Personal Data Protection Information Notice
Dönüştür Geri Dönüşüm İthalat İhracat Sanayi ve Ticaret LTD. ŞTİ. (“Company”), acting as the data controller, processes your personal data in accordance with Turkish Personal Data Protection Law No. 6698 (“KVKK”) and applicable EU GDPR principles. This notice has been prepared pursuant to Article 10 of KVKK.
1. Data Controller
Company Name: Dönüştür Geri Dönüşüm İthalat İhracat Sanayi ve Ticaret LTD. ŞTİ.
Address: Altınova, İstanbul Cd No:398 Kat: 5, 16250 Osmangazi/Bursa, Türkiye
Phone: 444 43 22
Email: [email protected]
Website: www.donus-tur.com
2. Categories of Processed Personal Data
- Identity Information: Name, surname, Turkish ID number (where legally required for financial/payment processes)
- Contact Information: Phone number, email address, physical address
- Financial Information: IBAN, bank account details, payment/transfer records
- User Transaction Data: Requests, delivery/collection records, donation or payment preferences
- Visual Data: Photos uploaded during collection processes
- Location Data: Address coordinates and/or location data subject to user permission
- Security & Log Data: IP address, session logs, device information, cookies
3. Methods and Legal Grounds for Processing
Personal data are collected through mobile applications, websites, customer support channels, our WhatsApp line (notifications and the request-creation assistant), and related digital or physical forms, automatically or non-automatically, based on:
- Performance of a contract
- Compliance with legal obligations
- Legitimate interests of the Company
- Explicit consent, where required
4. Purposes of Processing
- Providing recycling, collection, delivery and donation services
- User authentication and account security (OTP/JWT)
- Execution of payment processes via IBAN transfers
- Customer support and communication
- Fraud prevention, system security and service improvement
- Compliance with legal and regulatory requirements
5. Domestic Data Transfers
Your personal data may be shared, in accordance with KVKK, with authorized public institutions, financial advisors, legal consultants, IT service providers, and operational partners, solely for the purposes stated above.
If you contact us or create a request via WhatsApp, your phone number, name and surname, address and location, payment preference (IBAN) and — where required for the payment record — your Turkish ID number are processed solely to create and fulfil your request. The messaging infrastructure is the WhatsApp Business Platform (Meta); the related international transfer is described in Section 6.
6. International Data Transfers (Germany – EU, and WhatsApp/Meta)
Due to our hosting and backup infrastructure, your personal data may be stored and processed on servers located in Germany, a member state of the European Union.
Such transfers are carried out in compliance with Article 9 of KVKK and GDPR standards, with appropriate technical and organizational security measures in place.
WhatsApp communication: Messages exchanged via WhatsApp are transmitted through servers of Meta Platforms Ireland Limited (Ireland) and its affiliates located outside Türkiye, as the provider of the WhatsApp Business Platform. This transfer is carried out under Article 9 of KVKK with appropriate safeguards (standard contractual clauses) and is limited to communication and request-handling purposes. WhatsApp messages are end-to-end encrypted; conversation records are processed only as long as needed to create your request and are deleted within 90 days.
7. Data Retention Periods
Personal data are retained for the period required by applicable legislation or for as long as necessary for the purposes of processing, after which they are deleted, destroyed, or anonymized.
8. Your Rights
Pursuant to Article 11 of KVKK, you have the right to:
- Learn whether your personal data are processed
- Request information if processed
- Learn the purpose of processing and whether it is used accordingly
- Know third parties to whom data are transferred domestically or abroad
- Request correction or deletion
- Object to unfavorable results arising from automated processing
- Claim compensation for damages
You may submit your request by e-mail from the address registered in our system to [email protected], by a signed written petition to the company address above, or via registered electronic mail (KEP). Please include your full name, contact details and the subject of your request. Requests are concluded free of charge as soon as possible and within 30 days at the latest, depending on their nature.