ABOUT THE PROCESSING OF PERSONAL DATA

1. The Identity of Our Data Controller

As Navlungo Lojistik ve Teknoloji A.Ş. (“Navlungo” or “Company”), we show maximum sensitivity regarding the security and confidentiality of your personal data. With this awareness, we present the following matters to your information within the scope of the obligation to inform us in order to act in accordance with the Law No. 6698 on the Protection of Personal Data (“Law”) as a data controller with respect to the personal data obtained.

2. Your Personal Data We Process

Within the scope of the contractual or commercial relationship you are currently in or will be in with our Company, your name-surname, T.R. identity number, IBAN number, financial data, tax number, business address, phone number, fax number, email address, signature, salary information of your employees, name surname, T.C. identity numbers, shipment content information if you are collaborating with our Company as a carrier, all data entered on the website www.navlungo.com while benefiting from the services provided by the Company, financial and identity data obtained in your support request upon receiving services, voice recordings taken by our call centers, and conversation history if online support is provided (all together referred to as “Personal Data”) are processed.

3. Transfer of Personal Data

Your personal data may be transferred to official institutions, third parties from whom our Company receives services or provides services, and third parties that provide support in areas such as storage, archiving, information technology support (server, hosting, software, cloud computing), and security; provided that it is limited to the reasons that necessitate the transfer and within the framework of the Law and relevant regulations as explained in Article 2 of this Information Form.

4. Method and Legal Reason for Processing Your Personal Data

Your personal data will be collected (i) when it is explicitly stipulated in the laws or when processing our data, (ii) for the fulfillment of the legal obligations of our Company, (iii) to establish or fulfill a contract between us, (iv) for the establishment of a right, or (v) to the extent necessary for the legitimate interests of our Company without causing harm to your fundamental rights and obligations; based on the legal reasons specified and limited to these reasons, provided that it is collected through information directly communicated by you verbally or in writing or through closed-circuit camera recording systems at our Company, using automatic or non-automatic methods.

Your Personal Data is processed based on the legal reason that it is necessary for the processing of personal data belonging to the parties to the contract for the establishment of the commercial and/or contractual relationship between the Company and us; in order to fulfill the obligations under the current regulations, including the Tax Procedure Law No. 213, the Turkish Code of Obligations No. 6098, and the Turkish Commercial Code No. 6102, legislation clearly prescribed in the laws and the legal reasons for fulfilling legal obligations. In addition, your Personal Data is processed for the legal reason that it is necessary for the legitimate interests of the Company as the data controller, in order for the Company to sustain its existence and continue its commercial activities and to ensure communication between us without harming your fundamental rights and freedoms.

The Company acts in accordance with data processing principles and obligations specified in the relevant laws including the Constitution of the Republic of Turkey, international treaties to which our country is a party, and the Law on the Protection of Personal Data (KVKK) in the processing of your Personal Data.

5. Purposes of Processing Your Personal Data

The collected personal data will be processed in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law, for the purposes of enabling personal data owners to benefit from the products and services offered by the Company, carrying out necessary work by our business units, conducting relevant business processes, ensuring legal, technical, and commercial-business security of the Company and those who have a business relationship with the Company, planning and executing the Company’s commercial and/or business strategies, and planning and executing necessary activities to recommend and promote the products and services offered by the Company according to the preferences, usage habits, and needs of the personal data owners.

6. How Do We Protect Your Personal Data?

Our Company takes all necessary technical and administrative measures in accordance with KVK legislation to prevent unauthorized access to your personal data, to prevent incorrect processing, disclosure, and alteration/deletion for unlawful reasons, ensuring its protection and security.
In case your personal data is damaged and/or seized/disclosed by unauthorized third parties as a result of attacks on our Company’s servers and/or other systems, our Company will promptly inform you and the Personal Data Protection Board.

The personal data obtained within the scope of our processing purposes are processed and stored in accordance with our processing purposes and applicable laws.

Your personal data will be deleted, destroyed, or anonymized in accordance with our Personal Data Storage and Destruction Policy (i) when our processing purposes have completely ended, (ii) at the end of the period stipulated in the law, or upon your request.

7. Your Rights as a Data Subject Under KVKK

Within the scope of the Law; (i) to learn whether your personal data is processed, (ii) if your personal data has been processed, to request information about it, to learn the purpose of processing your personal data and whether they are used in accordance with their purpose, (iii) to know the third parties to whom your personal data is transferred domestically or abroad, to request corrections if your personal data is incomplete or incorrectly processed, (iv) to request the deletion or destruction of your personal data, (v) to request that any corrections made regarding your personal data and/or the deletion or destruction operations be notified to the third parties to whom your personal data has been transferred, (vi) to object in case of a negative result arising from the processing of your processed data exclusively through automated systems, (vii) to request compensation for damages in case of harm due to unlawful processing of your personal data.

8. Conveying Your Requests Regarding the Protection of Personal Data

To exercise your rights listed in Article 11 of the Law, you can obtain the Information Request Form we have prepared from the Navlungo Information Request Form link.
Please do not forget to fill out, sign, and share the Information Request and Demand Form as specified in the form.

For the Submission of the Information Request and Demand Form;

• The mentioned application can be submitted in person at the Company’s address Sanayi Mah. Teknopark Bul. No:1/10C İç Kapı No:Z36 Pendik/Istanbul, ensuring your identity verification; or via registered mail to the same address,

• You can send it to our Company at navlungo@hs03.kep.tr; or

• You can submit it to our Company at support@navlungo.com using your secure electronic or mobile signature, or by other methods specified in the Law and relevant legislation.

Our Company will conclude the application requests in accordance with Article 13 of the Law, within 30 (thirty) days at the latest, depending on the nature of the request. If the process incurs a cost, the fee determined by the Personal Data Protection Board will be applied. In case of rejection of the request, the reasons for rejection will be communicated in writing or electronically. Detailed information about the evaluation process of application requests can be found in the Personal Data Protection and Processing Policy available at https://navlungo.com/kisisel-veri-politikalari.

I have read the information text above.