KVKK Clarification Text

by Luccase ("Data Controller", "Luccase"); This KVKK Clarification Text ("Clarification Text"), which is prepared within the framework of the Constitution of the Republic of Turkey and the international conventions to which our country is a party regarding human rights and the relevant legislation, especially the Law on the Protection of Personal Data No. 6698 ("KVKK", "Law"),  aims to enlighten you about Luccase personal data applications and your rights as a data owner.

By the processing of your personal data, any operation performed on the data such as obtaining, recording, storing, preserving, changing, rearranging, disclosure, transferring, taking over, making available or classifying your personal data by fully or partially automatic means or by non-automatic means provided that it is part of any data recording system is meant.

In accordance with KVKK, your Personal Data; it may only be processed by the Data Controller within the scope described in this text. Luccase is responsible for setting up and managing the data recording system, determining the purposes and means of processing the personal data stored in the database.

In this context, the Data Controller shall protect your personal data by taking all necessary technical and administrative measures; within the limits stipulated by all legislation on the protection of personal data, in Article 4 of the KVKK;

- To be in compliance with the law and good faith,

- Being accurate and up-to-date when necessary,

- Processing for specific, explicit and legitimate purposes,

- Being relevant, limited and proportionate to the purposes of processing,

- Retention for the period stipulated in the relevant legislation or required for the purpose for which they are processed

principles.

Personal Data Collected

As the Data Controller, we process the personal data of our members and service recipients through the website to be specified in this Clarification Text for our disclosure obligation. Personal data processed within this scope; identity data, contact data and financial data received to be transmitted to the bank for the purpose of carrying out necessary transactions are limited to digital trace data and order history data.

Method of Collection of Personal Data and Legal Reason

Personal data is collected electronically. The personal data collected for the legal reasons specified in this Clarification Text may be processed and transferred for the purposes specified in Articles 5 and 6 of the Law and this Clarification Text.

Purposes

Your personal data is to carry out the necessary operational activities to ensure that the products and services offered by the Data Controller can be offered to you, to understand your needs by getting to know you better in order to recommend products and services suitable for your consumption and purchase motivation, to inform you about products and services, to measure your satisfaction with our products and services, to develop and diversify our products and services in line with your wishes and needs.  to carry out the necessary quality and standard audits with them, to take the necessary steps for the making and implementation of commercial decisions by the Data Controller, to carry out our necessary quality and standard audits or to fulfill our reporting and other obligations stipulated by the legislation, to ensure the legal safety of the real persons with whom we establish business relations and arising from these relations, and for similar purposes including but not limited to  processed.

Legal Reasons

Your personal data;

1. a) It is explicitly stipulated in the laws,
2. b) It is mandatory for the protection of the life or bodily integrity of the person who is unable to express his consent due to actual impossibility or whose consent is not recognized as legally valid,
3. c) It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the performance of the contract,

ç) It is mandatory for us to fulfill our legal obligations as the Data Controller,

1. d) It has been made public by the person concerned,
2. e) Data processing is mandatory for the establishment, use or protection of a right,
3. f) Provided that it does not harm the fundamental rights and freedoms of the data subject, the data processing is mandatory for the legitimate interests of the data controller

Based on any of the conditions, it may be processed by the Data Controller for the purposes specified in this Clarification Text without seeking your explicit consent.

Retention of Personal Data

The data in question are stored for the purposes of execution of service procurement processes, contract management, customer satisfaction, fulfillment of accounting transactions and security, and the personal data processed within this scope are deleted or destroyed after the end of the contract based on the commercial relationship if there is no legitimate purpose in their storage. However, data that the Data Controller may need to keep as a means of proof within the scope of possible commercial disputes are stored with Luccase for the duration of the statutory statute of  limitations.

Transfer of Personal Data

Your personal data; To our business partners for the purposes of ensuring the legal and commercial security of Luccase  and the persons in business relationship with Luccase;  carrying out the necessary studies to benefit you from the products and services offered; fulfilling the requirements of our service; customizing the products and services offered according to taste, usage habits and needs; determining and implementing commercial and business strategies and fulfilling legal requirements,  banks, legally authorized public institutions and private persons within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK.

Your Rights as a Personal Data Owner

As personal data owners, if you submit your requests regarding your rights to the Data Controller by the methods to be specified in this Clarification Text, the request will be concluded free of charge within thirty days at the latest according to the nature of the request. In this context, personal data owners;

To learn whether personal data is processed or not,

If their personal data has been processed, to request information about it,

To learn the purpose of processing personal data and whether they are used in accordance with their purpose,

To know the third parties to whom personal data are transferred at home or abroad,

In case the personal data are processed incompletely or incorrectly, to request their correction and to request that the transaction carried out within this scope be notified to the third parties to whom the personal data are transferred,

To request the deletion or destruction of personal data in the event that the reasons requiring the processing disappear despite the fact that it has been processed in accordance with the provisions of the Law and other relevant laws and to request that the transaction carried out within this scope be notified to the third parties to whom the personal data are transferred,

To object to the occurrence of a result against the person himself by analyzing the processed data exclusively by means of automated systems,

In the event that personal data is damaged due to the processing of personal data contrary to the Law, it has the right to request the elimination of the damage.

In accordance with Article 13, paragraph 1 of the KVKK, you may submit your request regarding the exercise of your specified rights to the Data Controller in writing or by other methods determined by the Personal Data Protection Board.

Your request, which includes the necessary information to identify you in order to exercise your stated rights, address information, contact information and your explanations of the right you request to exercise from the rights specified in Article 11 of the Law; You can personally send it to Acıbadem Mah. Çeçen Sokak Akasya Evleri Sitesi A Kule Blok Apt. No: 25 A/63 Üsküdar / İstanbul with the documents identifying your identity, through a notary public or other methods specified in KVKK.

You can find the procedural rules to be followed during the application and more detailed information from the Personal Data Protection Authority's Communiqué on the Procedures and Principles of Application to the Data Controller.

In case of any change in personal data practices, the Clarification Text shall be  updated by Luccase. The current Clarification Text becomes effective on the date of publication on the Website.

Luccase Contact Information

https://luccase.com