This Information Text as per the Law on Protection of Personal Data ("Information Text") has been issued by Yemek Sepeti Elektronik İletişim Perakende Gıda A.Ş. ("Yemeksepeti"), in its capacity as the data controller, in order to inform Yemeksepeti users and make explanations on the processing of their personal data by Yemeksepeti in accordance with the Law on Protection of Personal Data numbered 6698 ("Law").
1. Personal Data Collected
Your personal data categorized within the scope of the Information Text are as follows:
- User (Profile) Information: User name (name – sur name), birth day (if you share with us)
- Contact Information: Phone number, address, e-mail address
- Location Information: It signifies the location that the personal data owner designates and/or activates on a device while using the Yemeksepeti within the framework of operations conducted by Yemeksepeti business units.
- Customer Transaction Information: Containing information such as records related the use of our products and services and the instructions and requests necessary for the customer for using the products and services (favoreite restaurants, favorite cuisines, order id, last information change date, restaurant and order-related scores, comments and notes, membership date, used campaign information).
- Transaction Security Information: Containing personal information such as IP address, system login information credentials, login credentials accessed by suppliers when providing support services, user transactions in the purse system (such as password resetting, password creation), etc. in order to secure our technical, administrative, legal and commercial security while conducting our business activities.
- Financial Information: Containing informations, information, documents and records showing any kind of financial result created according to the type of legal relationship that Yemek Sepeti has established with the personal data owner and the credit card number information, the first four and the last six digits of which are masked.
- Audit and Inspection Information: Live help records or phone call recodrs regarding the order, e-mail correspondence records in case of communication by e-mail.
- Legal Transaction Information: Containing data with respect to determination of our legal receivables and rights, follow up and satisfaction of our debts and our legal obligations, processed within the scope of compliance with the policies of our company.
- Marketing Information: Containing personal data (discounts and campaigns taken advantage of, order time, favorite products, coupon information, which application was registered through, which application was ordered (web, mobile, application), shopping habits) processed for the customization and marketing of our products and services in accordance with the usage habits, liking and needs of the personal data owner and the reports and evaluations created in result of processing these results.
- Risk Management Information: Information collected in relation to an individual and collected to protect the commercial reputation of the company.
Sensitive personal datas are; race, ethnicity, political opinion, philosophical belief, religion, sect or other faiths, costume and clothing, association, foundation or trade union membership, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data. We do not process sensitive personal data of our customers/users etc. Do not share yor sensitive personal data, no matter what interaction it takes within the scope of your relationship with Yemeksepeti.
2. Purpose of Processing of Personal Data
Your personal data specified above will be processed for the following purposes and to be limited to the same.
i.Executing the agreement on the services provided by the Company;
Delivering your order (profile, contact, transaction security, legal transaction, location, audit and inspection information)
Executing the agreement you have concluded with Yemeksepeti (profile, contact, transaction security, legal transaction, location, audit and inspection information)
Following up the other processes of the agreement (marketing, customer transaction, profile, contact, transaction security, legal transaction, location, audit and inspection information)
ii.Planning and conducting the activities necessary for the increase of user experience and for the presentation and promotion of the products and services offered by the Company to the relevant persons by customizing them according to the taste, usage habits and needs of the relevant persons;
Planning and/or conducting user satisfaction activities (contact, marketing, audit and inspection information)
Planning and conducting market research activities for sales and marketing of products and services (contact, marketing, customer transaction, audit and inspection information, profile)
Planning and conducting marketing processes of products and/or services (profile, contact, marketing, customer transaction, audit and inspection information)
Planning and conducting relevant processes to get maximum benefit from the products or services offered by the Company, and making instant notifications by Yemeksepeti, targeting by identifying user habits, profiling and analyzing, offering you discounted campaigns, providing you with customized content, digital marketing, targeting, on-site remarketing, and advertising accordingly (profile, contact, marketing, customer transaction)
Planning and conducting sales, marketing, and optimization processes to improve user experience (profile, contact, marketing, customer transaction, audit and inspection information)
Conducting optimization activities to evaluate, analyze, and improve user experience related to the advertisements made to you under the planning and improvement of the processes related to the Company's business and strategies (profile, contact, risk management, customer transaction, audit and inspection information)
Conducting market research and surveys for the planning and conduct of the market research activities for sales and marketing of the products and services offered by the Company (contact, profile, marketing, customer transaction, audit and inspection information)
iii.Allowing our business units to carry out the necessary procedures to make the relevant persons benefit from the products and services offered by the Company, and conducting the related business processes;
Planning and conducting sales processes of products and/or services (profile, contact, marketing, finance, customer transaction)
Planning and/or conducting the activities regarding after-sales support services (profile, contact, marketing, finance, audit and inspection information, customer transaction)Planning and conducting the user relations management processes (profile, contact, audit and inspection information, customer transaction)
Following up user demands and/or complaints (profile, contact, audit and inspection information, customer transaction)
Following up contractual processed and/or legal demands (profile, contact, marketing, customer transaction, legal transaction, audit and inspection information, transaction security, location)
iv.Ensuring the legal, technical, and commercial occupational safety of the Company and any persons who have business relationships with the Company;
Planning and conducting the Company audit activities (contact, location, finance, risk management, transaction security, legal transaction)
Planning and conducting the operational activities necessary for ensuring that the activities of the Company are carried out in accordance with the Company's procedures and/or respective legislation (contact, transaction security, customer transaction, legal transaction, location, finance)
Assuring the security of the Company's operations (legal transaction, risk management, customer transaction, transaction security, location)
Ensuring that the data is accurate and up-to-date (legal transaction, risk management, customer transaction, transaction security)
Providing information to authorized agencies as a requirement of the legislation (contact, transaction security, customer transaction, legal transaction)
v.Carrying out the necessary works by our respective business units and the related business processes in order to realize the commercial activities performed by the Company;
Planning, auditing, and conducting information security processes (profile, risk management, transaction security, customer transaction, legal transaction)
Establishing and managing the information technologies infrastructure (risk management, transaction security, customer transaction, legal transaction)
Following up the finance and/or accounting affairs (profile, contact, finance, customer transaction, legal transaction)
Following up the legal affairs (profile, contact, customer transaction, legal transaction, transaction security, risk management, finance)
Planning and/or conducting the activities regarding the efficiency/productivity and/or appropriateness analysis of business activities (contact, location, legal transaction, audit and inspection information)
Planning and conducting business activities (contact, location, legal transaction, audit and inspection information)
Planning and conducting corporate communication activities (profile, contact, marketing, location)
Planning and conducting logistics activities (contact, customer transaction, location)
Planning and conducting production, sales/service, and/or operational processes (contact, customer transaction, finance)
Preventing fraudulent activities, acting in accordance with the legislatation, acting in accordance with the ethics/compliance rules (legal transaction, risk management, transaction security)
vi.Planning and conducting the commercial and/or business strategies of the Company;
Managing the relationships with business partners and/or suppliers (contact, customer transaction, location)
Conducting strategic planning activities (risk management, finance)
Planning and following up the performance evaluation processes of business partners and/or suppliers and management of supply chain (contact, location, customer transaction, finance)
Planning the processes regarding the business and strategies/improvement processes and audit of the Company (contact, finance, risk management, location, legal transaction, marketing, audit and inspection information)
Planning and conducting the performance management processes (customer translation, location)
3. Method and Legal Basis of Collecting Personal Data
Your personal data is collected by Yemeksepeti in electronic media through the channels such as e-mail, respective websites, and mobile application, and social media accounts that you have allowed Yemeksepeti to access, and through the call center or by physical means such as mail/cargo.
Your personal data may be processed based on the following legal basis, set forth in Article 5 of the Law, for the purposes specified in Article 2 of this Information Text:
When it is clearly stipulated in laws: iii, iv, v
When it is required to process your personal data to the extent personal data is directly related to the conclusion or execution of the contract with you: i, iii, v
When it is mandatory to fulfill our legal obligations: iii, iv, v
When it is made public by you (to the extent it complies with your purpose of making public): ii, iii
When the processing of your personal data is mandatory for the establishment, exercise, or protection of any right: iii, iv, v
When it is mandatory for our legitimate interests, provided that your fundamental rights and freedoms are not prejudiced: ii, iii, iv, v, iv
4. Parties to whom Personal Data may be Transferred and Purpose of Transfer
Your personal data collected by Yemeksepeti may be shared with our domestic affiliates, shareholders, business partners, competent public authorities, and natural persons for the purposes detailed in Article 2 of the Information Text above and based on the legal basis stated in Article 3, in accordance with Article 8 of the Law.
In addition, your personal data related to profile, communication, location, customer transaction, transaction security, risk management, marketing, for the purpose detailed in Article 2, accordance in Article 9, it will be able to be shared with our subsidiaries, shareholders and business partners abroad.
5. Your Rights Regarding Your Personal Data
As per Article 11 of the Law, you are accorded the following rights regarding your personal data:
To learn whether your personal data is processed or not;
To request information in case your personal data has been processed;
To find out the reason for processing of the personal data and whether this has been used properly for that purpose;
To know the third parties to whom your personal data has been transferred at home or abroad;
To request for the correction of personal data if it is incomplete or incorrectly processed and to ask that the process carried out in this context be notified to the third parties to whom personal data has been transmitted;
To request deletion or destruction of your personal data if the reasons for processing the same have ceased to exist although it has been processed in accordance with the Law numbered 6698 and other relevant laws, and to ask that the process carried out in this context be notified to the third parties to whom personal data has been transmitted;
To object to any unfavorable result suffered due to analysis of processed data exclusively by means of automatic systems; and
To demand compensation of your loss if you incur a loss due to illegal processing of your personal data.
As personal data subject, you may submit your requests about your rights to info@yemeksepeti.com. Applications that do not meet the criteria determined by the Personal Data Protection Authority under the respective legislation will not be taken into consideration unless additional information to be requested from you is completed in order for them to meet the criteria.
According to the nature of the request, Yemeksepeti will conclude the request free of charge as soon as possible but in no later than thirty days. However, we would like to remind that in case any additional costs arise from the fulfillment of your requests, the fee in the tariff determined by the Personal Data Protection Authority may be charged.
Yemeksepeti reserves its right to unilaterally update this Information Text in case any business requirements or legal requirements arise. We recommend you to regularly visit our home page to access the latest version of this text.