasons arising from and executed under relevant legislation, contracts, demands, commercial practices, and honesty rules that provide the opportunity to apply within this framework, to fulfill our Company's legal obligations, to fulfill the requirements of the business relationship established with you, and to protect the legitimate interests of our Company while respecting the fundamental rights and freedoms of the personal data owners we are in contact with.

d. Rights of Personal Data Owner

Personal data owners have the following rights:

• To learn whether their personal data is processed,

• To request information regarding the processing if their personal data is processed,

• To learn the purpose of processing personal data and whether they are used appropriately for their purpose,

• To know the third parties to whom personal data is transferred domestically or abroad,

• To request the correction of personal data if it is incomplete or inaccurately processed, and to request notification of the correction to third parties to whom the personal data was transferred,

• To request the deletion or destruction of personal data if the reasons for processing no longer exist, despite being processed in accordance with the KVKK and relevant legislation, and to request the notification of this deletion or destruction to third parties to whom the personal data was transferred,

• To object to a result that arises exclusively from the analysis of processed data by automated systems and negatively affects the person,

• To request compensation if personal data is processed unlawfully and causes harm.

To exercise the above rights, you must submit your request to our Company with the necessary identification information and explanations regarding the right you wish to exercise, by filling out and signing the application form available at the link below, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, either by:

• Personal application,

• Through a notary,

• By sending it to our Company’s registered electronic mail address ([…]) with a secure electronic signature as defined by the Electronic Signature Law No. 5070.