Information Notice on the Protection of Personal Data
As DERBY V KAYIŞI LASTİK SAN. LTD. ŞTİ (“Derby V Lastik” or the “Company”), we attach utmost importance to the security of your personal data. With this awareness, we place great emphasis on ensuring that all kinds of personal data belonging to all individuals associated with Derby V Lastik, including those who benefit from our products and services, are processed and retained in compliance with the applicable legislation.
With this information notice, our aim is to inform you, in the most accurate and transparent manner, about which of your data are collected and for what purposes they are processed, the methods of destruction, your rights arising from the Law on the Protection of Personal Data (“KVKK”), with whom and under which conditions your data are shared, the method and legal basis of collection, and your statutory rights.
Derby V Lastik takes the highest level of security measures possible to ensure the lawful collection, retention, sharing, and confidentiality of your personal data. In line with Law No. 6698 on the Protection of Personal Data (“KVKK”), our Company may record, store, update, or otherwise process—within the bounds of the law—the personal data you share within the scope of our loyalty program, our stores, mobile applications, website (derbyvbelt.com), and call center to benefit from membership and related advantages. Your personal data may be processed based on the explicit consent you provide at membership points. In the absence of your membership and consent, your personal data will not be processed.
Derby V Lastik reserves the right to update this Information Notice on the Protection of Personal Data at any time within the scope of changes that may be made to the applicable legislation. In order to fulfill our obligations arising from the Law No. 6502 on Consumer Protection and the Distance Contracts Regulation, it is necessary to collect, store, and process data.
Data Controller
Our Company, DERBY V KAYIŞI LASTİK SAN. LTD. ŞTİ, is the data controller.
Address: Veliköy Sanayi Bölgesi, 50. Cadde No: 8/A – Çerkezköy / Tekirdağ – Türkiye
Registered E-mail (KEP): info@derbyvbelt.com
Telephone: +90 282 746 1027
Responsible Person: Company Manager
Purposes of Processing Your Personal Data
Derby V Lastik may process your personal data, within the personal data processing conditions set forth in Articles 5 and 6 of Law No. 6698, for the following purposes: promoting goods and services offered by the Company and its group companies; recognizing our customers and enhancing communication with them; creating and tracking visitor records across various channels such as stores, website, and mobile applications; creating Derby V Lastik PointCard membership within the scope of our loyalty program; making the Derby V Lastik website/mobile application more user-friendly; informing customers about our products and services in line with their usage habits and needs; preparing and delivering customer-specific campaigns and promotions based on needs and habits; enabling our contracted institutions and solution partners to offer suggestions to customers; informing our customers regarding services; planning and conducting marketing and corporate communication activities; using the data in activities that drive sales and sales-enhancing factors; generating analytics to render traffic meaningful and informing customers across mobile, desktop, and offline channels based on the opportunities identified; planning and conducting CRM (Customer Relationship Management) activities; conducting surveys within the scope of corporate communications and event announcements; delivering notices to ensure customer satisfaction and enhancing brand image; enabling the Company business units to carry out necessary work in order to provide products and services to customers; ensuring and protecting the legal and commercial security of the Company, group companies, and persons with whom the Company has a business relationship; recording and verifying identity, address, contact, and other necessary information of those who shop through Derby V Lastik stores/website/mobile applications; issuing all documents that will form the basis of transactions to be carried out in electronic or paper environment; providing customer and supplier advisory services; fulfilling the requirements under the Law on Consumer Protection and the Distance Sales Contract; informing customers and suppliers about updates to the relevant provisions; providing information to competent public institutions and public officials, only as required by legislation, in the event of situations concerning public security and upon request; using such information as evidence in potential disputes; planning and conducting supply chain management and logistics activities; planning, managing, auditing, and conducting information and transaction security processes; using the data in potential disputes; preventing fraudulent or unlawful transactions; storing and reporting information as envisaged by audit firms and regulatory and supervisory authorities; collecting, analyzing, interpreting, and resolving customer and supplier complaints and requests; monitoring and conducting legal affairs and contract processes; conducting and tracking finance and accounting affairs; conducting in-house career activities; conducting investment processes of the Company; ensuring the security of data controller operations; conducting wage policy; planning and conducting sponsorship, social responsibility, and NGO activities; conducting and supervising Occupational Health and Safety activities; and ensuring the security of Company headquarters, warehouses, stores, and similar facilities.
Method of Collecting Personal Data
Your personal data are obtained in any verbal, written, or electronic environment for the purposes stated above, in order to provide the products and services we offer within the legally prescribed framework, and to fully and accurately fulfill our Company’s obligations arising from contracts and the law.
Depending on the services provided by our Company and its commercial activities, your personal data may be collected by automated or non-automated means; verbally, in writing, or electronically through our Company units and offices, Group Companies, website, social media platforms, mobile applications, and similar means. For as long as you benefit from the products and services offered by our Company and Group Companies, your personal data may be collected and processed on an updated basis.
Additionally, your personal data may be processed when you use our call centers or website to use the services of our Company or Group Companies, when you visit our Company or website, and when you participate in trainings, seminars, or organizations organized by our Company.
Legal Grounds for Collecting Personal Data
Your personal data may be collected and processed on the basis of the processing conditions specified in Articles 5 and 6 of Law No. 6698, including but not limited to:
– It is expressly provided for by laws,
– It is necessary to process personal data of the parties to a contract, provided that it is directly related to the establishment or performance of the contract,
– The data have been made public by the data subject,
– It is mandatory for the establishment, exercise, or protection of a right.
Processing of Your Personal Data
We declare that we will process and store your personal data within the limits defined by the applicable legislation under Law No. 6698 on the Protection of Personal Data. Within the scope of practices carried out or to be carried out with our Company (Customer Services, Cookie Policies, Derby V Lastik PointCard Membership, small-scale applications to be implemented by the Company, Corporate Records, Invoicing, derbyvbelt.com Membership), the personal data you share (name and surname, gender, mobile phone numbers, e-mail addresses, information on children, address details such as province, district, neighborhood, date of birth, shopping information, payment information, interests, tastes and preferences, and location information accessible through electronic programs) will be recorded, stored, updated by Derby V Lastik in compliance with KVKK and, in line with the legislation, may be transferred to third parties that are party to the contract (banks for virtual POS and standard payments, company partners, software providers, our suppliers, agencies, marketing project and working partners, legally authorized public institutions and organizations, cargo and courier companies, customer relations, partnerships established for customer loyalty and satisfaction, e-commerce platforms and social sharing sites such as Google, WhatsApp, Facebook, Instagram, Twitter, LinkedIn, Yandex, Pinterest, Snapchat, Twitch, TikTok, Oracle BlueKai, Bip, YouTube, etc.). They may be processed in the ways stipulated by law (stored, reported, recorded, altered, reorganized, transferred, used in personalized marketing, analyzed). Any operation performed on the data is deemed “Processing of Personal Data.”
Additionally, it is necessary to collect and use data to fulfill our obligations arising from the Law No. 6502 on Consumer Protection and the relevant legislation.
Protection of Information
Your personal data are protected by the highest-level methods permitted by technological means and costs. Derby V Lastik undertakes that its employees will not process, share, or report your personal data for purposes other than those specified, in compliance with the law.
The necessary administrative and technical measures for the protection of personal data are taken by Derby V Lastik.
Transfer/Sharing of Your Personal Data
The sharing of your personal data collected by Derby V Lastik with third parties is carried out within the framework of the Explicit Consent permissions approved by our customers. No transfer to third parties is made without the consent of the data subjects. However, in compliance with the rules stipulated in Article 8 (“Transfer of Personal Data”) and/or Article 9 (“Transfer of Personal Data Abroad”) of the KVKK and by taking the necessary measures, your personal data may be transferred to Derby V Lastik’s business partners, suppliers, Group Companies, Company officials, shareholders, legally authorized public institutions, and private persons, within the scope of the personal data processing conditions and purposes.
Your personal data may be shared with the Company’s direct/indirect domestic/overseas affiliates; with program partner institutions and organizations with whom we cooperate to conduct our activities; with domestic/overseas persons and organizations that provide cloud storage services; with domestic/overseas organizations we have agreements with for sending commercial electronic messages to our customers; with the Interbank Card Center; with our contracted banks; and—within the scope of various marketing activities to offer better service and ensure customer satisfaction—with domestic and overseas agencies, advertising companies, and survey companies, other third parties at home and abroad, and relevant business partners.
We take the necessary technical and legal measures to prevent rights violations during transfers to third parties. However, Derby V Lastik shall not be liable for breaches arising from the data protection policies of the third party to whom your personal data are transferred and within the risk area under the responsibility of such third party.
Your Rights as the Data Subject
Pursuant to the Law on the Protection of Personal Data No. 6698, Derby V Lastik is obliged to inform data subjects at the time of obtaining personal data. In this context, Derby V Lastik informs data subjects about which data are processed and for what purposes, with whom the data are shared, the method of data collection, and the rights of the data subject, and obtains the data subject’s explicit consent where necessary.
If you submit your requests regarding your rights to our Company by the methods set out below in this Information Notice, Derby V Kayış will conclude the request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if a fee is stipulated by the Personal Data Protection Board, the fee determined in the tariff (KVKK Art. 13/2) will be charged by the Company.
Within this scope, your rights are as follows: to learn whether your personal data are processed; to request information if your personal data have been processed; to learn the purpose of processing personal data and whether they are used in accordance with their purpose; to know the third parties to whom personal data are transferred at home or abroad; to request the correction of personal data if they are incomplete or incorrectly processed and to request that the transaction carried out in this context be notified to third parties to whom personal data have been transferred; to request the deletion or destruction of personal data in the event that the reasons requiring their processing cease to exist, despite being processed in accordance with the KVKK and other relevant legislation, and to request that the transaction carried out in this context be notified to third parties to whom personal data have been transferred; to object to the emergence of a result against the person by analyzing the processed data exclusively through automated systems; and to request compensation for the damage in case of damage due to unlawful processing of personal data.
Pursuant to Article 13(1) of the KVKK, you may submit your request regarding the exercise of the above-mentioned rights to Derby V Kayış in writing or by other methods determined by the Personal Data Protection Board. Since the Board has not determined any other method, you must submit your application to the Company in writing in accordance with the KVKK.
To exercise the rights specified above, you may submit a request containing explanations regarding which of the rights set out in Article 11 of the KVKK you wish to exercise by filling out the form available at www.derbyvbelt.com
and delivering a signed copy of the form, together with documents verifying your identity, in person, by notary public, or by other methods to be determined in the future under the KVKK, to the address below:
“Derby V KAYIŞI LASTİK SAN. LTD. ŞTİ
Veliköy Sanayi Bölgesi, 50. Cadde No: 8/A – Çerkezköy / Tekirdağ – Türkiye”