MAPA MOBİLYA VE AKSESUAR PAZARLAMA A.Ş. DISCLOSURE TEXT FOR MEMBERSHIP REGARDING THE PROCESSING OF PERSONAL DATA
In accordance with the Law No. 6698 on the Protection of Personal Data ("KVKK" or “Law”) and related legislation, Mapa Mobilya ve Aksesuar Pazarlama Anonim Şirketi ("IKEA" or "Company"), located at “Fatih Sultan Mehmet Mah. Balkan Cad. No: 62 Tepeüstü Ümraniye/Istanbul”, as the Data Controller (Veri Sorumlusu), will process your personal data in the manner described below; your personal data will be recorded, stored, updated in compliance with the law and principles of honesty, may be disclosed to third parties when permitted by legislation and/or for the purpose of processing, classified, and processed in the ways specified in the KVKK.
1. Purpose of Processing Personal Data
Your personal data in the identity and communication categories, collected for the fulfillment of obligations related to the membership relationship within the scope detailed in the membership conditions, such as name, surname, email, address, and phone information, and your personal data provided optionally during application processes, such as your date of birth, are processed for the management of membership processes, customization, presentation, and promotion of products and services according to your needs and shopping habits, enabling you to benefit from general and special campaigns, promotions, discounts, and similar opportunities within the membership program, planning and execution of processes for establishing and increasing loyalty to products or services, and for the monitoring, analysis, and implementation of business development projects in this field, as explained in detail in the membership terms and conditions.
2. Method and Legal Basis for Collecting Your Personal Data
Your personal data is collected verbally, in writing, or electronically, based on your preferences as our customers, through forms by our stores, website, mobile application, and call center.
Your personal data is processed based on the legal grounds of the necessity to establish or perform a contract, directly related to your personal data as required by Article 5/2 (c) of the Law, for the purpose of establishing the membership agreement and ensuring your access to our products and services. It is also processed based on our legitimate interests, provided that it does not violate your fundamental rights and freedoms, as required by Article 5/2 (f) of the Law, for the purpose of protecting our legitimate interests in potential consumer disputes that may arise in the future. Furthermore, your personal data is processed based on the legal ground of establishing, exercising, or protecting a right, as required by Article 5/2 (e) of the Law, to be used in consumer disputes, for sending commercial electronic communications, and for personalizing (profiling) products and services based on your membership information and shopping habits, subject to your explicit consent.
3. Transfer of Personal Data
Your personal data may be transferred to public institutions and organizations in accordance with the law, our service provider that ensures the implementation of the rights and obligations arising from the membership conditions related to the purposes stated in this Disclosure Text, our CRM solution partner, suppliers and partners we receive services from for profiling and communication activities, our intermediary institution partner that enables online payments for your purchases, IKEA subsidiaries, public authorities and relevant business partners upon request. The purpose of transferring the data is in line with the purpose of processing personal data. Furthermore, your personal data mentioned above is transferred to our contracted cargo and transportation companies for the realization of the shipping processes of the products you purchased.
The information of members who have given consent for communication, in addition to membership conditions, is transferred to İleti Yönetim Sistemi A.Ş. for the management of communication permissions in accordance with the Regulation on Commercial Communication and Commercial Electronic Messages, and to our solution partners for the execution of communication activities.
4. Application to the Data Controller and Your Rights
According to Article 11 of the Law, you have the right to apply to our company and: a)learn whether your personal data is being processed or not, b) request information if your personal data has been processed, c) learn the purpose of the processing and whether it is being used in accordance with its purpose, d) learn the recipients to whom your personal data is transferred domestically or internationally, e) request the correction of incomplete or inaccurate personal data, f) request the deletion or destruction of your personal data within the framework of the conditions stipulated in Article 7 of the Law, g) request notification of the operations performed as per subparagraphs (e) and (f) to third parties to whom your personal data has been transferred, h) object to the occurrence of a result against you arising from the analysis of your personal data solely by automated systems, and i) demand compensation for damages in case you incur damages due to unlawful processing of your personal data.
You can submit your information and application requests regarding your rights stated above to our Company under the Communiqué on the Procedures and Principles of Application to the Data Controller. You can send your information and application requests to "Fatih Sultan Mehmet Mah. Balkan Cad. No:62 Tepeüstü Ümraniye/İstanbul" address or by email to kvk@ikea.com.tr address and you can direct us.
Our Company shall fulfil relevant person’s requests as soon as possible and within thirty days at the latest and your initial request, depending on the nature of your request, shall be fulfilled free of charge. However, fees may be charged for subsequent requests on the same issue or if the initial request requires performance of a transaction for an additional cost. Our Company may accept and process the request or may reject by indicating the reasons in writing.
You are entitled to file a complaint to the Turkish Board of Personal Data Protection (“Board”) within thirty days as of the notification of the reply and in all cases within sixty days if the application is rejected after carrying out the procedure mentioned above, the reply is deemed to be insufficient or the requests are not responded in a timely manner. However, the complaint cannot be filed without exhausting this application process.
The Board may conduct the necessary inspections within its field of duty upon receiving a complaint or ex officio upon detecting a breach. The complaint shall be examined by the Board and answers shall be provided to those concerned. If no replies are given within sixty days as of the date of the complaint, the request shall be deemed to be rejected. If, as a result of inspections upon receiving a complaint or ex officio investigation, a breach is detected, the Board shall rule the identified contraventions of law to be eliminated by the data controller, and shall notify those concerned accordingly. This decision shall be fulfilled without delay but no later than within thirty days as of the notification of the decision. The Board is authorized to halt data processing or international transfer of data if damages that are hard or impossible to compensate occur and if there is an explicit infringement of the law.
We would like to emphasize that your data is meticulously protected by our Company and thank you for the trust that you place in us.
MAPA MOBİLYA VE AKSESUAR PAZARLAMA A.Ş.