Privacy Policy

I. Scope of the Clarification Text

This clarification text (“Clarification Text”) has been prepared to inform website visitors and users about the personal data processing activities carried out through the https://doneturkiye.com/ website (“Site”). This Clarification Text is for informational purposes only, does not establish a contractual relationship between the parties, and does not create any rights or obligations.

The purpose of this Clarification Text is to explain the basic principles regarding the operation of the Site and to transparently inform the data subjects regarding the scope, purposes, and methods under which their personal data is processed in accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”).

II. Who is the Controller of Your Personal Data (Data Controller)?

The data controller for personal data obtained through the https://doneturkiye.com/ website (including operations carried out through cookies and similar technologies) and other communication channels established with users is Done Global Dış Ticaret Anonim Şirketi (“Done Türkiye”, “Company”, “we”, or “us”), registered with the Istanbul Trade Registry under registry number 1147051 and MERSIS number 0310155127400001, with its headquarters located at Reşitpaşa Mah. Eski Büyükdere Cad. No: 26 İç Kapı No: 87 Sarıyer/Istanbul.

For your questions regarding the processing of your personal data and your requests and applications within the scope of the KVKK, you may contact the Company at [email address].

III. How Do We Obtain and Protect Your Personal Data?

The Data Controller processes personal data obtained within the scope of the use of the website, communications carried out with users, and users' activities on the website in accordance with the KVKK and relevant legislation. Your personal data may also be processed for marketing, analysis, and statistical purposes.

Your personal data may be obtained through automatic or partially automatic methods via transactions carried out on the website, electronic communication tools, cookies and similar technologies, online forms, email correspondence, social media platforms, and other electronic channels.

"Personal data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

As stated at the beginning, Done Türkiye protects not only the data of persons who visit the website but also the personal data of users who contact it through other communication channels. In this context, personal data may be obtained from the following sources:

• The websites https://www.facebook.com, https://www.instagram.com/, operating subject to the rules published by Facebook Inc. or Meta Platforms, Inc. and Meta Platforms Ireland Limited at https://www.facebook.com/legal/terms, and all other websites cooperating with Meta (including domain names, international versions, widgets, and mobile phone versions - hereinafter referred to as "Facebook Service"); also through Facebook Lead Ads functions generally aimed at marketing the Company's own products or services. The rules regarding the protection and use of Personal Data through the Facebook Service are located at https://www.facebook.com/policy.php. Done Türkiye has no influence over the content of the regulations and rules of the Facebook Service regarding Personal Data.
• The website https://www.tiktok.com and all other websites cooperating with Beijing.

The Company has no control or influence over the policies, practices, and operations of third parties regarding your personal data. Therefore, users must separately review the clarification texts and terms of use of the relevant platforms.

IV. For What Purpose and On What Legal Basis Do We Process Your Data?

Depending on which features of our website you use, your Personal Data may be processed in different processes for the purposes of conducting marketing activities, conducting market and statistical analysis, increasing service quality, fulfilling legal obligations to which the Company is subject, or detecting ad fraud/abuse, based on the legal grounds of "establishment and performance of contracts," "legitimate interest," "fulfillment of legal obligations," and "establishment, exercise, or defense of a right." The details regarding our processing activities are provided below.

V. Details of Personal Data Processing Activities

The Data Controller conducting the processing activities of your personal data is Done Global Dış Ticaret Anonim Şirketi ("Data Controller"), specified in Article II of this Clarification Text.

Your personal data is stored for the duration required by the purpose of processing, and in any case, taking into account the retention periods stipulated in the relevant legislation. Upon the expiry of the retention period or the disappearance of the processing purpose, your personal data will be deleted, destroyed, or anonymized in accordance with the legislation.

Information on to whom and for what purposes Personal Data may be transferred is explained in detail in Article VIII of this Clarification Text; information on the transfer of your Personal Data abroad is explained in Article IX; and your rights regarding the processing of your Personal Data are explained in Article X.

As the Data Controller, we process your personal data based on the following purposes and legal grounds:

1. Creation of an Account (Profile) on the Website

Your personal data provided during account registration and collected in connection with your activities on the website and your use of our services (specifically name and surname; email address; contact telephone number) are processed for the following purposes:

• Purpose: Providing the services you request, enabling you to benefit from website functions, creating and managing your user account, meeting your requests, and communicating with you.
  Legal basis: Necessity of processing personal data, provided that it is directly related to the performance of a contract (KVKK Art. 5/2-c) and the legitimate interest of the data controller (KVKK Art. 5/2-f).
• Purpose: Marketing, analysis, and statistical activities of the Data Controller, its partners, or other third parties with whom we cooperate; for example, presenting you with advertisements and offers (discounts) tailored to your interests based on profiling (simply put, we analyze your activities [such as your behavior on our website] so that we can better adapt to your preferences rather than just specific, general groups of our customers). Our actions do not influence your decisions when, for example, placing an order.
  Legal basis: Necessity of data processing for the legitimate interests of the Data Controller, provided that it does not harm the fundamental rights and freedoms of the data subject (KVKK Art. 5/2-f) and your explicit consent where necessary (KVKK Art. 5/1).
• Purpose: Resolving potential disputes, establishing, exercising, or protecting rights, conducting legal processes, and protecting the legitimate interests of the Data Controller.
  Legal basis: Necessity of data processing for the establishment, exercise, or protection of a right (KVKK Art. 5/2-e) and necessity of data processing for the legitimate interests of the Data Controller (KVKK Art. 5/2-f).

Providing Personal Data is voluntary but is required to register on the website.

2. Placing an Order

Your personal data provided when placing an order and collected in connection with your activities on the website and your use of our services (specifically name and surname; email address; contact telephone number) are or may be processed for the following purposes:

• Purpose: Fulfilling your order and performing the concluded contract — specifically confirming that the order has been placed or the reservation made (if such an option is available and selected by you) or sending the selected product to you or a collection point, and contacting you if necessary.
  Legal basis: Necessity of processing personal data, provided that it is directly related to the establishment or performance of a contract (KVKK Art. 5/2-c).
• Purpose: Marketing, analysis, and statistical activities of the Data Controller, its partners (third parties listed in Article 11 of the Cookie Policy), or other third parties with whom we cooperate; for example, presenting you with advertisements and offers (discounts) tailored to your interests based on profiling (simply put, we analyze your activities [such as your purchase history and behavior on our website] so that we can better adapt to your preferences rather than just specific, general groups of our customers). Our actions do not influence your decisions when making a purchase, for instance.
  Legal basis: Necessity of data processing for the legitimate interests of the data controller (KVKK Art. 5/2-f) and your explicit consent where necessary (KVKK Art. 5/1).
• Purpose: Resolving potential disputes, establishing, exercising, or protecting rights, conducting legal processes, and protecting the legitimate interests of the Data Controller.
  Legal basis: Necessity of data processing for the establishment, exercise, or protection of a right (KVKK Art. 5/2-e) and necessity of data processing for the legitimate interests of the data controller (KVKK Art. 5/2-f).

Providing Personal Data is voluntary but is required to place an order.

3. Complaint Form

Your personal data provided in connection with the submission of a complaint (Complaint Form) and collected during subsequent communications are or may be processed for the following purposes:

• Purpose: Examining your complaint and resolving complaints.
  Legal basis: Necessity of data processing for the data controller to fulfill its legal obligations (KVKK Art. 5/2-ç), necessity of data processing provided that it is directly related to the establishment or performance of a contract (KVKK Art. 5/2-c), and the relevant data processing condition in the event that it has been made public by the data subject themselves (KVKK Art. 5/2-d).
• Purpose: Resolving potential disputes, establishing, exercising, or protecting rights, conducting legal processes, and protecting the legitimate interests of the Data Controller.
  Legal basis: Necessity of data processing for the establishment, exercise, or protection of a right (KVKK Art. 5/2-e) and necessity of data processing for the legitimate interests of the data controller (KVKK Art. 5/2-f).

Providing Personal Data is voluntary but is required to submit a complaint.

4. Contact Form

Your personal data provided in the Contact Form and collected during subsequent communications are processed for the following purposes:

• Purpose: Communicating with you and responding to your message.
  Legal basis: Necessity of data processing for the legitimate interests of the Data Controller, provided that it does not harm the fundamental rights and freedoms of the data subject (KVKK Art. 5/2-f).
• Purpose: Depending on the content of the message, taking necessary steps at your request prior to the establishment of the relevant contract.
  Legal basis: Necessity of processing personal data, provided that it is directly related to the establishment or performance of a contract (KVKK Art. 5/2-c).
• Purpose: Depending on the content of the message, marketing, analysis, and statistical activities of the Data Controller, its partners (third parties listed in Article 11 of the Cookie Clarification Text), or other third parties with whom we cooperate.
  Legal basis: Necessity of data processing for the legitimate interests of the Data Controller (KVKK Art. 5/2-f) and your explicit consent where necessary (KVKK Art. 5/1).
• Purpose: Resolving potential disputes, establishing, exercising, or protecting rights, conducting legal processes, and protecting the legitimate interests of the Data Controller.
  Legal basis: Necessity of data processing for the establishment, exercise, or protection of a right (KVKK Art. 5/2-e) and necessity of data processing for the legitimate interests of the Data Controller (KVKK Art. 5/2-f).

Providing Personal Data is voluntary but is required to establish effective communication with us.

5. Newsletter Subscription

Your personal data, including those provided in connection with the newsletter subscription, may be processed for the following purposes:

• Purpose: Performance of the contract regarding the provision of the newsletter service.
  Legal basis: Your explicit consent (within the scope of commercial electronic communication legislation) — for the purpose of sending you attractive announcements and offers (discounts) via email, SMS, MMS, push, or instant messaging applications (e.g., Messenger, WhatsApp) which have a similar application directly to your phone number. You can, of course, unsubscribe from the newsletter at any time.
• Purpose: Marketing, analysis, and statistical activities of the Data Controller, its partners (third parties listed in Article 11 of the Cookie Policy), or other third parties with whom we cooperate; for example, showing advertisements and offers (discounts) customized to your interests based on profiling (simply put, we analyze your activities [such as your behavior on our website]; thus we can better adapt to your preferences rather than just specific, general groups of our customers). However, our actions do not have a significant impact on your decisions.
  Legal basis: Necessity of data processing for the legitimate interests of the Data Controller (KVKK Art. 5/2-f) and your explicit consent to the extent necessary (KVKK Art. 5/1).
• Purpose: Resolving potential disputes, establishing, exercising, or protecting rights, conducting legal processes, and protecting the legitimate interests of the Data Controller.
  Legal basis: Necessity of data processing for the establishment, exercise, or protection of a right (KVKK Art. 5/2-e) and necessity of data processing for the legitimate interests of the Data Controller (KVKK Art. 5/2-f).

Providing personal data is voluntary but is required to subscribe to the newsletter.

6. Social Media Accounts

Your personal data (such as comments, likes, online identifiers), including data you leave when visiting our social media profiles, are processed for the following purposes:

• Purpose: Conducting marketing, analysis, and statistical activities by managing interactions on the profile, maintaining our profile effectively, providing you with information about our initiatives and other activities, and promoting various events, services, and products (including products of partners [third parties listed in Article 11 of the Clarification Text] or other third parties with whom we cooperate) through us.
  Legal basis: Necessity of data processing for the legitimate interests of the Data Controller, provided that it does not harm the fundamental rights and freedoms of the data subject (KVKK Art. 5/2-f) and your explicit consent to the extent necessary (KVKK Art. 5/1).
• Purpose: Resolving potential disputes, establishing, exercising, or protecting rights, conducting legal processes, and protecting the legitimate interests of the Data Controller.
  Legal basis: Necessity of data processing for the establishment, exercise, or protection of a right (KVKK Art. 5/2-e) and necessity of data processing for the legitimate interests of the Data Controller (KVKK Art. 5/2-f).

Providing personal data is voluntary but is required to fully benefit from the functionality of our profiles on social media.

7. "Notify Me When Product Is Back in Stock" Notification

Your personal data (e.g., your email address and/or phone number) provided by you within the scope of your request to benefit from the "Notify Me When Product Is Back in Stock" service may be processed for the following purposes:

• Purpose: Sending you a notification and providing this service in the event that the product you request is restocked or becomes accessible.
  Legal basis: Necessity of processing personal data, provided that it is directly related to the establishment or performance of a contract (KVKK Art. 5/2-c) and necessity of data processing for the legitimate interests of the Data Controller (KVKK Art. 5/2-f).
• Purpose: Marketing, analysis, and statistical studies of the Data Controller, its partners (third parties listed in Article 11 of the Clarification Text), or other third parties with whom we cooperate.
  Legal basis: Necessity of data processing for the legitimate interests of the Data Controller (KVKK Art. 5/2-f).
• Purpose: Resolving potential disputes, establishing, exercising, or protecting rights, conducting legal processes, and protecting the legitimate interests of the Data Controller.
  Legal basis: Necessity of data processing for the establishment, exercise, or protection of a right (KVKK Art. 5/2-e) and necessity of data processing for the legitimate interests of the Data Controller (KVKK Art. 5/2-f).

Providing personal data is voluntary but is required to receive product stock availability notifications.

8. Customer Satisfaction Survey

Your personal information provided to us in connection with researching your satisfaction with the services we offer may be processed by us for the following purposes:

• Purpose: Conducting customer satisfaction research (for example, using various types of surveys), improving the website and the quality of services offered by the Data Controller.
  Legal basis: Necessity of data processing for the legitimate interests of the Data Controller, provided that it does not harm the fundamental rights and freedoms of the data subject (KVKK Art. 5/2-f).
• Purpose: Resolving potential disputes, establishing, exercising, or protecting rights, conducting legal processes, and protecting the legitimate interests of the Data Controller.
  Legal basis: Necessity of data processing for the establishment, exercise, or protection of a right (KVKK Art. 5/2-e) and necessity of data processing for the legitimate interests of the Data Controller (KVKK Art. 5/2-f).

Providing personal data is voluntary; however, you may be prevented from participating in the satisfaction survey without this data. Providing the data will allow us to learn your opinions about the services we offer and will help us develop the website.

VI. Are You Obliged to Provide Us with Your Personal Data and What May Be the Consequences of Not Providing It?

Sharing your personal data is voluntary as a rule. However, in order for you to benefit from certain services offered on our website and to carry out certain transactions, it is necessary to process some of your personal data.

For example, it may be mandatory to provide certain personal data to create an order, open a membership account, perform newsletter subscription transactions, use contact forms, or offer other services requested by you.

Personal data that must be processed within the scope of the relevant transaction or service is notified to you at the stage of data collection. In the event that mandatory requested personal data is not shared, it may not be possible to provide the relevant service, evaluate your request, or perform the requested transaction.

VII. Is Your Data Subject to Profile-Based Analysis (Profiling) and What Does This Mean for You?

The Data Controller may analyze information regarding website usage in order to better understand users' interests and preferences, improve the performance of the website, enhance user experience, and conduct marketing activities more effectively. In this context, users' ways of using the website, visit frequencies, and interest in certain products or services may be evaluated.

These analyses may be used to present users with more relevant content, offers, campaigns, or promotions. In the event that personalized content or targeted advertising activities are conducted, they will be carried out in accordance with the relevant legislation.

In addition, information regarding website visits and usage habits may also be processed for the purposes of ensuring security, and detecting, preventing, and investigating fraud or abuse attempts.

VIII. To Whom Can We Transfer Your Personal Data?

Your personal data may be shared with third parties to the extent necessary to fulfill the purposes specified in this Clarification Text and in accordance with the relevant legislation. The groups of recipients to whom your personal data may be transferred may vary depending on the nature of the services you benefit from, the transactions you request, and the systems used.

In this context, your personal data may be transferred to suppliers, business partners, and authorized service providers from whom we receive services for the purposes of providing information technology infrastructure, operating the website, providing hosting services, conducting communication activities, managing customer relations processes, providing data storage services, presenting technical support services, obtaining legal and financial consultancy services, conducting audit activities, and maintaining business processes.

In addition, your personal data may be shared with authorized public institutions and organizations, courts, enforcement offices, and other authorized authorities for the purposes of fulfilling legal obligations, meeting requests of authorized institutions and organizations, establishing, exercising, or protecting rights, and resolving potential disputes.

Your Personal Data may be shared with Group Companies or affiliates to the extent necessary and in accordance with the relevant legislation to realize the purposes specified in this Clarification Text.

In the event that cookies and similar technologies are used on our website, data may be shared with cookie service providers, analysis service providers, and advertising technology providers for the purposes of presenting relevant services, measuring website performance, ensuring security, conducting analysis activities, and carrying out marketing activities. You may access detailed information regarding data processing activities carried out in this context from the Cookie Policy.

The personal data transfer activities explained above are carried out in accordance with Articles 8 and 9 of the KVKK.

IX. Is Your Personal Data Transferred to Other Countries (Outside the European Union and Ukraine)?

The Data Controller may utilize various technology, communication, cloud computing, analysis, and infrastructure service providers while carrying out its activities. In this context, your personal data may be transferred to recipients abroad due to the fact that the systems used or service providers are located abroad.

In the event that your personal data is transferred abroad, transfer activities are carried out in accordance with Article 9 of the KVKK.

X. What Rights and Obligations Do You Have?

Regarding your processed personal data, you may submit your requests within the scope of Article 11 of the KVKK through the following communication channels:

Address: Reşitpaşa Mah. Eski Büyükdere Cad. No: 26 İç Kapı No: 87 Sarıyer/Istanbul

Email: [•]

If the transaction requires a cost for our company, the fee in the tariff determined by the Personal Data Protection Board may be charged. Your requests in your application will be finalized as soon as possible and within thirty days at the latest, depending on the nature of the request.

XI. Will Commercial Information Be Sent to You (e.g., to Your Email Address)?

The Data Controller may communicate with users via email, SMS, phone, and similar electronic communication tools.

Commercial electronic messages such as campaigns, promotions, advertisements, announcements, and similar communications regarding products and services may be sent if the data subject gives prior consent.

In this context, users may consent to receive commercial electronic messages through creating a newsletter subscription or relevant consent mechanisms.

The user may withdraw their consent to receive commercial electronic messages at any time. The withdrawal of consent does not affect the lawfulness of data processing activities carried out prior to the withdrawal date.

XII. How is Your Personal Data Protected?

Taking into account the state of technical knowledge, the cost of implementation, the nature, scope, context, and purposes of processing, as well as the varying likelihood and severity of the risk of violating the rights and freedoms of natural persons, the Data Controller takes necessary administrative and technical measures appropriate to the risks and categories of protected data to protect the processed Personal Data; specifically protects the data from unauthorized access, processing contrary to applicable legislation, and also from modification, loss, damage, or destruction.

Providing detailed external information about the technical and administrative tools ensuring processing security may weaken their effectiveness, which may compromise the proper protection of personal data.

The Data Controller properly provides technical measures, such as the following, which prevent unauthorized persons from obtaining and modifying personal data transmitted electronically:

• Protection of the data set against unauthorized access;
• Use of SSL certificates on website pages hosting personal data;
• Data encryption for authorization of the person using the online store's functionality;
• Access to the account only after entering a personalized username and password.

XIII. Links to Other Websites

The website may contain links to third-party websites. The Data Controller is not responsible for the content, practices, or privacy policies of these websites.

This Clarification Text is applied only to personal data processing activities carried out by the Data Controller within the scope of the website.

XIV. Can This Clarification Text Be Amended and How Will You Be Notified?

The Data Controller may update or amend this Clarification Text from time to time. Amendments made to the text become effective upon publication of the updated text on the website.

In the event of an amendment, users will be additionally informed through appropriate communication channels.

‍