Information Disclosure Text for Users
We, as INVISIONCARD, pay utmost attention to the security of your personal data. With this awareness, we place great importance on the protection of personal data of natural persons the Company renders services to, by processing them in accordance with the Law on Protection of Personal Data, No. 6698 (the “Law”), the secondary legislation that has been and will be put into force under the Law (regulations, communiqués and circulars), and binding decisions that have been and will be taken by the Personal Data Protection Board. In full comprehension of such responsibility, we, in our capacity as “Data Controller” as defined in the Law, process your personal data within the scope of carrying out your treatments, as explained below, and within the limits prescribed by the legislation.
1. Information on Data Controller
Pursuant to the Law, INVISIONCARD, resident at the address Güzelyurt, Ertuğrul Gazi Cd. No:29/B, 34515 Istanbul/Turkey, is the Data Controller.
2. Your Personal Data that are Processed
In order to ensure that you can use Invision Card, the following data belonging to you are processed.
Your Name, Surname, gender, Date of Birth, Turkish ID number and/or Tax ID Number, Photo, Company Logo, Company Trade Name,
Your Delivery Address, Company Address, Phone Number, Fax number, E-Mail Address,
Your social media accounts and website,
Your IBAN number,
Your Customer Transaction Details; order, return and request details, invoice details, delivery transaction details,
Your past transaction details; number of your page views, number of your clicking the save button, your average session time, your language preference,
Your Security and Technical information; your user name and password, IP details, device details, browser details, user and session cookies details,
Your status of login to and logout from the application,
In the case that you talk to a customer representative; your voice recording provided that you are warned in advance,
Your survey results,
Your wishes, suggestions, complaints and comments.
3. Purpose of Processing of Personal Data
INVISIONCARD processes your personal data:
To fulfil our obligations set forth under the Law on Protection of Personal Data, No. 6698 and the secondary legislation put into force under this Law,
To enter into and perform the contract, and to ensure the determination of the fact that the contracts to be entered into are signed by authorized persons,
To carry out financial and accounting processes,
To provide the information requested by the relevant public institutes and authorities, judicial or administrative authorities, and law enforcement authorities, when needed,
To inform authorized persons, authorities and organizations,
To share the information you provided about your business card, with third parties for which you scan your business card as required by the use of the product,
To create a user profile on the website,
To carry out your advertising activities upon your request,
To update your personal data when needed,
To carry out the logistics and cargo procedures and transactions in order to make delivery of your INVISIONCARD,
To manage and supervise the activities which are within the scope of the Company’s business,
To manage and supervise the invoicing processes,
To provide information on updates and reinforcements in the case of existence of your explicit consent,
To improve our marketing and advertising policy in the case of existence of your explicit consent,
To increase our customer satisfaction and to get to know you better,
To carry out strategic analysis studies,
To carry out all the communication activities,
To show you, our valuable customers, as references of our company,
To be able to provide after-sales support,
To ensure and carry out your information security processes,
To process your survey results and to evaluate your requests, suggestions and complaints,
In the case that you use INVISIONCARD as an employee of a company; to ensure that an admin of the company where you work can process your data, and change the card details when necessary,
within the framework of the limits specified in the Law, lawfully and in accordance with rules of honesty, and at all times in connection with and limited and proportionate to these purposes.
4. Transfer of Personal Data
Your personal data can be transferred for the above-mentioned purposes and in accordance with the conditions specified in article 8/2-a and article 9 of the Law:
To INVISIONCARD’s employees and managers,
To AWS, a company resident in Ireland, to ensure your informatics security,
In the case that you use INVISIONCARD as an employee of a company, to the admin of the company where you work to ensure that your data can be processed and updated,
To third party companies playing a part in preparation of the product,
To courier companies and private couriers for delivery of the product,
To our consultant companies conducting complaint management and risk analysis for quality control,
To our business partners, public accountants, financial advisors, independent audit companies with which we work, customs companies with which we work, and their employees, for invoice procedures, and to the licensed programs we use to ensure that the invoice procedures can be performed,
With regard to any legal dispute and to ensure your legal security, to our general counsel, lawyers, and their employees and interns,
To natural and legal persons permitted by the relevant legislation,
To other competent public institutions and organizations,
To judicial and administrative authorities,
in order to achieve the purposes listed in article
5. Methods and Legal Grounds for the Collection of Personal Data
Your personal data are collected by INVISIONCARD by automated or non-automated methods, and verbally, in writing or in electronic environment, by those means such as e-mail, phone, website, mobile application, and hardcopy forms.
They are processed in accordance with sub-paragraphs 2/a-c-ç-f of Article 5 of the Law, based upon the reasons that such processing is expressly prescribed by laws, that processing of personal data of parties to a contract is necessary provided that it is directly related to entering into or performing the contract, and that such processing is compulsory for the data controller to perform its legal obligation.
6. The Process of Storage and Destruction of Your Personal Data
Your personal data specified to be processed in this Information Disclosure Text shall continue to be recorded, processed, and transferred to the persons specified in Article 3 of this Information Disclosure Text, as long as our relationship with you as a customer continues.
Your personal data are protected with an algorithm containing MD5, SHA1 and CRC32, by converting their visual format into text, until the retention period expires. In addition, penetration tests are performed at regular intervals.
Your personal data shall be recorded, stored and transferred for the legal retention period determined under the relevant Law, and when the legal retention period expires, they shall be deleted, destroyed or anonymized in compliance with the relevant Law and the secondary legislation thereunder.
7. Rights of Data Subject Under the Law
You may apply to INVISIONCARD at any time and request to exercise your rights to:
Learn whether or not your personal data have been processed,
Request information on the procedure, if your personal data have been processed,
Obtain information on the purpose for which your personal data have been processed, and whether or not they have been used in line with the relevant purpose,
Obtain information about third parties to whom your personal data have been transferred domestically or abroad,
Request the correction of your personal data that may have been incompletely or inaccurately processed,
Request the deletion or destruction of your personal data within the scope of provisions set forth in Article 7 of the Law,
Request that the third parties to whom your personal data have been transferred be notified of the procedures set out under sub-paragraphs (d) and (e) of Article 11 of the Law,
Object to the occurrence of a result which is detrimental to you as a result of analysing your processed personal data exclusively through automated systems,
Request compensation for damages in the case that you incur damages as a result of unlawful processing of your personal data.
You may communicate your requests relating to your rights and the enforcement of the Law to us, by filling out the application form that you may obtain from the website address www.INVISIONCARD.com, signing it with your wet (original) signature, and sending it to the address Ömer Avni Mahallesi, İnebolu Sokak Ekemen Han, No:1, Kat:1, Daire:1 Beyoğlu ISTANBUL through a notary public or by registered mail with return receipt requested. You may also write your requests in the communication section on the website https://www.invisioncard.com/contact-us, contact us through the phone number +90 212 945 54 45 which appears on said website, or communicate them to us by using our e-mail addresses info@invisioncard.com or marketing@invisioncard.com, which may also be found on said website. In addition, in the case that you delete your user ID on our application, all your data will be destroyed by us. If a written response is to be provided to the relevant requests, INVISIONCARD shall respond to such requests free of charge up to ten pages, and in consideration of a fee of 1 Turkish Lira for each page exceeding ten pages. If the response to a request is sent in a recording media such as CD or flash memory, the fee the Company may request shall not exceed the cost of such recording media. All our employees have been warned to act in an expeditious manner in relation to your requests, and they have been given a detailed seminar in this respect by our general counsel.
In the case that you use INVISIONCARD provided to you by a company, as an employee of that company, you should address your above-mentioned requests to the admin user within your company who has the authority to make changes.
Your application to exercise any of your above-mentioned rights that you have as data subject, which shall include your explanations about the right you request to exercise, should, if you will make this application in writing, clearly state your request, should be about an issue that is personally related to you, or if you act on behalf of another person, should be submitted along with your special power of attorney in this respect, certified by a notary public. It is mandatory pursuant to the “Communiqué on Procedures and Principles for Application to a Data Controller” that your applications include your name, surname, signature, Turkish ID No., residence or business address, email address, phone and fax number, and the subject of your request. Applications not containing said elements shall be rejected by INVISIONCARD.