SERVICE USER CLARIFICATION TEXT ON PROTECTION OF PERSONAL DATA
AssistBox Teknoloji Ltd. Şti. (AssistBox), as the data controller, processes your personal data within the scope of Law No. 6698 of Protection of Personal Data (hereinafter referred to as “KVKK") and the relevant legislation.
According to Article 10 of the KVKK, which regulates the Disclosure Obligation, data controllers are obliged to inform the persons whose personal data they process on certain issues.
This clarification text has been prepared according to the Communiqué on the Procedures and Principles to be Complied with in Fulfilling the Disclosure Obligation published by the Personal Data Protection Authority to fulfill the legal obligation.
According to Law No. 6698 of Protection of Personal Data:
Personal data means any information relating to an identified or identifiable natural person,
Processing of Personal Data means any activity in the process of obtaining, saving, storing, preserving, changing, reorganizing, disclosing, passing, transferring, making accessible, classifying, or preventing the use of Personal Data fully or partially automatically or non-automatically provided that it is a part of any data recording system,
The data subject means the natural person whose personal data is processed,
Data Controller means the natural person or juridical person who determines the purposes and means of processing Personal Data and is responsible for the establishment and management of the data recording system,
The obligation of clarification means the obligation of the data controller, or the person authorized by it to inform the data subject about the identity of the data controller, the purpose for which personal data will be processed, to whom and for what purpose the processed personal data can be transferred, the method and legal reason for collecting personal data, and other rights listed in Article 11 of the Law.
The Data Subject
You, whose personal data are processed by AssistBox, are defined as the Person Receiving a Product or Service by us due to the purchase of a good or service, and you are accepted as the Data Subject by the Law.
AssistBox is the data controller, who determines the purposes and means of processing your personal data and is responsible for the establishment and management of the data recording system.
Obtaining Your Personal Data
Your personal data and the methods of obtaining it are shown below. The same personal data can be obtained by more than one method.
|Method / Environment||Data|
|Directly from you with automated methods electronically||Connection Time, Connection Ending Time, IP Address, Device Information, Device ID, Reference URL, and URL Request;|
Purposes and Legal Reasons for Processing Your Personal Data
The following table lists the legal reasons and purposes of processing your personal data.
|Due to the necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject mentioned in Article 5/2f of the KVKK|
In order to carry out storage and archiving activities
In order to identify technical problems and their sources, and to provide system support services that may be needed
|IP Address, Connection Time, Connection Ending Time, Device ID, Device Information, Reference URL, and URL Request|
Transfer of Your Personal Data
Your personal data can be transferred to the relevant authorities without the obligation of disclosure and without your explicit consent if requested within the framework of Article 28/1 of the KVKK.
Apart from this, under unforeseen circumstances, if requested in cases clearly stated in the law, your personal data may be transferred to public institutions specified in the law (administrative authorities such as ministries, Presidential boards, etc.) within the scope and limitations stipulated in the law.
Your personal data is not transferred to any institution, person, or organization other than our legal obligations that do not require your explicit consent and disclosure obligation.
Your Rights Regarding Your Personal Data
Data subjects must first apply to the data controller to exercise their rights regarding their personal data. According to Article 14 of the Law, no direct complaint can be made to the Personal Data Protection Authority.
In accordance with the law, you can exercise your right
a) to learn whether your Personal Data are processed or not,
b) to demand information as to if your personal data have been processed,
c) to learn the purpose of the processing of your personal data and whether these personal data are used in compliance with the purpose,
d) to know the third parties to whom your personal data are transferred in-country or abroad,
e) to request the rectification of the incomplete or inaccurate data,
f) to request the deletion or destruction of Personal Data in the event that the reason for its processing disappear,
g) to request the notification of the third parties to whom your personal data has been transferred to the transaction made pursuant to the subparagraphs (e) and (f),
h) to object to the occurrence of a result against you by analyzing your processed data through automated systems,
i) to claim compensation for the damage arising from the unlawful processing of your personal data.
You can exercise your rights by contacting the data controller, that is, us.
Application Method to Data Controller
You can make your application using any of the following methods:
In writing to the following address: Dikilitaş Mah. Barbaros Sk. No:14 Güvenç Apt. D:8 Beşiktaş / İstanbul,
By using your registered e-mail address to email@example.com,
By sending an e-mail to firstname.lastname@example.org using your e-mail address registered in our system.
You can find more detailed information on the procedures and principles to be followed when making an application in the Communiqué on Application Procedures and Principles to Data Controller of the Personal Data Protection Authority.