GENERAL DATA PROTECTION REGULATION (GDPR) POLICY

A) Purpose, Legal Basis and Scope of Personal Data Processing as Data Controller

GRN LOGISTICS TECHNOLOGIES INC. (hereinafter “TIRPORT” or “Data Controller”), Article 3(1) (i) of the Personal Data Protection Law No. 6698), Regulation 2016/679/EU (General Data Protection Regulation (hereinafter referred to as “GDPR”)) GDPR Article 4(7), the use of our website https://tirport.com (“website”), as well as the processing of your personal data in connection with the sale of our services (GDPR Article 4(2), KVKK Article 3(1) ( e) We will enlighten you about.

In addition to the use of our website, you can contact us about the processing of your personal data in connection with the sale of our services, in writing, by registered letter with return receipt requested to the following address, or via the e-mail addresses we have specified:

Data Protection Officer: Burcu Kale

Address: Atatürk Mahallesi, Ataşehir Boulevard Ata Plaza 3/3, No:17/77, Floor:9, 34758 Ataşehir / Istanbul

E-mail: [email protected]

KEP address: [email protected]

In accordance with this Policy, TIRPORT explains that as Data Controller, it collects and processes personal data regarding the services it offers and will provide to you, what kind of data is collected within this framework, how this personal data is used, what your rights are over your personal data processed and how you can exercise these rights.

Your personal data is processed in accordance with the KVKK and GDPR regulations, especially the Constitution. In this context, personal data may be processed in the following ways in accordance with the relevant legislation:

  • expressly stipulated in the law
  • It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract.
  • The person concerned has been made public by himself
  • Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
  • Data processing is mandatory for the establishment, exercise or protection of a right
  • Obtaining your express consent

B) Creation of Log Files within the Scope of Viewing the TIRPORT Site

Every time you log in to the TIRPORT page, our system automatically saves data and information electronically by requesting it. In this context, the following data (“mandatory technical data”) are collected:

  1. User’s IP address,
  2. the user’s operating system,
  3. Internet service provider of the user,
  4. Information about browser type and version,
  5. Access date and time,
  6. Websites from which the user system accesses our website,
  7. Websites accessed by the user through our website.

Mandatory technical data is also recorded in our system’s log files. We collect and use this technical information in order to ensure network security, marketing, to provide a better service to our members, and to continuously improve our website. The purpose of the storage in log files is to provide the infrastructure and flow of the website. However, we use data to ensure the security of our information technology systems. In this context, the data is not analyzed for any marketing purposes. Our legal basis for the temporary storage of data and log files is Article 5(f) of the KVKK and Article 6(1) (f) of the GDPR.

C) About the Cookies Collected on TIRPORT and the Use of the Services Offered

Cookies are small texts that are stored on your computer or network server via browsers by the websites you visit. When you visit TIRPORT’s website, some of the data on your computer may be stored as “Cookies”. The use of these cookies provides a link between your browser and the server.

When you visit TIRPORT, a subheading will appear informing you about the use of cookies on our websites. If you click “Accept all cookies”, you accept all cookies on our website. By clicking on the “Cookie Settings” option, you can determine which types of cookies you accept. You can withdraw your consent at any time and change the cookie settings.

For more information about the cookies we use, their purpose and legal basis, you can visit our Privacy and Cookie Policy.

D) Our Data Processing Activity within the Scope of Membership

Your personal data processed through the TIRPORT Website or Mobile Application; to carry out our commercial activities and invoicing processes, to provide support services within the scope of the contract and within the framework of service standards, to develop our products and services, to carry out advertising, promotion and campaign processes if you have approved in advance, to carry out corporate communication activities, to carry out systematic reporting processes, to carry out logistics activities, to request It is processed for the purposes of following up the complaints, informing the authorized persons, institutions and organizations, and complying with the information storage, reporting and information obligations stipulated by the legislation and other authorities. In this context, your personal data may be stored, preserved and transferred by TIRPORT in accordance with the periods stipulated in the law, in order to ensure that the technical, logistics and similar processes of third parties can be provided by the Seller, pursuant to the performance of the distance sales contract and other contracts and the legal reasons clearly stipulated in the laws.

Based on your express consent in accordance with Article 5(1) of the KVKK and Article 6(1(a)) of the GDPR;

  • Execution of advertising, promotion and campaign processes,

KVKK Article 5(2) (c) with Art. 6(1) GDPR (b) under a contractual obligation pursuant to;

  • To carry out our commercial activities and invoicing processes,
  • To perform service processes, within the scope of the contract and within the framework of service standards   provide support services,
  • To develop our products and services, to carry out systematic reporting processes,
  • To carry out logistics activities,
  • Follow up on requests/complaints.

Within the scope of our legitimate interest in accordance with GDPR Article 6(1) (f), KVKK Article 5(2) (f);

  • To follow up requests/complaints,
  • The performance of legal obligations, including compliance with the rules to which TIRPORT is subject, or the performance of a task in the public interest or the execution of an order of an official authority.

Within the scope of fulfilling a legal obligation pursuant to Article 5(2) (a), Article 5(2) (ç) and GDPR Article 6(1) (c);

  • Providing information to authorized persons, institutions and organizations
  • To comply with the information retention, reporting and information obligations stipulated by the legislation and other authorities.

For the aforementioned purposes, we collect the following data from you during membership:

Name-surname, e-mail address, TCKN, mobile phone, landline phone, province, district, district, neighborhood, street, door no, zip code

During your order, we collect the following data from you:

Your criteria and preferences regarding the vehicle you will choose, your loading and unloading addresses, the loading and unloading times you receive the service, the details of your cargo and the data of the transport company you prefer during the activity, the contact person and number.

E) Our Retention Period of Personal Data

TIRPORT retains your personal data for the period specified in the relevant legislation or for the period required for the purposes of processing. In this context, legal obligations regarding personal data processing are taken into account. However, in the event of any legal dispute that may arise between you and TIRPORT, your personal data may be stored for the duration of the statute of limitations determined in accordance with the relevant legislation, for the purpose of making the necessary defenses within the scope of the dispute. In the event that the purpose of processing personal data disappears or the period expires, personal data will be deleted, destroyed or anonymized unless there is another legal basis for keeping personal data. Documentation and retention obligations arise from local laws regarding trade, tax. These storage periods can be up to 10 years.

F) Requirements for Providing Personal Data

Your personal data collected through the TIRPORT website is a requirement within the scope of the performance of the purchase and sale contract within the scope of the products offered by us. If you do not provide us with your personal data, possible sales of products will be technically and legally impossible.

G) Transfer of Personal Data to Third Parties

For the above-mentioned purposes, your personal data you share with TIRPORT is sent to our business partners and main shareholders, our suppliers, transportation and cargo companies for the execution of our logistics activities, the legally determined message management system for sending commercial electronic messages to users, hosting and cloud storage services abroad. is transferred to legally authorized public institutions and organizations limited to the purpose requested by the relevant public institutions and organizations within the legal authority, and to legally authorized private legal persons, limited to the purpose requested by the relevant private legal persons within the legal authority.

In addition, the information of the TIRPORT member driver who will carry out the said logistics activity is shared, limited to the purpose within the scope of the activity, in order to effectively provide the logistics activity planned to be carried out to the personnel or responsible persons determined by the TIRPORT member Loader.

In addition, the User’s Name and Contact Information, pursuant to the payment institution framework agreement to be approved at the payment stage, and in accordance with the Regulation on the Prevention of Laundering Proceeds of Crime and the Financing of Terrorism, published in the Official Gazette dated 9 January 2008 and numbered 26751, in order to verify the identity of the licensed payment, with which we cooperate. will be shared with the organization.

H) Rights of Personal Data Owner

11th article of KVKK. As the data owner;

Learning whether personal data is processed or not,

If personal data has been processed, requesting information about it,

Learning the purpose of processing personal data and whether they are used in accordance with their purpose,

Knowing the third parties to whom personal data is transferred at home or abroad,

Requesting correction of personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,

Requesting the deletion or destruction of personal data in the event that the reasons requiring its processing disappear, although it has been processed in accordance with the provisions of the KVKK and other relevant laws, and requesting the notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,

Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,

Requesting restriction of processing activity,

Complaining to the Personal Data Protection Board,

You have the right to demand the compensation of the damage in case of loss due to the unlawful processing of your personal data.

Pursuant to Article 13/1 of the KVKK, in order to use your rights set forth in this article, fill out your request, application form and the documents encouraging your identity completely, and make sure that TIRPORT’s Atatürk Mahallesi, Ataşehir Bulvarı Ata Plaza 3/3, No: 17/77, Kat: 9, 34758 Ataşehir / Istanbul address in person or through a notary public or TIRPORT’s [email protected] address with a secure electronic signature or [email protected] Your application will be evaluated and finalized within 30 (thirty) days if it is sent to the address by mobile signature or to the e-mail address you have previously notified and registered in TIRPORT’s system.

In case of a written response to the requests and there is an additional cost for this reason, you may be charged a fee according to the tariff determined by the Personal Data Protection Board.

If your application is not answered at all or on time, or if the answer is found insufficient, you can file a complaint with the Personal Data Protection Board (KVKK Art. 14-15).

Personal Data Protection Board

Address : Nasuh Akar Mah. Ziyabey Cad. 1407 St. No: 4 06520 Balgat-Cankaya/Ankara, Turkey

Phone : +90 312 216 5050

Website : https://www.kvkk.gov.tr

The GDPR (Reg. EU 2016/679) and your rights in case of its implementation are as follows:

  • right of access
  • Right of rectification
  • Right to erasure (“Right to be forgotten”)
  • Right to restriction of processing
  • Right to data portability
  • Right to object (see Section 9.2 above)

To exercise your rights, you can send an e-mail to [email protected] or KEP ADDRESS. Please note that we are required to process your personal data in accordance with the legal obligation to fulfill your request and for identification purposes.

Moreover; You can delete your user registration on TIRPORT at any time and exercise your right to be forgotten in this context. All your data will be automatically and irreversibly deleted from our systems, except for the data that is required to be kept legally by Turkish Legislation.

I) Consent

We inform you that if you give us your consent for the processing of your personal data, you can withdraw your consent at any time. In all other cases, or if you have difficulty revoking your consent on this website, do not hesitate to contact TIRPORT.

Withdrawal of your consent will only be applied for the future and will not affect the legality of data processing carried out in the past. In some cases, we may have the right to continue processing your personal data on a different legal basis despite the withdrawal, eg performance of the contract, fulfillment of the legal obligation of the data controller.

J) Information About Sending Commercial Electronic Messages

You can change and update your positive or negative preferences for receiving commercial electronic messages, which you have given while subscribing to the website or mobile application of the electronic commerce platforms operated by TIRPORT, by accessing the “My Account” section at any time, or by sending an e-mail under the e-mail messages sent to you. You can tick the option to unsubscribe.

Termination of membership does not mean withdrawing your consent to receive commercial electronic messages. For this reason, be sure to complete all the procedures to revoke your consent.

K) Right of Objection Pursuant to Article 21 GDPR

Article 6(1) GDPR (e) or You have the right to object to the processing of personal data about you, including profiling, within the scope of subparagraphs (f) at any time, on grounds relating to your particular situation.

The data controller cannot process your personal data unless it can show a strong legitimate reason that is above the interests, rights and freedoms of the data owner or the establishment, exercise or protection of a legal right.

Where personal data is processed for direct marketing purposes, you always have the right to object to the processing of your personal data for marketing, including profiling to the extent that it relates to such direct marketing.

If you object to the processing of your data for direct marketing purposes, personal data will no longer be processed for such purposes. In the context of the use of information society services and regardless of Directive 2002/58/EC, you can exercise your right to object by automatic means using technical specifications.

L) Changes to the Policy

TIRPORT can always make changes in this Personal Data Processing and Protection Policy. These changes will become effective immediately upon the publication of the amended new Privacy/Personal Data Protection Policy. You, our members, will be informed about the changes in this Personal Data Processing and Protection Policy.