Personal Data that May Be Collected
ISTAW may collect the following personal data of the User through the Website, depending on the User’s access to the Website and the transactions they perform:
Transaction Security Information,
Legal Transaction and Compliance Information,
Request/Complaint Management Information,
Incident Management Information,
User Transaction Information.
Use of “Cookies”
During the navigation of the Users on the Website, data such as the sections visited and areas clicked are automatically collected by ISTAW. These data obtained using the technology called “cookies” are statistical information. The intended purpose of this technology is to make the content of the sections visited by the Users more easily accessible for the User from their first visit to the site. Most browsers are designed to accept these “cookies” as technical communication files, but Users can always change their browser settings to prevent the arrival of technical communication files or to receive warnings when a technical communication file is sent. ISTAW has the right to associate the behaviors of Users on the Website with a “cookie” in the browser in order to conduct online behavioral advertising and marketing through the Economic Enterprise and to define remarketing lists based on metrics such as the number of pages viewed, visit duration, and goal completions. Subsequently, targeted advertising content based on then User’s interests may be displayed to the User on the Website or on other sites within the display advertising network.
Purpose of Data Usage
ISTAW may process the collected personal data for the following purposes: enabling the User to benefit from the Website, registering the User’s membership if applicable, improving the services provided, developing the service, introducing and informing about new services, providing necessary notifications to the User within this scope, establishing contact with the User, and fulfilling obligations arising from the nature of the services provided. The aforementioned personal data may be processed through the ISTAW Economic Enterprise for reporting and business development activities, conducting various statistical evaluations without disclosing the User’s identity, creating a database, and conducting market research. With the User’s additional consent, such information may be processed for direct marketing purposes by ISTAW and its affiliated parties, stored, disclosed to third parties, and used to communicate with the User for the purpose of promoting various applications, products, and services, as well as for notification regarding maintenance and support activities. In accordance with Articles 5 and 8 of the Law on the Protection of Personal Data and/or the presence of exceptions in relevant legislation, ISTAW may process and share personal data with third parties without obtaining separate consent from the User. Additionally, ISTAW may process personal data in the following cases:
When explicitly provided for in the laws, or when it is necessary for the protection of the life or physical integrity of the User or someone else who is unable to express their consent due to actual impossibility or whose consent is not legally valid,
When it is directly related to the establishment or performance of any contract between the User and ISTAW,
When the processing of personal data is necessary for fulfilling legal obligations,
When the User has already made the information public,
When the processing of data is necessary for the establishment, exercise, or protection of a right,
When the processing of data is necessary for the legitimate interests of ISTAW, provided that it does not harm the fundamental rights and freedoms of the User.
User’s Right to Access and Rectify Data
The User has the right to apply to ISTAW in order to:
Learn whether personal data is being processed or not,
Request information about the processing of their personal data if it has been processed,
Learn the purpose of the processing of personal data and whether they are being used in accordance with their purpose,
Be informed about the third parties, both domestically and internationally, to whom personal data
Request the correction of personal data if they are incomplete or inaccurate,
Request the deletion or destruction of personal data within the framework of the conditions stipulated by the relevant legislation,
Request that the corrections, deletions, and destructions made in accordance with the relevant legislation be notified to the third parties to whom personal data has been transferred,
Object to any result that may arise against the person as a result of personal data being analyzed exclusively through automated systems,
Request compensation for damages in case of suffering damages due to the unlawful processing of personal data.
The User can submit the aforementioned requests through the methods specified in the “Data Subject Application Form.” ISTAW may provide its reasoned positive/negative response to these requests in written or digital form. It is essential that no fee is charged for the necessary procedures related to these requests. However, if the procedures incur a cost, it may be possible to request a fee according to the tariff determined by the Personal Data Protection Board, in accordance with Article 13 of the Law on the Protection of Personal Data.
The User undertakes to ensure that the information provided to ISTAW is complete, accurate, and up to date and agrees to promptly update any changes to this information. ISTAW shall not be liable for any failure or deficiency arising from the User’s failure to provide updated information. The User acknowledges and declares that if they make a request resulting in the non-use of any of their personal data by ISTAW, they may not be able to fully benefit from the services provided by ISTAW, and any liability arising in this regard shall belong to the User.
Retention Period of Personal Data
ISTAW will retain the personal data provided by the User for the duration of providing the services, in order to fulfill the obligations arising from the nature of the services. In addition, ISTAW may retain personal data for a limited period, as determined by the relevant legislation and solely for the purpose of conducting necessary defenses in case of any disputen that may arise between ISTAW and the User, within the statutory limitation periods.
Data Security Measures, Commitments, and Responsibilities
Dispute Resolution, Applicable Law, and Jurisdiction