Privacy Policy

PRIVACY POLICY AND PERSONAL DATA TEXT

RELATED TO DRESSBEST DBSIZE APPLICATION

1. Data Controller

Personal Data Protection Law numbered 6698 (the Law) has entered into force on 7 April 2016, and regulates the processing of all information related to personally identified or identifiable real persons.

This text contains statements and disclosures of Atölye Kostüm Tekstil Sanayi ve Ticaret A.Ş. ( Dressbest or the Company ) on the processing of the personal data of Dressbest customers and/or customers’ employees by Dressbest within the scope of the Law. In this context, the text is applicable on the processing of Dressbest customers’ and/or customer employees’ personal data stated in this text, via DBSize Application (Application).

Please carefully read this information text, and review the provisions on your data that is processed by Dressbest.

The terms used in this text have the following meaning under the Law:

Explicit consent: refers to consent on a particular subject, in a manner to avoid doubts, based on knowledge and free will, limited to that transaction,

Anonymization: means rendering personal data in a form that cannot be associated with a personally identified or identifiable person in any manner whatsoever, even by matching with other data,

Data subject (related person) : refers to the person whose personal data is being processed,

Personal data: means all information related to personally identified or identifiable real persons,

Sensitive personal data: means people’s race, ethnic origin, political view, philosophical belief, religion, sect, or other beliefs, clothing, membership with an association, foundation or union, health, sexual life, penal sanction, and security-related data and biometric and genetic data,

Processing of Personal data: refers to obtaining, recording, storage, retaining, alteration, re-organization, disclosure, transfer, taking over, making retrievable, classification or prevention of usage, etc. all transactions on personal data, by fully or partially automatic means or non-automatic means as part of any data recording system,

Data processor: refers to a real or legal person who processes the personal data in the name of the data controller, based on authorization given by the data controller,

Data controller: refers to a real or legal person who determines the purposes and means of processing the personal data, and is responsible for establishing and managing the data recording system.

2. Data Types and Categories of Processed Data

Dressbest processes the following personal data of its customers and/or customers’ employees within the scope mentioned above.

 Identity Information

 Name-surname, gender, nationality, age

 Contact Details

 Cell phone number, e-mail address

 Transaction Security

 Code and password details

 Audio Visual Records

 Photograph

 Other: Body Size Details

 Body size details (waist circumference, height, weight,    shoulder width, arm and leg length etc.)

 Other: Workplace and Job Details

 Workplace, department and job details


3.
Methods and Legal Reasons for Collection of Personal Data

In fulfilment of the services it offers, Dressbest obtains the personal data mentioned in this text from its customers and/or customers’ employees, using the methods described below.

· While Customers subscribe to the Application and/or use the Application, their e-mail addresses, cell phone numbers and code and password details are obtained electronically via the Application and processed by Dressbest.

· During provision of service to the Customers, body size of the customers and/or customers’ employees are obtained electronically via the Application and processed by Dressbest.

· During provision of service to the Customers, name-surname, gender, nationality and birth date details of the customers and/or customers’ employees are obtained electronically during usage of the Application and processed by Dressbest.

Dressbest, collects and processes these data in direct proportion with the purposes stated in Dressbest Privacy Policy and Personal Data Text Related to DBSize Application, in accordance with the personal data processing conditions set forth in the Law, and for the legal reasons stated in articles 5 and 6 of the Law:

Identity Information

· Processing of your personal data being necessary, provided that it is directly related to establishing a contractual relationship with you, or fulfilment of our liability arising from this agreement

· Processing of your personal data being mandatory , provided that your fundamental rights and liberties are not damaged

Contact Details

· Processing of your personal data being necessary, provided that it is directly related to establishing a contractual relationship with you, or fulfilment of our liability arising from this agreement

· Processing of your personal data being mandatory, provided that your fundamental rights and liberties are not damaged

· Processing of your personal data being mandatory for establishing, exercising or protection of a right

Transaction Security

· Processing of your personal data being necessary, provided that it is directly related to establishing a contractual relationship with you, or fulfilment of our liability arising from this agreement

· Processing of your personal data being mandatory, provided that your fundamental rights and liberties are not damaged

· Being expressly stipulated in the Laws

Audio Visual Records

· Processing of your personal data being necessary, provided that it is directly related to establishing a contractual relationship with you, or fulfilment of our liability arising from this agreement

· Processing of your personal data being mandatory, provided that your fundamental rights and liberties are not damaged

Other: Body Size Details

· Processing of your personal data being necessary, provided that it is directly related to establishing a contractual relationship with you, or fulfilment of our liability arising from this agreement

· Processing of your personal data being mandatory , provided that your fundamental rights and liberties are not damaged

Other: Workplace and Job Details

· Processing of your personal data being necessary, provided that it is directly related to establishing a contractual relationship with you, or fulfilment of our liability arising from this agreement

· Processing of your personal data being mandatory , provided that your fundamental rights and liberties are not damaged



4.
The Purposes for Processing of Personal Data
Within the scope of this text, personal data of data subjects are processed for the following purposes in accordance with the general conditions above:

Identity Information

· Conducting Activities in accordance with the Legislation

· Conducting / Supervision of Business Activites

· Conducting Goods/Services Sale Processes

· Conducting Goods/Services Production and Operation Processes

· Conducting Storage and Archiving Activities

· Conducting Agreement Processes

· Informing Competent Persons, Entities and Authorities

Contact Details

· Conducting Activities in accordance with the Legislation

· Conducting Firm/product/service loyalty processes

· Monitoring and conducting legal affairs

· Conducting communications activities

· Conducting / Supervision of Business Activities

· Conducting Goods/Services Sales Processes

· Conducting Goods/Services Production and Operation Processes

· Conducting customer relationships management processes

· Conducting Storage and Archiving Activities· Conducting Agreement Processes

· Monitoring requests /complaints

· Informing Competent Persons, Entities and Authorities

Transaction Security

· Conducting information security processes

· Conducting audit/ethical activities

· Conducting access authorizations

· Conducting /supervision of business activities

· Conducting business continuity activities

· Informing Competent Persons, Entities and Authorities

Audio Visual Records

· Conducting /Supervision of Business Activities

· Conducting Goods/Services Sale Processes

· Conducting Goods/Services Production and Operation Processes

· Conducting Agreement Processes

Other: Body Size Details

· Conducting /Supervision of Business Activities

· Conducting Goods/Services Sale Processes

· Conducting Goods/Services Production and Operation Processes

· Conducting Agreement Processes

Other: Workplace and Job Details

· Conducting /Supervision of Business Activities

· Conducting Goods/Services Sale Processes

· Conducting Goods/Services Production and Operation Processes

· Conducting Agreement Processes


5.
To Whom the Processed Personal Data May be Transferred, and for Which Purposes

Identity Information

Contact Details


Transaction Security


Audio Visual Records


Other: Body Size Details


Other: Workplace and Job Details

The personal data of data subjects which are processed within the scope of this text, may be transferred to providers, such as software providers, for purposes such as conducting goods/service sales and production, conducting goods/service purchasing processes, conducting goods/service operation processes, conducting/supervising business activities, conducting finance and accounting processes, and obtaining server service.

 

6. Data Subject’s Rights under article 11 of the Law
As the data subjects, you may convey your requests related to your rights and to exercise your rights on your personal data, by contacting Dressbest via its official e-mail address info@dressbestuniforms.com and official phone line +902122955035 or the address Dressbest Atölye Kostüm Tekstil Sanayi ve Ticaret A.Ş. - Merkez Mah. Kazım Orbay Cad. No:55 Floors: 2-3-4-5 Şişli, İstanbul/Turkey, for necessary changes, updates and/or deletions and related requests.
  • Pursuant to paragraph 1 of article 13 of the Law, you may exercise your rights mentioned above, with the following information according to the "Communique on the Principles and Procedures on Application to the Data Controller":
  • Applicant’s name, surname,
  • TR ID Number if the Applicant is a citizen of the Republic of Turkey, otherwise the nationality and passport number or ID number if any,
  • Applicant’s notification domicile or workplace address,
  • Applicant’s electronic mail address, phone or fax number for notifications,
  • Subject of the request,
  • information and documents based on the subject of request,
  • Application methods and
  • Signature, if the application is in writing.
If you convey your request with the mentioned methods, Dressbest will conclude your request as soon as possible, and within maximum thirty days, and free of charge, depending on the nature of your request. However, if the transaction involves an additional cost, Dressbest may charge the fee stated in the tariff set by the Personal Data Protection Board. In this context, data subjects have the right;
a. to learn whether his personal data are processed or not,
b. to request information if his personal data are processed,
c. to learn the purpose of his data processing and whether this data is used for intended purposes,
d. to know the third parties to whom his personal data is transferred at home or abroad,
e. to request the rectification of the incomplete or inaccurate data, if any,
f. to request the erasure or destruction of his personal data under the conditions laid down in Article 7,
g. to request notification of the operations carried out in compliance with sub-paragraphs (d) and (e) to third parties to whom his personal data has been transferred,
h. to object to the processing, exclusively by automatic means, of his personal data, which leads to an unfavourable consequence for the data subject,
i. to request compensation for the damage arising from the unlawful processing of his personal data.
In your application for exercising your rights mentioned above as the personal data subject, containing your description of the right you demand to exercise; the matter requested must be clear and comprehensible, the matter requested must be related to you, or if you act on behalf of another person, then you must be particularly authorized on that matter and your authorization must be documented, and the application must contain your ID and address details, and your ID documents must be appended to the application.