Privacy Policy

PERSONAL DATA PROTECTION INFORMATION TEXT

This privacy notice has been prepared in accordance with Article 10 of the Law No. 6698 on the Protection of Personal Data and aims to inform the relevant individuals. The company may make changes to its personal data protection policies when deemed necessary; these changes will come into effect upon publication on the platform.

CARGOX CARGO TRANSPORTATION INC. (hereinafter referred to as the "Company") attaches utmost importance to protecting the fundamental rights and freedoms of individuals, primarily the right to privacy as stipulated in Article 20 of the Constitution, in the protection and processing of personal data. In this context, in accordance with the Law No. 6698 on the Protection of Personal Data ("Law" or "KVKK Law"), the Company takes care to protect and process personal data lawfully and acts with this care in all its planning and activities. Our Company does not consider the protection and processing of personal data solely within the scope of compliance with legislation; it places the value it gives to people at the core of its approach.

Personal data refers to any information relating to an identified or identifiable natural person.

The processing of personal data refers to any operation performed on data, such as obtaining, recording, storing, preserving, modifying, reorganizing, disclosing, transferring, acquiring, making available, classifying, or preventing the use of personal data, whether wholly or partly automated or non-automated, provided that it is part of a data recording system.

DATA CONTROLLER

This information is provided by CARGOX KARGO TAŞIMACILIK ANONİM ŞİRKETİ, in its capacity as data controller, in accordance with the provisions of Law No. 6698 on the Protection of Personal Data and related legislation.

Address: Oruçreis, Tekstilkent Cd No:12, 34235 A block 312/313 Esenler/Istanbul

Phone: 0850 242 27 46

E-mail: info@cargox.com.tr

Trade Registry Number: 1017104

MERSIS No:

KEP Address: cargoxkargo.00merkezkamu@hs02.kep.tr

SCOPE OF THE INFORMATION TEXT

This privacy policy provides information regarding the personal data processed by our company within the scope of the following activities:

Your visits to and use of our website com (“Site”) and your application processes through the website,
Your visits to the General Directorate, Regional Directorates, Branches, and the transactions you carry out there,
Commercial marketing activities carried out through commercial communication channels and/or other methods.
Request/complaint management and customer communication processes.
Corporate sales processes

Detailed information about the cookies used on our website can be found in our Cookie Policy .

PERSONAL DATA PROCESSED

The types of personal data processed by our company are generally as follows, although this may vary depending on the relevant process:

Personal Data Category	Personal Data
Identifiable Information	Name, surname, Turkish Republic Identity Number, tax identification number
Contact Information	Phone, address, e-mail address
Customer Transaction Information	Your purchases, order information, exchange/return information, payment information, billing information, product information, delivery information, requests/complaints, etc.
Visual and Auditory Recordings	Your voice recording will be sent if you speak with our call center.
Transaction Security Information	Password, website login and logout logs, device name, IP address, etc.
Physical Space Security	CCTV camera recordings
Marketing Information	Cookie records contain information obtained through marketing/campaign activities.
Legal Transaction Information	Information from judicial correspondence, case file information, court notices, and dispute information.

PURPOSES AND LEGAL BASIS FOR PROCESSING PERSONAL DATA

Website Visits, Application Processes

Personal Data Category	Purpose of Processing	Legal reason
Identity, Communication, Customer Transaction, Transaction Security Information	The process of submitting, evaluating, and finalizing applications. Conducting processes related to the establishment and performance of contracts, carrying out communication activities, and managing customer relationship processes. Execution of goods/services sales processes Execution of after-sales support processes for goods/services. Providing information to authorized persons, institutions and organizations. Execution of management activities	The processing of personal data of the parties to a contract is necessary provided that it is directly related to the establishment or performance of the contract.
Identity, Communication, Customer Transaction Information	Ensuring the delivery note/invoice is prepared and sent to the party, and ensuring that the payment can be collected. Our company complies with legal regulations regarding data retention, reporting, information provision, tax and other obligations, and conducts financial and accounting operations. Ensuring that activities are carried out in accordance with the legislation, Conducting storage and archival activities. Providing information to authorized persons, institutions and organizations. Execution of management activities	It must be stipulated in the laws, and it must be necessary for the data controller to fulfill its legal obligations.
Customer Transaction Information (Credit Card Information)	If you wish to pay by credit card, the payment will be processed ( credit card information is transferred to the payment institution without being recorded by us). Providing information to authorized persons, institutions and organizations. Execution of management activities	It is necessary for the data controller to fulfill its legal obligations.
Transaction Security Information	To monitor the satisfaction levels of our visitors and users and identify areas for improvement. Providing information to authorized persons, institutions and organizations. Execution of management activities	The processing of personal data belonging to the parties of a contract is necessary if it is directly related to the establishment or performance of the contract, or if the processing of data is necessary for the legitimate interests of the data controller.
Transaction Security Information (IP Address, Log Records, etc.)	To ensure the security and effectiveness of our website and information technology systems, we secure our technical infrastructure, provide information to authorized institutions and organizations, and conduct our activities in accordance with the legislation.	Processing of data is required by law or is necessary for the legitimate interests of the data controller.
Legal Transaction Information	Evaluating and responding to your legal claims regarding disputes, exercising the right to assert and defend your claims within legal processes, monitoring and conducting legal affairs, and providing information to authorized persons, institutions, and organizations.	Data processing is necessary for the establishment, exercise or protection of a right.

Marketing and Communication Processes

Personal Data Category	Purpose of Processing	Legal reason
Marketing Information	Ensuring customer satisfaction and conducting marketing activities for our products/services, customizing website content and gathering information about visitor browsing behavior, personalizing products and services according to the preferences, usage habits and needs of relevant individuals, and monitoring and improving product and service quality.	Explicit consent
Marketing Information	You will receive commercial electronic communications containing campaign, promotion and advertising content.	Explicit consent
Visual and Auditory Recordings	Providing the correct way to address the caller and confirming the call, providing information about online purchases, and managing customer relationship processes.	The processing of personal data of the parties to a contract is necessary provided that it is directly related to the establishment or performance of the contract.

You can withdraw your consent to the processing of your personal data, provided you have given your explicit consent, at any time, without giving any reason and free of charge.

Visits to the General Directorate, Regional Directorates, Branches, and the Operations Performed There

Personal Data Category	Purpose of Processing	Legal reason
Identity, Communication, Customer Transaction Information	The system handles the execution of shopping transactions, the establishment and fulfillment of sales contracts, the identification of customer records from other customer records, the management of goods/services sales processes, exchange and return processes, and communication, request, and complaint processes.	Processing personal data of the parties to a contract is permissible only if it is directly related to the establishment or performance of the contract and is provided for in the laws.
Identity, Communication, Customer Transaction Information	Preparing and sending invoices related to purchases, ensuring payment collection, complying with data retention, reporting, information, tax and other obligations stipulated by local and international legislation, and conducting financial and accounting operations.	It is necessary for the data controller to fulfill its legal obligations, as stipulated in the laws.
Identity, Communication, Customer Transaction Information	In accordance with our ongoing business relationship with your company, this includes ensuring debt repayment, handling current account and reconciliation transactions, and managing goods/services production and operational processes.	The processing of personal data belonging to the parties of a contract is necessary if it is directly related to the establishment or performance of the contract, or if it is essential for the data controller to fulfill its legal obligations.
CCTV	Ensuring the physical security of our premises for our visitors, customers, and employees, and informing authorized persons, institutions, and organizations.	Data processing must be necessary for the legitimate interests of the data controller, for the fulfillment of the data controller's legal obligations, or for the establishment, protection, or exercise of a right.

Corporate Sales Activities

Personal Data Category	Purpose of Processing	Legal reason
Identity, Communication, Customer Transaction Information	The system enables customer records created within it to be distinguished from records relating to other customers, and facilitates the execution of customer relationship management processes and communication activities.	The processing of personal data of the parties to a contract is necessary provided that it is directly related to the establishment or performance of the contract.
Identity, Communication, Customer Transaction Information	The process includes managing tender and contract procedures, ensuring debt repayment in accordance with our ongoing business relationship with your company, handling current account and reconciliation transactions, managing goods/services production and operation processes, and providing after-sales support services for goods/services.	The processing of personal data belonging to the parties of a contract is necessary if it is directly related to the establishment or performance of the contract, or if it is essential for the data controller to fulfill its legal obligations.
Identity, Communication, Customer Transaction Information	The responsibilities include preparing and sending invoices for purchases, ensuring payment collection, managing finance and accounting, and conducting financial operations to determine and implement the company's commercial and business strategies.	It is necessary for the data controller to fulfill its legal obligations, as stipulated in the laws.
Identity, Communication, Customer Transaction Information	Our company complies with local and international legislation regarding data retention, reporting, information dissemination, tax and other obligations, and carries out storage and archiving activities.	It is necessary for the data controller to fulfill its legal obligations.

METHOD OF COLLECTING PERSONAL DATA

Your personal data is collected through automated and non-automated methods, including: recording information you provide directly to our employees/sales consultants verbally, in writing, or through various other communication channels (such as phone calls and emails); recording information you share regarding your visits to the General Directorate, Regional Directorates, and Branches, and the transactions you conduct there, or applications you make through the website; recording your requests, complaints, and related questions that you submit to us during communication via the website, our email addresses, social media, and other communication channels; information and documents transmitted by authorized persons working on your behalf; information obtained by the system during your website visits; applications such as customer tracking software used in our company; information and documents transmitted from our agents, suppliers, and other third-party companies; and information/documents concerning you received from official institutions, organizations, and judicial/administrative authorities.

TRANSFER OF PERSONAL DATA

Your personal data may be transferred to the third parties listed below, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK (Law on Protection of Personal Data), and for the purposes stated below:

Third Parties	Purpose of Transfer
The person himself	Issuing and sending invoices/delivery notes for delivery services, providing information about online purchases, and managing processes for viewing and tracking transaction history.
Suppliers from whom we receive logistics services	To ensure the order is delivered to you and/or the recipient.
Our suppliers and business partners, integrator firms, from whom we receive product and service support in areas such as information technology, finance, payment services, and infrastructure.	Obtaining product and service support in specialized IT, payment services, infrastructure services, consulting, etc., to ensure the security of our operations as data controllers.
Foreign service providers	Receiving product and service support in specialized information technology and marketing/advertising/analysis activities.
Third parties from whom we receive consulting services, such as lawyers, auditors, and tax consultants.	Our company's responsibilities include conducting audit activities, monitoring and managing legal affairs, tracking and identifying suspicious transactions, and preventing illegal activities.
Legally authorized public institutions and organizations	Our company complies with the information retention, reporting, notification, tax and other obligations stipulated by legal regulations, and conducts its operations in accordance with the legislation.
Regulatory and supervisory bodies, courts, prosecutors' offices, consumer arbitration boards and other judicial authorities, and legal advisors.	Monitoring and managing legal affairs, providing information to authorized persons, institutions and organizations, and ensuring that activities are carried out in accordance with the legislation.

Your Rights as a Data Subject

As the data subject (the natural person whose personal data is processed), your rights listed in Article 11 of the Law are as follows:

To find out whether your personal data is being processed,
You have the right to request information regarding the processing of your personal data.
To learn the purpose for which your personal data is processed and whether it is being used appropriately for that purpose,
Knowing the third parties to whom your personal data is transferred, whether domestically or internationally.
You have the right to request the correction of your personal data if it has been processed incompletely or inaccurately.
You can request the deletion or destruction of your personal data (within the framework of the conditions stipulated in Article 7 of the Law).
You have the right to request notification of correction, deletion, and destruction processes to third parties to whom your personal data has been transferred.
You have the right to object to an outcome that is unfavorable to you, resulting from the analysis of processed data exclusively through automated systems.
You have the right to claim compensation for damages you have suffered as a result of the unlawful processing of your personal data.

Data Security and Right to Apply

Your personal data is meticulously protected within the scope of technical and administrative capabilities, and necessary technical and administrative measures are taken.

To submit your requests regarding your personal data:

You can deliver it in writing in person to our address: Oruçreis, Tekstilkent Cd No:12, 34235 A blok 312/313 Esenler/İstanbul, or send it via a notary public.
You can send it via Registered Electronic Mail (KEP) to the address cargoxkargo.00merkezkamu@hs02.kep.tr ,
You can submit your application by sending an email to info@cargox.com.tr with the subject line "KVKK Application" from the email address registered in our system.

If your application requires an additional cost, you may be required to pay the fee specified in the tariff determined by the Personal Data Protection Board. Your requests included in your application will be processed as soon as possible, and no later than 30 (thirty) days, depending on the nature of the request.