PDPL Information

INFORMATION TEXT ON THE PROTECTION OF PERSONAL DATA WITHIN THE SCOPE OF THE PERSONAL DATA PROTECTION LAW NO. 6698

This Disclosure Text has been prepared for Onka Global Consultancy and Import Export LTD. ŞTİ. (“FIRM”) to fulfill its disclosure obligation within the scope of the Personal Data Protection Law No. 6698 (“Law”). In this context, our responsibilities regarding the protection of your personal information and the issues we are obliged to provide information about are listed below.

What is Personal Data?

Personal Data Protection Law No. 6698 defines personal data as “any information related to an identified or identifiable natural person”. Personal data includes not only information that enables the definitive identification of individuals, such as their name, surname, date of birth and place of birth, but also information regarding their physical, familial, economic, social and other characteristics. The law considers data related to individuals’ race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership in associations, foundations or unions, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data, as special personal data.

Data Controller

According to the Law, the data controller refers to the real or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system. The responsibility for all personal and special personal data of the persons who benefit from all the services offered on the www.oiaformore.com (WEB SITE) internet site belonging to the COMPANY is Onka Global Danışmanlık Ve İthalat İhracat LTD. ŞTİ., registered with the Istanbul Trade Registry Office under the number 363335-5, located at Fulya Mh. Ortaklar Cd. Mevlüt Pehlivan Sk. Huzur Apt. Blok No:1 İç Kapı: 5 Şişli / İSTANBUL.

Collection of Personal Data

Your personal data is collected automatically through the forms we fill out when you register and/or shop on our WEBSITE and through cookies, which are technical communication files, when you visit our WEBSITE. For detailed information about cookies please read Cookie Policy .

Processing and Transfer of Personal Data

The following personal data may be processed by the COMPANY and its business partners, successors and service providers, provided that they are collected with explicit consent.

• Identity Information: Name, surname, gender and age information, TR ID No (processed in accordance with the legislation only when certain product groups are purchased)
• Contact Information: GSM number, delivery address, e-mail address
• Customer Transaction Information: Order and invoice information, delivery transaction information, transaction information regarding past purchases, request and complaint information.
• Transaction Security Information: IP address information, password and passcode information, cookie information
• Legal Transaction Information: Information in correspondence with authorized persons, institutions and organizations, information in case and enforcement files, information on legal information requests.

These data are processed directly or indirectly in accordance with the procedures and principles in Article 4 of the Law and within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6, for the purposes of providing the services offered by the COMPANY to its customers under the best conditions, providing products or services reliably and uninterruptedly, maximizing customer satisfaction, making payments, performing various transactions related to the aforementioned services, marketing and promotional activities, and fulfilling the requirements of the contracts concluded with the customers.

In line with the purposes stated above and paying attention to the reasons for data processing, personal data may be transferred to domestic and/or foreign service providers who process personal data on behalf of the COMPANY within the framework of the personal data processing conditions specified in Articles 8 and 9 of Law No. 6698 (logistics companies, call center companies providing customer service, database and infrastructure providers, companies providing SMS and e-mail sending services), within the framework of the personal data transfer conditions and purposes specified in Articles 8 and 9 of the Law.

Data Owners' Rights

Data owners, in accordance with the regulation regarding the “rights of the relevant person” within the scope of Article 11 of the Law;
a) Learning whether personal data is being processed,
b) Requesting information regarding the processing of personal data,
c) To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
To know the third parties to whom personal data is transferred, either domestically or abroad,
d) Request correction of personal data in case it is processed incompletely or incorrectly,
e) Request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of Law No. 6698,
f) To request that the operations carried out in accordance with subparagraphs (d) and (e) be notified to third parties to whom personal data has been transferred,
g) To object to the emergence of a result to the detriment of the person himself/herself, by means of analysis of the processed data exclusively through automatic systems,
In case of damages due to unlawful processing of personal data, the person has the right to demand compensation for the damages.

Pursuant to Article 13, paragraph 1 of the Law, requests regarding the use of the above-mentioned rights must be sent to info@onkaglobal.com with a secure electronic signature or with a written wet signature. The Company will finalize the request delivered in the specified manner within thirty days at the latest, free of charge, depending on its nature. However, if the transaction requires an additional cost, the COMPANY will charge the fee in the tariff determined by the Personal Data Protection Board.