Personal data notice
[Company name] ("we"), as the data controller, processes your personal data in line with the law and the principles below. This notice tells you which data we process, why, on what legal ground, with whom we share it and what your rights are.
Which data we process
- Identity: name and surname, and your Turkish ID number where an invoice requires it.
- Contact: e-mail address, phone number, delivery and invoice addresses.
- Customer transactions: orders, returns, requests and messages to our service.
- Transaction security: IP address, log records and the device you shop from.
- Marketing: your preferences and, with your consent, the messages you agree to receive.
Why we process it
To take and deliver your orders, to issue invoices, to handle returns and warranty claims, to answer your questions, to keep our site secure, to meet our legal obligations and, only with your consent, to tell you about offers.
On what legal ground
We process your data because it is necessary to set up and perform the contract between us, to meet our legal obligations, for our legitimate interests without harming your fundamental rights, and, where the law asks for it, with your explicit consent (Article 5 of KVKK).
With whom we share it
With cargo companies to deliver your order, with payment institutions and banks to take the payment, with our accountants and auditors, with IT providers who host our systems, and with public authorities when the law requires it. Where a provider is abroad, we transfer data only as Article 9 of KVKK allows.
Your rights
Under Article 11 of KVKK you can ask whether your data is processed, request information about it, learn the purpose and whether it is used accordingly, know the third parties it is shared with, ask for it to be corrected, deleted or destroyed, object to a result that arises against you from automated analysis, and claim compensation for damage caused by unlawful processing.
Send your request with your identity to [e-mail address] or by post to [registered address]. We answer within thirty days at the latest.
Data controller
[Company name], [registered address], MERSIS no. [number], [e-mail address].