KVKK Policy



Sprachportal Consulting and Training Academy Tic. Ltd. Şti: PERSONAL DATA PROCESSING POLICY

Sprachportal Consulting and Training Academy Tic. Ltd. Şti ("Sprachportal") takes utmost care to protect privacy and confidentiality and to ensure continuous compliance with the Personal Data Protection Law.

In order to comply with the Law on the Protection of Personal Data No. 6698 ("KVKK"), it adopts the basic principles stipulated by the KVKK and fulfills its obligations regarding the provision of data security.

Scope of Personal Data Processing Policy

This Personal Data Processing Policy provides information to the relevant persons regarding the following issues;

↳ Methods and legal reasons for collecting personal data,
↳ Which groups of persons are processing their personal data,
↳ Categories of personal data being processed,
↳ In which business processes and for what purposes this personal data is used,
↳ Technical and administrative measures taken to ensure the security of personal data,
↳ To whom and for what purpose personal data can be transferred,
↳ Retention periods of personal data,
↳ Legal rights of Relevant Persons,
↳ How Relevant Persons can change their preferences regarding receiving electronic commercial messages,

Methods and Legal Reasons for Collecting Personal Data

Sprachportal collects personal data through membership forms, purchase forms and event participation forms on the Sprachportal website in accordance with the personal data processing conditions stipulated in the KVKK and in line with the legal reasons specified in this Personal Data Processing Policy.

Data Categories


Customers

↳ Identity Information: Name, Surname, Date of Birth,
↳ Contact Information: Email address, Phone Number
↳ Financial Information: Billing information
↳ Risk Management Information: IP address, Time Zone, operating system,
↳ Transaction Security Information: Password, country information, city information
↳ Marketing Information: Cookie logs, targeting information, evaluations showing habits and likes
↳ Legal Transaction and Compliance Information: The start and end time of the service provided, the type of service used, the amount of data transferred, the commercial electronic message permission given by the Relevant Person in electronic environment
↳ Marketing Information: E-mails sent based on the permission of the commercial electronic message given by the person concerned


Website Visitors

↳ Location Information: Country, city
↳ Risk Management Information: IP address, session information
↳ Marketing Information: Cookie logs, targeting information, evaluations showing habits and likes
↳ Marketing Information: Marketing e-mail messages sent based on the commercial electronic message permission given by the person concerned
↳ Request/Complaint Management: Records regarding the transactions made during the evaluation or management of the complaints and/or requests submitted by the relevant person regarding the product or service purchased

In Which Business Processes and For What Purposes Personal Data Is Used


Customer Personal Data

↳ Realization of membership transactions,

↳ Improving the services offered on the Salıhagağaoğlu Gıda website, developing new services and providing information about it,

↳ In order to perform the distance contracts established with the users, to analyze the preferences, tastes and needs of the customers who have commercial electronic message approval and to provide special promotions, opportunities and benefits to the customers,

↳ Promoting and marketing products and services in line with the preferences and appreciation of customers by remarketing, targeting, profiling and analyzing in line with the explicit consent of the users,

↳ Resolution of user problems and complaints,

↳ Improving the user experience on the website,

↳ Follow-up of accounting and purchasing transactions,

↳ Legal processes and compliance with legislation,

↳ Responding to information requests from administrative and judicial authorities,

↳ Ensuring information and transaction security and preventing misuse,

↳ Making the necessary arrangements to ensure that the processed data is up-to-date and accurate


Website Visitors

↳ Improving the services offered on the website, developing new services and providing information about them,

↳ In terms of commercial electronic message approval for existing visitors; analyzing their preferences, tastes and needs and providing special promotions, opportunities and benefits to visitors,

↳ Promoting and marketing applications, goods/products and services in line with the preferences and appreciation of the visitors by remarketing, targeting, profiling and analyzing in line with the explicit consent of the visitors,

↳ Resolving visitor problems and complaints,

↳ Legal processes and compliance with legislation,

↳ Responding to information requests from administrative and judicial authorities,

↳ Ensuring information and transaction security and preventing misuse,

↳ Making the necessary arrangements to ensure that the processed data is up-to-date and accurate,

↳ Fulfillment of legal obligations

Technical and Administrative Measures Taken to Ensure the Security of Personal Data

Sprachportal undertakes to take all necessary technical and administrative measures and to show due diligence to ensure the security of your personal data.

Sprachportal takes the necessary measures to prevent unauthorized access, misuse, unlawful processing, disclosure, alteration or destruction of personal data. Salıhagağaoğlu Gıda uses generally accepted security technology standards such as firewalls and encryption when processing personal data.

Regarding the prevention of unlawful access to the personal data processed by Sprachportal, the prevention of unlawful processing of this data and the protection of personal data:

↳ All areas of the website where personal data are received are protected by SSL,

↳ Implements access authorizations and restrictions for its employees,

↳ It ensures that personal data in paper environment is kept in locked cabinets and can only be accessed by authorized persons.

↳ Personal data processed through cookies belonging to third parties from which service is received are deleted from the systems of third parties if the membership ends.


In the event that personal data is damaged or in the hands of unauthorized third parties as a result of attacks on the platforms operated by Sprachportal or the Sprachportal system, Sprachportal immediately notifies the relevant persons and the Personal Data Protection Board and takes the necessary measures, despite Sprachportal taking the necessary information security measures.

Transfer of Personal Data

Sprachportal transfers personal data to third parties only for the purposes specified in this Personal Data Processing Policy and in accordance with Articles 8 and 9 of the KVKK.

Personal data collected through website usage preferences and browsing history, execution of distance sales contract, membership form and other forms are shared with our domestic / foreign business partners from whom cookie service is received in order to profile and communicate in line with the tastes and preferences of the relevant persons. Personal data transfers carried out in this context are carried out through the secure environment and channels provided by the relevant third party. Depending on the content and scope of the service received from third parties, in all cases where there is no need to transfer personal data, the transfer is made using masked personal data.

Shopify
Electronic commerce infrastructure service is provided for the Sprachportal website. Shopify servers are located in the United States. Their Privacy Policy can be found here.

Logo
In order to fulfill our accounting obligations, invoice, collection and pre-accounting services are obtained. Parachute servers are hosted domestically. Their Privacy Policy can be found here.

Sovos Foriba
Services are provided in order to fulfill our accounting obligations such as e-invoice and e-waybill. Sovos Foriba servers are hosted domestically. Their Privacy Policy can be found here.

Iyzico
Payment infrastructure service is provided for our electronic commerce site. Iyzico servers are hosted domestically. Their Privacy Policy can be found here.

Klaviyo
It is used for measuring usage for our electronic commerce site and for e-mail marketing. Klavio servers are hosted in the United States. Their Privacy Policy can be found here.

HotJar
It is used to measure in-app usage for our electronic commerce site and to improve our services. HotJar servers are hosted in the United States. Their Privacy Policy can be found here.

Google Ads
It is an online marketing tool that allows us to display our ads in Google's search results or on partner sites. Google Ads servers are hosted in the United States. Your personal data is not transferred directly, but is shared using masking methods. Their Privacy Policy can be found here.

Google Analytics
Site performance and analysis technology services are provided for our electronic commerce site. Google Analytics servers are hosted in the United States. Your personal data is not transferred directly, but is shared using masking methods. Their Privacy Policy can be found here.

In addition to the technical measures to ensure the security of the personal data subject to domestic and international transfer mentioned above; Considering that the other party of the legal relationship is the data controller or data processor, it is also legally protected thanks to the KVKK-compliant provisions included in our contracts. As stated above, when transferring personal information to countries other than Turkey during the sharing of information, it is ensured that the data is transferred in accordance with this policy and as permitted by the applicable law regarding data protection.

Personal Data Storage Periods

Sprachportal retains the personal data it processes in accordance with the KVKK for the periods stipulated in the relevant legislation or required by the purpose of processing. In our Personal Data Retention and Destruction Policy, these periods are approximately as follows:
Membership registrations: 10 years
All records relating to accounting and financial transactions: 10 years
Cookies: Up to 3 years
Traffic information on online visitors: 2 years
Resumes: 1 year
Personal data relating to Client Companies: 10 years after the legal relationship has ended
Personal data relating to suppliers: 10 years after the termination of the legal relationship

Relevant Person Rights

The rights of the Relevant Person on the personal data processed by Sprachportal in accordance with Article 11 of the KVKK are listed below:

↳ To learn whether personal data is processed or not,

↳ If personal data has been processed, requesting information about it,

↳ To learn the purpose of processing personal data and whether they are used in accordance with their purpose,

↳ To know the third parties to whom personal data is transferred in the country or abroad,

↳ Requesting correction of personal data in case of incomplete or incorrect processing,

↳ Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,

↳ Requesting notification of the transactions made pursuant to subparagraphs (d) and (e) to third parties to whom personal data has been transferred,

↳ Objecting to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems,

↳ Requesting the compensation of the damage in case of damage due to unlawful processing of personal data.

In order to exercise your rights over your personal data; You can make your application and exercise your rights through the methods specified in the "Application Form" on the Salıhagağaoğlu Gıda website.

Conditions for Destruction of Personal Data

Sprachportal stores the personal data it processes through the website and the Platform for the periods stipulated by the relevant laws and/or for the periods required by the purpose of processing in accordance with Articles 7, 17 of the KVKK and Article 138 of the Turkish Penal Code. In the event that these periods expire, it will delete, destroy or anonymize in accordance with the provisions of the Regulation on the Deletion, Destruction or Anonymization of Personal Data.

Deletion of personal data by Sprachportal refers to the process of making personal data inaccessible and unusable for the relevant users in any way. For this, Salıhagağaoğlu Gıda implements user-level access authorizations and restrictions. It takes the necessary measures to carry out the deletion process in the databases.

Anonymization of personal data by Sprachportal means that personal data cannot be associated with an identified or identifiable natural person, even if it is matched with other data.

Sprachportal explains in detail the methods for deletion, destruction and anonymization and the technical and administrative measures it takes within the scope of the Personal Data Storage and Destruction Policy prepared in accordance with the Regulation on the Deletion, Destruction or Anonymization of Personal Data.

Changes to the Privacy/Personal Data Protection Policy

Sprachportal may make changes to this Personal Data Processing Policy at any time. These changes take effect immediately upon the publication of the amended new version of the Personal Data Processing Policy. Necessary information will be provided to the relevant persons so that you are aware of the changes in this Personal Data Processing Policy.