Stein Personal Data Policy

General information about the Personal Data Law

Our company (Stein) will record, classify, process, store, update the personal data of our valued customers as a data controller within the scope of the Personal Data Protection Law No. 7005 and may disclose them to third parties within the framework of the legislation rules and the permission you will give. With this information, we inform you about our mutual rights and obligations in accordance with the provisions of the Law.

Personal Data Definition:

According to the Personal Data Protection Law (KVKK), it refers to any information that will allow you to be determinative or determinable, such as your (name, surname, TR identity number, etc.), communication, information on the methods used during access to products (IP, mobile, phone brand-model, browser type, version, social media information, movements developed on screens, etc.).

Purposes and Legal Reasons for Processing Your Personal Data:

Your personal data will be processed for the purposes of recording your identity, address, tax number and other information in order to determine the transaction owner and addressee in all kinds of work and transactions to be carried out regarding all kinds of products and services we will offer you, organizing the information and documents that will form the basis of the work and transactions to be carried out electronically, complying with the information storage, reporting and information obligations stipulated by all judicial and administrative authorities (such as courts, TBB, BDDK, SPK, TCMB, MASAK, BTK) in accordance with the relevant legislation, providing other products and services offered and requested, and fulfilling the requirements of the agreements between us.

Your personal data may also be processed for the following purposes;

—Storing, storing and updating personal data through third parties in the cloud environment

—Sharing messages with banks and companies we cooperate with for information, advertising, promotion, etc. purposes to be sent to you

Method of Collection of Your Personal Data;

Your personal data; The information you send to us through our website, mobile site, call center or via e-mail, SMS or other means is collected through various non-automatic methods, in whole or in part, verbally, in writing or electronically, through various channels, through the identification system called “cookies” that allows our computers to automatically recognize you when you visit our website.

Transfer of Personal Data;

Your personal data may be transferred to its main shareholder, direct/indirect domestic/international affiliates; program partners and institutions, organizations, banks, providers or companies from whom we receive service, cooperate in product/service comparison and application processing, persons and institutions from whom we receive service in the cloud environment, institutions with which we have agreements regarding sending messages we send to our customers and other third parties within the framework of our relevant collaborations.

Storage and Security of Personal Data;

Personal data will be stored as long as the purpose of providing this information is valid. Your data will continue to be processed by us after the service you receive from us in order to determine your needs, provide you with faster service and meet subsequent service requests. If the data is kept for reporting, informing and legal authorities, or for longer periods of time as required by law, these limits will be observed. We will take the necessary security measures to prevent the loss of stored and recorded data, to prevent unauthorized access and unlawful use.

Your Rights Under the Law;

—According to Article 11 of the Law; You can apply to our company to request that your personal data; You have the right to learn whether your personal data has been processed, to request information about it if it has been processed, to learn the purpose of processing and whether it is used in accordance with the purpose of processing, to know the third parties to whom it was transferred domestically or abroad, to request correction of any incomplete or incorrect processing,

—You have the right to request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law, to request notification of the operations carried out within the scope of the correction, deletion or destruction specified above to third parties to whom it was transferred, to object to a result being obtained against you by analysis through exclusively automated systems, and to request compensation for damages if you suffer damages due to processing contrary to the Law.

As Stein, we would like to inform you that we attach the utmost importance to the security of your personal data and that we continue our activities with the awareness that personal data security is at the forefront in all the services we offer you.