PRIVACY NOTICE ON THE PROTECTION OF CUSTOMERS’, MEMBERS’ AND VISITORS’ PERSONAL DATA
TAJİ GİYİM SANAYİ VE TİCARET LİMİTED ŞİRKETİ
Dear Visitors, Customers and Members,
TAJİ GİYİM SANAYİ VE TİCARET LİMİTED ŞİRKETİ (“Taji Giyim”, “Company”, “we”, “us” or “our”), acting as the Data Controller within the meaning of the Turkish Law No. 6698 on the Protection of Personal Data (“Law” or “KVKK”), would like to inform you about our personal data processing practices and the personal data we process in accordance with the Law.
This Privacy Notice explains how your personal data may be processed when you:
visit Taji Giyim stores (“Stores”) or make purchases from our Stores;
become a member of our Loyalty Card programme (“Loyalty Card Member”);
visit our website (“Website”) or use the Taji Giyim mobile application (“Mobile Application”);
make purchases through the Website/Mobile Application, receive products purchased for you by third parties through the Website/Mobile Application, or register as a member of the Website/Mobile Application (“Website Member”);
consent to receiving general or personalised campaign communications through commercial communication channels;
communicate with us through any of our communication channels;
contact Taji Giyim and/or make purchases in connection with corporate sales, or receive gifts, products or similar items sent to you as part of our corporate sales processes; or
participate in campaigns, competitions, prize draws and other events organised by Taji Giyim.
Cookies and similar technologies may be used on our Website and Mobile Application. Further information regarding the use of cookies is available through our Cookie Policy on our Website.
1. WHAT PERSONAL DATA DO WE PROCESS AND FOR WHAT PURPOSES?
Store Visits
We process CCTV footage recorded at our Stores for the purposes of ensuring the security of you, Taji Giyim, our employees and other third parties against potential unlawful acts, criminal activity or other misconduct occurring within our Stores, and for fulfilling our obligations to provide information and documentation to judicial and other competent authorities where required.
In-Store Purchases and After-Sales Processes
For the purposes of completing purchase transactions, distinguishing your customer records from those of other customers, enabling you to benefit from after-sales services such as alterations, exchanges, returns and product inspections without necessarily presenting an invoice or receipt, completing such after-sales procedures, sending electronic invoices/e-archive invoices relating to your purchases, and procuring products that are unavailable at our Stores and delivering them directly to you, we may process:
identity information, including your first name and surname;
contact information, including your email address and telephone number; and
purchase information, including the date, amount and contents of your purchase, payment method and payment details.
Where you make a purchase from one of our airport Stores, we may additionally process your passport number, nationality, date of birth, gender and flight information for the purpose of complying with our legal obligations.
Where necessary to process a refund to your bank account, we may process your bank account information.
For the purposes of issuing invoices and, where applicable, maintaining customer accounts and performing reconciliation procedures, we may process your identity, contact and billing information. Where you are a taxpayer, this may also include additional billing information such as your Turkish ID number, tax identification number and sole proprietorship information.
Where you choose to make payment by credit card, your credit card information may be transmitted to the relevant payment service provider for the purpose of processing the payment. Credit card information is transmitted without being stored by Taji Giyim.
Where you choose to make payment through a mail-order transaction, we may process your first name and surname, credit card information, telephone number, product information, order amount, signature and a photograph of the front side of your identification document.
Where you use Taji Giyim’s made-to-measure or personalised product services, we may process your first name and surname, order information and body measurements required for your order. Where you provide your explicit consent, we may retain such measurements for use in future orders so that your measurements do not need to be taken again for each subsequent order.
Loyalty Card Membership
For the purposes of registering and administering your Loyalty Card membership, delivering your Loyalty Card, fulfilling our obligations under the applicable Loyalty Card programmes, enabling you to benefit from campaigns, determining the programme for which you qualify and whether you satisfy the requirements for transfer to another programme, providing membership-related information, and enabling you to earn, use and check loyalty points, we may process:
identity information, including your first name and surname;
membership number;
contact information, including telephone number, email address and postal address; and
purchase and Loyalty Card information, including the date, time, amount and contents of your purchases, points earned and other information required to provide benefits available under the Loyalty Card programme.
For the purposes of creating general or personalised campaigns, benefits, promotions and advertisements; organising campaigns, competitions, prize draws and other events; conducting segmentation, reporting, profiling, marketing and analytical activities; and carrying out Taji Giyim advertising, marketing and communication activities through the Mobile Application, Website or third-party platforms, we may process marketing and behavioural information.
Such information may include your date of birth, gender, city, district, demographic information, location information where location sharing is enabled, responses and interactions with notifications, surveys, offers and campaigns on the Website and Mobile Application, habits, favourites, likes, behaviours, preferences, searches, customer segments, purchase history, cookie records, cookie and advertising identifiers, device ID, payment methods and preferences, duration of Mobile Application use, Mobile Application version, communication preferences, purchase amounts, payment channels, information regarding the bank through which payment was made, device brand, model, technical specifications and operating system, mobile network operator information, survey responses and similar information.
Website/Mobile Application Use and Purchases
Whether you purchase as a registered member or as a guest, we may process your personal data for the purposes of completing the purchase transaction, preparing and packaging your order, preparing dispatch documentation, arranging shipment and delivery, updating delivery information, delivering your order to you or arranging collection from a Store, distinguishing your records from those of other customers, providing after-sales services such as alterations, exchanges, returns and product inspections, and issuing and sending electronic invoices.
For these purposes, we may process:
identity information, including your first name and surname;
contact information, including your email address, telephone number and address; and
purchase information, including the date, time, amount and contents of your purchase, payment method and payment details.
For invoicing purposes, we may process your identity and billing information. Where you are a taxpayer, this may also include your Turkish ID number, tax identification number and sole proprietorship information.
Where you choose to pay by credit card, your credit card information is transmitted to the relevant payment service provider without being stored by Taji Giyim.
Where a third party purchases a product through the Website/Mobile Application to be delivered to you, we may process your first name and surname, mobile telephone number and address for the purpose of delivering the relevant order.
We may also process information relating to your use of the Website and Mobile Application for the purposes of identifying, analysing and resolving technical or software errors and deficiencies.
Website/Mobile Application Membership
For the purposes of creating and administering your membership, performing our obligations under the membership agreement, enabling you to log into your account and providing membership-related information, we may process your identity information, including your first name and surname; contact information, including your email address and telephone number; and your password or authentication information.
To enable you to make purchases as a registered member without having to re-enter your information for each transaction, we may process your identity and contact information, including your first name and surname, telephone number, email address, delivery address and billing address.
To enable you to view your order history, we may process purchase information including the date, time, amount and contents of your purchases and payment details.
For the purposes of enabling you to benefit from special membership programmes, personalised opportunities and offers based on purchases made through our Stores and Website, and earning and redeeming loyalty points, we may process information relating to your purchases.
We may also process marketing and behavioural information for the purposes of creating general or personalised campaigns, benefits, promotions and advertisements; organising campaigns, competitions, prize draws and other events; conducting segmentation, reporting, profiling, marketing and analytical activities; displaying Taji Giyim advertisements and conducting marketing and communication activities on the Website, Mobile Application and third-party platforms; providing personalised offers; customising user interfaces; conducting searches and surveys; and improving the user experience.
Where location sharing is enabled on your mobile device, your location information may also be used to create and communicate relevant offers based on your location.
Marketing and behavioural information processed for these purposes may include your date of birth, gender, city, district, demographic information, location information where enabled, interactions with notifications, surveys, offers and campaigns, habits, favourites, likes, behaviours, preferences, search activity, customer segments, previous purchases, cookie records, cookie and advertising identifiers, device ID, payment methods and preferences, Mobile Application usage duration and version, communication preferences, purchase amounts, payment channels, information regarding the bank through which payment was made, device brand, model, technical specifications and operating system, mobile network operator information, survey responses and similar information.
Commercial Communications
Where you provide the necessary commercial communication consent and/or explicit consent, we may process your first name, surname, telephone number and email address for the purposes of sending general or personalised campaigns, benefits, promotions, advertisements and information created in connection with your Loyalty Card or Website Membership; conducting marketing activities and commercial communications via SMS, email, telephone calls and other permitted channels; conducting customer satisfaction surveys relating to our products and services; and sending invitations relating to campaigns, competitions, prize draws, events, openings and similar activities.
Corporate Sales
Where you contact our corporate sales department, we may process your first name and surname, email address, mobile telephone number, customer transaction information such as quotations, orders and shipping information, billing information and information relating to the organisation for which you work.
Such information may be processed for the purposes of preparing and communicating a quotation at your request, forwarding your information to the relevant Store where you accept the quotation, delivering products to you and contacting you where necessary in relation to current or future orders.
Where a third party sends you a gift, product or similar item through our corporate sales processes, we may process your first name and surname, mobile telephone number, address and information relating to the organisation for which you work for the purpose of delivering the relevant item to you.
Call Centre and Customer Relations
Where you contact us through our communication channels, including our call centre, email, Website, Mobile Application or social media accounts, we may process your:
identity information, including your first name and surname;
contact information, including your address, email address and telephone number;
customer transaction information, including your requests, complaints, purchases and use of gifts, discounts or other benefits; and
legal transaction information, where necessary.
We process such information for the purposes of addressing and resolving your requests and complaints and contacting you where necessary.
We may also process call centre voice recordings for customer satisfaction purposes and for their potential use as evidence in the event of a dispute.
Legal Processes and Internal Activities
For the purposes of complying with our statutory obligations and fulfilling our legal obligations towards competent public authorities and institutions, we may process your identity, contact, purchase, billing and transaction-security information, including log records.
For the purposes of exercising our legal rights, including initiating or responding to proceedings before courts, enforcement offices, consumer arbitration committees and other competent authorities; conducting negotiations and settlement procedures relating to disputes; responding to your requests for information; and carrying out internal audits, internal controls, reporting, testing, development and improvement activities, we may process:
identity information;
contact information;
purchase and billing information;
CCTV footage;
transaction-security information, including logs relating to Loyalty Card membership, Website membership, Website/Mobile Application purchases and records of consent, explicit consent and contractual approvals relating to commercial communications; and
legal transaction information, including correspondence and file information relating to disputes.
For the purposes of preventing the Mobile Application, Website and other Taji Giyim systems from being used in breach of membership agreements, applicable legislation or accepted standards of conduct; identifying suspicious transactions and unlawful use; and carrying out blocking and unblocking procedures, we may process your identity and contact information, limited credit card information consisting only of the first six and last four digits, purchase and order information, and transaction-security information.
2. TO WHOM MAY WE TRANSFER YOUR PERSONAL DATA AND FOR WHAT PURPOSES?
We may transfer your personal data, where permitted under applicable legislation:
to our domestic and international service providers where necessary to obtain products, services or professional support in areas such as information technology, marketing, advertising, analytics, logistics, payment services and specialist consultancy;
to service providers including call centres, providers that collect personal data through devices, marketing/advertising/analytics providers, database and server service providers, Website and Mobile Application monitoring providers, email server providers, e-invoice and e-archive invoice providers, electronic communication intermediary service providers, cargo and courier companies, suppliers providing made-to-measure product services, card printing providers, printing houses, warehouse service providers, banks and electronic payment institutions, legal and financial advisers, independent auditors and archiving service providers;
abroad where the servers used by our domestic business partners or service providers are located outside Türkiye, subject to the requirements applicable to international transfers of personal data;
to competent public authorities, institutions and judicial authorities where necessary to fulfil our statutory obligations to provide information and documentation or to exercise or defend our legal rights;
where necessary for monitoring and identifying suspicious transactions and preventing unlawful activities, to suppliers providing consultancy services and to payment institutions involved in the relevant transaction;
where necessary, to the security units of the shopping centre in which the relevant Store is located in relation to CCTV footage recorded at such Store;
to our business partners in connection with activities intended to increase visitor traffic to the Website and Mobile Application; and
where you have provided explicit consent, to the relevant entities for data enrichment and data deduplication activities.
Any transfer of personal data shall be carried out in accordance with the KVKK and other applicable data protection legislation.
3. HOW DO WE COLLECT YOUR PERSONAL DATA AND WHAT ARE THE LEGAL BASES FOR PROCESSING?
Your personal data may be collected by Taji Giyim or, where applicable, by its dealers, affiliates, suppliers or business partners through automated or non-automated means.
These methods may include:
CCTV systems located in our Stores;
information verbally provided to sales consultants at our Stores and subsequently entered into our systems;
information provided during purchases or membership registrations through our Stores, Website or Mobile Application;
information generated or obtained through your use of fixed or mobile internet and communication devices and/or mobile applications;
location data collected through beacon devices located at our Stores or through the Mobile Application where you are a Website Member and have enabled location sharing and/or Bluetooth functionality;
records relating to purchases, payments, deliveries, transactions, surveys, registrations and behavioural activities conducted through our Stores, Website or Mobile Application;
referral information generated when you access our Website or Mobile Application through the websites of our business partners;
requests and complaints communicated through our call centre, Mobile Application, Website, email addresses, social media accounts and other communication channels;
recordings of calls made to our call centre;
updating or enrichment of data that you have provided where permitted by your consent and applicable law;
information and documents received from competent public institutions, organisations and judicial or administrative authorities;
mail-order forms; and
records and documentation generated in connection with made-to-measure orders, personalised orders and return procedures.
Depending on the relevant processing activity, your personal data may be processed on one or more of the following legal bases provided under the KVKK:
processing is necessary for the establishment or performance of a contract;
processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
processing is necessary for the legitimate interests of the Data Controller, provided that such processing does not prejudice your fundamental rights and freedoms;
processing is necessary for the establishment, exercise or protection of a legal right; and
your explicit consent, where required under applicable law.
In particular, personal data relating to sales through the Website, Stores and Mobile Application is processed where necessary for the establishment or performance of a contract, compliance with legal obligations and/or the legitimate interests of the Data Controller.
Personal data required to comply with statutory retention obligations is processed on the basis of compliance with legal obligations.
CCTV recordings in Stores are processed on the basis of the legitimate interests of the Data Controller and, where applicable, the establishment, exercise or protection of legal rights.
Personal data relating to Website Membership and Loyalty Card Membership may be processed where necessary for the establishment or performance of the relevant membership agreement and, for activities requiring consent, on the basis of your explicit consent.
Where processing in connection with commercial communications or the retention of information relating to personalised orders requires explicit consent, such processing will be carried out on the basis of the explicit consent provided by you.
Where processing is based on your explicit consent, you may withdraw such consent at any time without being required to provide a reason. Withdrawal of consent shall affect future processing activities based on that consent and shall not affect the lawfulness of processing carried out prior to its withdrawal.
4. WHAT ARE YOUR RIGHTS?
In relation to your personal data processed by us, you may exercise the rights granted to data subjects under Article 11 of the Law No. 6698 on the Protection of Personal Data at any time, subject to the conditions and limitations prescribed by applicable legislation.
Your rights under Article 11 include the right to:
learn whether your personal data is being processed;
request information regarding such processing;
learn the purposes for which your personal data is processed and whether it is being used in accordance with those purposes;
learn the third parties in Türkiye or abroad to whom your personal data has been transferred;
request correction where your personal data has been processed incompletely or inaccurately;
request deletion or destruction of your personal data under the conditions prescribed by the Law;
request notification of correction, deletion or destruction operations to third parties to whom your personal data has been transferred;
object to an adverse result arising from the analysis of your personal data exclusively through automated systems; and
claim compensation for damages suffered as a result of the unlawful processing of your personal data.
You may submit requests concerning these rights to TAJİ GİYİM SANAYİ VE TİCARET LİMİTED ŞİRKETİ, as the Data Controller, by submitting a written application to the address below or by sending an email from the email address registered in our systems.
Applications must comply with the requirements set forth in the applicable legislation, including the Communiqué on the Procedures and Principles of Application to the Data Controller.
Address:
Harbiye Mah., Abdi İpekçi Cad. No: 6-8/B
Şişli, Istanbul, Türkiye
Email:
