PRIVACY AND SECURITY

ORİX; represents Kerem Ahşap Nalburiye Mobilya İnşaat Otomotiv Sanayi Ticaret Limited Şirketi.

WEBSITES: Include the websites under ORİX, namely www.orix.com.tr and www.orixhome.com.

The use of this website and the services provided through it are subject to the terms specified in this “Privacy Policy,” which governs how the information we collect about you and the services you request is used and protected. By visiting this website and requesting to use the services offered through it, you agree to the terms stated in this “Privacy Policy.” WEBSITES may request certain personal information (name, age, interests, email, etc.) to better serve their customers. The information collected on ORİX‘s servers is used exclusively within ORİX for periodic campaign activities, designing special promotional activities tailored to customer profiles, and preventing unwanted emails through customer classification studies.

If you wish to unsubscribe from our daily email list at any time, you can easily do so by clicking on the “Click here to unsubscribe from our e-newsletter list” link located at the bottom of our emails.

ORİX does not share the information collected through membership forms with third parties without the member’s knowledge or contrary instructions, nor does it use this information for any non-operational commercial purposes or sell it.

WEBSITES analyze and interpret visitor behavior and preferences tracked during site usage in addition to the personal information requested in email addresses and membership forms. These statistical data, which do not contain personal information, may be shared with ORİX business partners.

Customer information may only be disclosed to official authorities if such information is duly requested by them and when disclosure is mandatory according to applicable legislation.

All information entered into the system by the customer can only be accessed and modified by the customer. It is not possible for anyone else to access or modify this information.

The credit card information requested on the payment page is not stored on WEBSITES or the servers of the service providers working with ORİX, ensuring the utmost security for our valued customers. Thus, all transactions related to payments are carried out between the bank and your computer through the WEBSITES interface.

By making a purchase on our site, you agree to share your financial information with third parties (such as banks, credit card companies, etc.) required to complete your transaction. Otherwise, it will not be possible to finalize your purchase.

Our website provides links to other websites. The commitments in our Privacy Policy apply solely to our website and do not cover other websites. The privacy guarantees and terms of use for linked websites apply to their respective usage.

The copyrights for the information, materials, and their arrangement on our website belong to ORİX. All copyrights, registered trademarks, patents, intellectual and other proprietary rights regarding the information and materials (excluding third-party materials) belong to us.

To protect the confidentiality of our customers’ personal information, our system and internet infrastructure are maintained at the most secure level, and necessary precautions are taken. If you need additional information, please do not hesitate to contact us.

Protecting the privacy of visitors to the WEBSITES operated by ORİX (“Data Subject”) is one of the leading principles of ORİX.

This Privacy Policy (“Policy”) provides explanations regarding (1) the processing of personal data of Data Subjects.

  1. PROCESSING OF DATA SUBJECTS’ PERSONAL DATA

This Policy provides information to visitors of WEBSITES on the following matters:

– The types of personal data collected, the method of collection, and the legal grounds;
– The purposes for processing personal data of Data Subjects;
– The parties with whom personal data of Data Subjects may be shared;
– The retention periods for personal data of Data Subjects;
– The rights of Data Subjects;
– The measures taken to ensure the security of personal data of Data Subjects.

What Personal Data of Data Subjects is Collected, the Method of Collection, and Legal Grounds

Any information that identifies or can identify you is considered “personal data.” ORİX undertakes all necessary activities to ensure compliance with the Personal Data Protection Law No. 6698 (“Law”) and relevant regulations in the processing of your personal data.

The personal data obtained during your visit to the WEBSITES are as follows:

  • Identity Information
  • Contact Information
  • Customer Transaction Information
  • Transaction Security Information
  • Marketing Information
  • Product/Service Usage Information
  • Request/Complaint Management Information

Purposes of Processing Personal Data of Data Subjects

The personal data obtained during your visit to the WEBSITES may be processed by ORİX in accordance with Articles 5 and 6 of the Personal Data Protection Law for the following purposes:

  • Carrying out necessary activities by our business units to ensure that related persons benefit from products and services offered by ORİX, and managing related business processes,
  • Planning and executing the activities required to customize products and services offered by ORİX according to the preferences, usage habits, and needs of the relevant persons, and promoting these to the relevant persons,
  • Conducting necessary activities by our business units to carry out ORİX‘s commercial activities and managing related business processes,
  • Planning and executing ORİX‘s commercial and/or business strategies,
  • Ensuring the legal, technical, and commercial-occupational safety of ORİX and the persons in business relations with ORİX.

Sharing Personal Data of Data Subjects

The personal data collected may be shared with our business partners (e.g., outsourcing service providers, hosting service providers, research companies, call centers), shareholders, affiliates, authorized public institutions, and private individuals for the purposes of processing personal data as specified under Articles 8 and 9 of the Personal Data Protection Law.

Retention Periods for Personal Data of Data Subjects

Although processed in accordance with the Law and relevant legal provisions, if the reasons requiring processing are eliminated, personal data will be deleted, destroyed, or anonymized by ORİX.

ORİX may retain personal data in compliance with the Law for potential legal disputes or for the statutory limitation periods specified in relevant legislation. During this retention, the personal data is not accessed for any other purpose, and access is granted only when required by the legal dispute.

For detailed information on the retention of personal data, you can visit here.

Rights of Data Subjects

In accordance with Article 11 of the Law, Data Subjects have the following rights regarding their personal data:

  • To learn whether personal data is processed,
  • If processed, to request information about the processing,
  • To learn the purpose of processing personal data and whether it is used in accordance with its purpose,
  • To know the third parties to whom personal data is transferred domestically or abroad,
  • To request correction of personal data if it is incomplete or incorrectly processed and to request notification of this correction to third parties to whom the data has been transferred,
  • To request the deletion or destruction of personal data in case the reasons for its processing are eliminated, even though it has been processed in accordance with the Law and other related provisions, and to request notification of such processes to third parties to whom the data has been transferred,
  • To object to any adverse outcome derived from the analysis of processed data exclusively through automated systems,
  • To request compensation in case of damages due to unlawful processing of personal data.

ORİX conducts necessary system operations to enable Data Subjects to exercise their rights under administrative and technical possibilities in accordance with the Law.

You can update your personal information through the relevant forms on WEBSITES. If you submit your requests regarding your rights to ORİX through the Data Subject Application Form, it will be resolved free of charge as soon as possible and within no later than 30 days, depending on the nature of the request. However, if the transaction requires an additional cost, ORİX may charge the fee determined by the Personal Data Protection Board.

Measures Taken to Ensure the Security of Personal Data of Data Subjects

In line with ORİX‘s commitment to protecting personal data and ensuring data security, ORİX takes all necessary technical and administrative measures to:

  • Prevent unlawful processing of personal data,
  • Prevent unauthorized access to personal data,
  • Ensure the protection and confidentiality of personal data.