The protection of personal data is one of the highest priorities of Vestel Ticaret A.Ş. (“Vestel” or the “Company”). Acting with full awareness of this responsibility as a data controller, our Company processes and protects personal data in compliance with the General Data Protection Regulation (“GDPR”) and other relevant legislation (“Law”).
This Privacy Policy on the processing of personal data aims to inform you about the personal data processed in accordance with the Law as you use our products and services, thereby ensuring the necessary transparency.
Vestel Ticaret Anonim Şirketi; is responsible for processing your data.
Our contact details are as follows:
Levent 199 Büyükdere Caddesi No:199 34394 Şişli/İSTANBUL
vestelticaret@hs03.kep.tr
kvk@vestel.com.tr
The protection of your personal data is considered a high priority for us. Detailed information is accessible at https://www.vestel.com.tr/content/kisiselverilerinislenmesi
Your personal data may be processed by our Company in accordance with the fundamental principles and conditions specified in the Law for the following purposes:
A. Processing of personal data within the scope of customer relationship management and call center services:
Identity Information (name, surname)
Contact Information (email, phone number, address)
Customer Information (purchased product information, order completion information, return/exchange information, previous order information, installation information, warranty information, authorized service information, the store where the purchase was made, customer requests, and complaints)
The above-listed personal data may be processed for the following purposes:
(i) Receiving and evaluating customer requests and complaints via our website;
(ii) Managing customer requests and complaints and customer relationship management;
(iii) Performing internal reporting of customer requests and complaints to improve business processes.
Legal Basis:
a. Personal data may be processed in accordance with the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant persons. In this regard, personal data is processed to ensure customer satisfaction, maintain continuity, prevent customer loss, and gain new customers, which are considered legitimate interests of our Company.
B. Processing of personal data within the scope of fulfilling legal obligations and conducting commercial activities:
Identity Information (name, surname)
Contact Information (email, phone number, address)
Customer Information (purchased product information, order completion information, return/exchange information, previous order information, installation information, warranty information, authorized service information, the store where the purchase was made, customer requests, and complaints)
The above-listed personal data may be processed for the following purposes:
(i) Fulfilling obligations arising from legislation;
(ii) Providing information to official institutions or organizations and submitting requested information and documents;
(iii) Managing accounting and finance processes;
(iv) Managing information security processes; and
Legal Basis:
a. The processing of personal data is carried out based on the fulfillment of legal obligations specified in the ruglations (e.g., ensuring data security or tax legislation)
Your personal data may be collected by our Company, within the scope of using our products and services, through electronic means such as our websites, call centers, emails; or through physical means such as our authorized services or corporate stores.
Your personal data may be transferred to the following parties for the specified purposes in compliance with the provisions of the Law on the transfer of personal data:
Our suppliers who provide software, maintenance, security, and data hosting services within the scope of information technologies;
Our supplier providing call center services;
Our suppliers from whom we receive services for the purpose of carrying out our operational processes;
Our business partners providing legal support if necessary;
Our business partner consultancy companies providing services for business development and project management;
Legally authorized public institutions and legally authorized private institutions within the scope of our legal obligations.
As part of the processing of your personal data, we may transfer your personal data to trustworthy service providers or affiliated companies in third countries. Third countries are countries outside of the European Union (EU) or the European Economic Area (EEA). We only work with service providers who provide us with the appropriate safeguards for the security of your personal data and can guarantee that your personal data will be processed strictly in accordance with European data protection standards. A copy of these appropriate safeguards can be examined at our premises. If we transfer personal data to third countries, we do so on the basis of a so-called “adequacy decision” of the European Commission or, in the absence of such a decision, on the basis of so-called “standard data protection clauses” which have also been adopted by the European Commission.
Your personal data will not be retained longer than necessary for the purposes for which it was collected. Our Company justifies the retention period based on specific and legitimate purposes, ensuring that it is proportionate to those purposes.
Please note that using the tools might include transfer of your data to recipients outside of the EEA where there is no adequate level of data protection pursuant to the Law (e.g. the USA). Also in that third there might not be a supervisory authority and/or data processing principles and/or data subject rights might not be provided for in the third country. Please note that using the tools might include transfer of your data to recipients outside of the EEA where there is no adequate level of data protection pursuant to the GDPR (e.g. the USA). You can find detailed information in our Cookie Policy.
Our online offers include the use of plugins provided by various social and other networks. These plugins are additional features made available by the network providers. As a default setting, these plugins are inactive. To enhance the protection of your data when visiting our website, we use a “2-click solution” to integrate the plugins into the page. This 2-click solution keeps your visit to our websites from being recorded and possibly evaluated by the providers of the respective plugins by default. If you do not wish the providers of the respective networks to receive data about your use of this online offer and possibly to store or further use this data, you should not activate the respective plugins.
Activating plugins
You yourself can decide whether you want to interact with the respective provider’s network and whether your data is to be transmitted to the respective provider or not. Only if you click on the button provided (“Agree”) will the respective plugin be activated and integrated into the page, and the content of the respective plugin be transmitted from the server of the associated provider directly to your browser. A second click will then allow you to perform the desired interaction with the network. If you decide to activate a plugin, you give us permission to process your data based on your consent.
Further processing of data by providers
Plugins are additional features made available by network providers. We therefore have no influence on the further processing of the data that the respective network providers’ plugins collect and store. To find out more about the purpose and scope of each provider’s activities to collect, further process, and delete data, as well as about your respective rights and data protection options, please consult the respective provider’s privacy policy.
Deactivate the plugin
If you activate a plugin, the activation applies to the specific plugin only, and only for as long as you visit the page into which the plugin is integrated. If you no longer wish to use an activated plugin, it can be deactivated by reloading the website. Please note that this does not affect data that has already been transmitted.
We use plugins from the providers listed below:
Google Maps
This online offer uses Google Maps map services. Google Maps is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Loading the map requires that you activate the corresponding plugin. If you activate the plugin, data will be transmitted to Google and the Google DoubleClick advertising network contacted. This may trigger further data processing operations over which we have no control. If the map is loaded, cookies are also used. For the use of the functions of Google Maps it is necessary to store your IP address. This information is usually transmitted to a server of Google Ireland Limited in Ireland and saved there. The provider of this page does not have any influence on this transmission of data. The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy retrievability of the places listed by us on the website.. To find out more about the scope and purpose of Google Maps’ activities to collect, further process, and use data, about possible transfers of personal data to third countries such as the United States, about your rights and the data protection options available to you, please consult Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.
Our online offers may contain links to internet pages of third parties, in particular providers who are not related to us. Upon clicking on the link, we have no influence on the collecting, processing, and use of personal data possibly transmitted by clicking on the link to the third party (such as the IP address or the URL of the site on which the link is located) as the conduct of third parties is naturally beyond our control. We do not assume responsibility for the processing of personal data by third parties.
Our employees and the companies providing services on our behalf, are obliged to confidentiality and to compliance with the applicable data protection laws. We take all necessary technical and organizational measures to ensure an appropriate level of security and to protect your data that are administrated by us especially from the risks of unintended or unlawful destruction, manipulation, loss, change, or unauthorized disclosure or unauthorized access. Our security measures are, pursuant to technological progress, constantly being improved.
You have the following rights against us:
a. Right of access
You have the right to access as to whether or not and, if so, what your personal data of you are being processed by us. Is this the case, we will additionally give you access to the following:
(1)the purposes of the processing;
(2)the categories of personal data concerned;
(3)the recipients or categories of recipients of your personal data;
(4)the envisaged period of storage or the criteria used to determine the envisaged period of storage;
(5)any other rights you have;
(6)where we have not obtained the personal data from you: any available information as to their source;
(7)if available: the existence of automated decision-making and any information about the logic involved, as well as the significance and the envisaged consequences of the processing.
b. Right to rectification
You have the right to rectification and/or completion of the personal data that is being processed by us, if it is inaccurate or incomplete.
c. Right to restriction of processing
You have the right to restriction of processing of your personal data, provided that
(1)we verify the accuracy of your personal data being processed by us;
(2)the processing of your personal data is unlawful;
(3)you need the personal data being processed by us for the purpose of prosecution when we no longer need your personal data for the purpose of processing;
(4)you have objected to the processing of your personal data and we are in the process of verifying your objection.
d. Right to erasure
You have the right to erasure of your personal data, provided that
(1)we no longer need your personal data for its original purpose;
(2)you withdraw your consent and there is no other legal ground for processing your personal data;
(3)you object to the processing of your personal data and, unless it is about direct marketing, there are no overriding grounds for further processing;
(4)the processing of your personal data is unlawful;
(5)the erasure of your personal data is required by law;
(6)your personal data have been collected in relation to the offer of information society services when you were a minor.
e. Right to notification
If you have asserted your right to rectification, erasure of data or restriction of processing, we will communicate any rectification, erasure of data or restriction of processing to any recipients of your personal data.
f. Right to data portability
You have the right to receive your personal data processed by us on the basis of your consent or for the performance of a contract in a structured, commonly used and machine-readable format as well as to transmit them to another controller. If it is technically feasible, you have the right to have them directly transmitted from us to another controller.
g. Right to object
You have the right to object to the processing of your personal data on particular grounds. If this is the case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing.
If your personal data is being processed for the purpose of direct marketing, you have the right to object at any time.
h. Right to withdraw
You have the right to withdraw your consent given to us at any time. The withdrawal of the consent does not affect the lawfulness of the processing carried out based on the consent before your withdrawal.
i. Right to lodge a complaint with a supervisory authority
Regardless of any other administrative or judicial remedy, you have the right to lodge a complaint with the competent supervisory authority, if you believe that the processing of your personal data by us violates the provisions of the GDPR.
We reserve the right to change our security and data protection measures. In such cases, we will amend our data protection notice accordingly. Please, therefore, notice the current version of our data protection notice, as this is subject to changes.
Date of last revision: 27th August 2024