GDPR Clarification Article

admarket.co GDPR Clarification Article

Clarification Text Regarding the Processing of Personal Data

Data Controller Admarket Online Limited in the UK ("admarket" or "Company”)

As Admarket, we have prepared this Clarification Text on the Processing of Personal Data ("Clarification Text") in order to enlighten the data subjects regarding the processing, storage and transfer of your personal data within the framework of our activities arising from the Law on the Protection of Personal Data ("GDPR") and related legislation and legal regulations.

In addition to these, detailed information about the cookies used in case you visit our website, mobile site and/or mobile application is included in the Cookie Policy. Personal data processed through these are explained in this Clarification Text.

The Clarification Text shall be valid as of the date of publication by admarket. Admarket may make changes to the Clarification Text at any time if necessary. The amendments to be made shall take effect immediately upon the publication of the Clarification Text on https://www.admarket.co/agreements.

Customers

Processed Personal Data:

 Name - Surname, company information, telephone, e-mail address, address information.
In case of a dispute, Information in the Case File, Dunning Notices, and Information in Correspondence with Judicial and Administrative Authorities.
Invoice, Request, Order, Customer Comments, and Product Information.
IP Address Information, Website Login and Logout Information, User Name Information, Password Information, and Traffic Data (Connection Time / Duration etc.).
Bank Account / IBAN Number Information
Call Center Voice Recordings
Location information

Personal Data Processing Purposes: 

Execution of Finance and Accounting Affairs, Execution of Communication Activities; Execution of Company / Product / Services Loyalty Processes; Execution of Activities in accordance with the Legislation; Follow-up and Execution of Legal Affairs; Execution of Business Continuity Activities; Execution and Audit of Business Activities; Execution of Goods / Service Sales Processes; Execution of Goods / Service After Sales Support Services; Execution of Customer Relationship Management Processes; Execution of Activities for Customer Satisfaction; Execution of Advertising, Campaign and Promotion Processes; Execution of Storage and Archive Activities; Execution of Contract and Membership Processes; Follow-up of Requests / Complaints; Planning and Execution of Commercial and/or Business Strategies; Carrying out the Necessary Works by Business Units to Benefit from the Products and Services Offered and Execution of Related Business Processes; Providing Information to Authorized Persons, Institutions and Organizations.

Follow-up and Execution of Legal Affairs; Execution and Supervision of Business Activities; Providing Information to Authorized Persons, Institutions and Organizations; Execution of Activities in accordance with the Legislation; Execution of Storage and Archive Activities; Execution of Risk Management Processes; Execution of Contract Processes; Follow-up of Requests / Complaints; Ensuring the Security of Data Controller Operations.

Execution of Information Security Processes; Execution of Audit / Ethical Activities; Execution and Audit of Business Activities; Execution of Storage and Archive Activities; Ensuring the Security of Data Controller Operations; Providing Information to Authorized Persons, Institutions and Organizations; Execution of Activities in accordance with the Legislation; Follow-up and Execution of Legal Affairs; Execution of Goods / Service Sales Processes; Follow-up of Requests / Complaints

ADMARKET Processes Legal Reasons for Personal Data Processing

Your personal data within this scope for the realization of the above-mentioned purposes specified in the relevant legislation and the relevant article of the GDPR;
It is clearly stipulated in the laws,
Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process the personal data of the parties to the contract,
It is mandatory for the data controller to fulfil its legal obligation and
Data processing is mandatory for the data controller's legitimate interests, provided that it does not harm the fundamental rights and freedoms of the data subject
based on legal grounds. For cases that do not fall within the scope of the above purposes, your personal data are processed based on your explicit consent specified in the Consent Text.

Methods of Collection of Personal Data:  

The above-mentioned personal data are collected through the membership forms on our website, the fields on the My Account page that can be filled in depending on your preference, your requests and applications, contracts, campaigns and third-party authentication systems (e.g. Google Login, Facebook Login, etc.).

The above-mentioned personal data are collected through information security systems and electronic devices.

The personal data mentioned above are collected through printed/electronic forms, call centre records, e-mails and programs.

TRANSFER OF PERSONAL DATA

Personal data belonging to customers will be disclosed only to the extent necessary for the realization of the relevant purpose, in compliance with the rules and by taking the necessary technical and administrative measures;
To our affiliates and subsidiaries limited to the purposes listed above,
Again, in accordance with the legislation within the scope of the contracts between us for the above-mentioned purposes, banks and other payment institutions (in order to receive payment for the product), (to provide information on delivery, etc.) to our business partners with whom we work in bulk SMS / e-mail sending and (for after-sales services when necessary) to our suppliers and product authorized services, to business partners with whom we cooperate and with whom joint campaigns are made,
In order to fulfil our legal obligations, it can be transferred to authorized persons and official institutions in accordance with legal regulations and legislation; and
It may be recorded in our programs and/or systems provided/made available to us by our infrastructure suppliers in the field of technology.

Online Active Users

DATA CATEGORIES

1- Transaction Security Information

Processed Personal Data:

 IP Address Information, Website Login and Logout Information, Password and Password Information, Computer Screen Records, Device IMEI Number, Device MAC Address

Personal Data Processing Purposes:  Execution of Information Security Processes; Execution of Activities in Compliance with the Legislation; Management of Customer Relationship Management Processes; Follow-up of Requests and Complaints; Providing Information to Authorized Persons, Institutions and Organizations

Legal Reasons for Personal Data Processing Your personal data within this scope, in order for admarket to realize the purposes listed above, specified in the relevant legislation and the relevant article of the GDPR;
It is clearly stipulated in the laws,
It is mandatory for the data controller to fulfil its legal obligation and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject
processed based on legal grounds.

Methods of Collection of Personal Data:  Your personal data mentioned above are collected through internet applications, information systems and electronic devices (telecommunication infrastructure, computers and telephones, etc.) and other documents declared by you.

TRANSFER OF PERSONAL DATA

Personal data belonging to Online Users are transferred only to the extent necessary for the realization of the relevant purpose by complying with the rules in the article titled "Transfer of Personal Data" of the GDPR and taking the necessary technical and administrative measures;

In order to fulfil our legal obligations, it can be transferred to authorized persons and official institutions in accordance with legal regulations and legislation; and
It may be recorded in our programs and/or systems provided/made available to us by our infrastructure suppliers in the field of technology.

Storage of Personal Data, Your Rights and Application

STORAGE AND DISPOSAL

Our Company has established a Storage and Destruction Policy for storing and deleting personal data. Storage and destruction procedures regarding your personal data are carried out within the scope of this policy. Accordingly, if a period of time is specified for the storage of data in the GDPR or in the relevant laws and other relevant legislation, the data in question must be kept for at least this period.

Considering the possibilities, such as the late receipt of a possible court request or the request of an administrative authority authorized by law regarding the relevant data or the occurrence of a dispute to which we may be a party, the retention period of the data is determined by adding a period of 6 months to 1 year to the periods stipulated in the legislation for the storage of your data.

At the end of the specified period, the data in question are deleted, destroyed or anonymized.
If the legislation does not stipulate a period of time for the storage period of the data we process, your data will be deleted, destroyed or anonymized without any need for your request after the expiration of the 10-year statute of limitations from the termination of our legal relationship, taking into account possible disputes as required by the relationship between us.

If all the conditions for processing personal data have disappeared or the retention period declared by us or determined within the scope of the legislation has expired, your data will be deleted, destroyed or anonymised ex officio on the first periodic destruction date or within 6 months at the latest. If you request the deletion of your data for a valid reason, your data will be deleted within 30 days at the latest to the extent legally possible. If you request the deletion or destruction of your data, the retention period of which is determined in the legislation, before the prescribed periods, your request in question will not be realised.

YOUR RIGHTS

Regarding your personal data within the scope of GDPR and related legislation;

Learn whether your personal data is being processed or not,
Request information if your personal data has been processed,
To learn the purpose of personal processing data and whether they are used for their intended purpose,
To know the third parties to whom your personal data is transferred,
To request correction of your personal data in case of incomplete or incorrect processing,
Request the deletion or destruction of your personal data under the conditions stipulated in the GDPR legislation,
When you request the correction of incomplete or incorrect data and the deletion or destruction of your personal data, to request that this situation be notified to third parties to whom we transfer your personal data,
Object to the occurrence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems and
In case you suffer damage due to unlawful processing of personal data, to demand compensation for this damage
you have rights.

APPLICATION

You can submit your applications and requests regarding your personal data by using the Data Subject Application Form; By sending it to:

71-75, Shelton Street, Covent Garden, London, WC2H 9JQ, UNITED KINGDOM,

with a wet signature and a copy of your ID card,
By sending to info@admarket.co from your e-mail address previously notified to our Company and registered in our system
You can forward it to admarket.

In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, it is obligatory to include the name - surname, signature if the application is in writing, passport number, residential or workplace address for notification, e-mail address for notification, telephone number and fax number, and information on the subject of the request.

The data subject must clearly and comprehensibly state the requested matter in the application, which includes explanations regarding the right he/she will make to exercise the rights mentioned above and the right he/she requests to exercise. Information and documents regarding the application must be attached to the application.

Although the subject of the request must be related to the applicant's person, if acting on behalf of someone else, the applicant must be specifically authorised in this regard, and this authority must be documented (special power of attorney). In addition, the application must contain identity and address information, and documents confirming the identity must be attached to the application.
Requests made by unauthorised third parties on behalf of someone else will not be evaluated.

Your requests regarding your personal data will be evaluated and answered within 30 days at the latest from the date of receipt by our Company. In the event that your application is evaluated negatively, the reasons for the reasoned rejection will be sent to you via e-mail or postal mail to the address you specified in the application and, if possible, through the procedure in which the request was made.

Data Controller: Ali Coskun ali@admarket.co