According to Law No. 6698 on the Protection of Personal Data ("Law"), our Company Metro Grosmarket Bakırköy Alışveriş Hizmetleri Tic. Ltd. Şti. ("METRO" or "Company"), acting as the data controller, takes the protection of personal data very seriously. We aim to comply with the law in all processes in which personal data is processed.
As will be explained in detail below, we have prepared this Data Protection Notice in order to inform you about your personal data processed within the main process of Execution of Goods /Service Sales Processes/Loyalty to Company/Product/Services Procedures, and related processes that we carry out within the scope of the activities included in this process as Customer Registration and Membership Processes, Metro Card Ownership and Commercial Communication Processes, and our purposes for processing your personal data, the legal reasons for data processing, to whom and for what purposes your data can be transferred, and your rights under the privacy legislation as a data subject.
- !Since the data of legal entities are not considered as personal data under the Law, this text does not cover our legal entity customers. This Data Protection Notice covers individual companies, real person customers and officials/employees acting on behalf of legal entities if they are involved in the processing processes. The information transmitted to us must be up-to-date and belong to the organization of which you are an authorized/employee. During the contract process, it is recommended to use the contact information of the institutions you are authorized/employed by, not individuals.
- !Due to the connection between the processes, this Data Protection Notice also includes information about the personal data processed during the checkout process when you shop in the store. For information about your personal data processed during the shopping processes you can check out e-commerce platforms. Please review our Data Protection Notice “Regarding Data Processing Processes of Members".
|
The contact information of the data controller METRO in terms of the data processing activities described below is as follows:
Address: 15 Temmuz Mah. Koçman Cad. No: 52 Gunesli/Istanbul
Website: www.metro-tr.com
Telephone number: 0 (212) 478 70 00
Trade Registry No: Istanbul Trade Registry - 292116
1- Data Processed through the Customer Registration Form
Identity Data
|
Contact Data
|
Customer Transaction
Data
|
Other Data
|
Purpose of Processing
|
Lawful Reason
|
Name, Surname, Title
|
Telephone Number
|
Store where the customer shops
|
Position of the customer representative
|
Execution of Goods /Service Sales
Processes/
Loyalty to Company/
Product/
Services Procedures
|
Article 5/2/f of law no. 6698 Legitimate Interest of
the Data Controller
|
Turkish ID no. / Tax no.
|
e-mail address
|
Customer Number (registry ID)
|
Preferances of commercial messages permissions
|
Signature
|
Address
|
Date of registration
|
Preferances of KVKK permissions
|
-
|
-
|
Preferances
of E-invoice
|
-
|
*The processing purposes and legal reasons are the same for the
categories of personal data in this process.
|
2- Data Processed in Website Membership Processes (Online Customer Registration Processes for Metro Card Holder Users)1.
Identity
Data
|
Contact Data
|
Customer Transaction
Data
|
Transaction Security
|
Purpose of Processing
|
Lawful Reason
|
Name, Surname
|
Telephone number
|
Metro Card Number
|
Password
*Password is only processed
to ensure the security of data controller operations.
|
Execution
of Goods /Service Sales Processes/
Loyalty to Company/
Product/
Services Procedures
|
Article 5/2/f of law no. 6698 Legitimate
Interest of the Data Controller
|
*The processing purposes and
legal reasons are the same for the categories of personal data in this
process.
|
3- Membership Applications;
3.1. Metro Card Membership Processes;
3.1.1. Data Processed During the Application Form Filling and Registration Process at the Store
Identity Data
Data Requested with Application Form
|
Communication Data
Data Requested with Application Form
|
Customer Transaction Data
Registration
Data
|
Purpose of Processing
Execution of Goods /Service Sales
Processes/
Loyalty to Company/
Product/
Services Procedures and establishment of Metro Card Program membership
contract
|
Lawful Reason
Article 5/2/f of law no. 6698 Legitimate Interest of
the Data Controller
|
Name
|
Telephone Number
|
Store where the customer shops
|
Surname
|
Email address
|
Customer ID number
|
*The processing purposes and legal reasons are the same for the
categories of personal data in this process.
|
Signature
|
Address (City, County)
|
Metro Card ID number
|
3.1.2. Metro Card Online Membership Processes;
3.1.2.1. Individual Customers
Identity Data
|
Communication Data
|
Customer Transaction Data
|
Transaction Security
|
Legal Transaction Data
|
Name
Surname
|
Telephone number
*Registration Data
Email address
Address
|
Preferred store
Customer ID number
Metro Card ID number (*At the individual registration screen, it
will be automatically generated after entering the sms code have sent to the
cell phone)
|
*Registration Data
Validation Code (is taken for Card Membership)
|
Preferances of Commercial
Message Permissions (yes, no, and chanells chosen)
Preferances of KVKK permissions
|
Purpose of processing1
Execution of Contract
Relations
|
Purpose of processing2
Execution of Contract
Relations
|
Purpose of processing3
Execution of Contract
Relations
|
Purpose of processing4
Ensuring Security of the Data
Controller Operations
|
Purpose of processing5
Conducting activities in
compliance with the law
|
Lawful Reason1
Article 5/2/c of law no. 6698 necessary for the establishment
and execution of a contract
|
Lawful Reason2
Article 5/2/f of law no. 6698 Legitimate Interest of
the Data Controller
|
Lawful Reason3
Article 5/2/c of law no. 6698 necessary for the establishment
and execution of a contract
|
Lawful Reason4
Article 5/2/f of law no. 6698 Legitimate Interest of
the Data Controller
|
Lawful Reason5
Article
5/2/ç of law no. 6698 necessary for compliance with a legal obligation
|
3.1.2.2. Corporate Customers
Identity Data
|
Communication
Data
|
Customer Transaction Data
|
Other Data
|
Legal Transaction Data
|
Name, surname, title
|
Telephone number
|
Store where the customer shops
|
Position of the customer representative
|
Information about customer representative is entitled to perform
on behalf of the company
|
Turkish ID no. / Tax no.
|
Email address
|
Customer Number (registry ID)
|
-
|
Preferances of commercial messages permissions
|
|
Address, Zip Code
|
Date of registration
|
-
|
Preferances of KVKK permissions
|
|
Fax number (optional)
|
Preferances
of E-invoice
|
-
|
|
Purpose of Processing and Lawful
Reason (Identity, Communication, Customer Transaction, and Other Data
Categories)
|
Purpose of Processing and Lawful
Reason (Legal Transaction Category)
|
Execution of Goods /Service Sales Processes/
Loyalty to Company/Product/ Services Procedures
|
Conducting activities in
compliance with the law
|
Article 5/2/f of law no. 6698 Legitimate Interest of
the Data Controller
|
Article
5/2/ç of law no. 6698 necessary for compliance with a legal obligation
|
3.1.3. Processing Processes of Data Obtained Through Metro Card
Marketing Data
|
Purpose of Processing
Execution of Goods / Service Sales Processes / Execution of
Company / Product / Service Loyalty Processes
Execution of Marketing Processes of Products / Services
*Conducting Marketing Analysis Studies
|
Store where the customer shops
|
Metro Card ID number
|
Order information(order quantity, shopping frequency, order
history)
|
Lawful reason
Article 5/1 of Law no. 6698
Processing is carried out with the explicit consent of the data
subject.
|
Campaigns and sales used, context of commercial messages sent
|
Customer preferances
|
4- Data Processed in Commercial Communication Processes
Identity Data
|
Communication Data
|
Customer Transaction Data
|
Transaction safety
|
Other Data
|
Name
|
Telephone number
|
Customer ID number
|
Service provider’s traffic records, transaction safety records.
|
Preferance records accept/deny information for KVKK regarding commercial
communication
|
Surname
|
Email address
|
Metro Card ID number
|
Records form conducting platfom which is governed commercial
communications
|
Preferance records accpet/deny information for commercial messages
|
-
|
-
|
-
|
-
|
Context of commercial messages
|
|
|
|
|
Survey results
|
Purpose of Processing
Execution
of Advertising / Campaign / Promotion Processes
Execution
of Marketing Processes of Products / Services
Execution
of Company / Product / Service Loyalty Processes
|
Lawful reason
Article 5/1 of Law no. 6698
Processing is carried out with the explicit consent of the data
subject.
|
5- Data Processed in Store Shopping Processes1.
Identity Data
|
Communication Data
|
Customer Transaction Data
|
Purpose of processing
Execution of Goods / Service Sales Processes / Execution of
Finance and Accounting Processes / Obligation to Issue and Forward Invoices
|
Lawful Reason
Art. 5/2/a of Law no. 6698 explicitly stated in the
rules of the Law
|
Name
|
Telephone Number
|
Store where the customer shops
|
Surname
|
Email address
|
Customer ID number
|
Turkish ID no. / Tax no.
|
Invoice address
|
Metro Card number
|
6- Information on Who Can Access Your Data, Purpose of Processing in Transfer/Access Processes and Legal Reason
Your data in the categories of identity, contact, customer transaction, transaction security, other data,
- Based on the legal reason of your explicit consent to Metro AG & Group Companies located abroad for the purpose of Execution of Information Security Processes and Ensuring the Security of Data Controller Operations,
- Based on the legal reason of your explicit consent to Metro AG & Group Companies located abroad for the purpose of Execution of Information Security Processes and Ensuring the Security of Data Controller Operations,
- In order to benefit from Third Party Platform Services in the main process of Execution of Goods / Service Procurement Processes, based on the legal reason of your explicit consent abroad due to the fact that the service providers are located abroad,
- Authorized Public Institutions and Organizations and Message Management System in order to carry out the activities in accordance with the Legislation Based on the legal reason that it is mandatory for the data controller to fulfill its legal obligation,
- In the main process of Execution of Goods / Service Procurement Processes; identity and contact data are transferred to the company from which we receive services for the performing and management of commercial communication processes for the purpose of obtaining services from third parties within the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed.
7- Your Rights as a Personal Data Owner
As a personal data subject, we inform you that you have the following rights pursuant to Article 11 of the Law:
- To learn whether your personal data is being processed,
- Request information if your personal data has been processed,
- To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
- To know the third parties to whom your personal data is transferred domestically or abroad,
- To request correction of your personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
- Although it has been processed in accordance with the provisions of the Law and other relevant laws, to request the deletion or destruction of your personal data in the event that the reasons requiring its processing disappear and to request notification of the transactions made within this scope and in case of incomplete or incorrect processing of personal data to third parties to whom your personal data has been transferred,
- Object to the occurrence of a result against you by analyzing your processed data exclusively through automated systems,
- To request the compensation of the damage in case of damage due to unlawful processing of your personal data.
As a data subject, you can submit your requests within the scope of Article 11 of the Law No. 6698 on the Protection of Personal Data to our Company in accordance with the "Communiqué on the Procedures and Principles of Application to the Data Controller". Please refer to the introduction section of our Clarification Text for our contact information.