Shopify Customer Privacy Notice
1. Data Controller Information
|
Data Controller Name : |
Figg Brand Mağazacılık Anonim Şirketi (“Company”, “Us”) |
|
Address : |
Kemankeş Karamustafapaşa Mah. Kemankeş Cad. D Blok Paket Postanesi No 40 İç Kapı No. 126 Beyoğlu İstanbul |
|
E-mail : |
|
|
KEP Address : |
figgbrand@hs01.kep.tr |
|
Website : |
This privacy notice has been prepared by Figg Brand Mağazacılık Anonim Şirketi (“Data Controller”, “Company”) acting in the capacity of data controller, within the scope of Article 10 of the Law No. 6698 on the Protection of Personal Data (“KVKK”, “Law”) and the Communiqué on Principles and Procedures to be Followed in Fulfillment of the Obligation to Inform. Pursuant to the KVKK and relevant personal data protection legislation, your personal data as our customer shopping via Shopify shall be processed by the Data Controller within the scope of our goods sales processes; solely within the framework explained below; in compliance with the law and rules of fairness; accurately and, where necessary, kept up to date; for specific, clear, and legitimate purposes; and in a manner that is connected, limited, and proportionate to these purposes, while being retained for the period of time provided for in the relevant legislation or required for the purpose for which they are processed.
Since our website uses the infrastructure of our service provider, Shopify International Ltd. (“Shopify”), your personal data is also processed by Shopify in its capacity as a Data Processor. For more information on how Shopify uses your personal information and the rights you may have, please see the Shopify Consumer Privacy Policy. Depending on where you reside, you may exercise certain rights regarding your personal information via the Shopify Privacy Portal Link.
2. Personal Data We Process, Our Collection Methods and Legal Grounds for Processing
Your personal data shall be collected by the department dealing with Sales and by natural or legal persons authorized by the Company as data processors; in verbal, written, or electronic environments through automated methods via the use of Shopify infrastructure, e-mail, telephone, website, online applications, and various contracts, and through non-automated methods via documents and minutes kept in a paper environment; and shall be processed based on the legal grounds specified below.
|
Member Customer |
||
|
Personal Data Categories |
Data Types |
Legal Ground(s) |
|
Identity, Contact |
Name surname, E-mail, Contact Address, Phone Number |
KVKK art.5/2(a) KVKK art.5/2(c) KVKK art.5/2(ç) KVKK art.5/2(e) KVKK art.5/2(f) KVKK art.5/1* |
|
Customer Transaction |
Invoice Information, Request and Complaint Information |
KVKK art.5/2(a) KVKK art.5/2(c) KVKK art.5/2(ç) KVKK art.5/2(e) KVKK art.5/2(f) |
|
Finance |
Payment Information |
KVKK art.5/2(a) KVKK art.5/2(c) KVKK art.5/2(ç) KVKK art.5/2(e) KVKK art.5/2(f) |
|
Marketing |
Product and Service Purchase History Information |
KVKK art.5/2(f) |
|
Legal Actions |
Contracts and Appendices, Notices and Legal Warnings Information, Lawsuit/Enforcement/Mediation/Conciliation File Information, Information Shared with Judicial/Administrative/Regulatory and Supervisory Authorities. |
KVKK art.5/2(e) KVKK art.5/2(f) |
|
Guest Customer |
||
|
Personal Data Categories |
Data Types |
Legal Ground(s) |
|
Identity, Contact |
Name surname, E-mail, Contact Address, Phone Number |
KVKK art.5/2(a) KVKK art.5/2(c) KVKK art.5/2(ç) KVKK art.5/2(e) KVKK art.5/2(f) KVKK art.5/1* |
|
Customer Transaction |
Invoice Information, Request and Complaint Information |
KVKK art.5/2(a) KVKK art.5/2(c) KVKK art.5/2(ç) KVKK art.5/2(e) KVKK art.5/2(f) |
|
Finance |
Payment Information |
KVKK art.5/2(a) KVKK art.5/2(c) KVKK art.5/2(ç) KVKK art.5/2(e) KVKK art.5/2(f) |
|
Legal Actions |
Contracts and Appendices, Notices and Legal Warnings Information, Lawsuit/Enforcement/Mediation/Conciliation File Information, Information Shared with Judicial/Administrative/Regulatory and Supervisory Authorities. |
KVKK art.5/2(e) KVKK art.5/2(f) |
The legal grounds expressed by the KVKK law articles in the tables above refer to the following legal grounds:
· KVKK art. 5/1 : Existence of the explicit consent of the person concerned.
· KVKK art. 5/2(a) : It is expressly provided for by the laws (Tax Procedure Law No. 213).
· KVKK art. 5/2(c) : Processing of personal data belonging to the parties to a contract is necessary, provided that it is directly related to the establishment or performance of the contract.
· KVKK art. 5/2(ç) : It is mandatory for the data controller to be able to fulfill its legal obligations (pursuant to Tax Procedure Law No. 213, Occupational Health and Safety Law No. 6331).
· KVKK art. 5/2(e) : Data processing is mandatory for the establishment, exercise, or protection of a right.
· KVKK art. 5/2(f) : Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned.
* Your personal data, consisting of name, surname and e-mail address data, shall be processed solely based on your explicit consent pursuant to Article 5/1 of the KVKK, for the purposes of conducting communication activities within the scope of commercial electronic communication processes and conducting advertising/campaign/promotion processes.
3. Our Purposes for Processing Your Personal Data
Your personal data shall be processed for the fulfillment of the following purposes.
|
· Conducting Processes Regarding Loyalty to the Company / Product / Services · Conducting Activities in Compliance with Legislation · Conducting Finance and Accounting Transactions · Follow-up and Conduct of Legal Affairs · Conducting Communication Activities · Conducting After-Sales Support Services for Goods / Services · Conducting Goods / Services Sales Processes · Conducting Customer Relationship Management Processes |
· Conducting Activities Directed Toward Customer Satisfaction · Conducting Marketing Analysis Studies · Conducting Advertising / Campaign / Promotion Processes · Conducting Storage and Archive Activities · Conducting Contract Processes · Follow-up of Requests / Complaints · Providing Information to Authorized Persons, Institutions, and Organizations |
4. Transfer of Your Personal Data
Your personal data may be transferred based on the legal ground that “personal data may be transferred without seeking the explicit consent of the person concerned if one of the conditions specified in the second paragraph of Article 5 exists (KVKK Art. 8/2-a)” in the event that the conditions regarding transfer regulated in Article 8 of the KVKK exist; whereas your identity and contact data, which will be processed for the purposes of conducting communication activities within the scope of commercial electronic communication processes and conducting advertising/campaign/promotion processes, shall be transferred domestically solely in the presence of your explicit consent based on the legal ground that “Personal data cannot be transferred without the explicit consent of the person concerned (KVKK Art. 8/1)”; and from these personal data, your data in the Identity, Contact, Customer Transaction, Finance, and Marketing categories may be transferred abroad by means of using the Shopify application, in the event that the conditions regarding transfer regulated in Article 9 of the KVKK exist:
|
Transfer Recipient Groups |
Data Categories |
Purpose of Transfer |
|
Natural Persons or Private Legal Entities |
· Identity, Contact · Customer Transaction |
The purposes specified above, primarily for conducting business and contract processes and ensuring the continuity of processes. |
|
Suppliers |
· Identity, Contact · Customer Transaction · Finance · Marketing · Legal Actions |
|
|
Business Partners |
||
|
Authorized Persons, Institutions, and Organizations |
· Identity, Contact · Customer Transaction · Finance · Marketing |
For the purposes specified above, primarily for the fulfillment of our legal obligations and for the establishment, exercise, and protection of our rights in the event of a dispute. |
5. Your Rights Regarding Your Personal Data
You may submit your requests regarding your rights under Article 11 of the Law and the implementation of the Law to the Company at any time by filling out the application form obtainable from our workplace and our website and sending it, bearing your wet-ink signature, to our address via a notary public, via registered mail with return receipt or by personal delivery; or, after signing the application form filled out electronically with your mobile signature or secure electronic signature, by sending it to our KEP address using your KEP address, or to our e-mail address using your e-mail address already registered in our data recording system. If the response to the requests within this scope is to be provided in writing, the Company shall respond without charging a fee up to ten pages; and by charging the fee in the tariff determined by the Personal Data Protection Board for each page exceeding ten pages. In the event that the response to the application is provided in a recording medium such as a CD or flash memory, the fee that may be requested shall not exceed the cost of the recording medium.
Figg Brand Mağazacılık Anonim Şirketi

