Derby V KAYIŞI LASTİK SAN. LTD. ŞTİ (“Derby V Belt” or “the Company”) places highest priority on privacy and security. We have established this Privacy & Security Policy to inform our customers and suppliers of how we collect and process their data. According to this policy, data will only be collected and processed for the purposes specified in the collection policy. In addition, personal data may be stored, protected or destroyed in accordance with our retention policy. Derby V Belt will not use personal data submitted verbally, in writing or electronically beyond the scope of this Privacy & Security Policy, nor will it share such data with third parties without consent. The Company may collect, store, process, share and destroy personal data of its customers and suppliers in accordance with this Privacy Policy, and may use the collected data for corporate marketing and branding activities. By visiting derbyvbelt.com, customers and suppliers are deemed to have accepted this Privacy Policy. If they do not agree with these principles or the User Agreement, they should not use derbyvbelt.com.
The data collected may include customers’ and suppliers’ names, surnames, gender, mobile or landline numbers, dates of birth, home and all provided address details, email addresses, baby/child names and dates of birth, full product and price information reflecting purchasing habits, city of residence, names of persons to whom orders will be delivered, stores they shop from, interests, tastes and preferences, social media accounts, any directly or indirectly identifiable personal information such as location data or cookies, which will be collectively called “Confidential Information”. Sensitive personal data is not collected, stored or processed by Derby V Belt. The Company does not store, process or retain payment information such as credit card details. These are kept between the customer and the bank under banking protocols. We never ask our customers for email addresses, one-time codes or payment details through any communication channel. Customers and suppliers must remain vigilant against phishing attacks. For customers who register via Waterwipes.com.tr only they themselves can access their data; they alone can update, modify or delete it. No one outside the Company can access or change this information. Customers’ on-site behavior data during their shopping are never shared with third parties other than our business partners. Personal data cannot be used for any commercial purpose other than under the Personal Data Protection Law and this Privacy Policy.
Derby V Belt has taken significant measures to protect stored personal data against all potential risks (theft, loss, destruction, etc.). The Company uses SSL encryption for personal data collected via cookies and other services on its website.
Explicit Consent Data
Customers and suppliers who give explicit consent may have their identity information (e.g., ID card, driver’s license, residence permit, passport, marriage certificate details including Turkish ID number, nationality, parent names, birth place/date, gender), contact details (phone, address, email), customer data (obtained and generated from customers), transaction data (data obtained and processed for personalized products, services, and corporate marketing), location data (from Company apps), financial data (account number, credit card profile shared with bank via Virtual POS), corporate marketing data (collected/processed/reported for tailored products and services), CRM data (requests via all Company contact channels), information-security data (technical/administrative data for business continuity), audio/visual data (photos, video, audio other than security recordings), audit data (legally required financial/operational data), corporate reputation data (personal data collected to assess Company reputation), security data (camera records, security logs) may be collected and processed by the Company and its affiliates for purposes including identifying customers, marketing, running the web/mobile platforms, loyalty program membership, improving user experience, customizing campaigns and promotions, planning logistics and supply chain, managing complaints, legal and financial operations, HR activities, corporate social responsibility, and workplace safety.
Data on which explicit consent has been given may be shared with third-party organizations that partner with Derby V Belt. Such third parties include partners managing communication systems, agencies for marketing campaigns, institutions collaborating on advertising, consultancy firms for marketing/imaging or technical support firms. These third parties may only access and process the data for the specific operations agreed upon. The Company includes confidentiality policies and the Personal Data Protection Law (Law 6698) in agreements with these third parties.
Derby V Belt does not sell personal data obtained with explicit consent for profit. We collect, process and use data only for the purposes described above, in compliance with the law.
Information may be sent for corporate communications or event announcements based on consent for data processing. This communication preference can be updated by customers or suppliers at any time. Such data also may be used to improve services, inform about campaigns/promotions and optimize processes. The Company will notify customers and suppliers of any revisions to policies. Data from competitions, sweepstakes or similar events may be used for managing, improving or reporting those events.
Customers can change their communication preferences via the Derby V Belt app, derbyvbelt.com or other contact points. Consent statements and permissions may be changed upon request. Customers and suppliers who do not make changes are deemed to accept processing, storage and sharing of their data.
Under Law 6698, customers and suppliers have rights to learn whether their personal data are processed, stored domestically or abroad, shared with partners domestically or abroad, request correction of incomplete or inaccurate data, and request deletion if applicable.
Customers can access their account on derbyvbelt.com to review and update their data and preferences.
Customers are solely responsible for storing, protecting and processing data such as codes, gift vouchers or gift cards provided under promotions and campaigns. Derby V Belt accepts no responsibility for misuse or errors. If misuse or unauthorized transfer is detected, membership may be terminated, and personal data may be anonymized; loyalty cards and related benefits will be forfeited.
Derby V Belt reserves the right to amend its policies, Terms of Service, Disclosure Statement, Privacy & Security Policy, Distance Sales Agreement, Explicit Consent Text and Preliminary Information Form.
Third-Party Data
The Company may collect non-personal data that cannot be linked to individuals. Examples include browser cookies, location, entry time, number of visits, click and movement behaviors. These are processed under this Privacy Policy. If such data become associated with customers, they are treated as personal data.
Cookies & Others
Browsers may collect certain data under the name “cookies” to evaluate, analyse and share user behaviours. Derby V Belt uses only its own site cookies according to this Privacy Policy. Cookie settings are available on page entry or within browser settings; regulating, allowing or removing them is the responsibility of customers and suppliers. The Company may use cookies, web beacons and pixel tags where consent is given. While cookies and other browser-collected data are considered non-personal, they may be combined with personal data, at which point they become personal data, processed to personalize user experience and marketing communications. IP addresses, browser type/language, ISP, referral/exit pages, operating system, timestamp and click data may be automatically collected and stored. These data help identify customers, analyse their interests, manage the website, interpret customer behaviour and build demographic profiles. They may also be used for marketing campaigns, advertising projects, website improvements and analysis. Email communications from Derby V Belt may contain clickable links. When users click such links they first connect to the web server, then are forwarded to the intended link. These clicks are tracked for personalization and marketing analytics. Clicking is voluntary; collected data from these clicks are then considered opted-in. Pixel tags are used to analyse whether customers open email communications and to adjust the intensity of tailored marketing.
Transactions with Business Partners
As noted above, third-party institutions can only access and process data as necessary for specific tasks. Customers and suppliers, by giving consent, accept that their data may be shared with business partners. Derby V Belt includes confidentiality policies and the Personal Data Protection Law in agreements with its partners. Data shared with third-party institutions does not include customers’ names or surnames. If sharing personal data is required based on the nature of a project, partners are prohibited from storing, processing or sharing those data beyond the agreed purpose, under confidentiality and security clauses.
On its website and mobile app, Derby V Belt may include links to offers from its partners. Cookies, location or contact data collected through such links are subject to the privacy policies of those partners. Derby V Belt is not responsible for the privacy practices of its partners; if customers use a partner’s product or service, they assume responsibility for that partner’s privacy policy.
Credit Card Security
The Company does not store or share credit card information of its customers. Credit card data are encrypted and transmitted to banks. Secure 3D payment options support safe transactions.
Service Provider Partners
Shipping companies and call-centre service providers are considered service-provider partners. Derby V Belt shares personal data with them to fulfil services. These service providers are not entitled to store, process or share the personal data they receive.
Others
If state authorities require personal data for legal reasons, Derby V Belt may provide them in accordance with the legislation.
In the event of a company transfer, data collected by the transferring company are directly shared with the acquiring company under the same confidentiality conditions.
For more detailed information, individuals may refer to our other policies regarding personal data at derbyvbelt.com.
Customers or suppliers seeking detailed information may contact relevant persons via Derby V Belt support lines.
Derby V Belt may update this policy periodically; updates will be published under the Privacy & Security Policy heading.
Derby V KAYIŞI LASTİK SAN. LTD. ŞTİ