Hepsiburada Global Privacy Notice

Your personal data is processed by D-Market Elektronik Hizmetler ve Tic. A.Ş., (“Hepsiburada Global”, “we”, “our” or “us”),  in order to carry out our operations, we ensure that your data is protected according to the highest standards, namely in accordance with respective laws and the provisions of EU Regulation 2016/679, known as the General Data Protection Regulation (“GDPR”). This Privacy Notice aims to explain and inform you about how we process your personal data and ensure your rights as the data subject.  For the purposes of this Privacy Notice, “personal data” means any information relating to an identified or identifiable individual.

I. Information Regarding the Data Controller

D-Market Elektronik Hizmetler ve Tic. A.Ş. (Hepsiburada Global), at Kuştepe Mah. Mecidiyeköy Yolu Cad. Trump Towers Kule 2 Kat:2 No:12 34387 Şişli/İstanbul/TURKEY is responsible for the processing of the personal data of its users and customers. As such, we are considered to be responsible for the processing of your personal data as defined by the GDPR. 

II. What Data Do We Collect and Process? 

   1. Data We Collect During Your Visit to Web Site

When you visit our website, you will face a cookie banner that will give you information about the cookies we use to process your data and option to allow or deny the use of cookies. If you prefer to allow the use of cookies, we will be using them based on your consent. To change your preferences and to read detailed information about cookies and trackers please click here.

When you add a product to your cart we will collect and process that data temporarily to provide our services and to offer you similar or relevant products you may like.

   2. Data We Collect When You Sign Up

To create a user account, you may either sign-up with your e-mail or social media accounts such as Google, Apple or Facebook.

     a) Sign-up With Email

When you choose to sign-up with your e-mail, via the form you fill out, we collect your name-surname and e-mail address. We use that data to create your user account.  We process these personal data in order to fulfill our contract with you and to provide you with our services on legal basis “processing is necessary for the performance of a contract to which the data is party or in order to take steps at the request of the data subject prior to entering into a contract” as specified in Article 6 of the GDPR. 

     b) Sign-up Social Media Account

When you choose to sign-up with one of your social accounts, via social media platform you choose, we collect you name-surname and e-mail. We use that data to create your user account. We process these personal data in order to fulfill our contract with you and to provide you with our services on legal basis “processing is necessary for the performance of a contract to which the data is party or in order to take steps at the request of the data subject prior to entering into a contract” as specified in Article 6 of the GDPR. 

   3. Data We Collect When You Update Your Profile

If you prefer to update your profile, you may share your birthday and gender information with us. We will be collecting and processing that data to improve your experience on Hepsiglobal by personalizing special offers, products to be shown based on your profile.

   4. Data We Collect When You Add Items to Your Wishlist

If you add an item to your wishlist, we will be processing that data to record and show you items on your wishlist. Addition to that when the item you add to your wishlist is on sale, based on your preferences, we may send you a notification or e-mail to notify you about the sale. 

   5. Data We Collect When You Contact Us

When you prefer to contact us, based on your question or request, our customer care team will process this data to help you about your experience with Hepsiglobal and contact you about it.

   6. Data We Collect When You Check-Out

To deliver the products, we will be collecting recipients name, surname, ID number, country, city, district, address, postal code and phone number services on legal basis “processing is necessary for the performance of a contract to which the data is party or in order to take steps at the request of the data subject prior to entering into a contract” as specified in Article 6 of the GDPR. 

We will share address and contact information with the seller. Some of sellers may be located outside of EU. In that case cross-border transfer will be made by taking sufficient safeguards and based on legal basis of GDPR Rec.111 Art.49(1)(b), (3) “the transfer is necessary for the performance of a contract”.

For your next shopping we will be keeping your address details to improve your experience. You may always change or delete this data on your profile.

For payment, we use certified payment service provider. When you add your credit/debit card while checking out, this data will be collected and processed directly by payment service provider and will not be recorded by Hepsiglobal.

   7. Data We Process for Marketing Purposes

Based on your consent and preferred communication channel (SMS or E-mail), we may use your data to offer you products, special offers and discounts based on your profile. You can always change your preferred communication channel or withdraw your consent.

III. Who Do We Share Personal Data With

We may transfer your personal data to our suppliers of IT services, payment service provider, courier services, and integrator service providers. We may also be required by law or regulation to transfer your personal data to a competent public authority. 

IV. How Long Do We Retain Your Personal Data

We retain your personal data for as long as it is necessary to fulfill the service for which they are processed, or for as long as we are required to retain them in accordance with law or regulation. 

V. How We Protect Your Personal Data

We maintain appropriate technical and organizational safeguards against unauthorized processing of personal data and against accidental loss, destruction, or damage.

VI. Your Rights

You have certain rights in relation to our processing of your personal data under data protection law:

- Right of access: The right to ask us for copies of their personal information. 

- Right to rectification: The right to ask us to rectify their personal information which they think is inaccurate. They also have the right to ask us to complete information they think is incomplete.

- Right to erasure: The right to ask us to erase their personal information in certain circumstances. 

- Right to restriction of processing: They have the right to ask us to restrict the processing of their personal information in certain circumstances.

- Right to object to processing: The right to object to the processing of their personal information in certain circumstances.

- Right to data portability: The right to ask that we transfer the personal information you provide us to another organization, or to you, in certain circumstances.

Please note that they are not required to pay neither you nor us any charge for exercising their rights. If you make a request, we will respond in one month.

If you also have any further questions, please feel free to contact Hepsiburada Global Data Privacy Office.

HepsiGlobal Data Privacy Office:

E-Mail Address: dataprotection@hepsiglobal.com

Postal Address: Kuştepe Mah. Mecidiyeköy Yolu Cad. Trump Towers Kule 2 Kat:2 No:12 34387 Şişli / İstanbul / TURKEY

Telephone: 0850 252 40 00

Website: https://global.hepsiburada.com

This e-mail is only for legal enquiries. Please use global.support@hepsiburada.com for your order or webpage related enquiries.