DATA CONTROLLER
Your personal data is processed by Stoneline Building Products Industry Joint Stock Company (“Stoneline” or “Company”), registered with the Istanbul Trade Registry Office under … registration number and located at Mimar Sinan Mah., Sarılale Sk. No: 4/A, Eyüp Sultan, Istanbul. This processing is carried out in accordance with the provisions of the Personal Data Protection Law No. 6698 (“KVKK”) and the terms of this Membership and Marketing Information Notice (“Notice”).
Stoneline values your privacy and respects your rights regarding the protection of your personal data. We strive to build and maintain a trust-based relationship with you. Accordingly, Stoneline processes your personal data in compliance with KVKK and other related legislation, ensures the secure storage of your data, and implements all necessary security measures against potential unlawful access. This Notice explains the scope of personal data processed by Stoneline in connection with the products and/or services offered for membership and/or marketing activities.
METHODS OF COLLECTING YOUR PERSONAL DATA
Your personal data may be collected in whole or in part, automatically or non-automatically, through:
• Stoneline’s websites (e.g., https://stoneline.com.tr/tr/);
• Physical stores and authorized service centers;
• Printed forms and surveys;
• Mobile applications, customer services, emails, phone calls, faxes, cargo/postal services;
• Sales counters (cash registers) in physical stores;
• Cookies and other tracking technologies;
• Request/complaint platforms;
• Integrated systems of authorized public institutions and third parties;
• Social media platforms and other future channels.
CATEGORIES OF PROCESSED PERSONAL DATA, PURPOSES OF PROCESSING, AND LEGAL BASES
Personal data processed under this Notice includes various categories such as visual and audio data, legal transaction data, contact information, and more. These data are processed for purposes such as membership creation and management, customer relationship management, marketing activities, compliance with legal obligations, and more. Below are specific details:
1. Visual and Audio Data
• Purpose: Ensuring legal compliance, physical security, business continuity, and customer satisfaction.
• Legal Basis: Obligations under KVKK Article 5(2) and explicit consent under KVKK Article 5(1).
• Retention Period: 10 years.
2. Legal Transaction Data
• Purpose: Managing legal processes, ensuring business continuity, and compliance.
• Legal Basis: Obligations under KVKK Article 5(2).
• Retention Period: 10 years after contract termination.
3. Contact Information
• Purpose: Emergency management, communication activities, and customer satisfaction.
• Legal Basis: KVKK Article 5(2) and explicit consent.
• Retention Period: 10 years after contract termination.
4. Processing Security Data
• Purpose: Ensuring information security and business continuity.
• Legal Basis: KVKK Article 5(2) and explicit consent.
• Retention Period: 2 years.
5. Customer Transaction Data
• Purpose: Marketing analysis, campaign management, and customer relations.
• Legal Basis: KVKK Article 5(2) and explicit consent.
• Retention Period: 10 years.
6. Marketing Data
• Purpose: Conducting marketing analysis, managing promotions, and enhancing customer loyalty.
• Legal Basis: KVKK Article 5(2) and explicit consent.
• Retention Period: 10 years.
7. Location Data
• Purpose: Managing logistics and store locator services.
• Legal Basis: KVKK Article 5(2) and explicit consent.
• Retention Period: 1 year.
TRANSFER OF PERSONAL DATA
Your personal data may be shared with limited access to authorized employees and, when necessary, with third parties under KVKK Articles 8 and 9. This includes:
• Domestic and international suppliers;
• Service providers (e.g., IT, advertising, and marketing agencies);
• Business partners and affiliated companies;
• Public institutions and legal authorities for legal compliance;
• Social media platforms for promotional purposes.
RETENTION AND DELETION OF PERSONAL DATA
Personal data collected by Stoneline is retained in accordance with KVKK, the Regulation on the Deletion, Destruction, or Anonymization of Personal Data, and other related laws. Data is deleted or anonymized when processing purposes are no longer valid or upon withdrawal of explicit consent.
YOUR RIGHTS UNDER KVKK
Under KVKK Article 11, you have the following rights:
1. To learn whether your data is processed;
2. To request information on data processing;
3. To understand the purposes of processing and ensure alignment;
4. To know third parties to whom your data is transferred domestically or abroad;
5. To request correction of incomplete or incorrect data;
6. To request deletion or destruction of data when processing purposes are no longer valid;
7. To object to adverse results arising from automated processing;
8. To seek compensation for damages caused by unlawful data processing.
Applications can be made in compliance with the “Communique on the Procedures and Principles of Application to the Data Controller” using the designated form, available through written, electronic, or other valid means as described in this Notice. Responses will be provided within 30 days. If processing involves additional costs, fees may be charged based on the tariff set by the Personal Data Protection Board.
CONTACT INFORMATION
Stoneline Building Products Industry Joint Stock Company
Zuhuratbaba Mah., Gençler Cad. No:18 D:6, Bakırköy/İstanbul
Email: [email protected]
Phone: 0212 993 1330