Statement on the Protection of Personal Data
Protection of personal data, Margerie Group (refer to MARGERIE CRYSTAL ZÜCCACİYE SANAYİ VE TİCARET LİMİTED ŞİRKETİ’s current and/or future subsidiaries, affiliates, joint ventures and all of their branches and offices at home and abroad.) In this respect, Margerie Stores, in order to fulfill its obligation to inform arising from Article 10 of the Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform (“Communiqué”), presents the following explanations to the attention of our valued customers.
1. Legal Basis for Collection of Your Personal Data
The personal data of our customers and the users of our website are collected and processed in accordance with the provisions of the Constitution of the Republic of Turkey, the Personal Data Protection Law No. 6698 ("KVKK") and other relevant legislation, and the data of our customers, including the personal data of those who shop from the Mobile Application, are collected and processed in accordance with the provisions of the Law No. 6563 on the Regulation of Electronic Commerce and other relevant legislation.
2. Methods of Collecting Your Personal Data and Personal Data Collected
Your personal data may vary depending on the nature of the service, product or commercial activity offered by Margerie Crystal, but is processed verbally, in writing and electronically through automatic or non-automatic methods, through means such as stores, call centers, customer service units in our stores, websites, social media channels, loyalty program applications, live service services, with the express consent or approval of our customers and in accordance with the provisions of the legislation. If you shop from a Margerie Crystal store and provide this information to the Margerie Crystal Brand, by Margerie Crystal;
| Identity Information | Your name, surname, and if shared by you, your gender, date of birth and occupation information, marital status, and date of marriage |
|---|---|
| Contact Information | Your phone number, delivery address, email address |
| Customer Transaction Information | Your order and invoice information, delivery transaction information, transaction history regarding your purchases, request and complaint information |
| Marketing Information | Shopping history information, campaign information, profiling and segmentation information, cookie records |
| Legal Transaction Information | Information in correspondence with authorized persons, institutions and organizations, information in case and enforcement files, and your legal information request information |
| Audio Recordings | Your voice recording if you contact the call center |
3. Purposes and Legal Reasons for Processing Your Personal Data
Your personal data is processed accurately and up-to-date, in accordance with the law and principles of integrity, within the framework of the services and scope of Margerie Crystal's activities; for specific, clear, and legitimate purposes as outlined in this Disclosure Statement and/or the Margerie Crystal Group's personal data processing purposes; in a manner related to, limited to, and proportionate to the purposes for which it is processed; and retained for the period stipulated in relevant legislation or necessary for the purposes for which it is processed. Margerie Crystal Stores may record, store, update, disclose to third parties, transfer, classify, and process your personal information, as and to the extent permitted by legislation.
| Purpose of Processing | Personal Data | Legal Reason |
|---|---|---|
| To ensure that your shopping transaction is completed, that the records we create in our system can be distinguished from those of other customers, that you can benefit from after-sales support services without presenting an invoice/receipt and that you can exercise your legal rights (exchange, return, product review, etc.), and that these operational transactions can be carried out, and that an e-invoice/e-archive invoice for your shopping can be sent to you. | Your identity (name and surname), contact information (e-mail address, phone number) and shopping information (shopping date, amount, shopping content, payment method and payment details) | Processing of personal data belonging to the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract (KVKK Article 5/2/c), It is mandatory for the data controller to fulfill its legal obligation (KVKK Article 5/2/ç) |
| To ensure the completion of membership transactions, to fulfill the requirements of the membership agreement we will conclude with you, to enable member login, and to provide membership information. | Your identity (name and surname), contact (e-mail address, telephone number) and password information | The processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract (KVKK Article 5/2/c) |
| In order to exercise our legal rights in case of a possible legal dispute regarding your purchases. | Your Turkish ID number information | Data processing is necessary for the establishment, exercise or protection of a right (KVKK Article 5/2/e) Personal data processing is necessary for the parties to the contract, provided that it is directly related to the establishment or performance of a contract (KVKK Article 5/2/c) |
| In case of a refund, the refund can be made to your bank account during the return process. | Bank account information | The processing of personal data belonging to the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract (KVKK Article 5/2/c). It is mandatory for the data controller to fulfil its legal obligation (KVKK Article 5/2/ç). |
| To be able to issue invoices and, in some cases, to carry out current account and reconciliation transactions. | Your identity, contact and billing information, Turkish ID/tax number, sole proprietorship information | The processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract (KVKK Article 5/2/c) |
| If you want to make your payment by credit card, in order to receive the payment | Your credit card information (credit card information is transferred to the payment institution without being recorded by us.) | The processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract (KVKK Article 5/2/c |
| To carry out your Club Card membership transactions, to send your card to you, to fulfill our obligations in accordance with the Club Card programs, to enable you to benefit from campaigns, to provide information about membership, to enable you to use and inquire about the points you have earned. | Information that allows you to benefit from campaigns related to Club Card memberships, such as your identity (name and surname), membership number, contact information (phone number, e-mail, address) and shopping information (date, time, amount of your shopping, shopping content, points you have earned). | The processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract (KVKK Article 5/2/c) |
| To enable you to benefit from membership programs, to benefit from special opportunities and offers created for you based on your purchases from our stores and website, to create general or personalized campaigns, advantages, promotions, advertisements, to organize campaigns, competitions, surveys, sweepstakes and other events, to carry out segmentation, reporting, profiling, marketing and analysis studies. | Date of birth, gender, city, district, demographic information, movements, segments, past purchases, payment methods and preferences, communication preferences, purchase amount, payment channels, bank information from which the payment was made, survey responses, etc. | Personal data cannot be processed without the explicit consent of the person concerned (KVKK Art. 5/1) |
| To fulfill our obligations arising from the legislation and to fulfill our other legal obligations to authorized and authorized public institutions and organizations. | Identity, contact, shopping, invoice and transaction security (log records) information | It is clearly prescribed by law (KVKK Article 5/2/a) It is mandatory for the data controller to fulfill his legal obligation (KVKK Article 5/2/ç) |
4. Security of Your Personal Data
Personal data shared with Margerie Crystal Stores is under the supervision and control of Margerie Crystal Stores. Margerie Crystal is responsible, as the data controller, for establishing the necessary organization and taking and implementing technical and administrative measures to protect the confidentiality and integrity of personal data in accordance with the relevant legislation. In this context, Margerie Crystal uses the necessary technologies to prevent unauthorized access and use of personal data, stores personal data in computer systems with limited access in facilities under its control, uses Secure Socket Layer (SSL) and similar encryption methods, and establishes the necessary organization and takes all necessary technical and administrative measures to protect the confidentiality and integrity of personal data.
5. Transfer of Your Personal Data
The sharing of our customers' and/or related personal data with third parties is carried out within the framework of the customers' consent, and as a rule, personal data is not transferred to third parties without the customer's explicit consent. However, due to and limited to our legal obligations, personal data is shared with courts and other public institutions. Furthermore, personal data is transferred to contracted third parties, within the limits stipulated by law, to provide the services we undertake, to ensure the quality of the services provided, to conduct personalized product and service promotions and other marketing activities, and to obtain specialized consulting services for these purposes. Your personal data may be shared with Margerie Crystal, our program partner institutions and organizations with which we collaborate to conduct our operations; domestic and international individuals and organizations from which we receive cloud storage services; and, if you provide explicit consent by sharing the single-use password sent to you during in-store shopping or by checking the relevant checkbox during a purchase on our website; with domestic and international organizations with which we have agreements regarding the sending of commercial electronic messages to our customers with their permission; with banks with which we have agreements with the Interbank Card Center; and, to provide you with better service and ensure customer satisfaction, with survey companies and other domestic and international third parties, including our relevant business partners, as part of various marketing activities. Necessary technical and administrative measures are taken to prevent violations of rights during data transfer to third parties. Margerie Crystal is not responsible for any violations that occur due to third party data protection policies or in the risk area within the responsibility of the third party.
6. Your Rights Regarding Your Personal Data
Regarding the personal data you have shared with us;
- You can learn whether we process your personal data or not, and if so, you can request information about it.
- You can learn the purpose of processing your personal data and whether they are used in accordance with their purpose.
- You can learn whether your personal data is transferred domestically or abroad and to whom it is transferred.
- You may request that your inaccurate or incomplete personal data be corrected and that the recipients to whom these data have been transferred or may have been transferred be notified.
- You may request the destruction (deletion, destruction, or anonymization) of your personal data under the conditions stipulated in Article 7 of the Personal Data Protection Law. However, we will evaluate your request and determine which method is appropriate based on the circumstances of your specific case. In this context, you may request information at any time explaining why we have chosen a particular destruction method.
- You may request that third parties to whom your personal data has been or may be transferred be informed about your destruction request.
- You may object to a result resulting from the analysis of processed data exclusively through automated systems if it is contrary to your interests.
- You may claim compensation if you suffer damage due to the processing of your personal data in violation of the regulations specified in this information text.
If you submit your requests regarding your rights listed above to Margerie Crystal in writing, Margerie Crystal will resolve your request free of charge within 30 (thirty) days at the latest. However, if the process entails an additional cost, Margerie Crystal will charge the fee set by the Personal Data Protection Board. To exercise these rights, you may submit your request in writing, in accordance with Article 13 of the Personal Data Protection Law, to Margerie Crystal at "İ Çubuklu Mahallesi, Engürü Bağı Caddesi, No: 60/A, Beykoz / Istanbul " by completing the Application Form and attaching your name and surname, your Turkish ID number if you are a citizen of the Republic of Turkey; your nationality, passport number or ID number if you are not a citizen of the Republic of Turkey ; your residence or workplace address for notification; your email address and telephone number for notification; and any necessary information and documents to establish your identity and the subject of the request.
Information on Changes
The rights you have under the Personal Data Protection Law (KVKK) are Margerie Crystal's obligations. We would like to inform you that we process your personal data with this awareness and to the extent required by law. We may update this information on our website from time to time in the event of legal changes. You can always easily track these updates on this page.
8. Up-to-dateness of Personal Data
Pursuant to Article 4 of the Personal Data Protection Law, Margerie Crystal is obligated to keep your personal data accurate and up-to-date. In this context, to enable Margerie Crystal to fulfill its obligations under applicable legislation, our customers are required to share accurate and up-to-date data with Margerie Crystal. If there are any changes to your personal data, we kindly request that you update your personal data by contacting us through the communication channels specified above.