General

BYC Otomotiv E-Ticaret İthalat ve İhracat Limited Şirketi, hereinafter referred to as "BYC Performance," is committed to protecting the privacy of its website visitors.

In this context, as BYC Performance, we take all necessary measures and actions to comply with the provisions of Law No. 6698 on the Protection of Personal Data ("Law"), the decisions of the Personal Data Protection Board ("Board"), and, to the extent applicable, the provisions of the European Union Data Protection Regulation ("GDPR"), to ensure the lawful processing of personal data.

We want to inform you about the types of user information processed by BYC Performance and how it is used. We will also inform you about how you can exercise your rights as a data subject.

Possible changes to this Privacy and Cookie Policy will be published on this page. This will provide you with the opportunity to receive up-to-date information about what information is stored and how it is used.

This Privacy and Cookie Policy does not apply to other websites linked from the BYC Performance website.

1 - Collection, Use, and Processing of Personal Data

Name of the responsible entity: BYC Otomotiv E-Ticaret İthalat ve İhracat Limited Şirketi

Address of the responsible entity: Fenerbahçe Mah. Iğrıp Sok. No. 13/1, Kadıköy / Istanbul, Turkey

BYC Performance uses relevant personal data to provide this website to users and to ensure its proper operation and appropriate security. Any processing performed on data outside this scope is carried out based on other legal obligations, permissions, legitimate interests of BYC Performance, or the explicit consent given by the relevant user to BYC Performance.

BYC Performance stores and processes relevant data specifically for the following purposes:

BYC Performance automatically collects and stores certain data when users visit the website. This data includes: the IP address or device ID assigned to the relevant end device, which is necessary to deliver the requested content (e.g., specifically content, text, images, and data files provided for download, etc.); users' activities in the context of the website; the type of end device involved; the type of browser used; and the date and time of use.

BYC Performance stores this information for 7 days to identify and track unintended use.

BYC Performance also uses this information to improve the provision of the services, their features, functions, and general administrative tasks.

In addition, BYC Performance deletes or anonymizes the data in use, including IP addresses, without undue delay when the data in question is no longer needed for the purposes specified above.

The processing and use of the relevant data are based on the following criteria: (1) the processing is necessary to provide the website; or (2) BYC Performance has a legitimate interest in ensuring and improving the functionality and smooth operation of the website, as well as its compliance with user needs, and in accordance with the relevant legal provisions that allow for such processing.

Recipients of the collected data may include members of responsible internal departments, other companies affiliated with BYC Otomotiv E-Ticaret İthalat ve İhracat Limited Şirketi, external service providers (e.g., hosting and content management, marketing agencies, and other third-party providers if necessary due to the services they provide), relevant authorities within the framework of their respective obligations and powers, such as in the event of a formal request or to establish, exercise, or defend BYC Performance's rights, and BYC Otomotiv E-Ticaret İthalat ve İhracat Limited Şirketi.'s current shareholders or future shareholders in the event of a sale, merger, or acquisition.

2 - Purposes of Processing Personal Data

Contact (Contact Us) / Customer Request Form

You may have shared your contact information with us through the "Contact Us" form on our website or through our call center numbers listed in the relevant tab.

We will use your data to respond to your request.

The processing and use of your data is carried out in accordance with legal provisions that permit processing to meet your request, if necessary, and/or BYC Performance's legitimate interests.

Unless you provide a longer consent through any explicit consent statement, we will only retain your data for the period necessary to achieve the purpose specified above or for the period required by any legal retention obligation.

3 - Cookies Pixels and Similar Technologies

This website uses cookies and similar technologies. Cookies are small units of data temporarily stored on your hard drive by your browser and are necessary for using our website. A cookie typically includes a unique identifier, usually a randomly generated number, that is stored on your device. Some of these identifiers expire when your website session ends, while others may remain on your device for longer periods. Technically necessary cookies will be used automatically. Other cookies (or similar technologies) will only be applied with your prior consent.

There are different types of cookies. First-party cookies are set by the website being visited and can only be read by that website. Third-party cookies are set by other organizations we use for various services we use. For example, we use external analytics service providers who set cookies on our behalf to identify content we like or dislike on our website. In addition, cookies may be embedded from a source, such as the website you are visiting. A pixel is typically a transparent image, only 1 pixel x 1 pixel, placed on a website for the purpose of personalizing content or making the browsing experience more efficient and user-friendly. It collects certain data, such as IP address, browser type, access time, or previously set cookies. Pixels are often used in conjunction with cookies because they create and manage cookies.

With your consent, the website will collect information about the device's operating system, browser, installed fonts, IP address, plugins, and more. This allows the device to be re-identified for user-specific marketing purposes.

4 - Your Rights as a Data Subject

You can exercise your right to access your data at any time. In addition, provided the relevant conditions are met, you may exercise your rights stipulated in Article 11 of the Law, as well as the following rights:

• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to lodge a complaint with the competent data protection supervisory authority
• Right to data portability

Right to Object

You have the right to object to the processing of your personal data at any time, for reasons arising from your particular situation, when the processing of your personal data is conducted on the grounds that BYC Performance has a legitimate interest. BYC Performance will cease processing the data unless BYC Performance can demonstrate that there is an overriding reason for the processing that must be protected and that overrides your interests, rights, and freedoms, or unless the processing serves the purposes of establishing, exercising, or defending legal claims.

If you consent to the processing of your personal data, you may withdraw this consent with effect from now on.

Under the law, you can submit all your requests, complaints, and suggestions regarding your personal data to our address below, along with documents proving your identity and a petition containing your request, or you can send them using a secure electronic signature to our company's email address: [email protected].

Our address:

BYC Otomotiv E-Ticaret İthalat ve İhracat Limited Şirketi

Fenerbahçe Mah. Iğrıp Sok. No. 13/1, Kadıköy / Istanbul, Turkey

5 - Reporting Channels

When we receive messages through any of our reporting channels, we process personal data related to the relevant persons in the relevant context, which we obtain or collect directly from the report, or from publicly available sources or third parties during the investigation process, particularly from witnesses or other companies within BYC Automotive E-Commerce Import and Export Limited Company.

Depending on the nature of the reported behavior, this data may include:

• Contact data, in particular, postal address, electronic addresses (e.g., email address), telephone numbers, and user IDs;
•  Bank data, in particular, account number, financial institution, credit card number, debit card number;
• Evaluation data, in particular, data regarding performance and/or potential or personality assessments, such as data related to BYC Performance's employee evaluation process;
• Training data, in particular, data regarding participation in training or e-learning;
• Communication data, in particular, the content of electronic communications, such as communication via email or other collaboration tools;
• Connection data, in particular, data describing the terms of telecommunications or electronic communications, data obtained from web analytics tools, such as telephone bills, logs files, as well as websites, IP addresses, and other data necessary for virus scanning and cyber defense;
• Privacy data, in particular, information regarding family members, interests, or private life (not health data or religious belief data);
• Identity data, in particular, data generally specified on an ID card or driver's license, such as date of birth or ID/passport number;
• Images/Video Recordings, in particular, photographs and images obtained from video surveillance systems;
• Timestamps, in particular, personalized event records (time events) with timestamps, such as the entry of events into computer systems, security systems, or the recording of working hours; and/or
• Transaction data, in particular, details related to specific contracts or legal relationships, payments, deliveries, or commercial transactions.

We may process the aforementioned data within the scope of the reporting process and relevant investigation, in accordance with all legal regulations, particularly those in the field of personal data protection, reporting, and labor law, based on the provisions of Article 5, paragraph 2, subparagraph c (establishment and performance of contracts, particularly employment contracts and supply agreements), subparagraph ç (fulfillment of legal obligations), and subparagraph e (protection of our legitimate superior interests) of Law No. 6698 on the Protection of Personal Data ("Law"), as well as subparagraphs b, c, and f of Article 6, paragraph 1, of the General Data Protection Regulation ("GDPR").

Such legitimate interests may include, for example: asserting legal claims and lawsuits or defending against such claims and lawsuits, measures for IT security, prevention and detection of crimes, video surveillance to protect residence rights and, for example, the collection of evidence in cases of theft, sabotage, and robbery, measures for building and facility security (e.g., physical access control), and measures to safeguard residence rights. When we process special categories of personal data, Article 6 of the Law and Article 9 of the GDPR apply.

There is no obligation to provide personal data. BYC Otomotiv E-Ticaret İthalat ve İhracat Limited Şirketi also offers methods for those who wish to report non-compliance with the terms and conditions through which they can do so anonymously.

We will store and process the data for the period required for the purpose for which it is processed (for example, for the duration of the employment contract). At the end of this period, the data will be deleted and destroyed, except for those for which we are legally obligated to retain it. We will immediately delete the data we process pursuant to Article 5/(2)/(e) of the Law and Article 6/(1)/(f) of the GDPR, if your interests or fundamental rights and freedoms that require the protection of personal data override our legitimate interests or those of a third party, or if such legitimate interests are eliminated. However, in certain cases, we will continue to store and process data for as long as we are legally obliged to do so (for example, for tax or labor law reasons), and this is necessary for the assertion, exercise, or defense of legal claims, or if we have legal grounds that permit further processing.

Within BYC Otomotiv E-Ticaret İthalat ve İhracat Limited Şirketi, data will only be provided to employees who require this data for the purposes specified above and within the scope of their official duties (for example, specialized units required for investigations).

Furthermore, data may be transferred to other companies within BYC Otomotiv E-Ticaret İthalat ve İhracat Limited Şirketi when necessary.

We may use external service providers bound by data processing agreements to provide the necessary services (e.g., IT services, consulting).

We may also transfer data to recipients outside BYC Otomotiv E-Ticaret İthalat ve İhracat Limited Şirketi, to the extent required and permitted by data protection laws. Such recipients may include, for example, banks, social security institutions, public institutions and organizations (e.g., law enforcement), lawyers, tax consultants, and courts. In this context, your personal data may also be transferred abroad and/or to other companies within BYC Otomotiv E-Ticaret İthalat ve İhracat Limited Şirketi in accordance with Article 9 of the Law and relevant articles of the GDPR.