Personal Data Protection
1. Introduction
RAN MAKİNE ANONİM ŞİRKETİ (referred to as "Company" or "we" in this text) considers the protection of user information and privacy as one of its core values. Our company processes your personal data in accordance with Turkey's Personal Data Protection Law – KVKK (Law No. 6698) and related regulations.
This text explains what data is collected, for what purpose it is processed, and under what conditions it is transferred when you become a member through the Shopshipy website or application (Shopshipy platform) or use services without membership.
2. What Personal Data is Processed About You?
Account Information
- First and last name
- Email address
- Phone number (if registered)
- Date of birth and gender (if registered)
- Customer number
- Identity information (required only for customs and international shipping services)
Transaction Information
- Purchase, order, invoice, and payment information
- Shipping and transportation details
- Your requests and messages
- Chat content and support communications
- Information regarding cancellations, returns, and refunds
Shipping and Delivery Information
- Complete delivery address
- Name and contact number of the recipient
- Tracking information and shipment status
Payment Information
- Payment methods
- Bank card information (encrypted/tokenized)
- Payment and refund records
Security and Technical Information
- IP address
- Device and browser
- Login and logout logs
- Cookie data
- System security information
Information Related to Special Services
- (If using specific services)
- Logistics and international shipping services
- Customs services
- Wholesale and B2B services
- Price quotation processes, auctions, and bulk transactions
3. Purposes and Legal Basis for Processing Your Data
Creating User Account and Managing Membership
Objectives include:
Creating and managing user account
Login and authentication
Enabling purchase and use of services
Fulfilling contractual obligations
Legal basis:
Contract performance
Legal obligations
Legitimate interests of the company
Order Execution, Product Shipping, Transportation, and Customs Services
Objectives:
Order registration and purchase process management
Performing shipping, transportation, and shipment tracking operations
Handling customs and international affairs (if needed)
Invoice issuance and financial transaction recording
Legal basis:
Contract performance
Legal obligations related to e-commerce and customs
Improving User Experience and Services
Objectives:
Analyzing user behavior to improve experience
Handling complaints and requests
Improving service quality and infrastructure
Providing smart and personalized services
Legal basis:
Contract performance
Legitimate interests of the company
Security, Fraud Prevention, and Legal Controls
Objectives:
Maintaining account security
Preventing abuse and suspicious activities
Financial and operational audits
Performing security and legal controls
Legal basis:
Legal requirements
Legitimate interests of the company
Conducting Procedures and Legal Requirements
Objectives:
Responding to official authority requests
Handling legal claims
Providing documentation to competent authorities
Legal basis:
Legal requirements
Asserting or defending legal rights
Processing Based on Your Consent (Freedom of Choice)
Only with your consent:
Sending promotional and commercial notification messages
Providing personalized offers
Sharing with marketing partners
Legal basis:
Explicit consent (can be withdrawn at any time)
4. To Whom Are Your Data Transferred?
Service Providers and Business Partners
- Sellers and product suppliers
- Domestic and international transportation companies
- Customs and warehousing companies
- Payment service providers
- Banks and financial institutions
- SMS and email companies
Technology Service Providers
- Cloud infrastructure providers
- Software development and support companies
- Security and data analytics service providers
Official Institutions
- Government organizations
- Legal authorities, courts, and judicial institutions
- Regulatory and tax institutions
Transfer Based on Your Consent
With your explicit consent:
Marketing and advertising partners
User behavior analytics providers
Your data is transferred to third parties when necessary and for the following specific purposes:
5. Security Measures to Protect Your Data
RAN MAKİNE A.Ş. takes the following measures, among others, to protect your data:
SSL-encrypted communications
Access level management and login control
Regular security testing
Advanced fraud prevention systems
Internal security policies
Secure storage infrastructure
Personnel security training
6. Your Rights Under KVKK
You can request the following under Article 11 of the Data Protection Law:
Whether your data is being processed or not
Information about the purpose of processing
Receiving information about persons to whom data has been transferred
Correction of incomplete or incorrect data
Request for deletion or blocking of data
Objection to automated data analysis
Claiming compensation in case of violation of data rights