Hepsiglobal Privacy Notice

As Hepsiglobal, we show essential care and sensitivity for the protection of your personal information. For this reason, we are sharing the process related with the processing of your personal information via Privacy Notice with a concern of transparency.

This Privacy Policy aims to disclose how we collect and process your personal information via the website, products and services (including the payment services) and all applications of Hepsiglobal (hereafter all of them will be referred to as “Services”) without considering how you used or reached those Services.

Hepsiglobal offers services to its customers in two ways:

• Access to products or services with minimum information required for shopping without being a member,
• As a member, you can have a customized shopping experience and allow us to further process your information and profile it so that we can provide customised shopping experience

If you are a member;

• By analyzing your previous orders, we can offer the complementary parts of the products you have previously purchased so that you can buy them easily,
• By seeing your past orders on a single page, we can manage your orders without the need to call customer service,
• We can offer you products similar to the products you have bought before,
• We can show you other products that are compatible with a product you just bought,
• We can present the best selling products on our site to your attention,
• In short, it is possible for us to create a user experience that suits your general shopping taste and habits.

1.  Identity and Contact Information of the Data Controller

The data controller related with the collecting and processing your personal data compatible with General Data Protection Regulation (“GDPR”):

D-Market Elektronik Hizmetler ve Ticaret A.Ş.

Address: D-Market Elektronik Hizmetler ve Ticaret A.Ş.

Telephone Number: 0850 252 40 00

Website: www.hepsiglobal.com

2. Contact Details of Data Protection Officer

In order to supervise the process of protecting your personal data, we assigned a data protection officer. You can contact our protection officer regarding this Privacy Policy and processing your personal data any time you want.

You can reach contact details of our protection officer below:

Address:Kuştepe Mah. Mecidiyeköy Yolu Cad. Trump Towers Kule 2 Kat:2 No:12 34387 Şişli/İstanbul

E-Mail: dataprotection@hepsiglobal.com

3. What type of personal data is gathered and processed by Hepsiglobal?

With the purpose of providing our services, when you create a Hepsiglobal account, give information via online electronic forms, provide information updates by logging into your Hepsiglobal account and contact us by other options, we collect your personal data.

3.1. Personal information that we gather while you are using our service and creating a Hepsiglobal Account

• Personal information that we can use to identify you such as first name, middle name, last name or e-mail that you share with us while creating a Hepsiglobal account
• If you are using our payment services as a Seller or a Member, information that you share with us while using those services such as E-mail, IP address, Credit/Bank Card information etc.
• Information you provide related to buying or selling
• Information you provide while using our messaging tools
• Financing information (e.g. Credit/Bank Card information, payment methods, payment history information)
• Information required for delivery, billing and customs transactions (shipping address, other identification numbers etc.)
• Country, interests and preferences if required
• Additional information that you share with us while using online electronic forms, adding/updating information to your Hepsiglobal Account, communicating via using member chats, questions, dispute resolutions and using customer service with your consent
• The data we may/have to gather in order to verify the collected data of your identity in accordance with legislations in force

3.2. Automatically collected personal information when you use our services or create a Hepsiglobal account

• Data associated with your Hepsiglobal account as a part of services that you use (transaction cost, time/place of transaction, transaction method, hashed card number, card holder name).
• Data associated with your Hepsiglobal account as a part of your actions via services that you use (adding a product to shopping cart, saving your search history)
• Ad preferences and information that you provide while contacting us
• Your IP address and location data of your mobile device
• The statistics related with the use of Hepsiglobal Services, information related with the websites and their data traffic, URL routing, advertising related information, your IP address, access time, browser data history, language preferences.

3.3. Personal information we collect via Cookies and similar technologies

• While providing our services, just like other websites, we use “cookies” and other identifiers to collect your personal information. These datas are collected from devices that you use (including mobile devices).
• As a part of using our services, ads and pages that you visited from your e-mail, access time, frequency/duration of visits, clicked urls and data related to your online actions.
• Data related to Ads shown to you, how frequently they are shown, the time and location of those ads and the data of whether you buy those products or not.
• Your user segment and category (e.g. interested in beauty products)
• The model/type of your device, the type/version of your operating system, type/preferences of your browser, device profile, advertising profile, cookie related data (e.g. cookie ID)
• The IP address for this device while reaching our services and the location data of your mobile device.

For detailed information, view the Cookie Policy.

3.4. Personal information we gather from social networks

• The data that you provide if you link your Hepsiglobal account with your social accounts or other service providers (such as Google or Apple).

4. The purposes of Hepsiglobal in the processing for which the personal data are intended as well as the legal basis for the processing

As Hepsiglobal, we process your personal information to provide H Hepsiglobal Services and for the development of these services within the purposes stated below fully complying with law. For example, providing and developing services, optimizing the user experience on our website, providing a better user experience with personalized advertising, contacting you about your Hepsiglobal account and other services, providing customers service and marketing activities, offering you personalized ads, detecting and preventing fraud or illegal activities.

4.1. Providing services and execution of the contract

4.2. Our legal responsibilities

4.3. Legitimate interest

4.4. Consent

5. Does Hepsiglobal share your personal information?

As Hepsiglobal, we may share your personal information in order to effectuate the statements stated above with the categories of recipients stated below:

5.1. Other Hepsiglobal Users

5.2. Shipping Companies (e.g. PTS… etc.

5.3. Payment service providers

5.4. Website, application and service providers for the tools.

5.5. Law enforcers, courts, government agencies or authorize public institutions, intergovernmental or supranational organizations

5.6. Credit agencies

5.7.Third parties using our single sign on service (Apple, Google)

6. International Data Transfer

Hepsiglobal, headquartered in Turkey and therefore is an electronic trading platform that also servers in Turkey. Therefore, your personal data being processed and stored in Turkey. However, some of the services we use are systems belonging to international service providers. There may be limited user data in these systems. Regarding this data, it is recommended to review the Privacy Policies of the relevant

Data transfer agreements are made between the aforementioned data processors and Hepsiglobal.

7. The time period for the retention of the data and destruction of the data

Your personal data will be stored by Hepsiglobal and our service providers in accordance with the applicable data protection laws in order to fulfill the processing purposes specified in this Privacy Statement, unless a longer retention period is required or stipulated by the applicable law. At the end of the retention period, we will delete your personal data in accordance with our retention and destruction policy or anonymize your data, again in accordance with our retention and destruction policy, unless we are legally obliged to keep your personal data longer (e.g. legal compliance, tax, accounting or audit).

We will block access to your data instead of deleting it to the extent permitted and required by law.

Some of the criteria used to determine retention periods are as follows:

• The existence of our service provisions with you and the continuity of those services we provide for you, for example; having had an account with us and continuing to use our services.
• Existence of a legal obligation to which we are subjected to (e.g. some laws require to keep records of your transactions for a certain period of time before deleting).
• We may retain data for sole purposes, if there are reasonable requirements, or if it is necessary to meet legal requirements, resolve disputes, prevent fraud and abuse, even after we close your account, or even if we no longer need this information to provide these services.

8. What are my rights?

Your rights are listed below and you can use your rights by sending an e-mail to dataprotection@hepsiglobal.com

Right of access: Accessing information about your personal data processed by Hepsiglobal and the purpose of using your personal data by Hepsiglobal and obtaining information relating with these issues; You have the right to request a copy of your personal data of any kind.

Right to rectification: You have the right to complete your missing personal data at any time and request correction of your inaccurate personal data.

Right to erasure: You have the right to request the deletion or destruction of your personal data where it is no longer necessary for the purposes for which it was collected.

Right to restriction: You have the right to request restrictions on the processing of your personal data as long as we determine any submission of request regarding the correction or completion of your personal data or the situations where you object to the processing of the data are justified by legitimate interests. If you request to use your right to restriction, we will only process information with your consent or for the purpose of presenting, exercising or defending legal claims.

Right to data portability: You have the right to receive personal data you share with us in a formatted, commonly used and machine-readable format, as well as transferring this information to another control unit when the data processing is done on the basis of a consent or contract and by automated means.

Right to withdraw consent: You have the right to withdraw your consent at any time where applicable.

Right to object: If your personal data is processed within the framework of our legitimate interests, you have the right to object to the processing of your personal data for reasons related to your particular situation. This right also applies for profiling. If your personal data is processed by Hepsiglobal for direct marketing purposes, you always have the right to object to the processing of your personal data for such marketing activities, including profiling, to the extent relevant to such direct marketing.

Right to lodge a complaint to the data protection authorities: As Hepsiglobal, we are ready to process your requests with precision and do our best to clarify your doubts about your privacy. However, you have the right to lodge a complaint with a competent data protection authority at any time.

9. Can Children Benefit From The Services Offered By Hepsiglobal?

Hepsiglobal does not sell products that children can buy. We sell products for children only adults can buy. If you are under the age of 18, you can only use Hepsiglobal Services through a parent.

10. Updating of the Privacy Notice

This Privacy Statement may be updated from time to time. All changes will be posted on this website. You can find the latest update date at the top of the Privacy Statement.