INFORMATION NOTICE UNDER THE PERSONAL DATA PROTECTION LAW

1. Data Controller and Contact Information

This information notice has been prepared by Sefona Teknoloji A.Ş. (“Sefona” or “Company”) in its capacity as the data controller in accordance with the Personal Data Protection Law No. 6698 (“PDPL”). The personal data you provide to us as a result of transactions carried out through the Sefona Mobile Application (“Mobile Application”) is protected with the utmost care and diligence and is processed in compliance with the relevant legal regulations.

Sefona Teknoloji A.Ş. is incorporated in accordance with the laws of the Republic of Turkey, registered with the Muğla Chamber of Commerce and Industry under registration number 11853, with Mersis number 0758062831200001, and headquartered at Gülpınar Mahallesi Atapark Karşısı Sokak No:1, Köyceğiz/Muğla.

2. Purposes of Processing Personal Data

Your personal data is processed in compliance with the PDPL and relevant regulations for the following purposes:

  • Membership registration and account management
  • Provision of mobile application and web services
  • Enhancement of user experience and ensuring system security
  • Transmission of campaigns, promotions, and announcements (with explicit consent)
  • Fulfillment of legal obligations
  • Sharing of data with authorized public institutions and official authorities as required by law

3. Categories of Processed Personal Data

The following categories of personal data are processed by Sefona:

  • Identity Information: Name, surname
  • Contact Information: Phone number, email address
  • User Transaction Information: Membership details, transaction history
  • Transaction Security Information: IP address, device information
  • Location Information: (with explicit consent) Data collected for location-based services
  • Marketing Information: Cookies, targeting data based on habits and preferences (with explicit consent)
  • Request/Complaint Information: User support requests and feedback

4. Methods of Collecting Personal Data and Legal Grounds for Processing

Your personal data is collected automatically or semi-automatically through the mobile application, website, call center, and customer support services.

Under the PDPL, your personal data is processed based on the following legal grounds:

  • Establishment and performance of a contract (PDPL Article 5/2-c)
  • Compliance with legal obligations (PDPL Article 5/2-ç)
  • Legitimate interests (PDPL Article 5/2-f)
  • Situations requiring explicit consent (PDPL Article 5/1)

5. Transfer of Personal Data

Your personal data is shared only for the purposes specified above with the following parties:

  • Technical service providers (infrastructure, hosting, and security services)
  • Business partners and member businesses (for service provision)
  • Authorized public institutions and organizations (for compliance with legal obligations)
  • Overseas server and data processing services (only with explicit consent)

6. Your Rights Under the PDPL

Under Article 11 of the PDPL, you have the following rights:

  • To learn whether your personal data is being processed
  • To request information if your data has been processed
  • To request correction of inaccurate or incomplete data
  • To request the deletion or destruction of your data
  • To learn the third parties to whom your personal data has been transferred
  • To request compensation for damages in case of unlawful processing

7. Application and Contact

You may exercise your personal data rights by sending an email to [email protected] or by filling out the Relevant Person Application Form. Applications will be processed free of charge within 30 days in accordance with the PDPL.

This information notice may be updated in accordance with changing regulations and company policies.