PRIVACY POLICY
This privacy policy text has been created within the scope of the Personal Data Protection Law No. 6698, relevant other legislative provisions, and our company policies.
OBJECTIVE OF THE PRIVACY POLICY
In today's world, as the processing of personal data has become widespread, the protection of data privacy has also become an important issue. We aim to serve our valuable users in the best way possible. Therefore, it is important for us to inform about the principles related to the confidentiality of data belonging to real persons.
PRINCIPLES OF PROCESSING PERSONAL DATA
Throughout the period you use our products and services, and as long as your personal data is processed, ensuring and protecting your data privacy is of utmost importance to us. We take all necessary technological and administrative security measures regarding data security. All necessary conditions for data privacy are provided by us, but in situations like no longer needing to process the personal data, explicit consent given by the data owner being eliminated, the envisaged period for processing the personal data being fulfilled, etc., your personal data will be deleted, destroyed, or anonymized in a way that no connection can be made with the real data owner, all in accordance with the criteria specified in the law.
The main principles to be followed during the processing of personal data are:
· Compliance with the law and principles of honesty.
· Being accurate and up-to-date when necessary.
· Being processed for specific, clear, and legitimate purposes.
· Being relevant, limited, and proportionate to the purposes they are processed for.
· Being retained for the period stipulated in the relevant legislation or necessary for the purpose they are processed for.
The principle of processing for specific, clear, and legitimate purposes requires the data controller to define its data processing purpose clearly and precisely, and this purpose must be legitimate. Data controllers will be responsible if they process data for purposes other than the ones they specify. A legitimate purpose means that the data processed by the data controller must be related to the work they do or the service they provide.
The principle that personal data should be relevant, limited, and proportionate to the purposes they are processed for requires that the processed data be suitable for fulfilling the specified purposes and that data not related to or needed for the accomplishment of these purposes not be processed.
Also, the processed data will be limited only to what is necessary for the achievement of the purpose.
Personal data must only be retained for the period stipulated in the relevant legislation or as long as necessary for the purposes they are processed for. Accordingly, if there's a stipulated period in the relevant legislation for storing data, data controllers will comply; otherwise, they can only keep the data as long as necessary for its purpose. If there's no valid reason to keep a piece of data longer, it will be deleted or anonymized. Data will not be stored based on the possibility of future use.
YOUR PERSONAL DATA, PROCESSING METHOD, PURPOSE, AND LEGAL REASON
In accordance with the Personal Data Protection Law No. 6698 and relevant legal regulations, your personal data listed below is processed within the framework of the specified purposes and legal reasons:
1- Date of birth
2- Gender
3- Email address
4- City of residence
5- Survey data
6- In-app user preferences
7- In-app purchase data
8- Literary genres of interest
The personal data mentioned above is processed through our application for the purposes of Execution of Access Rights, Conducting Activities in Compliance with Legislation, Execution of After-Sales Support Services, Execution of Goods/Service Sales Processes, Execution of Goods/Service Production and Operation Processes, Execution of Customer Relationship Management Processes, Execution of Marketing Analysis Studies, Execution of Advertising/Campaign/Promotion Processes, Execution of Fee Policy, and Execution of Product/Service Marketing Processes;
Based on your explicit consent, or if it is directly related to the establishment or performance of a contract, when processing personal data belonging to the parties of the contract is necessary, and/or when data processing is mandatory for the establishment, use, or protection of a right.
TRANSFER OF PERSONAL DATA
Your personal data, in line with the aforementioned legal reasons and purposes, can be transferred to individual persons, private legal entities, shareholders, group companies, authorized public institutions, and organizations.
STORAGE OF PERSONAL DATA
Your personal data will be processed and stored within the scope of your explicit consent or legal exceptions mentioned above, according to Article 5 of the Personal Data Protection Law No. 6698. In this context, personal data will be stored for the duration required by the aforementioned processing purposes. In case of any disputes that may arise between BOOKCLUB SOFTWARE INC. and relevant individuals, personal data can be stored for the duration of the statute of limitations set by the law, limited to the purpose of making necessary defenses.
YOUR RIGHTS REGARDING YOUR PERSONAL DATA
As a data subject, by applying to us, you have the right to:
• Find out if your personal data has been processed.
• Request information regarding this if your personal data has been processed.
• Know the purpose of processing your data and whether it's used appropriately for that purpose.
• Know the third parties in or outside the country to whom your personal data has been transferred.
• Request rectification if your personal data is incomplete or incorrectly processed, and request notification of the correction to third parties where the data was transferred.
• Request the deletion or destruction of your personal data when the reasons necessitating its processing no longer exist, and request notification of the deletion or destruction to third parties where the data was transferred.
• Object to any result against you due to the analysis of your processed data exclusively through automated systems.
• Request compensation if you incur damages due to unlawful processing of your personal data.
If you submit your requests regarding the aforementioned rights to us in accordance with the procedures set out in the Regulation on the Procedures and Principles of Application to the Data Controller, your request will be concluded as soon as possible and at the latest within 30 (thirty) days free of charge. However, if the operation requires an additional cost, a fee may be charged according to the tariff determined by the Personal Data Protection Board.
ACCESSING AND DELETING YOUR INFORMATION
You may deactivate your HitReads account or delete email associate with your account by contacting us at contact@hitreads.com.
If you would like to access or view the personal information we hold about you or for any reason you are concerned with the way we are using your personal information, or would like to correct or request that we delete such personal information, you can also send your request to us at contact@hitreads.com.