PRM MAĞAZACILIK HİZMETLERİ TİCARET A.Ş. Utmost care is taken to protect privacy and confidentiality and to ensure continuous compliance with the Law on the Protection of Personal Data.

It adopts the basic principles stipulated by the KVKK in order to comply with the Law on the Protection of Personal Data No. 6698 (“ KVKK ”) and fulfills its obligations regarding data security.

Scope of Personal Data Processing Policy

This Personal Data Processing Policy provides information to the relevant persons regarding the following issues;

• Personal data collection methods and legal reasons,

• Which groups of people are processing their personal data,
• Personal data categories being processed,
• In which business processes and for what purposes this personal data is used,
• Technical and administrative measures taken to ensure the security of personal data,
• To whom and for what purpose personal data can be transferred,
• Personal data retention periods,
• Legal rights of the persons concerned,
• How the relevant persons can change their preferences for receiving electronic commercial messages,

Personal Data Collection Methods and Legal Reasons

Freesbee collects personal data through the membership forms, purchase forms and event participation forms on the website in accordance with the personal data processing conditions stipulated in the KVKK and in line with the legal reasons specified in this Personal Data Processing Policy.

Data Categories

customers

• Identity Information: Name, surname, date of birth,
• Contact Information: Email address, phone number
• Financial Information: Billing information
• Risk Management Information: IP address, time zone, operating system,
• Transaction Security Information: Password, country information, city information
• Marketing Information: Cookie records, targeting information, reviews showing habits and likes
• Legal Action and Compliance Information: Start and end time of the service provided, type of service used, amount of data transferred, Commercial electronic message permission given by the relevant person in electronic environment
• Marketing Information: E-mails sent based on the commercial electronic message permission given by the relevant person

Website Visitors

• Location Information: Country, city
• Risk Management Information: IP address, session information
• Marketing Information: Cookie records, targeting information, reviews showing habits and likes
• Marketing Information: E-mail messages for marketing purposes sent based on the commercial electronic message permission given by the person concerned
• Demand/Complaint Management: Records of the transactions made during the evaluation or management of the complaints and/or requests communicated by the relevant person regarding the product or service purchased.

In Which Business Processes and For What Purposes Personal Data Are Used

Customer Personal Data

• Execution of membership transactions,
• Improving the services offered on the Goes Bag website, developing new services and informing about it,
• Analyzing the preferences, tastes and needs of customers with commercial electronic message approval and providing special promotions, opportunities and benefits to customers for the purpose of fulfilling the distance agreements established with users,
• Promoting and marketing products and services in line with customers' preferences and tastes by remarketing, targeting, profiling and analysis in line with the express consent of the users,
• Resolving user problems and complaints,
• Improving the user experience on the website,
• Follow-up of accounting and purchasing transactions,
• Legal processes and compliance with legislation,
• Answering information requests from administrative and judicial authorities,
• Ensuring information and transaction security and preventing malicious use,
• Making necessary arrangements in order to ensure that the processed data is up-to-date and correct.

Website Visitors

• Improving the services offered on the website, developing new services and informing about it,
• For visitors with commercial electronic message approval; Analyzing preferences, tastes and needs of visitors and providing special promotions, opportunities and benefits to visitors,
• Remarketing, targeting, profiling and analysis in line with the express consent of the visitors, promoting and marketing applications, goods/products and services in line with the preferences and tastes of the visitors,
• Resolving visitor problems and complaints,
• Legal processes and compliance with legislation,
• Answering information requests from administrative and judicial authorities,
• Ensuring information and transaction security and preventing malicious use,
• Making necessary arrangements in order to ensure that the processed data is up-to-date and correct,
• Fulfillment of legal obligations

Technical and Administrative Measures Taken to Ensure the Security of Personal Data

Freesebee undertakes to take all necessary technical and administrative measures and to show due diligence to ensure the security of your personal data.

Freesbee takes necessary precautions to prevent unauthorized access, misuse, unlawful processing, disclosure, alteration or destruction of personal data. When processing personal data, Freesbee uses generally accepted security technology standards such as firewalls and encryption.

Regarding the prevention of unlawful access to the personal data that Goes Bag processes, the prevention of unlawful processing of this data and the protection of personal data:

• The website from which personal data is taken protects all areas with SSL,
• Implements access authorizations and restrictions for its employees,
• It ensures that personal data in the paper environment is kept in locked cabinets and only accessed by authorized persons.
• Personal data processed through cookies belonging to third parties from which service is received, are deleted from the systems of third parties if the membership is terminated.

Although Goes Bag has taken the necessary information security measures,

In the event that personal data is damaged or in the hands of unauthorized third parties as a result of attacks on the platforms operated by Freesbee or the Freesbee system, Freesbee immediately notifies the relevant persons and the Personal Data Protection Board and takes the necessary measures.

Transfer of Personal Data

Freesbee transfers personal data to third parties only for the purposes specified in this Personal Data Processing Policy and in accordance with Articles 8 and 9 of the KVKK.

The personal data collected through the website usage preferences and browsing history, the execution of the distance sales contract, the membership form and other forms are shared with our domestic/abroad business partners for the purpose of profiling and communicating in line with the tastes and preferences of the relevant persons. Personal data transfers within this scope are carried out through the secure environment and channels provided by the relevant third party. Depending on the content and scope of the service received from third parties, the transfer is made using masked personal data in all cases where there is no need to transfer personal data.

Shopify

Electronic commerce infrastructure service is provided for the Freesbee website. Shopify servers are located in the United States. You can find the Privacy Policies here .

Parachute

In order to fulfill our accounting obligations, invoice, collection and pre-accounting services are received. Parachute servers are hosted domestically. You can find the Privacy Policies here.

Sovos Foriba

Services are provided in order to fulfill our accounting obligations such as e-invoice and e-dispatch. Sovos Foriba servers are hosted domestically. You can find the Privacy Policies here .

iyzico

Payment infrastructure service is provided for our electronic commerce site. Iyzico servers are hosted domestically. You can find the Privacy Policies here.

keyboard

It is used for measuring usage and e-mail marketing for our e-commerce site. Klavio servers are hosted in the United States. You can find the Privacy Policies here.

HotJar

It is used to measure in-app usage for our electronic commerce site and to improve our services. HotJar servers are hosted in the United States. You can find the Privacy Policies here .

Google Ads

It is an online marketing tool that allows us to show our ads on Google's search results or partner sites. Google Ads servers are hosted in the United States. Your personal data is not transferred directly and is shared using masking methods. You can find the Privacy Policies here .

Google Analytics

Site performance and analysis technology services are provided for our e-commerce site. Google Analytics servers are hosted in the United States. Your personal data is not transferred directly and is shared using masking methods. You can find the Privacy Policies here .

In addition to the technical measures to ensure their security, the personal data subject to domestic and international transfer we mentioned above; Considering that the other party of the legal relationship is the data controller or the data processor, it is also legally protected thanks to the KVKK-compliant provisions included in our contracts.

While transferring personal information to countries other than Turkey during the sharing of information as stated above, it is ensured that the data is transferred in accordance with this policy and as permitted by the applicable law on data protection.

Personal Data Retention Periods 

Freesbee maintains the personal data it processes in accordance with KVKK for the periods stipulated in the relevant legislation or required by the purpose of processing. In our Personal Data Retention and Disposal Policy, these periods are approximately as follows:

Membership records: 10 years

All records related to accounting and financial transactions: 10 years

Cookies: Up to 3 years

Traffic information for online visitors: 2 years

Resumes: 1 year

Personal Data of Client Companies: 10 years after the legal relationship ends

Personal data regarding suppliers: 10 years after the legal relationship ends

Related Person Rights

The rights of the person concerned on the personal data processed by Goes Bag pursuant to article 11 of the KVKK are listed below:

• Learning whether personal data is processed or not,
• If personal data has been processed, requesting information about it,
• Learning the purpose of processing personal data and whether they are used in accordance with its purpose,
• Knowing the third parties to whom personal data is transferred at home or abroad,
• Requesting correction of personal data in case of incomplete or incorrect processing,
• Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,
• Requesting notification of the transactions made pursuant to subparagraphs (d) and (e) to third parties to whom personal data has been transferred,
• Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
• To request the compensation of the damage in case of loss due to unlawful processing of personal data.

In order to exercise your rights over your personal data; You can apply and exercise your rights using the methods specified in the "Application Form" on the Goes Bag website.

Terms of Disposal of Personal Data

Freesebbe keeps the personal data it processes through the website and platform for the periods stipulated by the relevant laws and/or for the periods required by the purpose of processing, pursuant to articles 7, 17 and 138 of the Turkish Penal Code. In the event that these periods expire, it will delete, destroy or anonymize Personal Data in accordance with the provisions of the Regulation on the Deletion, Destruction or Anonymization of Personal Data.

Deletion of personal data by Freesebee means the process of making personal data inaccessible and unusable for the relevant users in any way. Freesebee implements user-level access authorizations and restrictions for this. It takes the necessary measures to perform the deletion process in databases.

Anonymization of personal data by Freesbee means that even if personal data is matched with other data, it cannot be associated with an identified or identifiable natural person.

Freesbee explains in detail the methods of deletion, destruction and anonymization and the technical and administrative measures it has taken within the scope of the Personal Data Retention and Disposal Policy prepared in accordance with the Regulation on the Deletion, Destruction or Anonymization of Personal Data.

Changes to the Privacy/Personal Data Protection Policy

Freesebee can make changes to this Personal Data Processing Policy at any time. These changes will become effective immediately upon the publication of the amended new version of the Personal Data Processing Policy. In order for you to be aware of the changes in this Personal Data Processing Policy, the relevant persons will be informed.