STEPGAMER Privacy Policy for Personal Data

General Information on the Personal Data Protection Law
The Law on the Protection of Personal Data No. 6698 (hereinafter referred to as KVKK) was adopted on March 24, 2016, and published in the Official Gazette No. 29677 on April 7, 2016. Certain provisions of KVKK came into force on its publication date, while others became effective on October 7, 2016.

Information as a Data Controller
In accordance with KVKK No. 6698 and in our capacity as a Data Controller, your personal data will be recorded, stored, updated, disclosed/transferred to third parties where legally permitted, classified, and processed in the ways enumerated by KVKK as outlined on this page.

How Your Personal Data is Processed
In line with KVKK, the personal data you share with our company may be obtained, recorded, stored, modified, rearranged, or processed in whole or in part through automatic means or non-automatic means as part of a data recording system. Any action performed on data under KVKK is considered "processing of personal data."

Purposes and Legal Grounds for Processing Your Personal Data
The personal data you share may be processed for the following purposes and legal grounds:

To fulfill the requirements of the services provided to our customers in accordance with agreements and technology;
To improve the products and services we offer;
To record identity, address, and other necessary information for identifying the transaction owner as per the Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6502 on the Protection of Consumers, and related secondary legislation;
To organize all records and documents required as a basis for transactions in banking and electronic payment systems or paper contracts as mandated by laws and regulations;
To comply with information retention, reporting, and disclosure obligations mandated by legal authorities and other official bodies;
To provide information to prosecutors, courts, and relevant public officials regarding public security issues and legal disputes upon request and as required by law.

Your personal data will be processed in compliance with KVKK and relevant secondary legislation.

Third Parties or Organizations Your Personal Data May Be Transferred To
For the purposes mentioned above, your personal data may be shared with:

Companies providing the e-commerce infrastructure, such as IdeaSoft Software Inc.;
Suppliers, shipping companies, and other related service providers;
Partner organizations with which we collaborate;
National and international entities and other third parties acting as data processors on our behalf.

Methods of Collecting Your Personal Data
Your personal data may be collected through the following methods:

Forms on our company’s website and mobile applications, including data such as name, surname, national ID number, address, phone, and email, as well as user preferences, IP logs, cookies, browsing times, and location details;
Verbal, written, or electronic communication with our sales and marketing team, branches, suppliers, and other sales channels;
Documents such as business cards, resumes (CVs), proposals, or physical or digital forms provided for purposes such as establishing a commercial relationship, job applications, or offering a proposal;
Social media platforms, blogs, surveys, games, campaigns, newsletters, and similar online channels.

Personal Data Obtained Before KVKK Came Into Effect
Personal data obtained before April 7, 2016, through methods such as membership applications, electronic communication permissions, and product/service purchases will also be processed and stored in accordance with the terms and conditions outlined in this document.

Transfer of Personal Data Abroad
Your personal data, collected through any of the methods mentioned above, may be processed in Turkey and stored or processed abroad. The transfer will be carried out in compliance with KVKK and only to service providers located in countries accredited by the Personal Data Protection Board as providing adequate protection.

Storage and Protection of Personal Data
Your personal data will be stored confidentially in our company’s database and systems in compliance with KVKK Article 12. Except for legal obligations and the provisions outlined in this document, your personal data will not be shared with third parties. Our company is obligated to take necessary technical and physical security measures to prevent unlawful processing or access to your personal data and to safeguard it.

Accuracy and Currency of Personal Data
Under KVKK Article 4, our company is responsible for ensuring that your personal data is accurate and up-to-date. To fulfill this obligation, our customers must share accurate and current data or update it via our website or mobile applications.

Rights of Personal Data Owners Under KVKK
Article 11 of KVKK, which became effective on October 7, 2016, grants the following rights to personal data owners:

To inquire whether personal data is being processed;
To request information if personal data has been processed;
To learn the purpose of data processing and whether the data is being used in line with these purposes;
To know the third parties, within the country or abroad, to whom personal data is transferred;
To request correction of incomplete or incorrect personal data;
To request deletion or destruction of personal data under the conditions specified in Article 7 of KVKK;
To request notification of correction, deletion, or destruction of data to third parties to whom data has been transferred;
To object to any unfavorable outcome due to exclusively automated data analysis;
To claim compensation for damages incurred due to unlawful processing of personal data.

The company’s trade registry details, MERSIS number, and other contact information will be published once finalized. Personal data owners can direct their questions, opinions, or requests via the following communication channels:

Email: [..........................]
Phone: [..........................]
Fax: [...........................]