Personal Data Protection and Processing Policy
This policy sets out the principles for the processing, storage, and protection of personal data of users of our website (“Data Subject”), within the scope of the Law No. 6698 on the Protection of Personal Data (KVKK) and the European Union General Data Protection Regulation (GDPR).
1. Data Controller
We, as the data controller, are responsible for the personal data collected on this website within the framework of relevant legal regulations. You can contact us through the channels provided on the site.
2. Personal Data Collected
The following data may be collected from the user, either directly or automatically:
Identity Information: First name, last name, username, date of birth
Contact Information: Phone number, email address, postal address
Technical Information: IP address, browser type, operating system, device information.
Usage Information: Site navigation, transaction history, click logs
Financial Information: Payment and billing information (if a transaction takes place)
Cookie Data: Information collected through cookies.
3. Purposes of Processing Personal Data
The collected data may be processed for the following purposes:
Providing, developing and personalizing services
Membership and transaction process management
Responding to requests and complaints
Fulfillment of legal obligations
Improving user experience
Marketing, campaign and information activities (with explicit consent)
4. Legal Grounds
Your personal data;
Explicit consent
Performance of the contract
Fulfillment of legal obligation
Legitimate interest
It is committed based on legal grounds.
5. Data Retention Period
Personal data is stored for the periods specified in the relevant legislation or until the purpose of processing ceases. After this period, the data is securely deleted, destroyed, or anonymized.
6. Sharing Personal Data
Your personal data will only be processed by:
Legal requirements
Requests from authorized public institutions and organizations
Our service provider partners (hosting, shipping, payment, etc.)
They are shared in these situations.
Data will not be sold or shared with third parties for commercial purposes.
7. Transferring Data Abroad
Where required by the service, your data may be transferred to countries where adequate protection is provided in accordance with the KVKK and GDPR requirements, or abroad with your explicit consent.
8. Data Security
For the security of your personal data;
Technical measures to prevent unauthorized access (encryption, firewall, SSL, etc.)
Authorization and access control
Personnel confidentiality obligations
is being implemented.
9. Data Subject Rights
In accordance with Article 11 of the Turkish Personal Data Protection Law (KVKK) and Articles 15-22 of the GDPR, data subjects have the following rights:
Request for access to personal data
Requesting data correction
Requesting the deletion or destruction of data.
Requesting restriction of processing
Requesting the portability of processed data.
Object to the process
Withdrawal of explicit consent
To exercise these rights, you can contact us through the contact information provided on our website.
10. Policy Changes
This policy may be updated from time to time. The updated version will take effect when it is published on our website.