For Detailed Information: Contact Us Now
KVKK Privacy Notice
KVKK Privacy Notice
Pursuant to the Turkish Personal Data Protection Law ("KVKK"), your personal data may be processed by MİNDBACK SERBEST MUHASEBECİ MALİ MÜŞAVİRLİK LTD. ŞTİ. ("Mindback" or the "Company"), acting as data controller, within the scope described below. In fulfillment of the disclosure obligation our Company must comply with as data controller under Article 10 of the KVKK, we hereby present the following explanations for the information of our customers and of third parties who use our website and/or mobile applications.
Our Company reserves the right to amend this Privacy Notice for Data Subjects under the Personal Data Protection Law (the "Privacy Notice") at any time, within the framework of changes that may be made under the applicable legal regulations.

Data Controller

  1. MERSIS No: 0621105101900001
  2. Website: www.mindback.com.tr
  3. Phone Number: +90 216 606 14 01
  4. KEP Address: mindback@hs01.kep.tr
  5. Address: Osmanağa Mah. Söğütlüçeşme Cad. Bulvar Çarşısı No:64/130 Kadıköy, Istanbul, Turkey
Terms such as KVKK (Turkish Personal Data Protection Law), Explicit Consent, Anonymization, Data Subject, Personal Data, Data Processor, and Data Controller are used with their applicable legal meanings within the framework of the KVKK.
In addition to the KVKK (Turkish Personal Data Protection Law), the Company processes personal data in compliance with Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on Consumer Protection, the Turkish Penal Code No. 5237, and other secondary regulations.

Purposes of Processing Your Personal Data

The Personal Data provided by our customers and/or third parties ("Customer") who carry out transactions on the website www.mindback.com.tr and/or our mobile application may be recorded, stored, updated, disclosed to third parties, transferred, classified, and processed by the Company where and to the extent permitted by applicable legislation.
You can find detailed information about the purposes for which your Personal Data is processed by our Company in the Privacy Notice (Clarification Text) available at www.mindback.com.tr.
Your personal data is processed and used for the following purposes:
  1. Provision/execution of products and services, as well as sales and after-sales support services.
  2. Information security, execution and management of contract processes, verification of the identity of the person carrying out or requesting a transaction, and ensuring the security of the Data Controller's operations.
  3. If you choose to become a member, carrying out your membership registration procedures and operating your member account.
  4. Carrying out the work necessary for you to benefit from the products and services offered by our Company through our business units, and organizing customer-specific sales, campaign, and marketing activities.
  5. Customizing the products and services offered by our Company according to customers' preferences, usage habits, and needs and recommending them to customers, following up on requests and complaints, and carrying out activities aimed at user satisfaction.
  6. For the purposes of ensuring communication and collaboration by our Company, maintaining coordination, operating shared business areas and shared databases, identifying the needs of our customers and employees, fulfilling contractual obligations, carrying out advertising and marketing activities, ensuring customer follow-up, and maintaining occupational safety and business continuity.
  7. Ensuring the legal and commercial security of our Company and of individuals who have a business relationship with our Company; determining and implementing our Company's commercial and business strategies.
  8. Generating statistical data when our website is visited, recording visitor information, and providing responses to visitors

To Whom and for What Purpose the Processed Personal Data May Be Transferred

In furtherance of the purposes stated above and in accordance with Articles 8 and 9 of the KVKK (Turkish Personal Data Protection Law), where explicit consent is present, the personal data we process may be transferred to our business partners, our suppliers, domestic and established business partners and their dealers and suppliers, companies we cooperate with, authorized public institutions and financial institutions, private individuals, judicial authorities, software firms and technology companies, the technology companies from which we receive cloud services, healthcare providers, and insurance companies.

Method and Legal Basis of Personal Data Collection

Your personal data is collected and processed, based on the legal grounds set out below, through the channels where you interact with our Company: the website, mobile application, call center, telephone, e-mail, social media, dealers and/or authorized service channels;
Based on the legal ground of performance of a contract, for the purposes of delivering products and services together with after-sales support, ensuring that you can benefit from our products and services without any issues, improving our product range based on the information collected, offering a product range tailored to your preferences, providing a personalized marketing service to you using the information described above in line with the "best product" principle, and analyzing your personal shopping habits through automated systems.
For the purpose of evaluating your requests and complaints, based on the legal ground that data processing is necessary for the establishment, exercise, or protection of a right.
If you give your explicit consent, your personal data may also be processed on the legal basis of explicit consent for the following purposes: conducting campaigns; increasing customer satisfaction; carrying out customer relationship processes; performing the work required by our relevant business units to carry out the commercial activities conducted by our Company and executing the related business processes; organizing events and training sessions and determining their participants; managing communication channels; measuring and improving brand perception; conducting market research and survey processes; providing references and gifts; customizing the products and services offered by the Company according to your preferences, usage habits and needs; and, in this context, sending advertising, promotional, campaign and similar communications to the communication channel you have shared and through which you prefer to be contacted.

Technical and Administrative Measures

  1. Network and application security.
  2. Antivirus, firewall, penetration tests.
  3. Access logs and encryption.
  4. Personnel training and confidentiality agreements.
  5. Data backup and masking.
  6. Periodic audits and risk monitoring.
  7. KEP and encrypted data transfer

Rights of the Data Subject

As the Data Subject who owns the personal data, we hereby inform you that you have the following rights under Article 11 of the KVKK (Turkish Personal Data Protection Law);
  1. To learn whether personal data is processed.
  2. To request information if personal data has been processed.
  3. To learn the purpose for which personal data is processed and whether the data is used in accordance with that purpose.
  4. To know the third parties to whom personal data are transferred, in Turkey or abroad.
  5. To request the correction of personal data that has been processed incompletely or inaccurately, and to request that the third parties to whom the personal data has been transferred be notified of the actions taken in this regard.
  6. To request the erasure or destruction of personal data in the event that the reasons requiring their processing cease to exist, even though the data have been processed in accordance with Law No. 6698 and other applicable legal provisions, and to request that the third parties to whom the personal data have been transferred be notified of the actions taken in this regard.
  7. To object to the occurrence of a result to your detriment arising from the analysis of the processed data exclusively by means of automated systems.
  8. To request compensation for damages in the event that you suffer damage due to the unlawful processing of your personal data.
If you wish to contact us, provide feedback or submit your questions under the KVKK (Turkish Personal Data Protection Law), you may do so by completing the Data Controller Application Form under the Personal Data Protection Law, together with documents verifying your identity:
You may sign the form at the time of application and apply in person, together with documents verifying your identity (national ID card, driver's license, etc.), at our company's address at Osmanağa Mah. Söğütlüçeşme Cad. Bulvar Çarşısı No:64/130 Kadıköy, Istanbul, Turkey, or
You may send the form, together with documents verifying your identity (national ID card, driver's license, etc.), through a notary public to our company's address at Osmanağa Mah. Söğütlüçeşme Cad. Bulvar Çarşısı No:64/130 Kadıköy, Istanbul, Turkey, or
You may submit the form to mindback@hs01.kep.tr via a Registered Electronic Mail (KEP) account belonging to the data subject, or, if your e-mail address is registered in our systems, to info@mindback.com.tr, together with documents verifying your identity (national ID card, driver's license, etc.).
In this context, we would like to remind you that written applications regarding this matter can only be accepted following identity verification carried out by us.
Requests of the data subject are evaluated and resolved free of charge as soon as possible, and in any event within thirty (30) days at the latest. If the evaluation and decision-making process involves an additional cost, the fee set out in the tariff specified in the Communiqué on the Procedures and Principles for Applications to the Data Controller shall apply. Data subjects who are not satisfied with the response to their application may, after applying to our company, lodge a complaint with the Personal Data Protection Authority.
Slide