Deriza Deri Sanayi Ticaret Limited Şirketi (“Deriza”), we strive to protect the privacy of our members who use our site in order to ensure that our users can benefit from our services safely and completely. Accordingly, this Deriza Privacy Policy (“Policy”) has been prepared in order to process the personal data of our members in full compliance with the Law on the Protection of Personal Data No. 6698 (“Law”) and to inform our users in this context. Deriza.com cookie policy is an integral part of this Policy. The purpose of this Policy is to communicate with Deriza by Platform members/visitors/users (collectively, “Data Owner”) during the operation of the www.deriza.com website and mobile application (collectively referred to as “Platform”) operated by Deriza. is to determine the terms and conditions regarding the use of personal data shared or generated by Deriza during the use of the Platform by the Data Owner.


Which Data is Processed?


The data processed by Deriza and considered as personal data in accordance with the Law are listed below. Unless expressly stated otherwise, the term "personal data" will include the information below within the scope of the terms and conditions provided under this Policy. · Identity Information · Contact Information · User Information · User Transaction Information · Transaction Security Information · Financial Information · Marketing Information · Request/Complaint Management Information Data that has been irreversibly anonymized in accordance with Articles 3 and 7 of the Personal Data Protection Law. will not be considered as personal data in accordance with the provisions of the aforementioned law and the processing activities regarding this data will be carried out without being bound by the provisions of this Policy.

Personal Data Processing Purposes


Deriza, the personal data provided by the Data Owner, the creation of the membership registration and account and keeping the related records, the use of the services provided on the Platform by the Data Owner, the detection of system errors and performance monitoring, the improvement of the operation of the Platform, the maintenance and support services and the backup services. The activities required for the business units to carry out the necessary work to benefit the persons concerned from the products and services offered by Deriza, including for the purposes of presenting the products and services, and for the execution of the relevant business processes, and for recommending and promoting these products and services to the relevant persons by customizing them according to the tastes, usage habits and needs of the persons concerned. planning and execution of the business, carrying out the necessary work by the relevant business units for the realization of the commercial activities carried out by Deriza and the execution of the related business processes, Deriza and the business relationship It can be processed for the purposes of ensuring the legal, technical and commercial-occupational security of the persons it is in, and for the planning and execution of Deriza's commercial and/or business strategies.


Personal Data to be Processed in accordance with the Explicit Consent of Data Owners and Purposes of Processing


Within the scope of the explicit consent of the Data Owner, Deriza, by following the Data Owners' movements on the Platform, increasing the user experience, creating statistics, profiling, direct marketing and remarketing, creating and transmitting special promotional offers to the Data Owner, and It will be able to process data and share this data with the parties mentioned below for the purpose of using the data obtained in this context in all kinds of advertisement and material content.

Transfer of Personal Data:


Deriza, the personal data of the Data Owner and the new data obtained by using this personal data may be transferred to the third parties from whom Deriza's services are used in order to achieve the purposes determined by this Privacy Policy, limited to the provision of the said services. Deriza, in order to improve the Data Owner experience (including improvement and personalization), to ensure the security of the Data Owner, to detect fraudulent or unauthorized use, to investigate operational evaluation, to correct errors regarding Platform services and to fulfill any of the purposes in this Privacy Policy. It will be able to share it with third parties such as outsourcing service providers, hosting service providers (hosting services), law firms, research companies, call centers, including those who send SMS. Personal data, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, Guzini Deri ve Konfeksiyon Mamülleri İç ve Dış Tic. LTD. STI. It can be shared abroad with the authorities, shareholders, business partners, suppliers, legally authorized public institutions and organizations and legally authorized private institutions, and within the framework of the procedural principles specified in Article 9 of the Law and the decisions of the Personal Data Protection Board, limited to these purposes.


Personal Data Collection Method and Legal Reason


Personal data is collected through the Platform and electronically. Personal data collected for the above-mentioned legal reasons can be processed and transferred for the purposes specified in Articles 5 and 6 of the Law No. 6698 and this Privacy Policy.

Rights of Personal Data Owner


Pursuant to the 11th article of the Law, data owners, · To learn whether personal data is processed about them, to request information if their personal data has been processed, · To learn the purpose of processing personal data and whether they are used in accordance with its purpose, to which personal data is transferred in the country or abroad. knowing the third parties, · Requesting correction of personal data in case of incomplete or incorrect processing and requesting the notification of the transaction made within this scope to the third parties to whom the personal data has been transferred, to request the deletion or destruction of the transaction and to notify the third parties to whom the personal data has been transferred, has the right to demand the compensation of the damage in case of loss due to the unlawful processing of personal data.