MimaradaM – Interior Architecture, Design, Project Office
Personal Data and General Privacy Policy
Last Update: June 18, 2019
MimaradaM – Interior Architecture, Design, Project Office (hereinafter referred to as “mimaradam.com”) will not share, sell, or use the personal data transmitted electronically by users through its website www.mimaradam.com (“Website”) or mobile applications for any purpose other than those specified in the “Law No. 6698 on the Protection of Personal Data” and the General Data Protection Regulation (GDPR).
mimaradam.com's "Personal Data and General Privacy Policy" is provided below.
IP Addresses: To identify system-related problems, quickly resolve issues that may arise on the website/mobile applications, and, when necessary, report to legal authorities in accordance with the law, mimaradam.com may identify and use users' IP addresses. IP addresses may also be used to identify users anonymously and to collect comprehensive demographic information.
Anonymous Data: Information requested by Mimaradam.com, information provided by the user, or information related to transactions made through the Website/Mobile Application may be used anonymously by Mimaradam.com and its collaborators (without disclosing the user's identity) for various statistical evaluations, database creation, offering personalized packages/offers, and market research.
Linking to other sites: mimaradam.com may provide links to other sites within its Website/Mobile Application. mimaradam.com assumes no responsibility for the privacy practices or content of sites accessed through these links.
Bank/Credit Card Information: mimaradam.com uses an SSL certificate (green bar) with a 256-bit encryption algorithm to ensure data security during transmission. Users' bank/credit card information is only used by the bank or payment institution during the purchase process and is never stored in a database. mimaradam.com may offer an infrastructure through PCI DSS certified institutions where card information can be stored to facilitate users' future purchases. Card Storage Services, which have the PCI DSS standard and are licensed by the BDDK (Banking Regulation and Supervision Agency), facilitate Authentication and Authorization steps for information on bank/credit cards, providing bank/credit card holders with a secure and easy payment method.
Situations in which user data may be disclosed: Personal data belonging to the user includes name, surname, address, telephone number, email address, and any information used to identify the user. Unless otherwise stated in this privacy policy, mimaradam.com will not disclose any personal data to third parties other than mimaradam.com's collaborating and affiliated companies. In the following situations, mimaradam.com may disclose user information to third parties outside the provisions of this privacy policy. These situations are:
Compliance with obligations imposed by laws, decrees, regulations, etc., issued and in force by a competent legal authority;
Fulfilling and implementing the terms of the agreements that mimaradam.com enters into with its users;
These include cases where information about users is requested by a competent administrative or judicial authority for the purpose of conducting a duly conducted investigation or inquiry, and where providing information is necessary to protect the rights or security of users.
mimaradam.com is committed to keeping confidential information strictly private and confidential, considering this a duty of secrecy, and to taking all necessary measures and exercising due diligence to ensure and maintain confidentiality, and to prevent the entire or any part of confidential information from entering the public domain or being used without authorization or disclosed to a third party.
Cookie Status: mimaradam.com may obtain information about users and their use of the Website by using a technical communication file (Cookie) prepared by itself or third parties. These technical communication files are small text files that a website sends to the user's browser to be stored in the main memory. The technical communication file keeps the session open by storing the user's session information, password, and preferences, and facilitates use by recognizing the user on their next visit. The technical communication file helps to obtain statistical information about how many people use the Website, for what purpose, how many times a person visits the Website, and how long they stay, and helps to dynamically generate advertisements and content from user-specific pages. The technical communication file is not designed to retrieve data or any other personal information from the main memory or email. Most browsers are initially designed to accept technical communication files, but users can change their settings to prevent the receipt of technical communication files or to receive a warning when a technical communication file is sent.
Data collected through surveys, competitions, and similar events: Information requested from users who respond to periodic surveys and competitions organized by mimaradam.com within the Website is used by mimaradam.com and its collaborators for direct marketing to these users, statistical analysis, and database creation.
Newsletter Submissions and Announcements: mimaradam.com sends weekly newsletters to inform its users about economic developments, current events, and topics relevant to their fields. In cases deemed necessary, or in agreement with third-party partners, it may send promotional and informational campaign/offer/package announcements. When you create an account on our system for the first time, you agree to receive standard email and SMS notifications. Users can block these emails by clicking the link provided at the bottom of the email. Additionally, there are options to block them in your user panel. If you wish to unsubscribe from our daily email mailing list at any time, you can easily unsubscribe with a single click by clicking the "Click here to unsubscribe from our newsletter list" link at the bottom of the emails we send.
General information about the Personal Data Protection Law
The Law No. 6698 on the Protection of Personal Data was adopted on March 24, 2016, and published in the Official Gazette No. 29677 dated April 7, 2016. The European Union Data Protection Directive (EU General Data Protection Regulation – GDPR) entered into force on May 25, 2018. As the data controller under the Law No. 6698 on the Protection of Personal Data and the European Union Data Protection Directive (EU General Data Protection Regulation – GDPR), we will record, classify, process, store, update, and, in accordance with legal regulations and with your permission, disclose your personal data to third parties. We hereby inform you about our mutual rights and obligations under this legal regulation.
Information in our capacity as data controller
As mimaradam.com, whose detailed corporate information is published below, and in accordance with the laws mentioned above, as the Data Controller, your personal data will be recorded, stored, updated, disclosed/transferred to third parties where permitted by law, classified, and processed within the framework described below.
Definition of Personal Data Under the Law
This refers to any information that identifies or makes you identifiable, such as your personal information (name, surname, date of birth, Turkish ID number, etc.), contact information, and information regarding the methods used to access the products (IP address, mobile phone brand and model, browser type and version, social media information, actions performed on screens, etc.).
How your personal data may be processed
In accordance with Law No. 6698 on the Protection of Personal Data (KVKK) and the EU General Data Protection Regulation (GDPR), the personal data you share with our company may be processed by us, wholly or partially, automatically or non-automatically, by obtaining, recording, storing, modifying, reorganizing, disclosing, transferring, acquiring, making available, classifying, or preventing the use of the data, provided that its security and confidentiality are ensured within the scope of the legislation; in short, by subjecting the data to any kind of processing. Any operation performed on the data within the scope of the aforementioned laws is considered "processing of personal data".
The purposes and legal grounds for processing your personal data.
The personal data you share;
To be able to provide the services we offer to our customers in accordance with the requirements of the contract and technology, and to improve our products and services,
We aim to issue official invoices for all products and services after purchase.
To comply with information retention, reporting, and notification obligations required by legislation and stipulated by other authorities.
In matters relating to public security and legal disputes, in order to provide information to prosecutors, courts and relevant public officials upon request and as required by law,
Data will be processed in accordance with the scope, procedures, and principles of Law No. 6698 on the Protection of Personal Data (KVKK) and the EU General Data Protection Regulation (GDPR).
Your identity, address, tax number, and other information will be recorded to identify the transaction owner and recipient in all transactions related to the products and services we offer; to prepare the information and documents that will serve as the basis for transactions carried out electronically; to comply with the data retention, reporting, and notification obligations stipulated by all competent judicial and administrative authorities (courts, TBB, BDDK, SPK, TCMB, MASAK, BTK, etc.) in accordance with the relevant legislation; and to enable the provision of other products and services offered and requested by mimaradam.com and to fulfill the requirements of the contracts between us.
Information about third parties or organizations to whom your personal data may be transferred.
For the purposes stated above, the individuals/organizations to whom your personal data shared with our company may be transferred include, but are not limited to, our main shareholders, our direct or indirect domestic/foreign affiliates, and individuals and organizations related to the services provided, as well as domestic/foreign organizations and other third parties with whom we collaborate, partner with, and/or receive services from in order to conduct our activities and/or act as Data Processors.
Furthermore, your personal data may be transferred to institutions, organizations, banks, financial institutions, providers, or companies with whom we collaborate or partner in product/service comparison and application processes, to individuals and institutions from whom we receive cloud data storage services, to institutions with whom we have agreements regarding the sending of messages to our customers, and to other third parties within the scope of our related collaborations.
How your personal data is collected
Your personal data,
Through forms on our company's website and mobile applications, we collect data including name, surname, national identity number, passport number, address, telephone number, business or personal email address, age, gender, occupation, username and password, preferences on accessed pages, IP records of transactions, cookie data collected by the browser, browsing time and details, and location data;
Our sales and marketing department employees communicate verbally, in writing, or electronically through our agents, dealers, paper forms, business cards, digital marketing, and call center channels;
Personal data is collected from individuals who share their personal information with our company for purposes such as establishing a business relationship, applying for a job, or submitting a proposal, through business cards, resumes (CVs), proposals, and other means, whether in a physical or virtual environment, face-to-face or remotely, verbally or in writing, or electronically;
In addition, data obtained indirectly from various channels, such as websites, blogs, competitions, surveys, games, campaigns and similar (micro) websites, social media, e-newsletter reading or clicking activities, data provided by publicly available databases, and publicly available profile and data from social media platforms (Facebook, Twitter, Google, Instagram, Snapchat, etc.) can be processed and collected.
Your personal data obtained before the entry into force of Law No. 6698 on the Protection of Personal Data (KVKK) and the EU General Data Protection Regulation (GDPR).
Your personal data lawfully obtained before April 7, 2016, the effective date of the Turkish Personal Data Protection Law (KVKK), and before May 25, 2018, the effective date of the EU General Data Protection Regulation (GDPR), are also processed and stored in accordance with the terms and conditions set forth in this document.
Storage and protection of personal data.
Your personal data will be stored confidentially in our company's databases and systems in accordance with Law No. 6698 on the Protection of Personal Data (KVKK) and the EU General Data Protection Regulation (GDPR); it will not be shared with third parties under any circumstances except for legal obligations and the regulations specified in this document. Our company is obligated, in accordance with Law No. 6698 on the Protection of Personal Data (KVKK) and the EU General Data Protection Regulation (GDPR), to prevent the unlawful processing of personal data, to prevent unauthorized access, and to ensure the security of the systems and databases containing your personal data by taking software measures such as hashing, encryption, transaction logging, and access management, as well as physical security measures. If it is learned that personal data has been obtained illegally by others, the situation will be immediately reported to the Personal Data Protection Board in writing and in accordance with legal regulations.
Personal data will be stored for as long as the purpose for which you provided this information remains valid. We will continue to process your data even after you have received our service, in order to identify your needs, provide you with faster service, and fulfill your future service requests. Data will be retained subject to legal time limits and for reporting and informing purposes to legal authorities and relevant public authorities, or for longer periods if required by law. We will take the necessary security measures to prevent the loss of stored and recorded data, unauthorized access, and unlawful use.
Keeping personal data up-to-date and accurate.
In accordance with Article 4 of the KVKK (Law on Protection of Personal Data), our Company has the obligation to keep your personal data accurate and up-to-date. In this context, in order for our Company to fulfill its obligations arising from the current legislation, our Customers are required to share their accurate and up-to-date data or update it via the website/mobile application.
Rights of the personal data owner according to Law No. 6698 on the Protection of Personal Data and the EU General Data Protection Regulation – GDPR
The Data Subject may apply to our Company (data controller) regarding the following:
To find out whether your personal data is being processed,
The right to request information regarding the processing of personal data.
To learn the purpose of processing personal data and whether it is being used appropriately for that purpose.
Knowing the third parties to whom personal data is transferred, whether domestically or internationally.
Requesting the correction of personal data if it has been processed incompletely or inaccurately.
Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK (Law on Protection of Personal Data).
The right to request that third parties to whom personal data has been transferred be notified of any corrections, deletions, or destructions of personal data.
The right to object to an outcome that is detrimental to oneself, resulting from the analysis of processed data exclusively through automated systems.
Individuals who suffer damages as a result of the unlawful processing of their personal data have the right to claim compensation for those damages.
Mimaradam.com Interior Architecture, Design, Project Office, registered with Kocaeli Chamber of Commerce under registration number 101147-5 and MERSİS number 0000000000000000, located at Bağlarbaşı Mh. Eskihisar Cd. No: 46, 41700, Darıca, KOCAELİ / TURKEY, is the Data Controller under Law No. 6698 on the Protection of Personal Data (KVKK) and the EU General Data Protection Regulation (GDPR).
The Data Controller Representative to be appointed by mimaradam.com will be announced in the Data Controllers Registry and on the website where this document is located, once the legal framework is in place.
Data subjects may direct their questions, opinions, or requests to any of the following communication channels:
Email: info@mimaradam.com
Phone: +90 530 262 63 21
Our company may respond to requests within 30 days, providing a reasoned response (positive or negative) in writing or digitally. It is essential that the necessary procedures related to requests are free of charge. However, if these procedures incur costs, our company reserves the right to request a fee. These fees will be determined according to the tariff set by the Personal Data Protection Board in accordance with Article 13 of the Personal Data Protection Law.