As Baypınar Unlu Mamülleri (“Baypınar” or the “Company”), we care about the security of the personal data of our dealers and dealer employees who use the b2b.baypinar.com dealer portal (the “Portal”). This notice has been prepared to inform you, in our capacity as data controller, under Law No. 6698 on the Protection of Personal Data (“KVKK”) and related legislation.
1. Data Controller
- Company: Baypınar Unlu Mamülleri
- Address: Fevziçakmak Mah. Özlem Cad. No: 22/E, 42050 Karatay / Konya, Türkiye
- Phone: +90 332 351 39 00
- E-mail: [email protected]
2. Personal Data Processed
- Identity and contact details: name and surname, mobile phone number, e-mail address.
- Dealer (customer) details: the trade name, account code, tax details, address and contact details of the customer account you are linked to.
- Customer transaction details: basket, order, invoice, account movements, balance and payment records.
- Financial details: for card payments, the masked card number (e.g. 4543 60** **** 1234), the cardholder's name, the transaction amount and bank approval/reference numbers. The full card number, expiry date and security code (CVV) are not stored by our Company; this information is sent directly to the bank's secure payment infrastructure during payment.
- Transaction security details: one-time verification codes sent for sign-in, session information, IP address, date and time, and transaction records (logs).
3. Purposes of Processing
- Creating Portal accounts, verifying identity and ensuring secure sign-in (verification code by SMS),
- Receiving, approving, preparing, delivering and invoicing orders,
- Providing dealers with account, balance, credit limit and statement information,
- Collecting card payments and recording them in our accounts,
- Handling requests, complaints and returns, and communicating with dealers,
- Carrying out information security processes and preventing misuse and fraud,
- Fulfilling obligations arising from tax, commercial and accounting legislation,
- Providing information to authorised institutions and organisations as required by law.
4. Legal Grounds and Method of Collection
Your personal data is collected electronically through the Portal, during order and payment transactions, from information provided to our Company when the dealer account is created, and from our accounting system. Your data is processed on the following legal grounds set out in Article 5(2) of the KVKK:
- (c) it is directly related to the conclusion or performance of a contract,
- (ç) it is necessary for the data controller to fulfil its legal obligations,
- (e) it is necessary for the establishment, exercise or protection of a right,
- (f) it is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
5. Transfer of Personal Data
Your personal data may be transferred to the following recipients, limited to and in proportion with the purposes above:
- The bank providing payment services for card payments (Kuveyt Türk Katılım Bankası A.Ş.),
- The SMS service provider for delivering sign-in verification codes,
- The server and IT service providers hosting the Portal, and the accounting software provider,
- Financial advisers and auditing firms we work with,
- Distribution/logistics partners for the delivery of orders,
- Authorised public institutions and judicial authorities, upon request.
Your personal data is not transferred abroad.
6. Retention Period and Security
Your personal data is retained for as long as the purpose of processing requires and for the limitation and retention periods set out in the relevant legislation (e.g. 10 years for commercial books and records); at the end of that period it is deleted, destroyed or anonymised. Technical and administrative measures such as encrypted communication (SSL/TLS), access authorisation and transaction logging are taken to keep your data secure.
7. Cookies and Browser Storage
The Portal does not use advertising or marketing cookies. Only essential browser storage is used to keep you signed in and to remember your basket and display preferences (e.g. theme). You can delete this data in your browser settings; you will then need to sign in to the Portal again.
8. Rights of the Data Subject
Under Article 11 of the KVKK, you have the right to apply to our Company to:
- Find out whether your personal data is being processed and, if so, request information about it,
- Find out the purpose of processing and whether the data is used in line with that purpose,
- Know the third parties, in Türkiye or abroad, to whom the data is transferred,
- Request correction if the data is incomplete or inaccurate,
- Request deletion or destruction of the data under the conditions set out in Article 7 of the KVKK,
- Request that any correction, deletion or destruction be notified to the third parties to whom the data was transferred,
- Object to a result against you arising from the analysis of the data exclusively by automated systems,
- Claim compensation for damage suffered due to unlawful processing.
9. How to Apply
You may submit requests regarding your rights, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, in writing together with information that identifies you, to Fevziçakmak Mah. Özlem Cad. No: 22/E, 42050 Karatay / Konya, Türkiye, or send them from the e-mail address you previously provided to our Company and that is registered in our system to [email protected]. Applications are concluded free of charge within 30 (thirty) days at the latest, depending on the nature of the request.