Preliminary Information

The Personal Data Protection Law No. 6698 (the “PDP Law”) was enacted and published in the Official Gazette in order to protect the fundamental rights and freedoms of individuals, particularly the privacy of private life, in the processing of personal data, and to regulate the obligations of natural and legal persons who process personal data and the procedures and principles they must follow.
The provisions of the published Law apply to natural persons whose personal data is processed, and to natural and legal persons who process this data wholly or partially by automatic means, or by non-automatic means provided that it is part of any data recording system.
Basic information about the processing and protection of personal data transferred to us as Valen Bilgi Teknolojileri A.Ş. is set out below. In order to fulfill the obligation to inform arising from Article 10 of the Personal Data Protection Law No. 6698 (Law No. 6698), we present the following explanations to the attention of our customers, third parties using our website, and other relevant persons. We reserve the right to update this Statement on the Protection of Personal Data at any time within the framework of changes that may be made to the legislation in force.

1- Identity of the Data Controller:

Valen Bilgi Teknolojileri A.Ş. holds the status of “Data Controller” as defined in Law No. 6698.

2- Purposes of collecting and processing personal data

Your personal data may be recorded, stored, updated, disclosed to third parties, transferred, classified and processed by us in the cases and to the extent permitted by legislation. Within the framework of the personal data processing conditions set out in Articles 5 and 6 of the PDP Law and other relevant articles, your personal data is processed for purposes such as: planning and carrying out the activities necessary to recommend and promote the products and services we offer to the relevant persons, customized according to their tastes, usage habits and needs; carrying out the work necessary for the relevant business units to benefit the relevant persons from our products and services and conducting the related business processes; carrying out the work necessary for the relevant business units to perform the commercial activities we conduct and conducting the related business processes; planning and executing commercial and/or business strategies; and ensuring the legal, technical and commercial-business security of the relevant persons who have a business relationship with our Company.
In this context;
• To verify the identity information of the person making or having a transaction made on the website,
• To record addresses and other necessary information for communication,
• To evaluate and conclude our customers’ requests and to contact them about the outcome,
• To ensure that the products and services purchased/ordered by our customers are provided under the best conditions, procured and supplied reliably and without interruption, and to carry out operations,
• To contact our customers about the terms, current status and updates of the contracts we conclude, and to provide the necessary information,
• To prepare all records and documents that will serve as the basis for a transaction, in electronic (internet/mobile, etc.) or paper form,
• To perform the obligations undertaken under the contracts concluded,
• To provide information to public officials, upon request and as required by legislation, on matters concerning public security,
• To inform our customers about our products that may interest them, taking into account the areas of interest they have communicated to us, and to convey campaigns,
• To get to know our customers who shop/order/request price quotes through the website and to use this in customer profile analysis, in various marketing and advertising activities, and, within this scope, to organize surveys in electronic and/or physical form through contracted organizations to ensure customer satisfaction,
• To make recommendations to our customers through our contracted institutions and solution partners, and to inform our customers about our services,
• To evaluate customer complaints and suggestions about our services,
• To fulfill our legal obligations and exercise our rights arising from the legislation in force
identity information, address information, contact information and other relevant personal data are obtained directly or indirectly, recorded, stored in secure systems, retained, organized, disclosed and transferred in accordance with the law, taken over, classified and processed, or the use or transfer of the data by unauthorized persons is prevented.

3- To Whom and for What Purpose Personal Data May Be Transferred

Your personal data collected in accordance with the Law may, for the purposes stated above and limited to the reason requiring the transfer, be shared with: administrative and official authorities to which it must legally be transferred; relevant persons and institutions as required by legislation and to fulfill legal obligations; independent audit firms, tax advisors and third parties from whom we receive consulting services, including lawyers, due to legal requirements and within legal limits; our shareholders; our direct/indirect, domestic/international affiliates in order to carry out our activities; program partner institutions and organizations with which we cooperate; domestic/international persons and institutions from which we receive cloud data storage services; domestic/international organizations with which we have agreements for sending commercial electronic messages to our customers; the Interbank Card Center; the banks with which we have agreements; and, within the scope of various marketing activities in order to serve you better and ensure customer satisfaction, various domestic and international agencies, advertising companies and survey companies, and other domestic/international third parties and our relevant business partners.

4- Method of Collecting Personal Data and Legal Basis

Your personal data may be collected verbally, in writing or electronically, by automatic or non-automatic methods, within the principles set out in the PDP Law and in line with the basic principles prescribed by the Law, on the grounds of the establishment and/or performance of a contract, being provided for by law, a legal obligation, the legitimate interest of the data controller, or the protection of a right, through offices, branches, facilities, factories, dealers, the call center, the website, application forms, resumes, mobile applications, information systems and mobile devices (computers, mobile phones) and similar means.
Under Article 5.2 and Article 6.3 of the PDP Law, personal data may be processed without your explicit consent in order to fulfill our legal obligations, to establish or perform a contract, to establish, exercise or protect a right, and to protect our legitimate interests without harming your fundamental rights and freedoms, and with respect to personal data that you have made public. Your personal data may also be processed, for the purposes stated in this Privacy Notice, under Article 5.1 and Article 6.2 of the PDP Law, provided that your explicit consent is obtained.

5- What are your rights under Law No. 6698?

Under Law No. 6698, by applying to our Company, we would like to remind you that you have the right to:
a) learn whether your personal data is being processed,
b) request information if it has been processed,
c) learn the purpose of the processing and whether it is used in accordance with its purpose,
d) know the third parties to whom it is transferred domestically / abroad,
e) request correction if it has been processed incompletely / incorrectly,
f) request deletion / destruction within the framework of the conditions set out in Article 7 of Law No. 6698,
g) request that the operations carried out pursuant to items (d) and (e) above be notified to the third parties to whom the data has been transferred,
h) object to the occurrence of a result against you through analysis exclusively by automated systems,
i) request compensation for the damage if you suffer damage due to the processing of your data in violation of Law No. 6698.

6- The requirement to keep data up to date and accurate

Under Article 4 of Law No. 6698, we are obliged to keep your personal data accurate and up to date. In this context, in order for us to fulfill our obligations arising from the legislation in force, our customers must share their accurate and up-to-date data. If your data changes in any way, we ask you to contact us through the communication channels indicated below and update your data. Our company shall not be responsible for any problems that may arise if customers report their personal data inaccurately or fail to update their personal data despite a change.

7- How to make requests regarding your personal data under the Law:

Together with the right you wish to exercise among those listed in Article 11 of the Personal Data Protection Law No. 6698 (the “Law”), you may submit your written requests to our company, pursuant to Article 13 of the Law and Article 5 of the Communiqué on the Procedures and Principles of Application to the Data Controller,
• by e-mail to info@valen.com.tr, writing “Personal Data Protection Law Information Request” in the subject line,
• in writing via a notary to the address “Ferhatpaşa Mahallesi 37. Sokak No:37 52-53 /İstanbul”,
• by phone at our number +90 216 348 82 58.
Applications must include your first and last name, your signature if the application is in writing, your Republic of Türkiye ID number for citizens of the Republic of Türkiye, your address for notification or workplace address, a contact telephone or fax number, and your e-mail address for notification, if any, together with the subject of the request.
Depending on changes that may occur in the Law over time, the necessary updates will also be made to this Privacy Notice, which aims to inform you.