Privacy Notice for Customers
SOUQ AL ATRAK- Privacy Notice for Customers
SOUQ AL ATRAK ELEKTRONİK HİZMETLER TİCARET A.Ş. (“SOUQ AL ATRAK”) , we take the utmost care to process and protect the personal data of our customers, in accordance with the Personal Data Protection Law No. 6698 (“the PDPL”) , its secondary legislation and decisions of the Personal Data Protection Board. We have prepared this privacy notice (“Notice”) to inform you about how we process your personal data as a data controller through the website www.souqalatrak.com (“Website”) managed by SOUQ AL ATRAK.
Please review our Personal Data Protection Policy for further information about the measures we take to protect your personal data and the rules we comply with when processing your personal data.
Your Personal Data Processed by SOUQ AL ATRAK
Your personal data we process within the scope of the services we provide to you, are as follows:
Identity Information | full name |
Account Information | Customer ID |
Contact Information | The phone number that you registered to your SOUQ AL ATRAK account, e-mail address, address |
Profile Picture | The profile picture that you upload to your SOUQ AL ATRAK account |
Payment Information | Information about your payment methods and payment details |
Transactional Data | Information about your orders shopping/order history, number of orders, Website usage information, your preferences, likes, interests and usage habits, advertisement ID, invoice details, requests/complaints, comments, ratings, and reviews |
Visual and Audio Recordings | Audio recordings of your correspondence about the services we provide and the orders you place on the Website |
location | Your location data automatically processed by the Website should you allow it through your browser settings, or added manually by you |
Transaction Security Information | Information about your device including its model, operating system and version, IP address, user transaction records, your log-in method to the Website (via Google/Facebook/Apple ID) |
Purposes, Legal Grounds, and Methods for Processing Your Personal Data
We process your personal data, which we obtain through wholly automatic and partially automatic methods, via the Website, through the phone via the call center, and through e-mail if you contact us via e-mail, based on the legal grounds specified in Article 5 of the PDPL. The purposes of processing your personal data and the legal grounds on which we rely for such processing are as below:
Your Personal Data | Purposes of the Processing | Legal Grounds for Processing |
Identity information, account information, contact information, payment information, transactional data, visual and audio recordings, transaction security information | to examine, evaluate and conclude your legal requests and applications; to resolve possible legal disputes and to provide the authorized persons, institutions, and organizations with the relevant personal data to resolve legal disputes. | Processing of your personal data is governed under the law (Article 5/2-a of the PDPL) |
Identity information, contact information, payment information, transactional data | To conduct contract and sales processes in relation to the orders you place on the Website,To carry out financial and accounting operations related to payments, to issue invoices. | |
Identity information, account information, contact information, payment information, transactional data, transaction security information | To carry out our business operations in accordance with the legislation and to store the data that is required to be retained within the scope of our legal obligations. | |
Identity information, account information, contact information, profile picture, transaction security information | To verify your information, to create your account and to provide access to your account for the provision of our services. | Processing of your personal data is necessary for the constitution and performance of a contract to provide you with our services (Article 5/2-c of the PDPL) |
Identity information, payment information, transactional data, location | To create your orders and manage the payment processes, to confirm the order, to receive a payment for delivery of the products you ordered to your address, to deliver your product. | |
location | Providing you with product options suitable for your location. | |
Identity information, contact information, transactional data | It is shared with SOUQ AL ATRAK business partners in order to contact you regarding your membership, orders and use of the Website. | |
Identity information, payment information, transactional data | To carry out financial and accounting operations related to payments, to issue invoices. | Processing of your personal data is necessary for fulfilling our legal obligations (Article 5/2-ç of the PDPL) |
Identity information, account information, profile picture, payment information, transactional data, transaction security information | To carry out our business operations in accordance with the legislation and to store the data that is required to be retained within the scope of our legal obligations. | |
Identity information, account information, transactional data, visual and audio recordings | To receive and conclude your requests/complaints about your order. | Processing of your personal data is necessary for the establishment, exercise or protection of your rights and ours (Article 5/2-e of the PDPL) |
Visual and audio recordings | To record your requests and complaints about the services we provide and the orders you place on the Website, to ensure customer satisfaction and improve our service quality. | Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL) |
Identity information, contact information, transactional data | To manage customer relations and offer rewards to ensure customer satisfaction. | |
To contact you through surveys and similar like/request/complaint detection methods within the scope of customer satisfaction measures. | ||
Identity information, contact information, transactional data | To examine, evaluate, and conclude your written or verbal requests, complaints, and feedbacks for the improvement of our products/services. | |
Identity information, contact information, transactional data | To organize raffles and competitions, to carry out the necessary transactions for your participance at these events, to deliver the prizes, gifts, etc. to you. | |
Account information, contact information, payment information, transactional data, location, transaction security information | To perform analysis for the improvement of our products and services. | |
To review and audit business operations, to conduct reporting activities regarding our products and services. | ||
Identity information, account information, contact information, transactional data, visual and audio recordings, transaction security information, location | To detect and prevent fraud and abuse of our campaigns, discounts, and the services. | |
Contact information, transactional data, location | To offer the most suitable range of products and campaigns applicable to your location, your preferences, likes, interests and usage habits. | Your consent to processing of your personal data (Article 5/1 of the PDPL) |
Transfer of Your Personal Data to Third Parties
Your personal data are transferred to third parties in the following cases, being limited, associated and restrained withthe purposes of the processing, in accordance with Articles 8 and 9 of the PDPL:
Your Personal Data Subject to Transfer | Purpose of the Transfer | Recipients | Legal Grounds for the Transfer |
Identity information, contact information, payment information, transactional data, location | To carry out the correspondence between the warehouses, couriers, restaurants, and customers, to carry out the processes regarding orders, to inform the couriers about the delivery addresses. | It is shared with SOUQ AL ATRAK business partners in order to contact you regarding your membership, orders and use of the Website. | Processing of your personal data is necessary for the constitution and performance of a contract to provide you with our services(Article 5/2-c of the PDPL) |
Identity information, account information, contact information, profile picture, payment information, transactional data, transaction security information, location | To get support from our suppliers, including those providing infrastructure and information services, for the provision of our products and services, to carry out financial and accounting operations, and to manage business relations with our business partners and suppliers. | Domestic and Foreign Business Partners & Suppliers | Processing of your personal data is necessary for the and performance of a contract to provide you with our services(Article 5/2-c of the PDPL) |
Identity information, account information, contact information, payment information, transactional data, transaction security information and other personal data that may be requested by authorized persons, institutions and organizations | To fulfill our legal obligations, to inform authorized persons, institutions, or organizations within the scope of our legal obligations, to carry out legal processes, and to conduct our business operations in accordance with the legislation. | Authorized Persons, Institutions or Organizations | Processing of your personal data is governed under the law (Article 5/2-a of the PDPL) |
Your Rights Regarding Your Personal Data
Article 11 of the PDPL regulates the rights of the data subjects (real persons whose personal data are processed). You may exercise the rights pursuant to Article 11 of the Law which are as follows:
one. To be informed whether your personal data is processed or not,
2. If your personal data has been processed, to request information regarding the same,
3. To be informed on the purpose of processing your personal data and whether it is used in accordance with its purpose,
4. To be informed on the third parties to whom your personal data is transferred in the country or abroad,
5. To request the correction of your personal data if it is incomplete or incorrectly processed,
6. To request the deletion or destruction of your personal data within the scope of the conditions stipulated in Article 7 of the Law
7. If your personal data is deleted or destroyed within the scope of Article 7 of the Law and your personal data is incomplete or incorrectly processed, to request the notification of the third parties to whom the personal data has been transferred to,
8. To object to the emergence of a result against you due to the analysis of your personal data exclusively by automated systems,
9. To request compensation of the damage in case you suffer damage due to unlawful processing of your personal data
How to Use Your Rights Regarding Your Personal Data
You may use the following methods to exercise your rights specified in the Article 11 of the PDPL and submit your requests to SOUQ AL ATRAK:
· You can submit your requests to kvk@souqalatrak.com using your e-mail address registered in our system,
· You can submit your request via your registered e-mail (KEP) address to souqalatrak@hs01.kep.tr via secure e-signature or mobile signature,
· You can submit your requests in writing, including the documents proving your identity, to Çankaya Mah. Ebuziya Tevfik Sokak, No:18/1 PK06690 Çankaya, ANKARA, TURKEY
In accordance with Article 13 of the PDPL, SOUQ AL ATRAK will finalize your requests within 30 (thirty) days at the latest , depending on the nature of the request. If the transaction requires cost, the tariff determined by the Personal Data Protection Board will be applied. If your request is rejected, the reason(s) for the rejection will be communicated to you within 30 (thirty) days at the latest .
About This Notice
This Notice may be updated to comply with changing conditions and relevant legislation. Updates to be made to this Notice will be notified to you on the Website.
Last Updated: Aug 2022