Cookie & Cookie Privacy Policy

 

The purpose of this Privacy Policy is the operation of the www.onotoys.com website ("Site") and mobile application (collectively referred to as the "Platform"), operated by Onotoys ("Company") / Platform users / members / visitors ( "Data Owner"), or to determine the terms and conditions regarding the use of personal data shared with the Company or generated by the Company during the use of the Platform by the Data Owner.

With this Privacy Policy, the Data Owner declares that he is enlightened regarding the processing of his personal data and that he consents to the use of his personal data as specified here.

Which Data Are Processed?
Under this heading, the data processed by the Company and considered as personal data pursuant to the Law No. 6698 on the Protection of Personal Data are listed. Unless otherwise expressly stated, within the scope of the terms and conditions provided under this Privacy Policy, the term "personal data" will cover the following information:

Customer information
Device Info
Behaviours
Demographic Information
Marketing Knowledge
Behavioral Advertising
The data, which are irreversibly anonymized by articles 3 and 7 of the Law on Protection of Personal Data, will not be considered as personal data in accordance with the provisions of the aforementioned law and the processing activities related to these data will be carried out without being bound by the provisions of this Privacy Policy.

For What Purposes Is Data Used?
The Company offers personal data to the relevant persons by customizing the products and services offered by the Company according to the likes, usage habits and needs of the persons concerned; to be used within the scope of direct and indirect marketing activities and to transfer it to the Company's representatives, solution partners and third parties from which it receives service for these purposes.

The Company will be able to process and share personal data with third parties in accordance with Articles 5 and 8 of the Personal Data Protection Law and / or in the presence of exceptions in the relevant legislation, without obtaining the consent of the Data Owner. The main cases are as follows:

It is clearly stipulated in the laws,

It is mandatory for the protection of the life or physical integrity of the person who is unable to disclose his consent due to the actual impossibility or whose consent is not legally valid,

It is necessary to process personal data, provided that it is directly related to the establishment or performance of any contract between the Data Owner and the Company,

It is mandatory for the company to fulfill its legal obligations,

It has been made public by the Data Owner himself,

Data processing is mandatory for the establishment, use or protection of a right,

Data processing is mandatory for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the Data Owner.

Who Can Access the Data?

The Company will be able to transfer personal data and new data obtained using this personal data to third parties from whom the Company benefits from its services in order to achieve the purposes specified in this Privacy Policy, limited to the provision of such services. The Company will also be able to transfer the data to the Company's business partners and suppliers and legally authorized institutions and organizations within the scope of the purposes specified in this Privacy Policy.

The company sends SMS messages to improve the data subject experience (including improvement and personalization), to ensure the security of the data owner, to detect fraudulent or unauthorized use, to investigate operational evaluation, to remedy errors related to Platform services and to fulfill any of the purposes stated in this Privacy Policy. with third parties such as outsourcing service providers, hosting service providers (hosting services), law firms, research companies, call centers, etc.

The data subject accepts that the said third parties may store the personal data of the data owner on their servers all over the world, limited to the aforementioned purposes, and that he consents to this in advance.

About Right to Access Data and Requests for Correction

Data owners in accordance with Article 11 of the Law,

Learning whether personal data is processed,
If personal data has been processed, to request information regarding this,
Learning the purpose of processing personal data and whether they are used appropriately for their purpose,
To know the third parties to whom personal data are transferred domestically or abroad,
To request correction of personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data have been transferred,
Processed in accordance with the provisions of the law and other relevant laws