The protection of your personal data and your privacy is an important issue for Hikmet Gürbüz, Maya Yoga Private Company (“Maya Yoga”). Maya Yoga adopts the principles stipulated in these legal texts in order to comply with the European Union Data Protection Regulation (“GDPR”) and the Law on the Protection of Personal Data No. 6698 (“KVKK”). It is extremely sensitive in fulfilling its obligations regarding the duration, deletion, destruction, anonymization, transfer, enlightenment of persons and ensuring data security. In this Privacy Policy, www.mayayoga.com.tr (“website”) and mobile application etc. It explains the information about your data that we collect through our relevant electronic platforms and how they are used for the above purposes.

 

a. Collection Methods of Your Personal Data and Legal Basis

Your personal data can be collected in audio, electronic or written form through Maya Yoga's website, mobile applications of the website, social media accounts, call center, cookies, notifications from official authorities and communication tools.

Accordingly, your personal information you have provided while subscribing to Maya Yoga's website and mobile applications; Although we do not have your personal data, the data we collect when necessary in order to adapt the services we offer with our website and mobile applications to the needs of users and to eliminate technical problems; Data belonging to your device through the electronic devices you have used and which cannot be matched with you (location information, etc.); The data collected through cookies is the subject of this collection.

The said data is collected in accordance with the personal data processing conditions specified in GDPR and KVKK No. 6698 and in line with the legal reasons specified in this Privacy Policy and only for this purpose.

 

b. Personal Data Collected

Maya Yoga collects the following types of data via its website or our mobile apps:

Personal data provided by you while becoming a member: Name-surname, TR ID number, address, location information 

(country/province/district where you live), date of birth, e-mail address, mobile phone and fixed phone number, KEP address if any, IP address, user name and password, photo.

Personal data provided by you when purchasing the service/package: Type of service/package, bank and credit card information (bank account number, IBAN number, credit card number, expiration date and security code, etc.), tax office and invoice information, signature.

Data not provided by you: Data that Maya Yoga collects in order to improve its infrastructure, if necessary, and that does not constitute personal data, and behavioral data collected by third parties.

 

c. Purpose of Personal Data Collection:

To carry out membership transactions, to easily sell products through the website and mobile applications,

Processing of online visitor and user data in accordance with KVKK,

Improving the product sold and the service provided, developing new services and informing you about them,

Solving User/Customer problems and complaints, providing an effective service in this regard,

To be able to communicate with the User/Customer regarding the product sold when necessary and to the extent permitted by you, to improve the User/Customer experience on the website and mobile application,

Promoting and marketing applications, products and services in line with the preferences and tastes of the User/Customer, within the scope of the contractual relationship and to the extent permitted,

Determining the commercial strategies of Maya Yoga,

Answering information and document requests from administrative and judicial authorities,

Ensuring information and transaction security and preventing its malicious use,

Making necessary arrangements to ensure that personal data is kept up-to-date and correct and to take action in accordance with KVKK,

Implementation and follow-up of accounting and financial transactions,

Ensuring the security of the financial information provided by you,

Sharing with you the issues related to the legislation and legal processes,

Creating a database by making statistical evaluations and using them in market research, provided that your identity and data are kept confidential,

Your personal data is collected for the purpose.

 

D. Your credit card and Mail-order information:

Your credit card and confidential financial information, upon your request, is stored by Maya Yoga in accordance with the rules set forth in GDPR, KVKK and this Privacy Policy, otherwise this information is not kept in our system unless you choose the option to keep it.

Your identity and credit card information, which you send to us via mail-order method, is kept by Maya Yoga according to the principle of confidentiality. This information is kept for 60 (sixty) days against possible credit card withdrawal objections that may occur with the bank, and then destroyed. The mail-order form approved by you, which you will send to Maya Yoga in return for the price of the products you have ordered, does not pose any risk, since you can naturally object to the bank and prevent the payment of this amount, in case any amount other than the price is withdrawn from your card.

 

to. Measures Taken for the Protection of Your Personal Data:

Maya Yoga takes all necessary technical and administrative measures to ensure the confidentiality, integrity and security of your personal data and shows the utmost care in this regard.

In this context, the following measures are taken to prevent unauthorized access, misuse, unlawful processing, disclosure, alteration or destruction of your personal data:

All areas where your personal data is received are protected by generally accepted security technologies such as firewall and Secure Sockets Layer (SSL) encryption.

Your personal data is transferred using SSL.

The authorizations of Maya Yoga employees regarding their access to your personal data are regularly checked. In order to prevent unauthorized access to your personal data, penetration tests are carried out regularly and the resistance of the system to unauthorized access is measured,

Cryptology (encryption) methods are used in the systems where your personal data is located, and a limited and necessary number of people are provided with access to this data, and a serious authority and control is applied in this regard.

Your personal data is not kept in a physical (paper) environment as much as possible. When kept, it is stored in locked and secure places and only authorized persons can access it.

Personal or behavioral data processed through third-party cookies are deleted from third-party systems as soon as membership in the system ends.

In the event of attacks on Maya Yoga's website, mobile applications or information systems, in case of personal data falling into the hands of third parties or being damaged, Maya Yoga will immediately notify you and the Personal Data Protection Board and all necessary technical and administrative measures will be taken.

 

f. Transfer of Your Personal Data:

Maya Yoga may transfer your personal data to third parties in accordance with Articles 8 and 9 of the KVKK, limited only to the purposes specified in this Privacy Policy. In this context, the processed user/customer data and the person on whose behalf the invoice will be issued may be shared with the cargo/post company for the purpose of sending the invoice to the relevant person, if the invoice is to be sent physically.

In order to ensure customer satisfaction, only anonymous data belonging to the User/Customer can be shared with companies that will conduct market research.

In addition, personal data or traffic information of the User/Customer can only be shared with these official authorities, within the scope of Maya Yoga's legal obligation, in case of official notification from the administrative and judicial authorities. In this case, the relevant situation is immediately notified to the User/Customer by Maya Yoga.

 

g. Your Rights Over Your Personal Data:

Pursuant to Article 11 of the KVKK, you have the following rights over your personal data processed by Maya Yoga:

Learning whether your personal data is processed or not,

If your personal data has been processed, requesting information about it,

To learn the purpose of processing your personal data and whether they are used in accordance with the purpose, To learn the third parties to whom your personal data is transferred, in the country or abroad,

Requesting correction of your personal data if it is incomplete or incorrectly processed,

Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,

Requesting notification of the transactions made pursuant to subparagraphs (d) and (e) to third parties to whom personal data has been transferred,

Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,

To request the compensation of the damage in case of loss due to unlawful processing of personal data.

Accordingly, if you apply to Maya Yoga and state that you do not want your personal data to be kept, we delete your personal data that is not mandatory for the continuation of the contractual relationship, that we do not have to keep it due to our legal obligation, or that the periods stipulated for storage in the KVKK expire. The deletion, destruction or anonymization of your personal data is carried out upon your express request in this regard or when deemed necessary by us in the following conditions.

 

h. Retention Periods, Conditions for Retention, Destruction or Anonymization of Personal Data:

Maya Yoga stores your personal data, which it processes through its website, mobile application or mobile site, for the periods stipulated by the relevant laws and/or for the periods required by the purpose of processing, pursuant to Articles 7 and 17 of the KVKK and Article 138 of the Turkish Penal Code. In the event that these periods expire, it will delete, destroy or anonymize Personal Data in accordance with the provisions of the Regulation on the Deletion, Destruction or Anonymization of Personal Data.

Deleting your personal data by Maya Yoga means making your personal data inaccessible and unusable for the relevant users in any way. Maya Yoga takes the necessary measures to perform the deletion in the database.

Destruction of personal data by Maya Yoga means making personal data inaccessible, unrecoverable and reusable by anyone in any way.

Anonymization of personal data by Maya Yoga means that personal data cannot be associated with an identified or identifiable natural person in any way, even if it is matched with other data.

Maya Yoga explains in detail the methods of deletion, destruction and anonymization and the technical and administrative measures it has taken within the scope of the Personal Data Storage and Disposal Policy prepared in accordance with the Regulation on the Deletion, Destruction or Anonymization of Personal Data. In this Privacy Policy, the period of regular (periodic) destruction stipulated by the Regulation is determined as 6 months.

 

I. Blocking Electronic Messages

You can block informational messages sent to you through Maya Yoga's website or mobile application membership at any time by applying the methods specified in these messages and you can opt out of receiving these messages.

 

j. Changes to the Privacy Policy

The provisions of this Privacy Policy may be changed or updated by Maya Yoga at any time and for any reason without notice. These changes take effect from the date the new Privacy Policy is posted on our website.