Privacy Policy

“Under the GDPR, the Data Controller is the entity that determines the purposes and means of processing personal information, either alone or in collaboration with others.

For data processing related to the activities of the Site, the joint controllers are:

– **ALLBYB**
Registered Office: 18 Mart Sok. Akınay Sit. C/3 Çiftehavuzlar, Kadıkoy, İstanbul 34728, TÜRKİYE
Contact: [email protected]

(the “Controllers”)

A designated Data Protection Officer (DPO) is in place to ensure that personal information is processed in compliance with the GDPR. The DPO can be reached for any inquiries at: [email protected]

Regarding personal information of non-registered users who have opted to receive newsletters and marketing communications, ALLBYB acts as the sole Data Controller.”

“When users choose to register for a personal account on ALLBYB, they will be asked to provide certain personal information (e.g., date of birth, gender). The site will clearly indicate which information is mandatory and which is optional for creating an account.
Users must provide accurate and truthful information at the time of registration and are encouraged to keep their details up-to-date by logging into their account to make any necessary changes.
If users choose to log in or register via social media accounts, please note that ALLBYB may collect personal information already shared with that social media platform (e.g., email address, public profile details from Facebook).
ALLBYB does not control or manage social media platforms or user profiles on these services, nor does it set privacy rules for how personal information is used on these platforms. Users are encouraged to review the privacy policies and settings of their social media accounts to understand how their information is processed.”

“On the ALLBYB site, users have the option to subscribe to newsletters and receive commercial communications.

ALLBYB always obtains explicit, voluntary, and clear consent from users before sending newsletters or marketing communications. This includes any electronic marketing activities targeted at them.

When subscribing, users may be asked to provide additional personal information beyond their email address (e.g., gender, country of residence) to help tailor the content of newsletters and marketing materials to their profile.

Users can easily withdraw their consent to receive newsletters and commercial communications in the following ways:

– Through their account settings;
– By clicking the ‘unsubscribe’ link at the bottom of any email received;
– By contacting our Customer Service.

For non-registered users who have opted to receive newsletters and marketing communications, ALLBYB is the sole Controller of their personal information.”

”
ALLBYB processes users’ personal information using IT, automated, and electronic tools, and in limited cases, documentary methods. In accordance with the GDPR (General Data Protection Regulation), specific security measures have been implemented to prevent data loss, unlawful or improper use, and unauthorized access.

Personal information related to Site activities can only be accessed by authorized employees of ALLBYB and authorized employees of third-party suppliers acting as Data Processors on behalf of ALLBYB. Data processing agreements are in place to ensure that Data Processors always meet the security level required by GDPR while handling personal information related to the Site activities.

While ALLBYB adopts primary security measures to prevent the loss, destruction, or dissemination of personal information, it cannot entirely eliminate the safety risks inherent in online data transmission. The user accepts the risks associated with providing personal information over the internet and will not hold ALLBYB responsible for any security breaches, except where such breaches result from ALLBYB’s negligence or willful misconduct.”

“The Controllers will store personal information for as long as it is needed to provide users and customers with the required services, meet legal or tax obligations, or for the minimum period prescribed by law.

To determine the appropriate retention period for personal information stored with user consent, the Controllers will consider various factors to ensure that personal information is not kept longer than necessary or appropriate. These criteria include:

– The purpose for which the personal information is held by the Site;
– Legal, tax, and regulatory obligations related to that personal information;
– The type of ongoing relationship with the user or customer (e.g., how frequently the user logs into their account, whether they continue to receive marketing communications, how regularly they browse or purchase on the Site, etc.);
– Any specific user request related to the deletion of personal information;
– Legitimate business interests.

The Site will promptly delete or anonymize personal information that is no longer needed or retained according to the law.”

The Site may include banners, advertisements, and other links to third-party websites or platforms. However, the Controllers do not control or assume responsibility for the practices of these third-party websites or platforms regarding privacy and data protection. Users are encouraged to review the privacy policies of any third-party sites they visit to understand how they collect, use, and manage personal information.

“Users have the right to receive confirmation on whether ALLBYB holds any personal information about them.

If personal information is held, under GDPR, users also have the following rights:

– To be informed about the collection and use of their personal information;
– To access their personal information free of charge;
– To have inaccurate or incomplete personal information corrected or completed;
– To request the deletion of their personal information (“the right to be forgotten”);
– Under specific conditions, to obtain the restriction or suppression of their personal information;
– To obtain and reuse their personal information for their own purposes across different services when processing is based on a contract or consent, and processing is carried out by automated means (“the right to data portability”);
– Under specific conditions, to object to the processing of their personal information;
– To object at any time to the use of personal information for “profiling” or “automated decision-making” purposes;
– To submit complaints related to the collection and processing of personal information to the competent supervisory authority;
– To withdraw consent to the processing of personal information at any time.

Users can contact the Site to inquire about or exercise their privacy rights at the following email address: [email protected]“

Any future changes to this Privacy Policy will be posted on the Site and, where appropriate, notified to users by email. Users are encouraged to read this Privacy Policy frequently to check for any updates or changes.