Effective Date: March 5, 2025
DATA CONTROLLER
Madlen Teknoloji A.Ş. ("Madlen Teknoloji" or "Company") as the data controller, pursuant to the Personal Data Protection Law No. 6698 ("PDPL"), may process, record, store, classify, update, and, in cases permitted by legislation, disclose/transfer to third parties, personal data in accordance with the purposes described below, in a manner that complies with the law and principles of honesty.
PURPOSE OF PROCESSING YOUR PERSONAL DATA
Your personal data will be processed for the following purposes:
To carry out necessary activities by our business units in order for you to benefit from the technology products and services offered by our Company,
To customize and recommend the products and services offered by our Company according to your preferences, usage habits, and needs,
To contact you regarding the matters you communicate with our Company,
To ensure the legal and commercial security of our Company and individuals with whom we have business relationships,
To determine and implement the commercial and business strategies of our Company,
To fulfill our obligations arising from the relevant legislation,
To conduct communication activities,
To manage customer relationship processes. These data will be processed in accordance with the personal data processing conditions set forth in Articles 5 and 6 of the PDPL.
PROCESSED PERSONAL DATA
The personal data processed by our Company is categorized as follows:
Identity Information: Name, surname, T.C. identity number (only in necessary cases)
Contact Information: Email address, phone number, address
Customer Transaction Information: Request and complaint information, order information
Transaction Security Information: IP address, website login and logout information
Marketing Information: Preferences and likes, cookie records
TRANSFER OF YOUR PERSONAL DATA
Your personal data may be transferred, in accordance with the purposes outlined above, in compliance with Articles 8 and 9 of the PDPL:
To authorized public institutions and organizations to meet the requests of public institutions and organizations as required by legal regulations,
To our business partners, suppliers, and service providers,
To group companies (if any) affiliated with our Company.
METHOD OF COLLECTION OF YOUR PERSONAL DATA AND LEGAL BASIS
Your personal data is collected by our Company electronically through various channels such as our website, email, call centers, social media platforms, mobile applications, and similar means, or physically via communication forms, contracts, visitor forms, and similar channels. The collection of such data is based on the legal grounds specified in the second paragraph of Article 5 of the PDPL, which include:
Explicitly stipulated by laws,
Directly related to the establishment or performance of a contract,
Necessary for fulfilling the legal obligation of our Company,
Mandatory for the establishment, exercise, or protection of a right,
Necessary for the legitimate interests of the data controller, provided it does not harm the fundamental rights and freedoms of the data subject, Based on your explicit consent.
YOUR RIGHTS AS A DATA SUBJECT
Pursuant to Article 11 of the PDPL, you have the following rights regarding your personal data by applying to our Company:
To learn whether your personal data is being processed,
To request information regarding the processing of your personal data if it has been processed,
To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
To be informed about the third parties to whom your personal data is transferred, whether domestically or internationally,
To request the correction of any incomplete or inaccurate personal data,
To request the deletion or destruction of your personal data under the conditions specified in Article 7 of the PDPL,
To request that any corrections, deletions, or destructions of your personal data be notified to third parties to whom the data has been transferred,
To object to the result of a processing activity that solely involves automated systems and negatively affects you,
To request compensation for any damages caused by the unlawful processing of your personal data.
APPLICATION RIGHTS
To exercise the above rights, you may apply to us by emailing hello@madlen.io. We will respond to your request free of charge as soon as possible and no later than 30 (thirty) days. If responding to your request incurs any costs, we may charge you the fees determined by the Personal Data Protection Authority.
CHANGES TO THE PRIVACY NOTICE
Our Company may update this privacy notice as necessary. Any changes will be published either as an amendment to this document or as a new version on our website.
