As Hepsiglobal, we
show essential care and sensitivity for the protection of your personal
information. For this reason, we are sharing the process related with the
processing of your personal information via Privacy Notice with a
concern of transparency.
This Privacy Policy
aims to disclose how we collect and process your personal information via the
website, products and services (including the payment services) and all
applications of Hepsiglobal (hereafter all of them will be referred to as “Services”)
without considering how you used or reached those Services.
Hepsiglobal offers
services to its customers in two ways:
❖ Access to products or services
with minimum information required for shopping without being a member,
❖
As a member,
you can have a customized shopping experience and allow us to further process
your information and profile it so that we can provide customised shopping
experience
If you are a member;
❖ By analyzing your previous
orders, we can offer the complementary parts of the products you have previously
purchased so that you can buy them easily,
❖ By seeing your past orders on a
single page, we can manage your orders without the need to call customer
service,
❖ We can offer you products
similar to the products you have bought before,
❖ We can show you other products
that are compatible with a product you just bought,
❖ We can present the best selling
products on our site to your attention,
❖
In short, it
is possible for us to create a user experience that suits your general shopping
taste and habits.
1.
Identity
and Contact Information of the Data Controller
The data controller
related with the collecting and processing your personal data compatible with
General Data Protection Regulation (“GDPR”):
D-Market Elektronik
Hizmetler ve Ticaret A.Ş.
Address: D-Market Elektronik Hizmetler ve Ticaret A.Ş.
Telephone Number: 0850 252 40 00
Website: global.hepsiburada.com
2. Contact Details of Data Protection Officer
In order to supervise the process of
protecting your personal data, we assigned a data protection officer. You can
contact our protection officer regarding this Privacy Policy and processing
your personal data any time you want.
You can reach contact details of our
protection officer below:
Address:Kuştepe Mah. Mecidiyeköy Yolu Cad. Trump Towers
Kule 2 Kat:2 No:12 34387 Şişli/İstanbul
E-Mail: dataprotection@hepsiglobal.com
3. What type of personal data
is gathered and processed by Hepsiglobal?
With the purpose of providing our
services, when you create a Hepsiglobal account, give information via online
electronic forms, provide information updates by logging into your Hepsiglobal account
and contact us by other options, we collect your personal data.
3.1. Personal information
that we gather while you are using our service and creating a Hepsiglobal
Account
- Personal information that we can
use to identify you such as first name, middle name, last name or e-mail that
you share with us while creating a Hepsiglobal account
-
If you are
using our payment services as a Seller or a Member, information that you share
with us while using those services such as E-mail, IP address, Credit/Bank Card information etc.
- Information you provide related
to buying or selling
- Information you provide while
using our messaging tools
-
Financing
information (e.g. Credit/Bank
Card information, payment methods, payment history information)
-
Information
required for delivery, billing and customs transactions (shipping address, other identification numbers etc.)
- Country, interests and preferences if required
- Additional information that you
share with us while using online electronic forms, adding/updating information
to your Hepsiglobal Account, communicating via using member chats, questions,
dispute resolutions and using customer service with your consent
-
The data we
may/have to gather in order to verify the collected data of your identity in
accordance with legislations in force
3.2. Automatically
collected personal information when you use our services or create a Hepsiglobal
account
-Data
associated with your Hepsiglobal account as a part of services that you use (transaction cost, time/place of transaction,
transaction method, hashed card number, card holder name).
-Data associated with your Hepsiglobal account
as a part of your actions via services that you use (adding a product to
shopping cart, saving your search history)
- Ad preferences and information that
you provide while contacting us
- Your IP address and
location data of your mobile device
- The statistics related with the use of Hepsiglobal
Services, information related with the websites and their data traffic, URL
routing, advertising related information, your IP address, access time, browser
data history, language preferences.
3.3. Personal information
we collect via Cookies and similar technologies
While providing our services, just like
other websites, we use “cookies” and other identifiers to collect your personal
information. These datas are collected from devices that you use (including
mobile devices).
-
As a part of
using our services, ads and pages that you visited from your e-mail, access time, frequency/duration of
visits, clicked urls and data related to your online actions.
- Data related to Ads shown to
you, how frequently they are shown, the time and location of those ads and the
data of whether you buy those products or not.
-
Your user
segment and category (e.g. interested
in beauty products)
-
The model/type of your
device, the type/version of your operating system, type/preferences of your
browser, device profile, advertising profile, cookie related data (e.g. cookie
ID)
-
The IP address for this device while reaching our services and the location
data of your mobile device.
For
detailed information, view the Cookie Policy.
3.4. Personal information
we gather from social networks
-The data that you provide if
you link your Hepsiglobal account with your social accounts or other service providers (such as
Google or Apple).
4. The purposes of Hepsiglobal in the
processing for which the personal data are intended as well as the legal basis
for the processing
As Hepsiglobal, we process your personal
information to provide H Hepsiglobal Services and for the development of these
services within the purposes stated below fully complying with law. For
example, providing and developing services, optimizing the user experience on
our website, providing a better user experience with personalized advertising,
contacting you about your Hepsiglobal account and other services, providing
customers service and marketing activities, offering you personalized ads,
detecting and preventing fraud or illegal activities.
4.1. Providing services
and execution of the contract
4.2.
Our legal responsibilities
4.3. Legitimate interest
4.4. Consent
5. Does Hepsiglobal share
your personal information?
As Hepsiglobal, we may share your
personal information in order to effectuate the statements stated above with
the categories of recipients stated below:
5.1. Other Hepsiglobal Users
5.2. Shipping Companies (e.g. PTS… etc.
5.3. Payment service providers
5.4. Website, application and service
providers for the tools.
5.5. Law enforcers, courts,
government agencies or authorize public institutions, intergovernmental or
supranational organizations
5.6. Credit agencies
5.7.Third parties using our single sign on service (Apple,
Google)
6. International Data Transfer
Hepsiglobal, headquartered in Turkey and
therefore is an electronic trading platform that also servers in Turkey.
Therefore, your personal data being processed and stored in Turkey. However,
some of the services we use are systems belonging to international service providers.
There may be limited user data in these systems. Regarding this data, it is
recommended to review the Privacy Policies of the relevant
Data transfer agreements are made
between the aforementioned data processors and Hepsiglobal.
7. The
time period for the retention of the data and destruction of the data
Your
personal data will be stored by Hepsiglobal
and our service providers in accordance with the applicable data
protection laws in order to fulfill the processing purposes specified in this
Privacy Statement, unless a longer retention period is required or stipulated
by the applicable law. At the end of the retention period, we will delete your
personal data in accordance with our retention and destruction policy or
anonymize your data, again in accordance with our retention and destruction
policy, unless we are legally obliged to keep your personal data longer (e.g.
legal compliance, tax, accounting or audit).
We will
block access to your data instead of deleting it to the extent permitted and
required by law.
Some of the
criteria used to determine retention periods are as follows:
-The
existence of our service provisions with you and the continuity of those
services we provide for you, for example; having had an account with us and
continuing to use our services.
-Existence
of a legal obligation to which we are subjected to (e.g. some laws require to
keep records of your transactions for a certain period of time before
deleting).
-We may
retain data for sole purposes, if there are reasonable requirements, or if it
is necessary to meet legal requirements, resolve disputes, prevent fraud and
abuse, even after we close your account, or even if we no longer need this
information to provide these services.
8. What
are my rights?
Your rights
are listed below and you can use your rights by sending an e-mail to dataprotection@global.hepsiburada.com
Right of
access: Accessing information about your personal data
processed by Hepsiglobal and
the purpose of using your personal data by Hepsiglobal and obtaining information relating with
these issues; You have the right to request a copy of your personal data of any
kind.
Right to rectification: You have the right to complete your missing
personal data at any time and request correction of your inaccurate personal
data.
Right to
erasure: You have the right to request the deletion or
destruction of your personal data where it is no longer necessary for the
purposes for which it was collected.
Right to
restriction: You have the right to request
restrictions on the processing of your personal data as long as we determine
any submission of request regarding the correction or completion of your
personal data or the situations where you object to the processing of the data
are justified by legitimate interests. If you request to use your right to
restriction, we will only process information with your consent or for the
purpose of presenting, exercising or defending legal claims.
Right to
data portability: You have the right to receive
personal data you share with us in a formatted, commonly used and
machine-readable format, as well as transferring this information to another
control unit when the data processing is done on the basis of a consent or
contract and by automated means.
Right to
withdraw consent: You have the right to withdraw your
consent at any time where applicable.
Right to
object: If your personal data is processed within the
framework of our legitimate interests, you have the right to object to the
processing of your personal data for reasons related to your particular
situation. This right also applies for profiling. If your personal data is processed
by Hepsiglobal for direct
marketing purposes, you always have the right to object to the processing of
your personal data for such marketing activities, including profiling, to the
extent relevant to such direct marketing.
Right to
lodge a complaint to the data protection authorities: As
Hepsiglobal, we are ready
to process your requests with precision and do our best to clarify your doubts
about your privacy. However, you have the right to lodge a complaint with a
competent data protection authority at any time.
9. Can Children Benefit From The Services
Offered By Hepsiglobal?
Hepsiglobal does not sell products that
children can buy. We sell products for children only adults can buy. If you are
under the age of 18, you can only use Hepsiglobal Services through a parent.
10. Updating of
the Privacy Notice
This Privacy Statement may be updated from time to
time. All changes will be posted on this website. You can find the latest
update date at the top of the Privacy Statement.