PERSONAL DATA PROTECTION

DISCLOSURE TEXT

(Regarding Online Channels)

Dear Visitors, Members and Customers;

In accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”), it is intended to inform you with this text within the scope of our obligation to inform you about your personal data that we process as ALVA KUMAŞ TEKSTİL SAN. DIŞ TİC. LTD. ŞTİ (“ALVA” / ‘LoFiBuy’ / “Company”) as the data controller.

In this text;

-Visiting ALVA's “https://lofibuy.com/”, “https://alvatekstil.com.tr/” websites (‘Site’) or using its mobile applications (“Mobile Application”), if any (“Online Visitor”), becoming a member of the Site/Mobile Application, shopping through the Site/Mobile Application or websites/mobile applications (“Online Channels”) where ALVA products are sold, or sending products/gifts on behalf of third parties,

-Your acceptance of general and personalized campaign notifications through commercial communication channels,

-It is aimed to enlighten you about our personal data processing processes in case you participate in campaigns, competitions, sweepstakes and other events organized by LoFiBuy.

As LoFiBuy; In order to carry out statistical studies regarding the use of the Mobile Application and Site, to make targeted advertisements / promotions and to ensure that you have an effective customer experience, we use methods such as cookies on the Mobile Application and Site. For detailed information about cookies, you can access the cookie clarification text at the COOKIE POLICIES LINK at any time.

Your Personal Data, Purposes of Processing and Legal Grounds

If you visit our Site/Mobile Application;

-      If you visit our Site / Mobile Application, we use cookies etc. methods in the Mobile Application and Site in order to conduct statistical studies on your usage, to make targeted advertisements / promotions and to provide you with an effective customer experience, and we process your data regarding the mandatory cookies required for you to use the Site and Mobile Application based on the legal reason that “data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject” and the “explicit consent” you will give regarding marketing / tracking, functionality and performance cookies. For detailed information about cookies, you can review the cookie disclosure text at the LINK TO THE COOKIE DISCLOSURE TEXT.

If you are a Site (Site/Mobile Application) Member;

-     Your identity (name, surname), contact (e-mail address, phone number) data for the purpose of realizing your membership and recording your member information, ensuring that you can log in as a member, informing you about your membership, fulfilling the requirements of the membership agreement, based on the legal reason that “it is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract”,

-      Your identity (name, surname), contact (e-mail address, phone number) data in order to ensure that you can log in to the Site or Mobile Application using member information without the need to enter all membership information again and to make purchases without the need to enter membership information, based on the legal reason that “data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject”, and transaction security (log records information) in order to ensure transaction security, based on the legal reason that “data processing is mandatory for the establishment, use or protection of a right”,

-      As a member, if you save your address information to be used when you want to shop on the Site / Mobile Application, in addition, based on the legal reason that “it is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract”,

-      During membership, in order to identify your membership in our systems, your transaction security (user IP information) data by automatically assigning your membership to our systems “provided that it does not harm the fundamental rights and freedoms of the person concerned, it is mandatory to process data for the legitimate interests of the data controller” and “it is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract” based on the legal reason,

-      In order to provide you, as a member, with the service of viewing your order history, we collect your customer transaction (shopping date, time, amount, shopping content) and financial (payment method and payment details) information based on the legal reason that “it is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract”,

-      Identity (name, surname, gender), contact (e-mail address, phone number) in order to ensure the accuracy and timeliness of the information you provide to LoFiBuy during the membership process or through other communication channels and / or to ensure that the information you will change later is updated for the information you have provided for all your memberships (Site / Mobile Application), to fulfill our obligation to keep your personal data up to date, identity (date of birth) if you prefer to share it optionally, When you become a member of the Site / Mobile Application, in order to identify your membership in the system, your transaction security (user IP information) data based on the legal reason that “it is mandatory for the data controller to fulfill its legal obligation”, and if you choose to share your identity (date of birth) data based on the legal reason that “data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned”,

-      Providing you with special opportunities and offers according to your Site / Mobile Application membership and purchases, creating general or personalized campaigns, advantages, promotions, advertisements, organizing campaigns, contests, sweepstakes and other events, segmentation, profiling, reporting, marketing and analysis studies, Mobile Application, Site or other third party environments, LoFiBuy's advertisements and marketing / communication activities (notifications on the Mobile Application and Site, pop-up display, personalized offers, customization of user screens, surveys, etc.). Identity (name, surname, gender), contact (e-mail address, mobile phone number, province, district), marketing (approaches to Site and Mobile Application notifications/surveys/offers/campaigns, habits, favorites, likes, behaviors, preferences, search movements, segments, past purchases, cookie records within the scope of strategic planning, analysis and business development studies regarding operational processes, cookie and advertisement identifier/identity information, communication preferences, survey answers, demographic information), transaction security (device IP, Mobile Application usage time, Mobile Application version information, brand, model, technical specifications and operating system information of the device used, operator information used), finance (payment methods/channels and preferences, bank information where the payment is made), customer transaction (shopping amount), identity (date of birth) data on the basis of “explicit consent” legal reason.

If you make purchases through online Channels (with or without being a Member);

-      In case you shop as a member through the Site / Mobile Application or through the Site without being a member, realizing the shopping transaction and ensuring that the e-invoice / e-archive invoice related to your shopping is issued and sent to you, order preparation, packaging, preparation of delivery note within the scope of fulfilling the requirements of the distance sales contract, Identity (name and surname) in order to be able to distinguish the records of you that we have created in our system from the records of other customers in order to ensure that your order can be delivered to you from our warehouses or stores, to provide after-sales support services (such as modification, exchange, return, product inspection), signature), contact (e-mail address, phone number, address), customer transaction (size and shoe size of the product you purchased, date, time, amount, shopping content), transaction security (log records and IP address) data regarding your shopping transaction, In addition, if necessary for refund transactions, your financial (bank information and IBAN number etc.) information, “provided that it is directly related to the establishment or performance of a contract, it is necessary to process personal data belonging to the parties to the contract” and “it is mandatory for the data controller to fulfill its legal obligation” based on the legal reasons,

·        Bir hediye kart kullanarak alışveriş yapmanız halinde standart alışveriş işlemlerine ek olarak hediye kartın kimin tarafından alındığı, müşteri işlem (hediye kart kullanım bilgilerinizi, hediye kart ile gerçekleştirilmiş alışveriş geçmişi) verilerinizi “bir sözleşmenin kurulması veya ifasıyla doğrudan doğruya ilgili olması kaydıyla sözleşmenin taraflarına ait kişisel verilerin işlenmesinin gerekli olması” hukuki sebebine istinaden, alışveriş tutarınızın yasal olarak belirlenen tutarın üzerinde olması halinde zorunlu olarak veya talep edilmesi halinde yasal yükümlülüklerimizi yerine getirmek amacıyla faturada yer almak üzere paylaştığınız kimlik (T.C. Kimlik Numarası) verilerinizi ise “veri sorumlusunun hukuki yükümlülüğünü yerine getirebilmesi için zorunlu olması” hukuki sebebine istinaden,

-      If you shop using a gift card, in addition to the standard shopping transactions, in addition to the standard shopping transactions, you can share your data on who received the gift card, customer transaction (your gift card usage information, shopping history made with the gift card) on the basis of the legal reason “it is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract”, and your identity (T. C. Identity Number) data that you share to be included in the invoice in order to fulfill our legal obligations if your shopping amount is above the legally determined amount or if requested. C. Identity Number) for the legal reason that “it is mandatory for the data controller to fulfill its legal obligation”,

-      In the event that a refund is required in case of using the payment option at the door, your identity (name, surname), financial (credit/debit card number, bank to which the card belongs, IBAN number, etc.) data on the credit/debit card on the basis of the legal reason that “it is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract”,

-      In case the shopping is made by credit/debit card, your financial data (credit/debit card information (first 4 and last 4 digits, expiration date, points, bank to which the card belongs and card type information) in order to ensure that the payment can be collected, and transaction security (IP address information) in order to ensure transaction security, based on the legal reason that “it is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract”,

-      If the shopping is made by Money Order / EFT method, your identity (name and surname), finance (bank information where the transaction is made), customer transaction (information on the receipt) data, if shared, based on the legal reason that “it is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract”,

-      Order information consisting of your customer transaction data (order information such as order placed, date, time and quantity, order content product information, order information such as payment method, order/gift note, order reference number) and if you inquire about your order using the order inquiry screen, your contact (telephone, e-mail address) and customer transaction (order number) data based on the legal reason that “it is necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract”,

-      If you shop through websites / mobile applications that sell LoFiBuy products, in order to ensure that the e-invoice / e-archive invoice for your shopping is issued and sent to you, within the scope of fulfilling the requirements of the distance sales contract, order preparation, packaging, preparation of dispatch notes, shipping, updating delivery information, updating delivery information, identity (name and surname) in order to deliver your order to you, contact (telephone, e-mail address, delivery and billing address), customer transaction (order details (product information, price, order date, order content)) data on the legal grounds that “it is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract” and “it is mandatory for the data controller to fulfill its legal obligation”,

-      In order to detect and correct technical/software errors and deficiencies encountered during your visit and use of the Site and Mobile Application, we process your information on the use of the Site and Mobile Application based on the legal reason that “data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject”.

In case the purchased product is sent to a third party;

-      In the event that you send products to third parties, we process the address and identity (name, surname) data of the person concerned in order to deliver the order to the person concerned and to provide after-sales support services (such as modification, exchange, return, product inspection) and the contact (telephone, e-mail address) data of the person concerned in case you purchase a gift card, based on the legal reason that “it is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract”. In this case, the responsibility for informing this person(s) or obtaining their explicit consent where necessary belongs to you as the person sharing this information.

-      Your contact (address) and identity (name and surname) information in the address in order to deliver the order to you and to provide after-sales support services (such as modification, exchange, return, product inspection) in the event that third parties send products/gifts on your behalf, In case a gift card is sent on your behalf, we process your e-mail address data based on the legal reasons “it is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract” and “it is mandatory to process data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject”.

If you give LoFiBuy permission for commercial communication through any channel;

-      If you give LoFiBuy permission/explicit consent for commercial communication through any channel, you may be able to make commercial communication activities through the channels you choose (phone call, SMS, e-mail, etc.) within the scope of general or special personalized campaigns, advantages, product and service promotions, survey studies regarding our services, presentation of applications for customer satisfaction, promotions, advertisements, information, marketing activities carried out by LoFiBuy, and to communicate our invitations regarding campaigns, competitions, sweepstakes, invitations and other events. We process your identity (name, surname), contact (phone number, e-mail address) and transaction security (user IP, log records) information and your signature on the basis of the legal reason of “explicit consent” if you perform your commercial communication permission transactions from the store for the purposes of conducting commercial communication activities, communicating our invitations regarding campaigns, contests, sweepstakes, invitations and other events.

-      At any time and without any justification, you can (i) stop the relevant commercial communication by taking the action (rejection) specified in the commercial electronic messages we will send and/or (ii) terminate your membership by withdrawing your explicit consent to the Site / Mobile Application membership, thereby stopping the personal data processing processes based on explicit consent.

Legal Processes and Internal Activities

-      To ensure the safety of you, LoFiBuy and its employees and other third parties against any act, crime or behavior contrary to the possible legislation, to fulfill our obligations arising from the legislation and to fulfill our legal obligations against authorized and authorized private or public institutions and organizations, to use all kinds of lawsuits, answers and objections against official institutions and organizations such as courts, execution offices, arbitration committees in disputes arising, to carry out negotiation and agreement processes regarding disputes, Your identity (name, surname, gender) data in order to provide you with the necessary information in case you request information from us or apply within the scope of your legal rights, to prevent use in violation of the contract and legislation, to detect suspicious transactions and unlawful uses, to carry out cancellation procedures, to carry out internal audit and control and reporting, testing, development studies and studies and developments to improve customer experience, strategic planning, analysis and business development studies regarding operational processes,, In case you make a transaction through the Site or Mobile Application, transaction security (log records, User ID, IP address), your correspondence and file information regarding your relevant legal transaction information and dispute processes, the clarification and consent texts you will approve in order to fulfill our proof obligations arising from the Law, and the records related to them on the legal grounds that “data processing is mandatory for the establishment, use or protection of a right” and “it is mandatory for the data controller to fulfill its legal obligation”,

-      In terms of Online Visitors, we process your cookie records (navigation information, device information (ID) and traffic data) and transaction security (log records, IP address) data regarding the transactions carried out on the Site in order to ensure information processing security and prevent malicious use, to carry out the activities in accordance with the legislation, to fulfill our other legal obligations to authorized and authorized public institutions and organizations, based on the legal reasons of “being mandatory for the data controller to fulfill its legal obligation” and “being clearly stipulated in the laws”.

How We Collect Your Personal Data

Your personal data, your purchases made through the Site / Mobile Application or websites / mobile applications that sell LoFiBuy products or the information you provide during your membership through the Site / Mobile Application are recorded in our systems by LoFiBuy, its business partners or suppliers and you make transactions through these channels, all kinds of shopping, collection, delivery, transaction, survey filling, registration on the Store / Site / Mobile Application, We collect behavioral movements and transactions by automatic methods such as recording behavioral movements and transactions in our systems, recording your requests and complaints that you have communicated to us during mutual communication through our Communication Channels, recording your calls with the call center, and non-automatic methods such as recording information/documents about you from official institutions, organizations and judicial/administrative authorities, recording records of your return/review processes in the relevant documents.

Transfer of Your Personal Data

As LoFiBuy, we transfer your personal data to third parties only for the purposes specified in this Text and in accordance with Articles 8 and 9 of the KVKK. In this context;

• In order to deliver the products you will purchase regarding your membership, orders or purchases, to provide logistics services and after-sales support services, to resolve your requests and complaints and to contact you when necessary, to receive services such as information technologies, marketing / advertising / analysis activities or consultancy etc. that require expertise. (electronic messaging intermediary service providers, call centers, those who collect personal data through devices, marketing/advertising/analysis service providers, database and server service providers, infrastructure maintenance and support and software licensing service providers, legal and financial consultancy service providers, e-invoice / e-archive invoice service providers, independent audit service providers, shipment / cargo / courier, archiving and warehouse service providers) and provided that it is used within the services provided by these companies for the purpose of fulfilling LoFiBuy's activities.

  
  

• If you purchase LoFiBuy products through websites/mobile applications where LoFiBuy products are sold, we do not transfer information about your order and the latest status of the order to the operators of the relevant website/mobile application in order to fulfill our contractual obligations to the operators operating the relevant website/mobile application and to inform you about the order status of these operators.

• In order to fulfill our obligations to provide information, documents and other relevant obligations to authorized and authorized private or public institutions and organizations, judicial authorities and official institutions / organizations and to exercise our legal rights such as litigation and response rights, we provide the information requested from us to the following institutions and organizations within the scope of the specified laws and secondary legislation based on our legal obligations:

  
  

•  Pursuant to the Civil Procedure Law No. 6100, to the courts, execution and bankruptcy directorates,
•  Pursuant to the Criminal Procedure Law No. 5271, to the authorized law enforcement agencies, T.R. Prosecutor's Offices and courts,
•  Pursuant to the Administrative Procedure Law No. 2577, to the courts,
•  Pursuant to the Personal Data Protection Law No. 6698, to the Personal Data Protection Authority,
•  Pursuant to the Law No. 6563 on the Regulation of Electronic Commerce, to the İleti Yönetim Sistemi A. Ş. and the Ministry of Commerce, the Ministry of Commerce, Consumer Courts and Consumer Arbitration Committees. Ş. and the Ministry of Trade pursuant to the Law No. 6563 on the Regulation of Electronic Commerce,
•  to the Ministry of Trade, Consumer Courts and Consumer Arbitration Committees pursuant to the Law No. 6502 on the Protection of Consumers.

In addition, in order to fulfill our obligations arising from other legislation, we may transfer your personal data to other relevant public institutions and organizations in addition to those listed above, if requested.

• For the purposes of tracking and detecting suspicious transactions and preventing unlawful transactions, we transfer them to our suppliers and payment institutions related to the relevant transaction, from which we receive consultancy services when necessary.

• We transfer it to our suppliers within the scope of activities related to increasing the visit traffic on the Website and Mobile Application.

• If you make your payment by credit/debit card, we transfer your credit/debit card information to third parties providing services such as the relevant bank, electronic payment institution, etc. without being recorded by LoFiBuy.

• Transfer abroad: In addition, if you give your consent with an explicit consent text; information technologies, marketing/analysis/segmentation/advertising activities or consultancy etc. requiring expertise. In order to receive product and service support on issues such as information technologies, marketing/analysis/segmentation/advertising activities or consultancy requiring expertise, etc., LoFiBuy's service providers and business partners located abroad (social media request/complaint management platform service, software development and support service, advertising, digital marketing and analysis service and product support providers, location data collection service with devices, hosting, maintenance and development maintenance service, online survey service providers) and/or due to the fact that the servers of our domestic/foreign suppliers are located abroad, your identity, communication, customer transaction, finance, marketing, transaction security, legal transaction and visual and audio and visual records data in accordance with the conditions specified in Article 9 of the KVKK. We transfer your identity, communication, customer transaction, finance, marketing, transaction security, transaction security, legal transaction and visual and audio records data abroad in accordance with the conditions set out in Article 9 of the KVKK.

Your Rights under the KVKK

Regarding your personal data processed by LoFiBuy, you can always send your requests within the scope of Article 11 of the KVKK to the following addresses in writing in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller or by using your registered electronic mail (KEP) address, secure electronic signature, mobile signature or your e-mail address that you have previously notified to LoFiBuy and registered in our system.

Data Controller: ALVA KUMAŞ TEKSTİL SAN. DIŞ TİC. LTD. ŞTİ

E-mail: info@alvatekstil.com.tr
Phone Number: 0212 611 39 40

Kep Address: recep.karakas.1@hs01.kep.tr

Address: Gençosman Mah. Davutpaşa 1. Cadde Dibekoğu No: 33A Güngören/ İstanbul