Pursuant to Personal Data Protection Law No. 6698 (“PDPL”) and other applicable legislation, your personal data shall be stored, kept and updated by Mapa Mobilya ve Aksesuar Pazarlama Anonim Şirketi, with its registered office located at Fatih Sultan Mehmet Mah. Balkan Cad. No:62 Tepeüstü Ümraniye / Istanbul (“IKEA” or the “Company”), acting in the capacity of Data Controller, within the framework described below in accordance with the law and rules of honesty, and may be disclosed to third persons where allowed by the legislation and/or where this meets the purpose of processing, and may be categorized, and processed in ways that are specified in PDPL.
1. Purpose of Personal Data Processing
Your personal data comprising full name, e-mail, address and phone number, which fall under the category of identity and communication, collected to allow us to fulfill our obligations under the membership relationship within the framework of the matters detailed in the membership conditions, your date of birth if you voluntarily share it with us, your business name and workplace details if you are a corporate member, your personal data in the form of your Turkish ID Number if you declare it as your tax number, and your IP information if you perform transactions on our Website or on the Mobile App, are processed for managing membership transactions, customizing offers, presentation and promotion of products and services to your needs and shopping habits, allowing you to benefit from general and special offers, promotions, discounts and similar amenities under the membership program, managing ordering processes, follow-up of actions regarding customer satisfaction, planning and execution of processes for building and enhancing product and service loyalty, as well as monitoring and analyzing business development projects that will be carried out in this regard.
2. Procedure and Legal Grounds for the Collection of Personal Data to be Processed
Your personal data are collected verbally, in writing or in the electronic environment according to your preferences by our stores, Website, internet application and call center through a form.
Your personal data are processed based on the legal grounds that data processing is required for establishing, exercising or protecting a right pursuant to article 5/2. (e) of the Law, to be used in future consumer disputes, as well as the legal grounds that data processing is required for our legitimate interests provided this does not bring harm to your basic rights and freedoms pursuant to article 5/2 (f) of the Law, and that processing your personal data is necessary as it directly relates to making an agreement or performing thereunder pursuant to article 5/2 (c) of the Law in order to allow you to use our products and services under the scope of the membership relationship and to establish the membership agreement. Furthermore, your aforementioned personal data may be processed pursuant to your express consent in order to send commercial electronic messages and to customize products and services according to your membership details and shopping habits (profiling).
3. Receivers of Transferred Personal Data and the Purpose Thereof
Your personal data may be transferred to public bodies and organizations if requested according to the Law, and, in line with the purposes specified in this Disclosure Form, to our service provider who ensures the rights and obligations arising from the membership conditions can be exercised and imposed, to our CRM solution partner, suppliers that provide services to us for profiling and communication works, business partners and affiliates, our intermediary firm business partner who allows payments to be received on the internet for your purchase transactions, to IKEA’s affiliates, to public authorities upon request, and to relevant business partners. The purpose of processing of personal data parallels the purpose of transfer of data. Furthermore, your aforementioned personal data are transferred to cargo and shipping companies that we have a contract with so that the shipping operations for your purchased products can be carried out.
The information provided by members who, besides accepting membership conditions, also give consent for communication, are transferred to solution partners who provide services to us for carrying out the communication activities and to İleti Yönetim Sistemi A.Ş. for managing communication permissions pursuant to the Regulation on Commercial Communication and Commercial Electronic Messages.
4. Ways of Application to the Data Controller and Your Rights
Pursuant to Article 11 of the Law, you have the right to: a) know whether your personal data are processed; b) request information if they have been processed; c) ascertain the purpose of their processing and whether they are being used in line with the purpose; d) know the parties to whom they have been transferred in the country or abroad; e) request correction if they have been processed inaccurately or incompletely; f) request their deletion / destruction under the conditions stipulated in article 7 of the Law; g) request that the third persons to whom the personal data have been transferred are notified of the actions performed pursuant to the points (e) and (f) provided above; h) object to the emergence of an unfavorable outcome due to analysis exclusively through automated systems; and i) ask to be indemnified if you suffer any losses due to unlawful processing.
You can communicate your application requests and requests for information about your aforementioned rights to our Company by completing the Application Form pursuant to the Communiqué on the Procedures and Principles of Filing Applications to the Data Controller. You can send your application requests and requests for information to “Fatih Sultan Mehmet Mah. Balkan Cad. No:62 Tepeüstü Ümraniye / Istanbul” or by e-mail to kvk@ikea.com.tr
Our Company shall finalize your requests as soon as possible but not later than thirty days depending on the nature of the request, and the first request is free of charge. But, a fee may be charged for successive requests on the same matter, or if the transaction has an extra cost in the case of the first request. Our Company may accept and process the request or it may reject the request in writing upon explaining the reason.
In cases where the application filed through the aforementioned procedure is rejected, or the reply is considered inadequate, or the application is not answered within the appropriate time, you have the right to file a complaint to the Personal Data Protection Board (“Board”) within thirty days after communication of the response, but in any case not later than sixty days from the date of application. No complaint may be filed without following the application procedure first.
The Board shall carry out the necessary inspection on matters that fall within its authority ex officio upon complaint or upon becoming aware of the claim of breach. Upon complaint, the Board shall examine the request and reply to the relevant persons. The request shall be deemed to be rejected if no reply is made within sixty days following the date of complaint. If presence of a breach is found upon complaint or upon the ex officio inspection carried out, the Board shall decide that the identified legal discrepancies should be removed by the data controller and notify the relevant persons. This decision shall be complied with from the date of notification without any delay but not later than thirty days. The Board may decide that data processing or overseas transfer of data should be stopped if losses that are difficult or impossible to compensate arise and in case of clear unlawful situation.
We would like to inform you that your data is diligently protected at our Company and thank you for your confidence towards us.
MAPA MOBİLYA VE AKSESUAR PAZARLAMA A.Ş.