Privacy Notice
Website Privacy Notice
This Website Privacy Notice (“Notice”) has been prepared to inform and clarify Users regarding the terms and conditions governing the use of data obtained and/or to be obtained from Users in any manner within the scope of services offered through the website at https://lapitek.com/ (the “Site”) to Members who register on the Site, and to Visitors who access the Site other than as Members (together, “Users”), and regarding how such data is processed.
The Company collects personal data through the Site, social media accounts, e-mail, postal mail, call center, fax, and notifications from administrative and judicial authorities, in oral, electronic, or written form, in compliance with the personal data processing conditions set out in the Law and for the legal grounds and purposes specified in this Notice.
1 – Data Subjects, Data Categories, and Data Types
Member
Identity Information
First name, last name, Turkish ID number, date of birth.
Customer Transaction
Order information
Contact Information
Username, e-mail address, phone number, residential address, country and city of residence.
Transaction Security
IP address, ID information, log records, website login/logout information, password and credential information, transaction date and time.
Marketing
Site browsing information, past usage information, shopping/campaign response information, hobbies, shopping preferences, other cookie records collected by third parties via the Company.
Location Information
Information on the location from which platforms are accessed
Visitor
Identity Information
Gender, age group
Transaction Security
IP address, ID information, log records, website login/logout information, transaction date and time.
Location Information
Information on the location from which platforms are accessed
Marketing
Site browsing information, past usage information, shopping/campaign response information, hobbies, shopping preferences, other cookie records collected by third parties via the Company
2 – Legal Grounds
The personal data listed above may be processed for the purposes set out below, in accordance with the conditions and principles set forth in Article 4 of the Law (as reiterated in this Notice) and within the scope of the personal data processing conditions specified in Articles 5 and 6 of the Law. The legal grounds applicable to each data category are explicitly stated below:
Member
Identity Information
Contact Information
Transaction Security
Location
Identity Information
Transaction Security
Location Information
Marketing
Within the scope of this Notice, the personal data of data subjects listed in Section 2 is processed for the following purposes, in accordance with the general conditions specified in this Notice:
Member
Identity Information
Contact Information
Based on the legal ground that processing is mandatory for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the data subject;
Customer Transaction
Transaction Security
Location
Based on the legal ground that processing is mandatory for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the data subject;
Based on the legal ground that processing is mandatory for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the data subject;
Identity Information
Transaction Security
Location Information
Marketing
Based on the legal ground that processing is mandatory for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the data subject;
The Company may transfer personal data of data subjects to its servers and suppliers within Turkey, and to legally authorised public institutions and private entities, in line with its legitimate interests for the purpose of providing services through its platforms and fulfilling the obligations declared in this Notice, in accordance with the transfer conditions set out in Article 8 of the KVKK.
5 – Rights of the Data Subject
As data subjects, you may submit your requests regarding your rights and exercise your rights over your personal data by applying via secure electronic signature to the Company e-mail address sales@lapitek.com, from your personal e-mail address, or by written application in person or through a notary to Emin Ali Paşa Caddesi No:70/A Kadıköy/İstanbul, to request correction, update, and/or deletion and related actions.
If you submit your request through the methods stated above, the Company will conclude your request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the process requires an additional cost, the fee set out in the tariff determined by the Personal Data Protection Authority will be charged by the Company. In this context, data subjects have the right to:
1. Learn whether personal data is being processed,
2. Request information if personal data has been processed,
3. Learn the purpose of processing and whether data is used in line with that purpose,
4. Know the third parties to whom personal data is transferred domestically or abroad,
5. Request correction if personal data is incomplete or inaccurate,
6. Request deletion or destruction of personal data under the conditions set out in Article 7 of the Law,
7. Request that third parties to whom personal data was transferred be notified of operations carried out pursuant to items (d) and (e),
8. Object to the emergence of a result against the person by analysing processed data exclusively through automated systems,
9. Request compensation for damage if personal data is processed unlawfully and damage occurs.
In your application to exercise the rights listed above, your request must be clear and understandable; it must relate to you personally, or if you act on behalf of another person you must be specifically authorised and document your authority; the application must include identity and address information and documents evidencing your identity must be attached.
6 – Changes to This Notice
The Company may amend this Notice at any time. Such amendments take effect immediately upon publication of the revised text. You will be informed as necessary so that you are aware of changes to this Notice.
This Website Privacy Notice (“Notice”) has been prepared to inform and clarify Users regarding the terms and conditions governing the use of data obtained and/or to be obtained from Users in any manner within the scope of services offered through the website at https://lapitek.com/ (the “Site”) to Members who register on the Site, and to Visitors who access the Site other than as Members (together, “Users”), and regarding how such data is processed.
The Company collects personal data through the Site, social media accounts, e-mail, postal mail, call center, fax, and notifications from administrative and judicial authorities, in oral, electronic, or written form, in compliance with the personal data processing conditions set out in the Law and for the legal grounds and purposes specified in this Notice.
1 – Data Subjects, Data Categories, and Data Types
Member
Identity Information
First name, last name, Turkish ID number, date of birth.
Customer Transaction
Order information
Contact Information
Username, e-mail address, phone number, residential address, country and city of residence.
Transaction Security
IP address, ID information, log records, website login/logout information, password and credential information, transaction date and time.
Marketing
Site browsing information, past usage information, shopping/campaign response information, hobbies, shopping preferences, other cookie records collected by third parties via the Company.
Location Information
Information on the location from which platforms are accessed
Visitor
Identity Information
Gender, age group
Transaction Security
IP address, ID information, log records, website login/logout information, transaction date and time.
Location Information
Information on the location from which platforms are accessed
Marketing
Site browsing information, past usage information, shopping/campaign response information, hobbies, shopping preferences, other cookie records collected by third parties via the Company
2 – Legal Grounds
The personal data listed above may be processed for the purposes set out below, in accordance with the conditions and principles set forth in Article 4 of the Law (as reiterated in this Notice) and within the scope of the personal data processing conditions specified in Articles 5 and 6 of the Law. The legal grounds applicable to each data category are explicitly stated below:
Member
Identity Information
Contact Information
- Processing is necessary in relation to the establishment or performance of a contract, provided that it is directly related to the parties to the contract,
- Processing is mandatory for the establishment, exercise, or protection of a right
Transaction Security
Location
- Explicitly provided for by laws,
- Processing is necessary in relation to the establishment or performance of a contract, provided that it is directly related to the parties to the contract,
- Processing is mandatory for the Company to fulfil its legal obligation,
- Processing is mandatory for the establishment, exercise, or protection of a right.
- Processing is mandatory for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the data subject,
- The data has been made public by the data subject.
Identity Information
Transaction Security
Location Information
Marketing
- Processing is mandatory for the Company to fulfil its legal obligation,
- Processing is mandatory for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the data subject,
- The data has been made public by the data subject.
Within the scope of this Notice, the personal data of data subjects listed in Section 2 is processed for the following purposes, in accordance with the general conditions specified in this Notice:
Member
Identity Information
Contact Information
Based on the legal ground that processing is mandatory for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the data subject;
- Carrying out information security processes
- Carrying out audit/ethics activities
- Managing access authorisations
- Carrying out communication activities
- Carrying out customer satisfaction activities
- Carrying out marketing processes for products/services
- Fulfilling retention obligations arising from legislation,
- Fulfilling requests of public institutions and organisations,
- Responding to data subject applications, where applicable,
- Following up and conducting legal affairs
- Handling requests and complaints
Customer Transaction
Transaction Security
Location
Based on the legal ground that processing is mandatory for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the data subject;
- Carrying out information security processes
- Carrying out audit/ethics activities
- Managing access authorisations
- Carrying out logistics activities
- Providing information to authorised persons, institutions, and organisations
- Carrying out communication activities
- Fulfilling retention obligations arising from legislation,
- Fulfilling requests of public institutions and organisations,
- Responding to data subject applications, where applicable,
- Following up and conducting legal affairs
- Handling requests and complaints
Based on the legal ground that processing is mandatory for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the data subject;
- Carrying out product/service loyalty processes
- Carrying out business continuity activities
- Carrying out customer satisfaction activities
- Carrying out marketing analytics
- Carrying out advertising, campaign, and promotion processes
- Carrying out marketing processes for products/services
Identity Information
Transaction Security
Location Information
Marketing
Based on the legal ground that processing is mandatory for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the data subject;
- Carrying out product/service loyalty processes
- Carrying out communication activities
- Carrying out business continuity activities
- Carrying out customer satisfaction activities
- Carrying out marketing analytics
- Carrying out advertising, campaign, and promotion processes
- Carrying out marketing processes for products/services
The Company may transfer personal data of data subjects to its servers and suppliers within Turkey, and to legally authorised public institutions and private entities, in line with its legitimate interests for the purpose of providing services through its platforms and fulfilling the obligations declared in this Notice, in accordance with the transfer conditions set out in Article 8 of the KVKK.
5 – Rights of the Data Subject
As data subjects, you may submit your requests regarding your rights and exercise your rights over your personal data by applying via secure electronic signature to the Company e-mail address sales@lapitek.com, from your personal e-mail address, or by written application in person or through a notary to Emin Ali Paşa Caddesi No:70/A Kadıköy/İstanbul, to request correction, update, and/or deletion and related actions.
If you submit your request through the methods stated above, the Company will conclude your request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the process requires an additional cost, the fee set out in the tariff determined by the Personal Data Protection Authority will be charged by the Company. In this context, data subjects have the right to:
1. Learn whether personal data is being processed,
2. Request information if personal data has been processed,
3. Learn the purpose of processing and whether data is used in line with that purpose,
4. Know the third parties to whom personal data is transferred domestically or abroad,
5. Request correction if personal data is incomplete or inaccurate,
6. Request deletion or destruction of personal data under the conditions set out in Article 7 of the Law,
7. Request that third parties to whom personal data was transferred be notified of operations carried out pursuant to items (d) and (e),
8. Object to the emergence of a result against the person by analysing processed data exclusively through automated systems,
9. Request compensation for damage if personal data is processed unlawfully and damage occurs.
In your application to exercise the rights listed above, your request must be clear and understandable; it must relate to you personally, or if you act on behalf of another person you must be specifically authorised and document your authority; the application must include identity and address information and documents evidencing your identity must be attached.
6 – Changes to This Notice
The Company may amend this Notice at any time. Such amendments take effect immediately upon publication of the revised text. You will be informed as necessary so that you are aware of changes to this Notice.