Last updated: 2025-12-27

This Privacy Policy explains how Yılmaz Basın Yayın Dağ. Tic. Ltd. Şti. (“Company”, “we”, “us”, or “our”) collects, uses, stores, and protects personal data in connection with the DCSOrderApp and related services (the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Data Controller

The data controller for personal data processed under this policy is:

Company Name: Yılmaz Basın Yayın Dağ. Tic. Ltd. Şti.
Address: Rami Cuma Mahallesi Talimhane Caddesi No 35/A Eyüp Sultan, İstanbul, Türkiye
Email: mehmetarli@dcs-crm.com

2. Scope of Processing

We process personal data exclusively on behalf of merchants who have explicitly authorized our application through Temu’s authorization mechanism.

We do not collect or process personal data directly from end customers without merchant authorization.

3. Categories of Personal Data

Depending on the merchant’s usage, the following categories of personal data may be processed:

  • Customer identification data (name, surname)
  • Contact data (phone number, email address)
  • Delivery information (shipping address, city, country)
  • Order information (order ID, product names, quantities, prices, timestamps)
  • Technical data (API request logs, timestamps, IP addresses for security purposes)

We do not process sensitive personal data.

4. Purpose of Processing

Personal data is processed solely for the following purposes:

  • Synchronization of orders between Temu and the merchant’s internal ERP (DCS) system
  • Order fulfillment and operational management
  • Customer service and issue resolution (when authorized by the merchant)
  • Legal compliance and accounting obligations

We do not use personal data for marketing, profiling, or resale.

5. Legal Basis for Processing

Processing is based on:

  • Performance of a contract (Article 6(1)(b) GDPR)
  • Compliance with legal obligations (Article 6(1)(c) GDPR)
  • Legitimate interests in operating and securing the Service (Article 6(1)(f) GDPR)

Where applicable, processing is carried out with the explicit consent and authorization of the merchant.

6. Data Sharing and Subprocessors

Personal data may be processed by the following subprocessors strictly for infrastructure and operational purposes:

  • Microsoft Corporation (cloud and database services)
  • Hetzner Online GmbH (cloud infrastructure)

Subprocessors are contractually bound to process data only according to our instructions and applicable data protection laws.

We do not sell, rent, or disclose personal data to third parties for commercial purposes.

7. International Data Transfers

Personal data may be processed in the European Economic Area (EEA) and Türkiye.

Where data is transferred outside the EEA, appropriate safeguards such as standard contractual clauses and technical security measures are applied.

8. Data Retention

Personal data is retained only for as long as necessary to:

  • Provide the Service
  • Comply with legal and accounting obligations
  • Resolve disputes and enforce agreements

Data is securely deleted or anonymized once retention is no longer required.

9. Data Security

We implement appropriate technical and organizational measures to protect personal data, including:

  • Encryption in transit and at rest
  • Access control and authentication mechanisms
  • Audit logging and monitoring
  • Regular security updates and patching

10. Data Subject Rights

Where applicable, data subjects have the right to:

  • Access their personal data
  • Request correction or deletion
  • Object to processing
  • Request restriction of processing
  • Lodge a complaint with a supervisory authority

Requests may be submitted to: mehmetarli@dcs-crm.com

11. Children’s Data

The Service is not intended for children under 16, and we do not knowingly process children’s personal data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be published on this page with an updated revision date.

13. Contact

For any questions regarding this Privacy Policy or personal data processing, please contact:

Email: mehmetarli@dcs-crm.com