REEBERS ENDUSTRIYEL EKIPMANLAR TICARET LIMITED SIRKETI
PERSONAL DATA PROTECTION, SECURITY AND PRIVACY POLICY
As REEBERS ENDUSTRIYEL EKIPMANLAR TICARET LIMITED SIRKETI (WOODCODER), we work to protect the personal data of our members who use our site, in order to ensure that our users benefit from our services securely. This Privacy Policy has been prepared to inform our users in a manner compliant with the Law No. 6698 on the Protection of Personal Data.
The purpose of the Privacy Policy is to establish the terms and conditions regarding the use of the personal data shared with REEBERS ENDUSTRIYEL EKIPMANLAR TICARET LIMITED SIRKETI by the users/visitors of the website located at https://tr.woodcoder.com, which is managed by REEBERS ENDUSTRIYEL EKIPMANLAR TICARET LIMITED SIRKETI, or generated during the use of the website.
In the text of this agreement;
REEBERS ENDUSTRIYEL EKIPMANLAR TICARET LIMITED SIRKETI, located at Akhisar Sanayi Bolgesi, 275. Sokak, No:11, Inegol/Bursa, Turkey, shall hereinafter be referred to briefly as 'Woodcoder',
the Law No. 6698 on the Protection of Personal Data shall hereinafter be referred to as the 'Law',
the website located at the URL https://tr.woodcoder.com shall hereinafter be referred to as the 'Portal',
the user/visitor shall hereinafter be referred to as the 'Data Subject'.
The Data Subject who declares and undertakes that they accept this Privacy Policy agreement is fully bound by the other agreements published on the 'Portal'.
Which Data Is Processed?
Listed below are the data processed by Woodcoder and considered personal data under the Law. Unless expressly stated otherwise, the term 'personal data' within the scope of the terms and conditions set out in this Privacy Policy covers the information set out below.
Identity Information: First name, surname, date of birth, gender, Turkish ID number, photocopy of ID, and other similar data.
Contact Information: Mobile phone, e-mail address, address, postal code, landline phone, etc. data.
Location Information: The city and district where the person lives, data regarding the approximate locations of users, and where the data subject consents, GPS data when they wish to search for listings around their own location while using the mobile application, as well as location data derived from IP and port addresses, etc. data.
Demographic Data: Date of birth, age, gender, preferred language, etc. data.
Authentication Information: Users' membership information, passwords used to verify identity and provide access to the account, username, contact information, password hints, user numbers, listing numbers, etc. data.
Member Transaction Information: The most recent login date to the Portal, documents requested to prove that the brand is not counterfeit, listing information, satisfaction, customer note, commercial communication permission, etc. data.
Content Information: Furniture design, design creation data, custom furniture designs created by you, measurements and project data.
Financial Information: Tax office, invoice information, payment information, invoices sent to the member and copies of receipts for payments received from members, payment number, invoice number, invoice amount, invoice issue date, etc. data.
Risk Management Information: IP address.
Marketing Information: Marketing SMS and e-mail messages sent, or calls made by the call center, based on the commercial electronic message consent given by the relevant person.
Legal Transaction and Compliance Information: The start and end time of the service, the type of service used, the amount of data transferred, the commercial electronic message consent given electronically by the Relevant Person, the membership agreement they consented to, the corporate membership agreement, the distance sales agreement, and the legal texts and agreements that enable them to benefit from the services offered by Woodcoder.
Request/Complaint Management Information.
Data that is irreversibly anonymized within the framework of Articles 3 and 7 of the Law on the Protection of Personal Data shall not be considered personal data under the provisions of the said law, and processing activities relating to such data shall be carried out without being bound by the provisions of this Policy.
For What Purpose Do We Process Data?
In line with the purposes set out in this Privacy Policy and in the Individual/Corporate Membership Agreement, your personal data is processed within the framework of the purposes specified under the said law.
Personal data is used for the purpose of carrying out the following activities related to the Portal:
Improving the service offered through the website, detecting system errors and monitoring performance,
Creating designs and taking orders, delivering orders, providing the necessary technical support to customers,
Processing payments and issuing invoices,
Improving maintenance and support services as well as backup services,
Determining the preferences, tastes and needs of the Data Subject and evaluating their criticisms/suggestions,
Determining and implementing Woodcoder's commercial strategies,
Contacting the Data Subject based on commercial electronic message consent,
Ensuring legal processes and compliance with legislation,
Responding to information requests from administrative and judicial authorities,
Planning in-house reporting and business development activities,
Ensuring information and transaction security and preventing malicious use,
Making the necessary arrangements to ensure that the processed data is current and accurate.
The data is used for the purpose of carrying out the activities relating to all of these listed processes.
Information Regarding Design and Project Data
Within the scope of the custom design and production services offered by our Company, the following project and design data created by users or uploaded to the system may be processed:
Created design files,
Uploaded images, photographs and other visual content,
3D model files,
Dimensioning information,
Technical drawings,
Project history and version records,
Records relating to order revisions and user preferences.
The said data is processed solely for the purposes of designing the product or service requested by the user, creating the order, carrying out the production processes, performing quality control activities, managing order changes, providing after-sales support services, fulfilling the burden of proof in the event of a possible dispute, and fulfilling legal obligations.
Our Company is aware that the design and project data created by users may carry commercial value. In this context, such data is protected against unauthorized access by appropriate technical and administrative measures, and is not shared with third parties except in cases mandated by the relevant legislation, and is processed only limited to the stated purposes.
Where Is Data Stored and Processed?
The personal data we obtain may be stored and processed domestically and abroad in another country where the facilities of Woodcoder or its affiliates, subsidiaries, or the service providers with which it cooperates are located.
The personal data collected under this Privacy Policy will be processed in accordance with the provisions set out herein and within the framework of the legislation in force and the security measures foreseen in the country where the data is stored and processed.
With Whom Is Data Shared?
Woodcoder transfers personal data to third parties only in line with the purposes set out in this Privacy Policy and in accordance with Articles 8 and 9 of the PDP Law.
In order to realize any of the purposes set out in this Privacy Policy, the personal data of the Data Subject and the new data derived from such data are shared with third parties, including the seller and the cargo company, law offices, research companies, call centers, software companies, agencies, consultancy companies, companies in the printing sector, and social media channels.
In line with the Data Subject's commercial electronic message consent, their shopping preferences, tastes and habits are observed and shared with the commercial electronic message intermediary service provider for the purpose of making promotions and advertising to them and offering them benefits and opportunities.
For the purpose of segmentation and contacting the Data Subject in line with their tastes and preferences, website usage preferences and browsing history are shared with third parties from whom cookie services are received. The personal data transfers made within this framework take place through the secure environments and channels provided by the relevant third party. In all cases where the transfer of the Data Subject's personal data is not necessary, the transfer is made using pseudonymous data. This depends on the scope and content of the service received from the third parties.
For the purpose of increasing customer satisfaction and loyalty, anonymous data belonging to the Data Subject is shared with companies that will conduct market research.
In addition, pursuant to the payment institution framework agreement that the user will approve at the payment stage and pursuant to the Regulation on Measures Regarding the Prevention of Laundering Proceeds of Crime and the Financing of Terrorism, published in the Official Gazette dated 9 January 2008 and numbered 26751, the User's Name and Contact Information may be shared with payment institutions for the purpose of identity verification. Personal data obtained through cookies placed on users' devices may be shared with third parties within the scope and for the purposes set out in this Privacy Policy.
Woodcoder will be able to transfer personal data to third parties domestically and abroad within the categories specified above.
What Are Your Rights Over Your Personal Data?
The rights that the Data Subject has over the data processed by Woodcoder pursuant to Article 11 of the Law are listed below; the Data Subject has the right to:
- Learn whether or not their personal data is being processed,
- Request information if their personal data has been processed,
- Learn the purpose of the processing of their personal data and whether it is used in accordance with its purpose,
- Know the third parties to whom their personal data is transferred domestically or abroad,
- Request the correction of their personal data if it has been processed incompletely or incorrectly,
- Request the deletion or destruction of their personal data within the framework of the conditions set out in the relevant legislation,
- Request that the correction, deletion and destruction operations carried out under the relevant legislation be notified to the third parties to whom the personal data has been transferred,
- Object to the emergence of a result against the person themselves as a result of the analysis of the processed data exclusively through automated systems,
- Request compensation for the damage in the event that they suffer damage due to the unlawful processing of their personal data.
Through the communication channel specified in the 'How Can You Reach Us?' section below, the user may submit the aforementioned requests to us. In accordance with these requests, Woodcoder may provide its reasoned positive/negative response in writing or through digital means.
Although it is the principle that no fee is charged for the processing of requests, in the event that the said operations require a cost, it is possible to charge a fee based on the tariff determined by the Personal Data Protection Board in accordance with Article 13 of the Law No. 6698 on the Protection of Personal Data.
Personal Data Retention Period
Woodcoder retains the personal data it processes in compliance with the PDP Law for the periods foreseen in the relevant legislation or required by the purpose of processing. In our Personal Data Retention and Destruction Policy, these periods are approximately as follows:
Membership and order-related similar records: 10 years - Law No. 6098
Financial information and accounting records: 10 years - Law No. 6102 - Law No. 213
Cookies: Maximum 540 days
Commercial electronic message consent records: 1 year from the date the consent was obtained - Law No. 6563 and related legislation
Call Center Voice Recordings: 3 years - Law No. 6563
Personal data relating to suppliers/customers: 10 years after the legal relationship ends
Traffic information relating to online visitors: 2 years - Law No. 5651
Conditions for the Deletion, Destruction and Anonymization of Personal Data
Woodcoder retains the personal data it processes through its website, mobile application or mobile site pursuant to Articles 7 and 17 of the PDP Law and Article 138 of the Turkish Penal Code, for the periods foreseen by the relevant laws and/or the periods required by the purpose of processing. Upon the expiry of these periods, it will delete, destroy or anonymize the data pursuant to the provisions of the Regulation on the Deletion, Destruction or Anonymization of Personal Data.
The deletion of personal data refers to the process of rendering such data inaccessible and non-reusable in any way. Woodcoder takes the necessary measures to carry out the deletion process in its database. The destruction of personal data refers to the process of rendering such data inaccessible, unrecoverable and non-reusable in any way. The anonymization of personal data refers to rendering the data such that it can in no way be associated with an identified or identifiable natural person, even if it is matched with other data.
Within the scope of the Personal Data Retention and Destruction Policy prepared pursuant to the Regulation on the Deletion, Destruction or Anonymization of Personal Data, Woodcoder explains in detail the methods relating to deletion, destruction and anonymization and the technical and administrative measures it takes. In this Policy, the time interval at which the periodic destruction foreseen by the Regulation will be carried out is also determined as 6 months.
Our Measures and Commitments Regarding Data Security
Thank you for reading our Privacy Policy. Together with this Privacy Policy, Woodcoder undertakes to protect your personal data securely. It is our responsibility to ensure the appropriate level of security in order to ensure the lawful retention of personal data. In addition, your special categories of personal data are processed by taking the adequate measures determined by the Board.
Woodcoder will not disclose the personal data it obtains about Users to others in violation of this Privacy Policy and the provisions of the Law No. 6698 on the Protection of Personal Data, and will not use it for purposes other than the purpose of processing. In the event that personal data belonging to Users is shared with outsourced service providers pursuant to the provisions of this Privacy Policy, Woodcoder declares that such outsourced suppliers will also comply with the commitments set out under this article.
Changes to Be Made to the Privacy Policy
Woodcoder may update and change the provisions of this Privacy Policy at any time by publishing them on the Portal. The updates and changes made by Woodcoder to the Privacy Policy will be valid from the date they are published on the Portal.
How Can You Reach Us?
The Data Subject undertakes that the information subject to this Privacy Policy is complete, accurate and current, and that in the event of any change in this information, they will update it immediately. In the event that the Data Subject has not provided current information, Woodcoder will have no responsibility.
The Data Subject may also submit the aforementioned requests in writing, or may contact Customer Services at the e-mail address destek@woodcoder.com. The Data Subject may also request that the processing of personal data be stopped within the scope of the Privacy Policy.