AKS A.Ş. (OI-NO) requests some of your personal information (name, e-mail, etc.) in order to provide you with better service at www.oinostudio.com.
The information collected through the www.oinostudio.com membership form and e-commerce infrastructure will never be shared with third parties without the knowledge or instruction of the member in question, and will not be used for commercial purposes or sold for any reason other than its activities.
The copyrights of all text and visual materials on www.oinostudio.com cannot be copied in any way, used or copied in a printed or electronic environment without permission.
Your credit card information requested on the payment page will never be kept in oinostudio.com data in order to keep the security of our valued customers who shop on the site at the highest level. All transactions regarding payment are carried out between the bank and your computer via the iyzico.com interface.
1. OI-NO E-commerce Infrastructure and Payment Infrastructure Iyzico Privacy and Data Policy
This Privacy & Personal Data Policy aims to provide information about personal data collected, stored, processed, shared and transferred by OI-NO and therefore iyzico. All natural persons who visit the OI-NO and therefore iyzico website, use any OI-NO and therefore iyzico service (for example, make a credit card payment through OI-NO and therefore iyzico) are within the scope of this Privacy & Personal Data Policy.
Since OI-NO and therefore iyzico Turkey and iyzico Europe are two companies that apply the same privacy principles and policies, the expression “OI-NO and iyzico” is used throughout this policy to cover both companies. Throughout the Privacy & Personal Data Policy, expressions such as “we” and “our company” may be used when referring to OI-NO and iyzico. The official titles and contact information of OI-NO and iyzico companies are provided at the end of this policy.
The terms “personal data”, “personal information” and “your information” are used interchangeably and include all information related to an identified or identifiable natural person (e.g. name, e-mail address, date of birth, ID number).
We are aware that personal data is important for our customers and end users, and we will make every effort to ensure that everyone at iyzico complies with this policy and that the security of your personal data is ensured in all cases.
The purpose of this Privacy & Personal Data Policy is:
- To explain the purpose and method of using the data we obtain in the clearest and most understandable way possible;
- To explain what information we obtain with your permission and for what purposes and how this information is processed;
- To inform you about the purposes and methods by which this information is transferred to third parties;
- To inform you about your legal rights regarding your personal data;
- To explain our responsibility to protect your rights and privacy.
This policy is only valid for the use of OI-NO and iyzico products and services. The privacy policy and rules of the relevant person or institution will be valid on all websites and environments not belonging to OI-NO and iyzico. In cases where the iyzico payment form is placed on a merchant’s website to transfer payment information to iyzico, both iyzico’s and OI-NO’s privacy policies will apply.
The types of personal data processed by OI-NO and iyzico may vary depending on which services you benefit from and how. Depending on factors such as your location and legal status, not all services may be available to you.
2. Personal Data Collected by OI-NO and iyzico
When you visit our website or use our services, we collect various personal data about you.
When you enter our website, send or receive a payment through OI-NO and iyzico, or register and open an account with iyzico; we collect the information necessary to provide the services you request effectively and securely. This information may include the following:
- Your personal information (e.g. your name, address, e-mail address, ID number).
- Payment information (e.g. your credit card number, expiration date of your card, installment preference).
- When someone sends a payment to a third party, or performs another transaction that requires them to provide us with information about third parties, we may obtain personal data about these third parties.
- Information obtained from other parties; for example, we may obtain information about the names and categories of products or services you wish to purchase from OI-NO, details regarding your membership in OI-NO, your IP address, and information about your previous transactions. We may also obtain and use information regarding the status of your order from cargo companies.
- If you wish to become a customer using OI-NO and iyzico services, information that will help determine the type and identity of your business, contact information, introductory and explanatory information and documents regarding the business, bank information required for the transfer of payment, and records regarding your use of OI-NO and iyzico products and services (IP address, web infrastructure you use, etc.) will be obtained. Some or all of this information may contain personal data and as a company, you must ensure that you are authorized to share this personal data.
- OI-NO and iyzico will transfer your business information, contact information and bank account information to iyzico.
- Additional information you provide to us, such as when you benefit from optional services offered by iyzico or when you contact iyzico, is collected by iyzico.
- Information obtained through cookies, beacons and other tracking mechanisms (for example, details about your device, geographic location and usage). Please read Section 4 below for more detailed information about the use of cookies and other tracking technologies we use to provide our services and to market to your interests.
3. Use of Personal Data by OI-NO and iyzico and Legal Basis
We use the personal data we have for various purposes permitted by legal regulations in Turkey and the European Union. The purposes for which we use your personal data are explained below with examples. The legality criteria we rely on when processing this personal data may be the fulfillment of our contractual obligations, our legitimate interests and our legal obligations.
- To provide you with our website and services:
To process payments, transfer funds, store your credit cards at your request for future use, and to enable you to create, access, and make changes to an account, we need to use your personal information. - To improve our services and manage our operational requirements:
We monitor the use of our websites and services and analyze usage data to improve our performance. - To protect our customers from harm with our risk management and platform:
We get to know our customers and measure their risk levels in order to detect and prevent malicious transactions. Decisions on this subject can be made by automated algorithms or by our own officers within certain rules. If an application or transaction you want to perform is rejected as a result of these reviews, you can contact us using the contact information at the end of this document to request information. - To contact you when necessary:
We use your contact information to inform you about the status of your transactions. In addition, if there is a problem with your transaction or your account, we may use your contact information to reach out to you and resolve the issue. Those who contact you on behalf of iyzico may be direct iyzico employees, or they may be different business partners from whom we receive services, in which case your personal data must be shared with these business partners. - To fulfill our legal obligations or resolve disputes:
Some regulations in the places where we operate may require us to use and store your information in certain ways. As a payment service provider, we are obliged to keep and review records of all transactions we mediate for purposes such as fulfilling our data retention obligations, preventing money laundering and taxation.
In the event of a dispute between the parties to a transaction we mediate, or between iyzico and users, your personal information may be used to resolve the dispute and may be transferred to the courts and alternative resolution bodies.
We may also use your information for other purposes for which you have consented. For example, we may obtain your consent for other processing activities such as sending you marketing messages or receiving feedback from you. In such cases, you can always withdraw your consent, for which you can contact us using the contact information provided at the end of the document. You must also include information that will allow us to identify you when reaching us. Your notice of withdrawal of consent will be effective in the future, so the transactions we have carried out in the past based on your consent will not become unlawful, but we will cease to process the relevant information after receiving your notice.
4. Use of Cookies and Other Tracking Technologies
During the use of the OI-NO and iyzico website and services, access data such as the name of your internet service provider, IP addresses and the pages you browse are collected. This information may be used to provide the infrastructure of the website to which OI-NO and iyzico is subject and to which you enter the website, to conduct statistical analyses and to direct OI-NO and iyzico related advertisements to more accurate targets. In addition, cookies (small files) and markers belonging to OI-NO and iyzico or other service providers are used to collect information about your use and to use this information to provide site functions, manage site infrastructure and for marketing purposes.
This site uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies” and other identifiers to help the website owner analyze how users use the site and to enable Google to operate its services. The information generated about your use of the website (including your IP address) will be transmitted to Google’s servers, which may be located in different countries, and will be processed by Google there. Google will use this information to evaluate your use of the website, to compile reports on website activity for website owners and to provide other services relating to website activity and internet use (e.g. creating user categories). Google may transmit this information to third parties in accordance with legal obligations or where third parties process the information on Google’s behalf. For more detailed information about Google Analytics, you can visit this page: https://www.google.com/policies/privacy/partners/ If you do not want your information to be used for Google Analytics Services, you can request to opt out of Google Analytics by following the instructions in the following link: https://tools.google.com/dlpage/gaoptout/
OI-NO and iyzico benefit from a service provided by Hotjar Ltd. (“Hotjar”) that identifies users’ experiences on the website, queries the ease of use of the website, and receives anonymous feedback from users. In order for Hotjar to provide this service, cookies are placed on your computer.
OI-NO and iyzico benefit from a service provided by Optimizely Inc. (“Optimizely”) that shows users different versions of the website and helps them find which version is more useful in terms of use. In order for Optimizely to provide this service, cookies are placed on your computer.
OI-NO and iyzico benefit from a service provided by Sosyo Plus Bilgi Bil. Tekn. Dan. Hiz. Tic. A.Ş. (“Insider”) that helps member businesses find features they could not view before. In order for Insider to provide this service, cookies are placed on your computer.
OI-NO and iyzico use a service provided by Doğan Internet Publishing and Investment Inc. (“Medyanet”) that analyzes user behavior. In order for Medyanet to provide this service, cookies are placed on your computer.
You can refuse the use of cookies by selecting the appropriate settings on your browser, but please note that if you do this, you may not be able to use this website with full functionality. By using our website or using our services, you consent to the processing of your personal data by Google, Hotjar, Optimizely, Insider, Medyanet and other third party service providers as described above.
5. Storage and Deletion of Personal Data
The period that OI-NO and iyzico will store your personal data in a way that allows you to be identified is the shortest period necessary to meet our legal obligations and operational requirements.
When the storage period of your personal data ends, we delete or anonymize your personal data in accordance with our internal procedures aimed at ensuring the security of your data, and ensure that it cannot be associated with you.
When you close your account or request the deletion of your personal data, we delete or anonymize the remaining data, except for the data that we are obliged to keep even if you close your account according to legal regulations or that we reject your deletion request.
The cookies we use have certain validity periods and if you do not use our website or services during this period, they are automatically deactivated and the stored data is deleted. You can also delete these cookies using your internet browser settings.
6. Transfer of Personal Data to Third Parties
While providing our services, we sometimes share your personal data with third parties for the purposes described below.
In order to manage our activities and provide our services securely and continuously, we share your personal data among iyzico group companies. Transfers between OI-NO and iyzico group companies are carried out by taking the necessary precautions and your personal data does not fall outside the scope of this privacy policy due to this transfer.
We use the services of other companies when necessary, and we may need to share your personal data with some of them. For example, when we receive your payment information (we may receive this information directly from you or through the merchant you want to pay), we transfer it to the relevant financial institutions to process your payment. Or, if your transaction requires additional steps (for example, if it is an international sale that requires customs clearance), we may transfer your data to the relevant service providers (for example, customs brokers) to enable these steps to be taken. We may also transfer personal data to third parties (for example, data processors aimed at preventing fraud) to ensure the security and convenience of our users and our business.
When you use our services, we inform other parties to your transaction (for example, the merchant you are paying or other users). This information may include transferring some of your personal data to these parties.
Law enforcement and other authorized institutions may request your personal data from us. We will only share this information when we are legally obliged to do so or when we believe it is necessary to prevent or investigate a crime.
We may also need to share your data with third parties for other business purposes. These business purposes include various activities such as company audits, corporate governance and exercising our legal rights. We always act in accordance with legal regulations when making these sharings.
7. Transfer of Personal Data to Third Countries
Due to the nature of the services we provide, we may need to transfer some personal data internationally. The majority of our information technology infrastructure (all of OI-NO and iyzico Turkey’s infrastructure) is located in the United States and Turkey, and therefore, if you access our website or use our services from a country other than Turkey, your personal data will be transferred to the United States and Turkey. This transfer takes place within a legal framework that ensures the security of your personal data. We use model contractual provisions published by the European Commission for personal data transfers between OI-NO, iyzico Europe and iyzico Turkey.
In addition to the transfers between OI-NO and iyzico companies, the data transfers to third parties described above may require the transfer of your personal data to different countries. However, in all cases, we guarantee that your personal data will only be transferred to countries that provide adequate protection, or to persons located outside these countries who have undertaken to ensure the security of your data in accordance with the regulations.
8. Your Preferences
You can make some choices regarding your privacy. You can always refuse to provide your personal data requested by OI-NO and iyzico. However, if the information you refuse to provide is necessary for us to provide our services, you will not be able to benefit from our services. For example, if you do not enter your credit card number on the payment page where credit card payments are accepted through OI-NO and iyzico, we will not be able to make the payment.
As explained in Section 4, we also use cookies to provide our services better. You can use your internet browser settings to reject these cookies, but if you reject these cookies, you may not be able to use our website and services.
You can see some of the personal data we have in the settings section after logging in to the OI-NO and iyzico mobile or web application. If you want to exercise these or any rights you have over your personal data other than these, you can contact us using the contact information at the end of the document.
We will contact you from time to time. This communication may be for marketing purposes or related to transactions you are a party to. You may opt out of receiving all marketing communications by following the instructions at the bottom of any message sent to you. You cannot opt out of receiving transactional communications, but you may be able to change the method and address to which they are sent.
9. Your Rights
We would like to state that you have the following rights in accordance with legal regulations:
(a) To learn whether your personal data is processed, the processed personal data, the sources from which the personal data is obtained, the third parties to whom it is transferred domestically and abroad, the period for which the data is stored or the criteria used to determine this period;
(b) To access your personal data and request that the personal data provided by you be provided in a structured, commonly used and machine-readable format or transferred to another data controller,
(c) To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
(d) To object to the processing of your personal data or request its restriction,
(e) To request correction of your personal data if it is processed incompletely or incorrectly,
(f) To request the deletion or destruction of your personal data if the reasons requiring processing are eliminated,
(g) To request that the procedures such as correction and deletion be notified to third parties to whom your personal data is transferred,
(h) To object to the emergence of an adverse result by analyzing the processed data through automated systems,
(i) Due to the unlawful processing of personal data to demand compensation in case of damage.
You can exercise your rights regarding your personal data specified above by contacting us using the contact information at the end of the document. In order for us to recognize you when making this application, you must fully specify the information you provided when registering or using our services and attach a copy of an official ID.
10. Protection of Personal Data
All personal data obtained by OI-NO and iyzico are transmitted and stored subject to reasonable security conditions accepted in the industry. The security of payment data is provided by our PCI DSS (Payment Industry Data Security Standards) Level 1 compliant infrastructure and the connections through which personal data is transferred are encrypted and protected. Although we take all reasonable measures to protect your personal information, it is your responsibility to ensure the security of your password and account information.
11. Other Information
Our services and website are not intended for use by children (all persons who are not legally adults). We do not collect personal data from children and persons who cannot legally benefit from our services. If we learn that we have obtained personal data belonging to a child, we will delete this data immediately unless we are legally required to keep it. If you believe that we have obtained personal data belonging to a child through an error or negligence, please contact us immediately using the contact information below.
We may make changes to this privacy policy. The changes will be effective as of the date the new privacy policy is published.
Users and our customers are responsible for following possible updates and informing the persons with whom they have made transactions or who have made transactions with them about OI-NO and iyzico’s data processing activities and this privacy policy before transferring their information to OI-NO and iyzico.
12. Contact Information
iyzico Turkey:
Company Name: Iyzi Payment and Electronic Money Services Inc.
MERSIS Number: 0483034315700019
Address: Burhaniye Mahallesi Atilla Sokak No:7 Üsküdar İstanbul
E-Mail: [email protected]
Phone: +90 216 599 01 00
iyzico Europe:
Company Name: Iyzi Payments, UAB
Registration Number: 304782968
Address: Mėsinių g. 5, LT-01133 Vilnius LITHUANIA
E-Mail: [email protected]
Phone: +90 216 599 01 00
OI-NO:
Company Name: AKS A.Ş.
Address: Hüseyin Rahmi Sok., No:7/12, Çankaya Mah., 06680, Çankaya – ANKARA / TURKEY
E-Mail: [email protected]
Phone: +90 (312) 442 03 07
