Clarification Text on the Protection of Personal Data
Dear Customers and Visitors,
As CNT Luks Tuketim Mallari Ic Ve Dis Ticaret Limited Sirketi (“Company”), we would like to inform you in accordance with Article 10 of the Law No. 6698 on Personal Data Protection (“KVKK” or “Law”) and the Regulatory Guidelines on Procedures and Principles for Fulfilling the Obligation of Clarification, regarding the personal data we process through our website
www.authenticseconds.com and/or our “Authentic Seconds” store.
The processing of personal data aims to protect fundamental rights and freedoms, especially privacy. “Personal data” means any information that identifies or can identify an individual. Below are the personal data processed by our Company, their processing purposes, potential recipients, collection methods, legal grounds, and your rights regarding such personal data.
A. DATA CONTROLLER
Within the scope of Law No. 6698 on Personal Data Protection (“KVKK” or “Law”), your personal data is collected and processed by the Company as the data controller.
B. PROCESSED PERSONAL DATA CATEGORIES
Personal data can be processed in accordance with Law No. 6698 on Personal Data Protection, in line with the “Explicit Consent” of the relevant person. The following data types are considered personal data:
- Identity Information: Name, Surname, Date of Birth, Gender, Turkish Republic Identity Number, Photograph
- Contact Information: Mobile Phone Number, Addresses Added to Your Membership Account, Email Address
- Customer Transaction Information: Order, Delivery Transaction Information, Shopping Transaction History, Request and Complaint Information, Communication Preferences, Preferred Product Information, Membership Point Information
- Transaction Security Information: IP Address, Username and Password Information, Cookie Information, Internet Access Log Information
- Legal Proceeding Information: Correspondence with authorized persons, institutions, information in lawsuit/execution files, notices, legal requests
- Financial and Bank Information: Payment and Invoice Information
- Marketing Information: Shopping history, campaign utilization, profiling and segmentation, cookie records
- Request Management Information
- Complaint Management Information
Data anonymized irreversibly will not be considered personal data. Consent is not required in certain cases (KVKK Article 5/2), including legal obligations, contract fulfillment, public disclosure by the data subject, and legitimate interests of the Company.
C. PURPOSES OF PERSONAL DATA PROCESSING
Personal data is processed for purposes including, but not limited to:
- Verifying identity of shoppers, fulfilling contractual obligations.
- Providing information to public officials upon legal request.
- Using data for marketing, advertising, campaign management.
- Customer recognition, analysis, and communication.
- Managing customer relations, complaints, and requests.
- Auditing financial, accounting, and business activities.
- Invoicing, logistics, delivery tracking.
- Post-sales support, communication, information security.
- Storage and archiving, legal compliance.
- Transferring data to service providers and third parties for contractual and legal purposes.
D. METHOD OF PROCESSING PERSONAL DATA
Your personal data is collected both automatically and manually via the website, stores, Company personnel, contracted service providers, verbal, written, or electronic means, in accordance with KVKK Articles 5 and 6.
E. TO WHOM AND FOR WHAT PURPOSES THE PROCESSED PERSONAL DATA MAY BE TRANSFERRED
Your data may be transferred to business partners, affiliates, logistics companies, service providers, IT infrastructure providers, auditors, banks, and relevant authorities for legal, contractual, operational, and marketing purposes.
F. LEGAL BASES FOR PROCESSING PERSONAL DATA
- Necessary for compliance with legal obligations.
- Necessary for contract performance.
- Necessary for the establishment, exercise, or protection of rights.
- Explicit consent of the data subject (for marketing, profiling, and communication purposes).
G. SECURITY AND RETENTION PERIOD
Personal data is stored according to the relevant legislation and for the legal statute of limitations.
H. RIGHTS OF THE DATA SUBJECT
- Learn whether personal data is processed.
- Request information about processed personal data.
- Learn purpose of processing and whether used accordingly.
- Know third parties receiving personal data domestically or abroad.
- Request correction, deletion, or notification of third parties.
- Object to automated processing that causes unfavorable outcomes.
- Request compensation for damages in case of unlawful processing.
I. CONTACT INFORMATION FOR RIGHTS AND REQUESTS
Applications can be submitted via written petition, registered electronic mail (KEP), secure or mobile signature, or previously notified email:
| Application Method |
Address to Submit |
| Written Application in Person |
Teşvikiye Mahallesi, Atiye Sokak, Genç Apartmanı, No:1/3 (Bağımsız Bölüm) Nişantaşı/İstanbul |
| From your previously registered email |
[email protected] |
J. ABOUT THE POLICY
The Company reserves the right to update this Policy at any time in accordance with changes in legislation or Company practices. Update Date: