This translation is provided for information only; the Turkish text prevails.
1. Identity of the Data Controller
As Mizanplus Gıda Ticaret Anonim Şirketi (“Mizanplus” or the “Company”) (Address: Üniversite Mah. Sarıgül Sk. İstanbul Teknokent No: 37/1 İç Kapı No: 43 Avcılar/İstanbul; Tax Office / Number: Avcılar / 6222226119; MERSİS Number: 0622222611900001; email: info@paketmaster.com), providing our products and services in the best possible way is of great importance to us. Accordingly, we wish to inform you under Personal Data Protection Law No. 6698 (the “Law”) about the personal data we obtain as data controller.
This notice is addressed to visitors to paketmaster.com, pos.paketmaster.com and Paketmaster applications, business representatives and personnel opening Paketmaster accounts, and persons contacting us through the contact form or other channels. For data about businesses' own customers, couriers and personnel processed through Paketmaster, the relevant business is the data controller; Mizanplus acts as data processor, and those persons should consult that business's privacy notice.
2. Personal Data Processed and Purposes of Processing
We process: identity information (first and last name); contact information (email, telephone, business address); account and transaction security information (username, password hash, IP address, device and browser information, session and transaction logs); billing and payment information (billing name, tax/Turkish identity number, transaction information provided by the payment institution – we do not store your card number); request, complaint and support correspondence; and Site and Platform usage and marketing information (pages visited, source and campaign information, cookie data, information submitted through the contact form). We do not process special categories of personal data; please do not send us such data. Your personal data is processed for the following purposes:
Creating your account, verifying your identity and providing Platform services,
Conducting processes for conclusion and performance of the agreement,
Conducting finance and accounting processes, invoicing and collection,
Managing requests, support and complaints,
Measuring marketing activities (identifying the channel or campaign through which you arrived), promoting our products and services and presenting content suited to your preferences (for nonessential cookies, within the permission described in the Cookie Policy),
Sending commercial electronic communications (where legislation does not require approval, or with your approval) and service notifications concerning the Platform,
Ensuring information and data security and continuity of information systems, preventing misuse and maintaining logs,
Carrying out work necessary to improve our products and services, reporting, analysis and error detection,
Fulfilling requests from official institutions and organizations and implementing decisions communicated to the Company,
Fulfilling legal obligations and following legal proceedings and disputes,
Fulfilling statutory retention and archiving obligations.
3. Transfer of Personal Data
For the above purposes and to the extent necessary, your personal data may be transferred to: (i) suppliers providing server hosting, email delivery, analytics and advertising measurement services; (ii) payment institutions and banks; (iii) advisers such as e-invoice integrators, accountants and lawyers; (iv) our group companies; and (v) legally authorized public institutions and organizations and judicial authorities, in accordance with Articles 8 and 9 of the Law.
International transfers: Platform data is hosted in Amazon Web Services data centers in Frankfurt (Germany), and transactional emails are sent through Amazon SES. The Site and Platform also use Google (Google Tag Manager, Google Analytics 4, Google Ads), Microsoft (Clarity) and Meta (Pixel) services; contact form records are held on Google Workspace infrastructure. These providers' servers may be located abroad. Such transfers are carried out under the standard contracts announced by the Personal Data Protection Board pursuant to Article 9 of the Law. Analytics and marketing cookies operate only if you give explicit consent as described in the Cookie Policy.
4. Methods and Legal Grounds for Collecting Personal Data
For the purposes above, in accordance with the Law's fundamental principles, your personal data is collected through automated or non-automated means from information you communicate directly orally or in writing, telephone, email and similar channels, registration, contact and support forms on our website and Platform, cookies, payment institutions and authorized bodies. Collection is based on and limited to the legal grounds in Article 5(2) of the Law: performance of a contract, fulfillment of a legal obligation, express provision in laws, establishment, exercise or protection of a right, legitimate interests of the data controller, and, where necessary, your explicit consent.
Based on the necessity of processing personal data directly related to conclusion or performance of a contract, your data is collected to open your account, conclude and perform the User Agreement, provide Platform services, invoice and collect payments, provide technical support, and answer requests and complaints.
Based on the necessity for the Company to fulfill its legal obligations, your data is collected to fulfill obligations set out in legislation applicable to the Company, particularly Law No. 6563 on the Regulation of Electronic Commerce, Law No. 5651 and tax and commercial legislation, and/or decisions, guidelines and guidance published by competent authorities; inform authorized persons, institutions and organizations; ensure activities comply with legislation; follow and conduct legal affairs; and conduct finance and accounting activities.
Based on the necessity of processing data for the establishment, exercise or protection of a right, your data is collected to conduct legal and litigation matters and retain contractual records for applicable limitation periods.
Based on the necessity of processing data for our legitimate interests, provided this does not harm your fundamental rights and freedoms, your data is collected to ensure information security and maintain logs, conduct aggregate usage analyses to improve the Platform, record the campaign and channel from which contact form and registration applications originated, and promote similar products and services to existing customers.
Based on your explicit consent, your data is collected for nonessential (analytics and marketing) cookies and commercial electronic communications where legislation requires approval. You may withdraw your explicit consent at any time through the cookie preferences panel or the contact channels below.
Retention period: Your personal data is retained for the period required by the processing purpose and the retention and limitation periods prescribed by legislation (for example, 10 years for commercial books and records and the periods under Law No. 5651 for traffic records); at the end of that period it is deleted, destroyed or anonymized. If your account is closed, your Platform data is returned to you or deleted within the period specified in the User Agreement.
5. Your Rights Regarding Your Personal Data
We remind you that under the Law you have the right to learn whether your personal data is processed and, if so, request information; learn the processing purpose and whether we use it accordingly; learn the third parties to whom it is transferred domestically or abroad; request correction of incomplete or inaccurate processing; request deletion, destruction or anonymization when the reasons requiring processing cease; request that these actions or corrections be notified to third-party recipients; object if you believe analysis of processed data exclusively through automated systems produces a result against you; and request compensation for damage suffered due to unlawful processing.
Under the Law, you may submit applications concerning your personal data:
In person or through a notary to Üniversite Mah. Sarıgül Sk. İstanbul Teknokent No: 37/1 İç Kapı No: 43 Avcılar/İstanbul, with identity verification; or
To info@paketmaster.com using your secure electronic or mobile signature; or
By emailing info@paketmaster.com from your email address registered in our system; or
Through other procedures specified in the Personal Data Protection Law and relevant legislation, with identity verification.
In accordance with Article 13 of the Law, the Company shall resolve applications free of charge according to their nature and within no more than 30 (thirty) days. If a request is rejected, the reasons shall be explained in writing or electronically. If the procedure incurs costs, the tariff determined by the Personal Data Protection Board shall apply. Your application must contain your first name, last name, signature (for written applications), Turkish identity number (passport number for foreigners), address or email for service and the subject of the request.
6. Cookies
The cookies used on the Site and Platform, their types and lifetimes, which cookies depend on your permission and how to manage preferences are described in the Cookie Policy.
7. Updates
This notice may be updated to reflect changes in legislation or our processing activities. The current text is published with its update date at paketmaster.com/kvkk.