Member Information Text
MEMBER INFORMATION TEXT
NU TEXTILE AND CLOTHING PRODUCTS INC.
REGARDING THE PROTECTION AND PROCESSING OF PERSONAL DATA
CUSTOMER INFORMATION TEXT
NU Tekstil ve Konfeksiyon Ürünleri AS aims to process personal data of its real person customers in accordance with the Personal Data Protection Law No. 6698 ( “KVK Law” ) and other legislation.
Since you are a real person customer of our Company, your personal data that you have notified/will notify to our Company and/or obtained by our Company through any external means will be processed by our Company in its capacity as the “Data Controller”,
· Within the framework of the purpose for which your personal data is processed and in a way that is related, limited and proportionate to this purpose,
· By maintaining the accuracy and up-to-dateness of the personal data you have reported or provided to our company,
We hereby inform you that it will be recorded, stored, preserved, reorganized, shared with institutions legally authorized to request this personal data, and that it will be transferred, assigned, classified, and processed in other ways listed in the Personal Data Protection Law, and may be subject to other processes listed in the Personal Data Protection Law, to domestic or foreign third parties under the conditions stipulated in the Personal Data Protection Law.
With the Information Text, it has been adopted that the activities carried out by NU Tekstil will be maintained and developed in accordance with the principles set out in the Personal Data Protection Law.
In this Information Text; regarding Nu textile and clothing products AS brands:
- You visit NU stores (“Stores”), make purchases from Stores, or
Become a member of our NUPRIV program
- www.nu.com.tr You visit the website (“Site”) or use the NU application (“Mobile Application”) that you download to your mobile phone, make purchases from the Site/Mobile Application, or become a member of the Site/Mobile Application (“Site Member”),
- You consent to receive general and personalized campaign information through commercial communication channels.
- Communicating with each other through communication channels, carrying out requests, complaints, satisfaction, call center and communication processes,
- Contacting and/or shopping with NU Tekstil regarding corporate sales processes or sending you gifts, products, etc. regarding corporate sales processes,
- You consent to personalized marketing, segmentation and analysis activities, and your participation in campaigns, contests, sweepstakes and other events organized by NU Tekstil.
- Fulfilling our legal obligations and carrying out legal processes
Regarding its activities, the information text regarding the collection, processing, processing conditions and transfer of your personal data in the processes related to the use of your personal data within the scope of these activities is included.
As Nu Tekstil, in our personal data processing processes that we carry out and explain in detail below, It is essential that no data other than your personal data sufficient to carry out these processes is collected. Therefore, when you contact us, we will notify you of your personal data of a special nature ( race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership of associations, foundations, societies or unions, data on health, sexual life, data on criminal convictions and security measures, biometric and We kindly ask you not to share your genetic data . |
2. What are the Processes by Which We Collect and Process Your Personal Data, Our Collection Methods, the Personal Data We Process, Our Processing Purposes, and the Legal Grounds We Rely on?
2.1. Store Security Process
In order to ensure the security of you, NU Tekstil and its employees, customers, and other third parties against any acts, crimes, or behaviors that may occur in the Stores contrary to legislation, and to fulfill our obligations to provide information and documents to judicial authorities and other related obligations; we process your Physical Location Security Information (security camera footage) obtained (automatically) from security cameras located in the Stores, based on the legal grounds of " data processing is mandatory for the establishment, exercise, or protection of a right " and " data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person. "
2.2. Store Visit Process
In order to determine the visitor traffic in the Stores within the scope of improving business processes, we process the person count information obtained (by automatic means) from the people counting devices in the Stores, based on the legal reason that " data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person. "
2.3. Store Shopping and After-Sales Processes
For the purposes of carrying out the shopping transaction, distinguishing your records in our systems from those of other customers, enabling you to benefit from post-sale operational transactions (such as alterations, exchanges, returns, product inspections) without presenting an invoice/receipt and carrying out these operational transactions, sending you the e-archive invoice/e-invoice regarding your shopping, and supplying products that are not available in our Stores and delivering them directly to you; your shopping in the Stores, the information you verbally declare to the sales consultants in the Stores being recorded in our systems by these persons, the records and relevant documents regarding your return processes being recorded, and if you are a sole proprietorship, the information obtained by filling out the current account creation form (partly by automatic and non-automatic means); Your Identity Information (name, surname, customer number, company name if you are a sole proprietorship), Contact Information (e-mail address, telephone number, address, delivery address, invoice address) and Customer Transaction Information (shopping date, shopping amount, time, quantity, shopping content, store information where shopping took place; payment method and payment details, bank information where payment was made, transaction number and time; in case of request to supply products that are not available in the Stores. Order information, order number ; in case of gift card use gift card number, gift card amount information ; return number in case of return of purchased product(s), product information to be returned, amount to be returned and reason for return); the necessity of processing personal data of the parties to the contract” with “Data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned.” based on legal reasons,
In order for the refund to be made to your bank account during the return processes, if necessary, we will need to process your Identity Information (name, surname) and Financial Information (bank account information, IBAN information) obtained through your shopping from the Stores (partially by automated means), based on the legal grounds that " it is necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or execution of a contract " ,
In order to issue invoices, carry out billing processes and in some cases to carry out current account and reconciliation transactions; Your Identity Information (name, surname, date of birth), Contact Information (phone number, e-mail address, address), Customer Transaction Information (invoice information, shopping information, shopping date, quantity and shopping content; and also, if you purchase a certain product or service above a certain amount or for which there is a clear regulation, your Identity Information (TR ID number, if you are a sole proprietorship) in order to fulfill our obligations under the relevant legislation. tax identification number and tax office); if you are a taxpayer, additional invoice information, as well as your Identity Information (TR identity number, tax identification number and tax office, sole proprietorship information if you are a sole proprietorship); based on the legal grounds that " it is clearly prescribed by law ", "processing personal data of the parties to the contract is necessary, provided that it is directly related to the establishment or execution of a contract " and " it is mandatory for the data controller to fulfil its legal obligation " ,
If you wish to make your payment by credit/debit card, we will also require your Financial Information (only the first 6-8 and last 4 digits of your credit/debit card) for the purpose of receiving the payment, based on the legal ground that " the processing of personal data of the parties to the contract is necessary, provided that it is directly related to the establishment or execution of a contract " ,
2.4. NUPRIVE and NU Membership Processes
In order to carry out your membership transactions, to verify the accuracy and currency of the information you have provided during your membership application, to fulfill our obligations in accordance with the membership program, to ensure that you benefit from campaigns, to determine which program you can join among the membership programs and whether you meet the qualifications to transfer to another program, to provide membership information, to enable you to use and inquire about the benefits and discounts defined for you; the information you provide is recorded in the Company systems and obtained through your shopping in the Stores (partly by automatic and non-automatic means); Your Identity Information (name, surname, date of birth, NU customer number), Contact Information (phone number, e-mail address, address) and Customer Transaction Information (membership date information, shopping date, amount, shopping content); based on the legal reason that " the processing of personal data of the parties to the contract is necessary, provided that it is directly related to the establishment or performance of a contract " ,
For the purposes of general or personalized campaigns, advantages, promotions, creation of advertisements, organization of campaigns, contests, sweepstakes and other events, segmentation, reporting, profiling, marketing and analysis studies, performance of advertisements and marketing/communication activities (personalized offers, general/personalized advertising, searches, surveys) of Nu Tekstil on digital platforms or other third-party environments; use of the information you have provided for membership, your shopping in the Stores, recording of the information you have verbally declared to the sales consultants in the Stores in our systems by these persons, the answers you have given to the studies (surveys, searches) in which you have participated for customer satisfaction, obtained by using the existing information in the Company systems (partially by automatic or non-automatic means); We process your Marketing Information (date of birth, gender, city, district, demographic information, approaches to notifications/surveys/offers/campaigns made by Nu Tekstil, habits, favorites, likes, behaviors, preferences, search activities, survey answers, segments, clothing preference and style information, past purchases, purchase amount, payment methods and preferences, payment channels, store information, communication preferences, approaches/actions to electronic commercial and other communications) , your Identity Information (name, surname, NU customer number) and your Contact Information (phone number, e-mail address, address) if you give your “explicit consent”.
2.5. Site/Mobile Application Usage and Shopping (Shopping as a member or without membership) Processes;
For the purposes of carrying out the shopping process, preparing the order, packaging, preparing the delivery note, shipping, updating the delivery information, delivering your order to you, distinguishing the records we create in our system belonging to you from the records of other customers, carrying out post-sales operational transactions (such as modifications, exchanges, returns, product inspections), informing you about your order, calling customer services or being called by customer services and sending you the e-invoice for your shopping; obtained by entering your information through the Site or the Mobile Application, making purchases through the Site or the Mobile Application, recording the records and relevant documents related to your return processes or using the existing information in the Company systems (partially by automated means); Your Identity Information (name, surname, date of birth, NU customer number), Contact Information (e-mail address, telephone number, address, delivery address, invoice address) and Customer Transaction Information (shopping date, shopping amount, time, quantity, shopping content, note information regarding order submission, if any, gift note information, if any, order/basket information, order number, order status information, information on the channel through which the shopping was made; payment method and payment details, payment method/type, bank information through which the payment was made, transaction number and time; return request information in case of return of the purchased product/products, order/return number, product information to be returned, amount to be returned, reason for return, return date); based on the legal grounds that " processing personal data of the parties to the contract is necessary, provided that it is directly related to the establishment or performance of a contract " and " processing data is mandatory for the legitimate interests of the data controller, provided that it does not prejudice the fundamental rights and freedoms of the relevant person " ,
In order to issue invoices, carry out billing processes and, in some cases, carry out current account and reconciliation transactions; obtained (partly by automatic means) by making purchases through the Site or Mobile Application, entering your information through the Site or Mobile Application, using existing information in the Company systems or filling out the current account creation form; We may process your Identity Information (name, surname), Contact Information (phone number, e-mail address, address, delivery address) and Customer Transaction Information (invoice information, shopping information, shopping date, quantity and shopping content; and also, if you purchase a specific product or service above a certain amount or for which there is a clear regulation, your Identity Information (TR identity number, tax identification number and tax office if you are a sole proprietorship); if you are a taxpayer, your Identity Information as some additional invoice information (TR identity number, tax identification number and tax office, sole proprietorship information if you are a sole proprietorship); based on the legal grounds that " it is expressly provided for by law ", " processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract " and " it is mandatory for the data controller to fulfill its legal obligation " .
If you wish to make your payment by credit/debit card, we will also require your Financial Information (only the first 6-8 and last 4 digits of your credit/debit card ) and your Transaction Security Information (IP address information) obtained (automatically) through your use of the Site or Mobile Application in order to ensure transaction security, based on the legal ground that " the processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or execution of a contract " .
In order to resolve problems experienced in payment processes and use of gift cards, we may collect your Identity Information (name, surname), Contact Information (phone number), Customer Transaction Information (order/cart information, payment method and payment details, transaction amount, gift card number in case of gift card use) and Financial Information (only the first 6-8 and last 4 digits of your credit/debit card) obtained through your use of the Site or Mobile Application or your shopping through the Site or Mobile Application (partly by automated means); and if necessary, in order for the refund to be transferred to your bank account in return processes, we may collect your Identity Information (name, surname) and Financial Information (bank account information, IBAN information) obtained through transactions related to your shopping through the Site or Mobile Application and the sending of cargo to deliver your shopping to you (partly by automated means); based on the legal grounds that " processing personal data of the parties to the contract is necessary, provided that it is directly related to the establishment or performance of a contract " and " data processing is mandatory for the establishment, exercise or protection of a right " ,
In case products are sent to you via the Site/Mobile Application by third parties, we may process your Identity Information (name, surname) and Contact Information (phone number, address, delivery address, invoice address) obtained by third parties through the order placed via the Site/Mobile Application (partly by automated means) for the purpose of delivering the order to you, based on the legal ground that " data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person " .
Your Identity Information (name, surname, NU customer number), Contact Information (phone number, e-mail address, address), Location Information (your location data, which is obtained automatically with the Mobile Application if you allow location access via phone device settings for order delivery or can be added manually by you) and Customer Transaction Information (order/cart information, shopping date, shopping amount, payment method; return request information in case the purchased product(s) are returned, order/return number, product information to be returned, amount to be returned and reason for return, return date); obtained through entering your information through the Mobile Application, allowing location access via phone device settings or using existing information in the Company systems (automatically and partially automatically); based on the legal grounds that " processing personal data of the parties to the contract is necessary, provided that it is directly related to the establishment or performance of a contract " and " processing data is mandatory for the legitimate interests of the data controller, provided that it does not prejudice the fundamental rights and freedoms of the relevant person " ,
In order to detect and fix technical/software errors and deficiencies encountered during your visit and use of the Site and Mobile Application; Your Identity Information (name, surname), Contact Information (phone number, e-mail address, address), Customer Transaction Information (Site and Mobile Application usage details, error information, scores and comments given for feedback, other information included in survey answers) and Transaction Security Information (IP address information, password information in hidden form, log records, Mobile Application usage period, information on the device used (device, device ID, brand, model, technical specification and operating system information related to the device), internet browser information used, information from which region you are connecting); obtained through your entering your information through the Site or Mobile Application or your use of the Site and Mobile Application (automatically and partially automatically). We process your data based on the legal grounds that " processing personal data of the parties to the contract is necessary, provided that it is directly related to the establishment or execution of a contract " and " processing data is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person " .
2.6. Site Membership (Site/Mobile Application) Processes
To ensure the completion of membership transactions, to fulfill the requirements of the membership agreement we will conclude with you, to enable you to log in as a member, to provide membership information; Your Identity Information (name and surname, NU customer number), Contact Information (e-mail address, telephone number), Customer Transaction Information (membership date information) and Transaction Security Information (password information in disguised form, single-use SMS verification code sent to the mobile phone) obtained by recording the information you provide for Site membership into the Company systems (partly by automatic means); based on the legal reason that " the processing of personal data of the parties to the contract is necessary, provided that it is directly related to the establishment or execution of a contract " ,
In order to enable you to shop using your member information without having to provide information again for each shopping transaction when you want to shop through any shopping channel; Your Identity Information (name, surname) and Contact Information (phone number, e-mail address, delivery and billing address), obtained by recording the information you provide for the Site membership in the Company systems (by automatic means); based on the legal reason that " the processing of personal data of the parties to the contract is necessary, provided that it is directly related to the establishment or execution of a contract " ,
In order to provide you with the service of viewing your order history as a member, we may process your Customer Transaction Information (shopping date, shopping amount, time, quantity, shopping content, payment details) obtained through your shopping on the Site or Mobile Application (partly by automated means), based on the legal ground that " it is necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or execution of a contract " .
In order for you to benefit from membership programs, to benefit from special opportunities and offers created for you according to your shopping on all shopping channels including the Site, Mobile Application and Stores, to create general or personalized campaigns, advantages, promotions and advertisements, to organize campaigns, contests, sweepstakes and other events, to carry out segmentation, reporting, profiling, marketing and analysis studies, to carry out advertisements and marketing/communication activities of NU Tekstil on the Mobile Application, Site and other digital media (such as notifications on the Mobile Application and Site, pop-up displays, announcements of discounts and campaigns, personalized offers, customization of user screens, advertisements, searches, surveys, etc.), and to improve the user experience on the Site and Mobile Application; Recording in our systems the information you share regarding your purchases or membership transactions through the Stores, Site, Mobile Application or membership opportunities offered in physical or digital environments belonging to Nu Tekstil; recording in our systems all kinds of shopping, collection, delivery, transaction, survey filling, registration and behavioral transactions on the Store, Site and Mobile Application; the answers you give to the studies (surveys, searches) you have participated in for customer satisfaction; the requests and complaints you convey to customer services and their related reviews; recording in our systems the data obtained from/comprised of the use of your fixed-mobile internet and communication devices and/or mobile applications in various environments and places; obtained by using the existing information in the Company systems (automatic, partially automatic or non-automatic means); Your Marketing Information (date of birth, gender, Province, district, demographic information, Mobile Application usage period, Mobile Application version information, device, device ID, brand, model, technical specification and operating system information regarding the device used, information from which region the connection is made, Site and Mobile Application usage details, approaches to notifications/surveys/offers/campaigns/coupons within the Site and Mobile Application, habits, favorites, likes, behaviors, preferences, search activities, survey answers, segments, clothing preference and style information, past purchases, order/cart information, body size information, shopping amount, payment methods and preferences, payment channels, We process your Identity Information (name, surname, NU customer number) and Contact Information (phone number, e-mail address, address) if you give your "explicit consent".
2.7. Call Center/Customer Relations Processes
In order to resolve your problems and complaints that you convey to us when you contact us through our communication channels, to contact you regarding this when necessary and to carry out the solution processes; recording your requests and complaints that you convey to us during communications made through our Company's call center, telephone, e-mail addresses, social media accounts, online support line, WhatsApp and chatbot applications or mutual communication through other communication channels, recording your conversations with the call center, filling out the communication form on the Site, your answers to the surveys you participate in or your verbal declaration to the sales consultants in the Stores or using the information available in the Company systems (partially by automatic and non-automatic means); Your Identity Information (name, surname, NU customer number, if you communicate via social media) (social media username), your Contact Information (address, delivery address, billing address, e-mail address, phone number), your Customer Transaction Information (request and complaint information, shopping date, shopping amount, time, quantity, shopping content, basket/order information, order number, cargo tracking number, product and delivery information, store information, shopping channel information, coupon information, invoice information, payment method, payment method and payment details, gift note information, if any, gift/discount/benefit usage information, return request information, return date) and your Transaction Security Information (IP address information, information on the device used (device, device ID, brand, model, technical specifications and operating system information related to the device); also your Visual and Audio Recording Information (call center voice recordings) to be used as evidence in disputes that may arise between us and our efforts for customer satisfaction; “ the processing of personal data of the parties to the contract is necessary, provided that it is directly related to the establishment or performance of a contract ”, and “ the processing of data is mandatory for the establishment, exercise or protection of a right ” We process data based on the legal grounds that " data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. "
2.8. Store Communication Processes
We process your Identity Information (name, surname), Contact Information (phone number, e-mail address, delivery address), Customer Transaction Information (shopping information, question, request and complaint information, invoice information, receipt information, payment method), Visual and Audio Recording Information (voice recordings of the conversation), and Transaction Security Information (log records), obtained verbally by you during your telephone conversation with the Stores or by using existing data in the Company systems (partially by automatic and non-automatic means), for the purposes of calling the Stores by phone or so that our Company can contact you by phone when necessary, to resolve your complaint or request, and to record conversations within the framework of Company quality standards, based on the legal basis that " data processing is mandatory for the legitimate interests of the data controller, provided that it does not prejudice the fundamental rights and freedoms of the relevant person. "
2.9. Remote Sales Process
We process your Identity Information (name, surname), Contact Information (phone number, e-mail address, delivery address), Customer Transaction Information (shopping information, question, request and complaint information, invoice information, receipt information, payment method), Visual and Audio Recording Information (voice recordings related to the conversation), and Transaction Security Information (log records), obtained (partly by automatic and non-automatic means) either verbally transmitted by you during your phone call with the Stores or by using existing data in the Company systems, for the purposes of recording conversations within the framework of Company quality standards, so that you can make your purchases in our distance sales process by calling our Stores from your home, based on the legal grounds of " processing personal data of the parties to the contract is necessary, provided that it is directly related to the establishment or performance of a contract " and " processing data is mandatory for the legitimate interests of the data controller, provided that it does not prejudice the fundamental rights and freedoms of the relevant person. "
2.10. Bank Communication Process
Within the scope of our cooperation with the banks of which you are a customer, we process your Identity Information (name, surname), Contact Information (phone number, e-mail address, delivery address) and information regarding the communication made to you by the bank, based on the legal basis of express consent (PDPL Article 5/1), in the process of communicating on our behalf to the bank customers in the segments created by the bank according to our request.
2.11. Legal Processes and Processes Regarding Internal Activities
In order to fulfill our obligations arising from the legislation, to carry out the transactions related to the establishment/termination/cancellation of contractual relations, to fulfill our other legal obligations towards authorized and authorized public institutions and organizations; Your Identity Information (name, surname, Turkish ID number, signature, if you are a sole proprietorship company) obtained through your shopping in the Stores, Site and Mobile Application, becoming a member, using the Site and Mobile Application and using the information available in the Company systems (partly by automatic and non-automatic means). tax identification number and tax office), your Contact Information (e-mail address, telephone number, address), your Customer Transaction Information (invoice contents, other information on the expense note, reason for membership cancellation/account deletion and information regarding shopping/shopping, payment methods and payment details; if you are a sole proprietorship, debit/credit information, reconciliation information), your Legal Transaction Information (request/complaint content and date, commercial electronic message preferences) and your Transaction Security Information (log records ) based on the legal grounds that " processing personal data of the parties to the contract is necessary, provided that it is directly related to the establishment or execution of a contract ", " it is mandatory for the data controller to fulfill its legal obligation " and " data processing is mandatory for the establishment, exercise or protection of a right " , in case of disputes that may arise, to exercise all kinds of rights of lawsuit, response and objection against official institutions and organizations such as courts, enforcement offices, arbitration committees, to carry out negotiation and agreement processes regarding disputes, to fulfill our obligations arising from the Law and the relevant legislation. to store documents, to provide you with the necessary information in case you request information from us and within the scope of internal audit, internal control and reporting, testing, development and improvement studies; to record the information/documents about you coming from official institutions, organizations and judicial/administrative authorities in physical media, to deliver physical documents by hand, by mail, cargo, notification, e-mail, through KEP, through e-notification, through dispute file or UYAP, obtained by using the information available in the Company systems (automatically, partially automatically or non-automatically); Your Identity Information (name, surname, TR identity number, signature, NU customer number, age information; if you are a sole proprietorship, company name, tax identification number, tax office, current registration number, sole proprietorship information), Your Contact Information (phone number, company phone number, e-mail address, company e-mail address, address, residence address, delivery address, fax number), Your Customer Transaction Information (request and complaint information, shopping information, order/cart information, invoice information, store information, return information, payment methods and payment details; if you are a sole proprietorship, debit/credit information, reconciliation information, debit/credit amount and period), Your Financial Information (bank account information, IBAN information, only the first 6-8 and last 4 digits of your credit/debit card; if you are a sole proprietorship, current code, maturity information, current payment information, other information in the current account opening form), Your Visual and Audio Recording Information (call center voice recordings, voice recordings related to the conversation), Your Physical Space Security Information (security camera images), Your Transaction Security Information (Site membership, Site/Mobile Application purchases, log regarding permission/explicit consent/contract approval within the scope of commercial communication records; IP address information, device ID, camera permission given to find products by scanning barcodes on the Mobile Application, if any, single-use SMS verification code sent to your mobile phone if you are a Site Member) and Your Legal Transaction Information (other information included in the signature circular/declaration, correspondence and file information regarding dispute processes, approval information regarding the express consent text, if any); based on the legal grounds of “ it is mandatory for the data controller to fulfill its legal obligation ”, “ data processing is mandatory for the establishment, exercise or protection of a right ” and “ data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person ” , for the purpose of providing information regarding personal data processing activities within the scope of the Law and collecting records regarding information and express consent texts; obtained by entering your information through the Site/Mobile Application or by you verbally submitting your personal data in the Stores and by entering your information in the electronic consent form sent via SMS (partly by automatic means); Your Identity Information (name, surname), Contact Information (e-mail address, phone number), Transaction Security Information (log records) and Legal Transaction Information (confirmation information regarding the explicit consent text, if any); based on the legal grounds that " data processing is mandatory for the data controller to fulfill its legal obligation " and " data processing is mandatory for the establishment, exercise or protection of a right " ,
We process your Identity Information (name, surname), Contact Information (phone number, e-mail address, address), Financial Information (only the first 6-8 and last 4 digits of your credit/debit card) and Customer Transaction Information (shopping information, order/cart information, shopping amount, payment method, payment details); obtained through your purchases from the Stores, Site and Mobile Application or through the use of existing information in the Company systems (automatically and partially automatically), in order to prevent the use of NU Prive, the website, Mobile Application, Site and other NU systems in violation of membership agreements, legislation and ethics, to detect suspicious transactions and unlawful uses, and to carry out blocking and unblocking operations; based on the legal grounds of " being mandatory for the data controller to fulfill its legal obligation " and " being mandatory for the legitimate interests of the data controller provided that it does not prejudice the fundamental rights and freedoms of the relevant person."
2.12. SMS Process to Location;
Location-based SMS is a service that enables NU Tekstil to deliver special campaign, promotional, and informational messages to customers on behalf of NU, based on location data obtained by users' telecom operators (electronic communications service providers) when they provide electronic communications services. This system operates through the telecom operator and third-party technology providers. Your location data is not transferred from the electronic communications service provider or its third-party technology provider to NU within the system. The data processing purpose for informing you about NU products, services, and campaigns through location-based SMS sending is determined jointly with the electronic communications service provider. To receive this service, you must have a valid subscription agreement not only with NU but also with the electronic communications service provider to which you are subscribed, and you must have given explicit consent to the electronic communications service provider for location-based SMS delivery. With the Location-based SMS service, an SMS delivery is automatically triggered when the user enters a specific location. The service is intended to provide users with information and advantages appropriate to their location. Within the scope of the Location-based SMS application; Location information (location information obtained through cellular base station, Wi-Fi and GPS data, and your current location data, which is obtained automatically by the Mobile Application if you allow location access through your phone device settings, or can be added manually by you), Identity and contact information such as name, surname, telephone number, Targeting information generated as a result of triggering when entering the specified location, Interaction information regarding SMS campaigns; It is processed for the purposes of determining whether you are within a specific geographic area (“geofence”), Notifying you of campaign and promotional information via SMS when you enter these areas, Improving service processes such as notifying you of the nearest store in case you decide to make a purchase as a result of an SMS sent to you based on location, and using the SMS sent to you regarding the location within the scope of marketing activities that include campaigns offered by NU and its brands regarding clothing products and information about participation in these campaigns. Your personal data is collected through fully automated processes, including location information obtained from your mobile device via base stations, which constitute Telecom Operator Data, and companies that provide location information triggering and SMS sending support sent by Third-Party Data Providers to the Telecom Operator. As explained above, your personal data is processed based on your explicit consent (Article 5/1 of the KVKK) to both the electronic communication service provider and NU. You can control your personal data at any time by disabling location permissions in your mobile device's settings.
2.13. Location Push Message Process
While using the Mobile App, we may process your location data to provide you with special campaigns, promotions, store notifications, new collection announcements, or personalized shopping recommendations based on your device's location information (location information obtained through cellular base station, Wi-Fi, and GPS data, as well as your current location data, which can be automatically obtained by the Mobile App or manually added by you if you allow location access through your phone's device settings). This system operates if you activate the mobile app's location permissions, and when you allow location access through your phone's device settings, push notifications may be triggered automatically when you enter certain geographic areas (geofences). During this process, your location data, device ID, and push notification interaction data are processed based on the legal basis of explicit consent (KVKK Article 5/1). You can control your personal data at any time by disabling location permissions or disabling push notifications in your mobile device's settings.
3. To Whom, For What Purposes, and On What Legal Basis Do We Transfer Your Personal Data?
For the purposes of fulfilling our legal notification, declaration and audit obligations and providing information, documents and other related obligations, conducting judicial and official correspondence, conducting legal disputes and exercising our legal rights such as the right to sue and reply, you may share all your personal data processed by NU within the framework of this Disclosure Text with the Revenue Administration, the Ministry of Commerce and other relevant authorized public institutions and organizations, consumer arbitration committees, enforcement and bankruptcy directorates, courts, prosecutors' offices, law enforcement agencies, notaries and other judicial/administrative authorities; in addition, for the purposes of obtaining legal support in relation to these processes, initiating and following up on legal processes, you may share your personal data processed within the scope of Legal Processes and Internal Activities - to the lawyers/law firms we work with - to the extent necessary; Based on the legal grounds that " it is necessary for the data controller to fulfill his legal obligation ", " data processing is necessary for the establishment, exercise or protection of a right " and " it is clearly prescribed by law ",
To fulfill our legal audit obligations and other related obligations, we provide consultancy and audit services to our suppliers who provide financial consultancy, independent audit and tax audit services; Your Identity Information (name, surname, signature, Turkish ID number; if you are a sole proprietorship, tax identification number and tax office, current registration number, sole proprietorship information), Your Contact Information (phone number, company phone number, address, fax number, company e-mail address), Your Customer Transaction Information (shopping information, invoice information; if you are a sole proprietorship, debit/credit information, reconciliation information, debit/credit amount and period), your Financial Information (bank account information, IBAN information; if you are a sole proprietorship, current payment information, other information in the current opening form) and your Legal Transaction Information (other information in the signature circular/declaration, correspondence and file information regarding dispute processes), based on the legal grounds that " it is mandatory for the data controller to fulfill its legal obligation " and " data processing is mandatory for the establishment, exercise or protection of a right " ,
In order to fulfill our legal obligations, we may share your Identity Information (name, surname), Contact Information (phone number, e-mail address) and Legal Transaction Information (commercial communication approval/rejection information, source of approval, how the approval was obtained, date and time of approval, and the method of communication for which approval was granted) with the Message Management System Inc. (İYS) based on the legal reason that " it is mandatory for the data controller to fulfill its legal obligation " .
For the purpose of carrying out commercial communication processes; we provide your Identity Information (name, surname), Contact Information (phone number, e-mail address) and Legal Transaction Information (content of the message sent, date and time of message sending, commercial communication approval/rejection information, source of approval, how the approval was obtained, date and time of approval, method of communication for which approval was granted) to the electronic commercial message service providers from whom we receive services in this regard, based on the legal ground that " data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person " ,
In order to be able to issue e-invoices regarding your orders or purchases, to fulfill legal obligations towards the Revenue Administration, the Ministry of Commerce and other relevant public institutions and organizations regarding the notification of e-invoice and e-archive information and to carry out e-invoice processes; we may share your Identity Information (name, surname, Turkish ID number, tax identification number and tax office if you are a sole proprietorship), Contact Information (phone number, e-mail address, address, delivery address), Customer Transaction Information (shopping information, invoice information) and Financial Information (only the first 6-8 and last 4 digits of your credit/debit card); based on the legal ground that " data processing is mandatory for the legitimate interests of the data controller, provided that it does not prejudice the fundamental rights and freedoms of the relevant person " ,
If you want to make your payment by credit/debit card, in order to receive the payment, we must provide your Identity Information (name, surname), Customer Transaction Information (transaction number and time, store information, shopping channel information, shopping amount, payment method (installment/point information)) and Financial Information (only the first 6-8 and last 4 digits of your credit/debit card); and in order to carry out payment transactions such as refunds or making necessary payments pursuant to legal processes carried out within the scope of courts, consumer arbitration committees and mediation and other relevant official institutions and organizations, we must provide your Identity Information (name, surname, company name if you are a sole proprietorship), Customer Transaction Information (amount to be refunded, payment amount, if you are a sole proprietorship, debit/credit information) and your Financial Information (bank account information, IBAN information); based on the legal grounds that " data processing is mandatory for the data controller to fulfill its legal obligation " and " data processing is mandatory for the establishment, exercise or protection of a right " ,
In order to resolve problems encountered during the processes where payments are made by credit/debit card and to complete payment transactions; we may share your Identity Information (name, surname), Contact Information (phone number) and Customer Transaction Information (transaction amount, payment details) with the banks from which we receive service, electronic payment institutions and suppliers from whom we receive support for payment transactions and infrastructure, based on the legal grounds that " data processing is mandatory for the data controller to fulfill its legal obligation " and " data processing is mandatory for the establishment, exercise or protection of a right " .
Your personal data related to marketing activities processed based on your explicit consent (e.g., preferences, interests, shopping history, location, campaign participation information, etc.) may be transferred to our business partners who provide these services, advertising/analysis service providers (e.g., digital advertising agencies, social media platforms, survey providers, software companies that offer personalization services), and domestic and international service suppliers who provide the technical infrastructure for these services, for the purposes of conducting campaigns, promotions, advertising, analysis, and segmentation activities tailored to you, and providing personalized content and communications on digital platforms, subject to your explicit consent. Data transfers in this context will be carried out only within the framework of your explicit consent and with the necessary confidentiality/security measures in place.
For your purchases made in the Stores, on the Site and the Mobile Application, we may share your Identity Information (name, surname, NU customer number) and Customer Transaction Information (shopping date, quantity, shopping content, shopping amount, payment type, order number, invoice number, invoice date, invoice amount, store information from which shopping was made, channel information from which shopping was made, gift card number in case of gift card use, gift card amount information; return information in case of return of purchased product(s), return number), data such as usage habits, usage style, IP numbers, device information, etc., resulting from the use of the website and mobile application; with consultants and service providers, for analytical studies, business development and security (such as fraud prevention, ensuring user transaction security, user identity verification) purposes, based on the legal ground that " data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person " ,
We share all your personal data processed by NU within the framework of this Information Text, to the extent necessary, with our suppliers from whom we provide product support and services for the purposes of providing information system infrastructure, system integration and management, database/application/software management, maintenance, support, system integration and development services, based on the legal ground that " data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person".
We provide all your personal data processed by NU within the framework of this Information Text, to our suppliers from whom we provide services such as carrying out customer service and call center processes, developing and maintaining the software and hardware used in these processes, obtaining server services and ensuring system integration, to the extent necessary; based on the legal ground that " data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person " ,
We may transfer all your personal data processed by NU within the framework of this Disclosure Text, to the extent necessary, to our suppliers who provide enterprise resource software services from which we receive service for the purpose of enterprise resource planning, including financial management and corporate sales, and to our suppliers from whom we receive server services in this regard, and to our suppliers from whom we receive cloud platform and cloud service and server services for the purpose of carrying out database and operational processes; based on the legal ground that "data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person".
For the purposes of supplying products, shipping these products and tracking them through the Company systems; we will share your Identity Information (name, surname, NU customer number), Contact Information (phone number, delivery address, invoice address) and Customer Transaction Information (shopping date, shopping amount, shopping time, quantity, shopping content, order number, order/cart information, invoice information) with our supplier from whom we receive service for product supply, based on the legal ground that " data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person " ,
In order to ensure the delivery of the products you have purchased or will purchase within the scope of your shopping and orders, we share your Identity Information (name, surname), Contact Information (delivery address, telephone number) and Customer Transaction Information (order number, payment method, order content and order amount; complaint information in case of a problem with delivery, product and delivery information); Customer Transaction Information (shopping information) and Location Information (for order delivery) with our suppliers that provide cargo, courier, warehouse and logistics services from which we receive support. your location data, which is obtained automatically by the Mobile Application or can be added manually by you if you allow location access through your phone device settings); based on the legal grounds that " data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person " ,
For the purposes of mutual communication through our call center or other communication channels, receiving and resolving your requests and complaints; we may share your Identity Information (name, surname, NU customer number), Contact Information (phone number, e-mail address, address), Customer Transaction Information (shopping information, shopping date, shopping amount, order/basket information, order/return number, store information, coupon information, payment method, payment method and payment details, gift/discount/benefit usage information, return request information, product information to be returned, amount to be returned and reason for return, return date, request and complaint information), Location Information (your location data, obtained automatically by the Mobile Application if you allow location access via your phone device settings or that can be added manually by you) and Visual and Audio Recording Information (call center voice recordings) with our supplier from whom we receive call center services; In order to perform the quality control of the call center service received, we will provide your Identity Information (name, surname), Contact Information (phone number, e-mail address), Customer Transaction Information (request and complaint information) and Visual and Audio Recording Information (call center voice recordings ) to our supplier from whom we receive service; "data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person" based on legal grounds,
We may share your Legal Transaction Information (information regarding the transaction in dispute); Identity Information (name, surname), Contact Information (phone number) and Customer Transaction Information with our suppliers from whom we receive consultancy services and the payment institutions related to the relevant transaction, in order to monitor and detect suspicious transactions and prevent illegal transactions, based on the legal grounds that " data processing is mandatory for the establishment, exercise or protection of a right " and " data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person " .
When necessary, we will send your Physical Location Security Information (camera footage) obtained from the security camera in the Stores to the security units of the shopping mall where the Store is located, based on the legal grounds that " data processing is mandatory for the establishment, exercise or protection of a right " and " data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person " .
In order to determine the visitor traffic in the Stores within the scope of improving business processes, we provide your Visual and Audio Recording Information (people counting camera recordings) to the supplier from whom we receive service, based on the legal reason that " data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person ",
If you choose to benefit from the free wireless network (Wi-Fi) service offered in the Stores, in order to fulfill the legal obligations under the relevant legislation regarding this service, we will share your Contact Information (phone number), Customer Transaction Information (store information visited, duration of store visit) and Transaction Security Information (information regarding the device used (device ID, model and operation system information regarding the device), single-use SMS verification code sent to the mobile phone, Wi-Fi usage information and session duration, website login and logout information, log records) with our suppliers from whom we receive support regarding the provision of this service, based on the legal reason that " data processing is mandatory for the legitimate interests of the data controller, provided that it does not prejudice the fundamental rights and freedoms of the relevant person " ,
During the SMS to Location process, with third parties that provide support services for SMS to Location application (e.g. geofence triggering and SMS management provider) based on your explicit consent, with Telecom operators and authorized public institutions and organizations based on the legal grounds of fulfilling legal obligations,
Your personal data is being transferred.
4. Transfer Abroad:
"For e-mail, document creation, data organization, strategy development, efficiency increase, cost reduction, presentation development and business reporting purposes; office productivity tools, data processing and cloud-based collaboration services; since the servers of our supplier, from whom we provide these services, are located abroad, we will transfer all your personal data processed by NU within the framework of this Information Text - to the extent necessary - to these servers abroad; provided that it does not harm the fundamental rights and freedoms of the relevant person, data processing is mandatory for the legitimate interests of the data controller." Based on the legal reason, in order to carry out the database and operation processes, we procure cloud platform and cloud service, application and software development service, database and server service, infrastructure, hosting, maintenance and development, system integration services from our suppliers, and since the servers from which they provide these services are located abroad, we may transfer all your personal data processed by NU within the framework of this Information Text, to these servers abroad, limited to the extent necessary ; "Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person" We transfer it abroad based on legal reasons.
In accordance with Article 11 of the Personal Data Protection Law, you can make requests regarding the following matters regarding your personal data by contacting our Company:
a. To learn whether your personal data is being processed,
b. To request information regarding the processing of personal data,
c. To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
d. To learn the third parties to whom personal data is transferred domestically or abroad,
to. To request correction of personal data if it is processed incompletely or incorrectly and to request that the action taken in this context be notified to third parties to whom personal data has been transferred,
f. To request that personal data be deleted, destroyed or anonymized if the reasons requiring processing of personal data are eliminated and to request that the action taken in this context be notified to third parties to whom personal data has been transferred,
g. To object to the emergence of a result to the detriment of the data owner by analyzing the processed personal data exclusively through automated systems,
h. To request compensation in case of damages due to unlawful processing of personal data.
As personal data owners, if you submit your requests regarding your rights using the methods provided below, the COMPANY will finalize the request as soon as possible and within thirty days at the latest, depending on the nature of the request. In this context, personal data owners have the right to request the rights listed in Article 11 of the Personal Data Protection Law from the COMPANY, the data controller. You may submit your request regarding the exercise of your rights specified in Article 11, in Turkish and in writing, in accordance with Article 13, paragraph 1 of Law No. 6698 and the Communiqué No. 30356, dated March 10, 2018, on the Procedures and Principles for Applications to the Data Controller, or by using the registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the electronic mail address previously notified to the COMPANY and registered in our system. Applications will only provide information about the applicant; it will not be possible to obtain information about other family members or third parties. The COMPANY reserves the right to verify your identity before responding.
In your application;
- Your name, surname and signature if the application is in writing,
- For citizens of the Republic of Türkiye, your Turkish ID number, if you are a foreigner, your nationality, passport number or ID number if you have one,
- Your residence or workplace address for notification,
- Your email address, telephone and fax number, if any, for notification purposes.
- Your request subject,
It is mandatory to have it and, if any, relevant information and documents must be attached to the application.
You can send it with a wet signature and a photocopy of your ID to Akgüllü Sokak No7 Çağlayan - İstanbul.
If the requested information and documents are not provided as required, the COMPANY may not be able to conduct the investigations based on your request in a complete and qualified manner. In this case, the COMPANY reserves its legal rights. Therefore, your application must be submitted in full and containing the requested information and documents, depending on the nature of your request.