This site has limited support for your browser. We recommend switching to Edge, Chrome, Safari, or Firefox.

cart 0

No more products available for purchase

Add order notes
Subtotal Free

Shipping, taxes, and discount codes are calculated at checkout

Your Cart is Empty

Personal Data Policy

PERSONAL DATA POLICY

General information on the Personal Data Protection Law

The Personal Data Protection Law No. 6698 (hereinafter referred to as "PDPL") was adopted on 24 March 2016 and published in the Official Gazette No. 29677 dated 7 April 2016. Some provisions of the PDPL entered into force on the date of publication, and the remainder on 7 October 2016.

Information in the capacity of Data Controller

Pursuant to the PDPL No. 6698 and in our capacity as Data Controller, your personal data may be recorded, stored, updated, disclosed to and/or transferred to third parties where permitted by law, classified, and processed in the manners set out in the PDPL, within the framework described on this page.

How your personal data may be processed

Pursuant to the PDPL No. 6698, the personal data you share with our company may be processed by us — wholly or partly, through automatic means or through non-automatic means provided they form part of a data recording system — by being obtained, recorded, stored, altered, reorganised, and subjected to all other types of operations performed on data. Under the PDPL, any operation performed on data is considered "processing of personal data."

Purposes and legal grounds for processing your personal data

The personal data you share will be processed in accordance with the PDPL No. 6698 and relevant secondary regulations for the following purposes:

  • To fulfil the requirements of the services we provide to our customers and to develop our products and services, in line with contractual and technological requirements;
  • To record identity, address, and other required information for the identification of transaction owners, pursuant to Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on the Protection of Consumers, and related regulations including the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce (published in the Official Gazette No. 29457 dated 26.08.2015), the Regulation on Distance Contracts (published in the Official Gazette No. 29188 dated 27.11.2014), and other applicable legislation;
  • To arrange all records and documents underpinning payment systems, electronic or paper-based contracts in the field of banking and electronic payments, and to comply with data retention, reporting, and information obligations required by legislation and other authorities;
  • To provide information to public prosecutors, courts, and relevant public officials upon request and as required by law in matters relating to public security and legal disputes.

Third parties to whom your personal data may be transferred

For the purposes stated above, your personal data shared with our company may be transferred to individuals and organisations including, primarily, IdeaSoft Yazılım San. ve Tic. A.Ş. (which provides our e-commerce infrastructure), as well as suppliers, cargo companies, and other persons and organisations related to the services provided; programme partner organisations from whom we receive services and/or who act as Data Processors; and domestic and international organisations and other third parties.

How your personal data is collected

Your personal data may be collected and processed through the following channels:

  • Via forms on our company's website and mobile applications, capturing information such as name and surname, Turkish ID number, address, phone number, business or personal email address, as well as preferences on pages accessed with a username and password, IP records of transactions carried out, cookie data collected by the browser, and data including browsing duration and details, and location data;
  • Verbally, in writing, or electronically through our sales and marketing staff, branches, suppliers, other sales channels, paper forms, business cards, digital marketing platforms, and call centre channels;
  • From individuals who share their personal data for purposes such as establishing a commercial relationship with our company, making a job application, or submitting a proposal, via business cards, CVs, proposals, and similar means, whether in person or remotely, in physical or virtual environments, verbally, in writing, or electronically;
  • Data obtained indirectly through various channels, including websites, blogs, competitions, surveys, games, campaigns, and similar (micro) websites, social media, email newsletter reading and click behaviour, publicly available databases, and publicly shared profiles and data on social media platforms.

Personal data obtained before the PDPL came into force

Personal data that was lawfully obtained prior to 7 April 2016 — the date the PDPL entered into force — through membership registration, electronic communication consent, product/service purchases, or other means, is also being processed and retained in accordance with the terms and conditions set out in this document.

Transfer of your personal data abroad

Your personal data, collected by any of the methods listed above whether processed in Turkey or processed and stored outside Turkey, may — within the scope of the PDPL and in accordance with the purposes of the agreement — also be transferred to service providers located abroad, in countries accredited by the Personal Data Protection Board as providing an adequate level of protection for personal data.

Storage and protection of personal data

Your personal data will be stored confidentially in the databases and systems held by our company, in accordance with Article 12 of the PDPL, and will not be shared with third parties in any manner other than as required by legal obligations and the provisions set out in this document. Pursuant to Article 12 of the PDPL, our company is obliged to take the necessary measures to prevent the unlawful processing of personal data stored in its systems and databases, to block unauthorised access, and to implement software-based measures such as access management as well as physical security measures. In the event that personal data is unlawfully obtained by third parties, the matter will be reported immediately and in writing to the Personal Data Protection Board, in accordance with applicable legal requirements.

Keeping personal data up to date and accurate

Pursuant to Article 4 of the PDPL, our company is obliged to keep your personal data accurate and up to date. In this context, our customers are required to share accurate and current data, or to update it via our website or mobile application, so that our company can fulfil its obligations under applicable legislation.

Rights of personal data owners under the PDPL No. 6698

Article 11 of the PDPL No. 6698 entered into force on 7 October 2016. Pursuant to this article, personal data owners have the following rights from that date onwards. The personal data owner may apply to our company (as Data Controller) to:

  • Learn whether their personal data is being processed;
  • Request information regarding the processing of their personal data;
  • Learn the purpose of processing their personal data and whether it is being used in accordance with that purpose;
  • Know the third parties to whom their personal data has been transferred, whether domestically or abroad;
  • Request the correction of their personal data if it is incomplete or inaccurate;
  • Request the deletion or destruction of their personal data within the framework of the conditions set out in Article 7 of the PDPL;
  • Request that third parties to whom their personal data has been transferred be notified of any correction, deletion, or destruction of that data;
  • Object to any outcome that arises to their detriment as a result of the analysis of processed data exclusively through automated systems;
  • Request compensation for damages suffered as a result of the unlawful processing of their personal data.

BMM Elektronik Hizmetler Turizm Tic. Ltd. Şti., registered with the Bodrum Chamber of Commerce under registry number 14765 and MERSIS number 0178126672800001, located at Midtown Yaşam Merkezi, Muskebi Mahallesi, Kongre Sok. No:11, Bodrum / Muğla, is the Data Controller under the PDPL. The Data Controller Representative to be appointed by our company will be announced in the Data Controllers Registry and on the web address where this document is published, once the relevant legal infrastructure is in place.

Personal data owners may direct their questions, comments, or requests to any of the following contact channels: