Privacy Policy
Privacy
Doctor Pdr Tools cares about your privacy. Therefore we only process data that we need for (improving) our services and we handle the information we have collected about you and your use of our services with care. We will never pass on your personal details to third parties for commercial purposes.
This privacy policy applies to the use of the website and the services provided by Doctor PDR Tools. The starting date for the validity of these conditions is 01/01/2020, with the publication of a new version the validity of all previous versions expire. This privacy policy describes what information about you is collected by us, where this data is used for and with whom and under what conditions this data can possibly be shared with third parties. We also explain to you how we store your data and how we protect your data against misuse and what rights you have with regard to the personal data you provide us.
If you have any questions about our privacy policy, please contact us. You can find the contact information at the bottom of this document.
About the data processing
Below you can read how we process your data, where we store it, what security techniques we use, and for whom it is transparent.
Webshop software
Our web shop was developed with the software of DCW&Brand. The personal data you provide to us to take advantage of our services will be shared with this party. DCW&Brand has access to your data to provide (technical) support to us, and will not use your data for any other purpose. Comodo is obliged to take appropriate security measures in accordance with our agreement with them. These security measures consist of the implementation of SSL encryption and a strong password policy. Comodo uses cookies to collect technical information about your use of the software, no personal data is collected and / or stored. Comodo reserves the right to share data collected in-house to improve services.
Email and mailing lists
MailChimp
Our website uses MailChimp, a third party that sends e-mail traffic and newsletters from our website. All confirmation e-mails you receive from our website and web forms are sent via MailChimp servers. MailChimp will never use your name and email address for its own purposes. You’ll see a ‘unsubscribe’ link below each email automatically sent via our website. If you click here, you will no longer receive emails from our website. Your personal data is stored securely by MailChimp. MailChimp uses cookies and other Internet technologies to clarify whether e-mails are opened or read. MailChimp reserves the right to use your data for further development of the services and to share (anonymize) the information with third parties.
Payment processors
Parts are parts
We use the İyzico platform for credit card payments to handle (some of) payments in our web store. İyzico processes your name, address and residence information and payment information, such as your bank account or credit card number. İyzico has taken appropriate technical and organizational measures to protect your personal data. İyzico reserves the right to use your data to further improve the service and share (anonymized) data with third parties.
All of the above assurances regarding the protection of your personal data also apply to parts of PayTR’s services where it interacts with third parties. PayTR will not store your data for longer than permitted by law.
Shipping and logistics
TNT, UPS, DHL, Fedex Express Cargo (4-7 working days varies by country )
Local Post, road shipment
If you place an order with us, it is our job to deliver your package to you as soon as possible. We use FAST services to handle deliveries. Therefore, we need to share your name, address and residence information with FAST. FAST is committed to confidentiality and will keep your information confidential. FAST does not use your personal data for any purpose other than those described above.
Purpose of data processing
General purpose of machining
We use your data only for the benefit of our services. This means that the purpose of processing is always directly related to the order you provide. If you share information with us, we will use this information to contact you later for commercial purposes – against your will – we ask for your express permission.
Your information will never be shared with third parties except to comply with accounting, shipping and other administrative obligations. All of these third parties are kept confidential by agreement between them or on the basis of an oath or legal obligation.
Automatically collected data
The data collected automatically by our website is processed to further improve our services. This information (such as your IP address, web browser and operating system) is not personal data.
Participation in tax and criminal investigation
ProCraft may be held on the basis of a legal obligation to share your data with respect to government tax or criminal investigation. In such a case, we will have to share your data, but we will oppose it within the scope of the law.
Storage times
We keep your information as long as you are our customers. This means that we protect your customer profile until you no longer want to use our services. If you tell us this, we will consider this as a demand for the right to be forgotten. On the basis of applicable administrative obligations, we must keep your invoices with your (personal) data so that we will retain that data for the current period. However, employees no longer have access to data other than the administratively required data in your customer profile and the documents we generate based on your order.
YOUR RIGHTS
Based on applicable Turkish law, you as a party have certain rights with respect to personal data processed by us or by us.
We explain what rights they have and how you can call them.
In principle, we will only send copies of your data to your previously known email address to prevent abuse. If you wish to receive data at another email address or by mail, for example, we will ask you to identify yourself. We keep records of completed requests, and manage anonymous data if the right to be forgotten is requested. You will receive all copies and copies of the data in machine-readable data format that we use in our systems. If you suspect that we have misused your personal data, you have the right to file a complaint with the Data Protection Agency of Turkey at any time.
Right to audit
You have the right to review the data we process or process at any time regarding your contact or which can be tracked back to you. You can contact him about privacy issues. We will respond to your request within 30 days. If your request is fulfilled, we will send you a copy of all data with an overview of the processors with this data, specifying the category in which we store this data, with a known email address to us.
Right to rectify
You have the right to correct any data that we process or process that may be tracked or related to your contact. You can send a request to our privacy contact about this. We will respond to your request within 30 days. If your request is met, we’ll send us confirmation that the information at the known email address has been changed.
Right to restrict processing
You have the right to limit our data about your contact or that we process or track back to you at any time. You can send a request to our privacy contact about this. We will respond to your request within 30 days. If your request is met, we’ll send a confirmation to the email address that we know will not process the data until you cancel the restriction.
Transfer right
You always have the right to have data that we process or process and which is related to your person or that can be tracked back to you, performed by another party. You can send a request to our privacy contact about this. We will respond to your request within 30 days.
If your request is fulfilled, we will send you copies of all information processed by or processed by other processors or third parties at any other email address known to us. Probably we cannot continue the service in such a case, because the secure connection of data files can no longer be guaranteed.
Right of appeal and other rights
In some cases, you have the right to object to the processing of your personal data by or on behalf of ProCraft. If you object, we will immediately stop processing the data pending your appeal. If your appeal is well established, we will make copies of the data we process or provide to you, and then permanently stop the process. You also have the right not to be subject to automatic individual decision making or profiling. We do not process your data with this right. If you feel this is the case, please contact our contact person for privacy issues.
Cookie
Google Analytics
Through our website, cookies are placed from the American company Google as part of the “Analytics” service. We use this service to track and retrieve reports on how visitors use the website.
This processor may be required to provide access to this data on the basis of applicable laws and regulations. We collect information about your browsing habits and share it with Google. Google can interpret this information along with other data sets so that it can track your actions on the Internet. Google uses this information to provide, among other things, targeted ads (Adwords) and other Google services and products.
Cookies from third parties
If third party software solutions use cookies, this is stated in the privacy statement.
Social media
Facebook
If you’re using Facebook, you can receive a message and / or ad in your social media account if you’re signed in. Doctor PDR Tools cannot access your social media account, but you can share useful or useful articles you like on Facebook. If you ask us a question via social media, we’ll record this message and your account name so we can respond to your message.
Report data leak
If we become aware of a security breach in which personal data is disclosed,
Changes to the privacy policy
We reserve the right to change our privacy policy at any time. On this page you will always find the most recent version. If the new privacy policy affects the way in which we process already collected data relating to you, we will notify you by e-mail.
Contact details
Doctor Pdr Tools
Mücahit Arslan Seyyar
Address: Doganbey Mh. Hasimiscan Cad. Tugsa Is Merkezi No:09/10 Osmangazi / BURSA/TURKEY
Phone: +90 542 116 16 42 (WhatsApp)
Email:shopify@doctorpdrtools.com
PERSONAL DATA PROTECTION AUTHORITY LIGHTING TEXT
Data controllers have certain obligations within the framework of the Personal Data Protection Law No. 6698, the secondary legislation regarding the Law and the decisions made by the Personal Data Protection Board. One of these obligations is the obligation to inform in Article 10 of the Law.
While the obligation to inform is an obligation for data controllers, it is also a right for natural persons whose personal data are processed. The obligation to inform the person concerned about the processed personal data is an indispensable condition for the legal fulfillment of personal data processing.
Fulfillment of the obligation to inform is not an obligation based on the request of the person concerned. In addition, the data controller must fulfill the obligation of disclosure in each of the cases where the explicit consent of the data subject or one of the other personal data processing conditions is present when processing personal data. Because the obligation to inform is an obligation that must be fulfilled in all cases, regardless of both express consent and other personal data processing conditions listed in the Law.
As a result of the evaluation made on the information and documents conveyed to the Authority by the relevant data controllers upon notification and complaint applications made to our Institution, or on other documents foreseen to be examined and researched by the Board;
The disclosure is not made by the data controller during the acquisition of the personal data from the data subject, made afterwards or not done at all,
The lighting content does not cover the issues listed in Article 10 of the Law No. 6698,
In lighting; The purpose of processing personal data is not limited to the processing activity, specific, clear or legitimate, expressions are used that lead to the opinion that personal data can be processed for other purposes that may come to the fore in the future,
“Legal reason”, which is one of the minimum elements of illumination, and “purpose of processing” are used in the same sense or the element of legal reason is not included at all,
In the texts used for the purpose of illumination, an understandable, clear and plain language is not used, general nature, suitable for different understanding, incomplete, misleading and wrong information are included,
In the clarification process, the purpose of the transfer and the transferred recipient group or groups are not sufficiently included,
The clarification texts are “privacy policies” or “data processing policies”, which are generally not limited to the processing activity and are a general data processing document for the data controller,
Illumination texts are not presented on a platform that can be easily accessed by the person concerned,
When the layered lighting method is preferred, basic information is not presented at the first stage, appropriate ways and methods are not followed for access to detailed information, and generally directed to privacy policies or data processing policies, before directing the relevant persons to another channel for detailed information,
Explicit consent and disclosure are presented together under the same title in the same text or platform,
If the confirmation of the lighting is requested and if the approval is not given, the service is not provided.
It has been determined that there are deficiencies and violations of the legislation such as
Data controllers should pay particular attention to the following issues while fulfilling their obligation to inform so that they do not face the sanctions specified in the Law due to the said deficiencies and violations of the legislation:
a) The proof of fulfillment of the obligation to inform belongs to the data controller.
b) The obligation to inform must be fulfilled by the data controller or the persons authorized by him during the collection of personal data from the data subject.
c) At a minimum, the information to be provided within the scope of the disclosure obligation shall be subject to the “identity of the data controller and its representative, if any, for what purpose the personal data will be processed, to whom and for what purpose the processed personal data can be transferred, the method of collecting personal data and the legal reason,” as stated in Article 10 of the Law. The rights of the relevant person listed in the article should be included.
d) According to the Communiqué on the Procedures and Principles to be Complied with in the Fulfillment of the Disclosure Obligation published in the Official Gazette dated 10.03.2018; In the event that personal data is not obtained from the data subject due to the actual impossibility or inability to reach the data subject, within a reasonable period of time after the personal data is obtained, or during the first communication in case the personal data will be used for communication with the data subject, at the latest, if the personal data is to be transferred, at the latest. At the time of the transfer of the data for the first time, the obligation to inform the person concerned must be fulfilled.
e) The purpose of processing personal data to be disclosed while fulfilling the obligation to inform must be limited to the processing activity, specific, clear and legitimate. Other possible future issues
Expressions that lead to the opinion that personal data can be processed for these purposes should not be used.
f) An understandable, clear and plain language should be used in the texts to be used while fulfilling the obligation to inform. In addition, general, vague, incomplete, misleading and incorrect information should not be included.
g) “Purpose of processing” and “legal reason” are separate elements that must be included in the notification to be made to the relevant persons while fulfilling the obligation to inform, and the “legal reason” for data collection is based on which of the processing conditions specified in Articles 5 and 6 of the Law. It should not be forgotten that it means
h) Privacy policies or data processing policies, which are not limited to the processing activity and are a general data processing document for the data controller, should not be used as clarification texts.
i) Attention should be paid to ensure that the lighting is easily accessible and noticeable, and methods that make it difficult for the relevant persons to access the lighting should not be used.
j) In cases where the transfer of personal data is in question, the purpose of the transfer and the transferred recipient group or groups should also be included in the clarification.
k) If the layered lighting method is preferred, it should be ensured that basic information (for example, the identity of the data controller and the purpose of the data processing) is presented at the first stage, before directing the relevant persons to another channel for detailed information, and it should be noted that the referred texts have a content limited to the processing activity.
In this context, data controllers must act in accordance with the Law No. 6698, the Communiqué on the Procedures and Principles to be Complied with the Fulfillment of the Disclosure Obligation, the Board decisions published on the Institution’s website, and the Fulfillment of the Illumination Obligation Guide prepared by our Institution while fulfilling the obligation to inform.