Protection of Personal Data

The Personal Data Protection Law, which aims to protect the privacy of individuals' private lives and their fundamental rights and freedoms in relation to the processing of personal data, was published in the Official Gazette on April 7, 2016, and came into force. We are sharing information about the key topics in the law and our Company's policy on the matter below.

WHAT IS PERSONAL DATA? :Personal data refers to any information shared with PumpDragonsrelated to identified or identifiable real and legal persons, with the purpose of carrying out activities and services.

WHAT IS THE PROCESSING OF PERSONAL DATA? :The processing of personal data refers to all actions performed on the data such as obtaining, recording, storing, preserving, changing, rearranging, disclosing, transmitting, receiving, making it accessible, classifying, or preventing its use, either by automated means or non-automated means, as part of a data recording system.

WHO IS A DATA PROCESSOR?: A data processor is a natural or legal person who processes personal data on behalf of the data controller based on the authority granted by the data controller.

WHO IS A DATA CONTROLLER? :The data controller is a natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system. As PumpDragons, we process some of your personal data for the purposes outlined below in order to provide you with better service and ensure more effective communication.

To comply with national and international regulations, including obligations for applications, information retention, reporting, and notification, set forth by the relevant authorities and institutions.

To ensure that all products and services we provide are delivered as promised.

To personalize our services and make necessary announcements and suggestions tailored to you.

WHAT ARE OUR PRINCIPLES FOR PROCESSING PERSONAL DATA?

Your personal data is processed and used by PumpDragonsin accordance with the principles below, in compliance with the procedures and principles set forth in the Law:

Compliance with law and fairness.

Accuracy and up-to-date information.

Processed for specific, explicit, and legitimate purposes.

Relevant, limited, and proportionate to the purpose for which they are processed.

Retained for as long as necessary for the purpose they were processed for, in accordance with the relevant legislation.

As a rule, personal data should be processed with the explicit consent of the person concerned.

WHAT ARE THE CASES WHERE PERSONAL DATA CAN BE PROCESSED WITHOUT THE PERSON'S CONSENT?

Personal data may be processed without the person's consent if explicitly required by law.

When a person is unable to express their consent due to physical impossibility, and processing is necessary for the protection of their life or physical integrity or that of another person.

If the processing of personal data is necessary for the establishment or performance of a contract.

If processing is necessary for the fulfillment of the legal obligations of the data controller.

If the personal data has been made public by the person concerned.

If processing is necessary for the establishment, exercise, or defense of legal claims.

If processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned.

TRANSFER OF YOUR PERSONAL DATA

Your personal data may be transferred abroad with the explicit consent of the person concerned.

The transfer of your personal data abroad or within the country may occur if there is adequate protection in the destination country. If there is no adequate protection, the transfer can take place if the data controllers in both the relevant foreign country and Turkey provide a written commitment to ensure adequate protection and with the permission of the Personal Data Protection Board.

YOUR RIGHTS

As a data subject, you have the following rights:

The right to learn whether personal data is processed or not.

The right to access your personal data and request information regarding it.

The right to rectify incomplete or inaccurate data.

The right to erase or destroy personal data under the circumstances specified in the law.

The right to object to the processing of personal data.

The right to request the restriction of processing personal data.