KVKK Privacy Notice

PDPA Transparency Notice

Under the Personal Data Protection Law No. 6698 (PDPA), this transparency notice prepared by [BUSINESS NAME] ("Company", "we") is provided to inform you about how your personal data is processed, the purposes for which it is used, and your rights.

1. Data Controller

The person/organisation responsible for the processing of your personal data:

• Title: [BUSINESS NAME]
• Address: [ADDRESS]
• PDPA Contact Person: [CONTACT PERSON]
• Contact Email: [PDPA_EMAIL]
• VERBIS No.: [VERBIS Number to be added]

2. Categories of Personal Data Processed

The Company may collect personal data from you in the following categories:

• Identity Information: Name, surname, Turkish Republic Identification Number (ID No.), passport number
• Contact Information: Email address, telephone number, postal address
• Financial Information: Bank account details, credit card information, payment history
• Business Data Information: Order history, shopping preferences, product reviews and comments
• Technical Data: IP address, browser type, device information, cookie data, log files
• Location Data: Location information optionally via mobile application
• Special Category Data: Health data (only when applicable and with your explicit consent)

3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

• Provision of services and products, order fulfilment and delivery
• Customer relationship management and communication
• Invoicing, accounting and payment processing
• Compliance with legal obligations
• Improvement of products and services, market research and statistical analysis
• Marketing, advertising and promotional activities (with your explicit consent)
• Security, fraud detection and account protection
• Personalisation of user experience
• Statistical analysis and system performance monitoring
• Dispute resolution and legal claims

4. Legal Basis for Processing Personal Data

The processing of your personal data is based on the following legal grounds:

• Performance of Contract: Fulfilment of the service/product sales contract concluded with you
• Explicit Consent: Your explicit consent for processing your data for marketing, advertising and statistical purposes
• Legal Obligation: In accordance with tax legislation, the Commercial Code and other applicable laws
• Legitimate Interest: The Company's legitimate interests in the development of products/services and ensuring security

5. Transfer of Personal Data

Your personal data may be transferred to recipients in the following categories:

• Courier and logistics companies (for order delivery)
• Payment system providers (for financial transactions)
• Accounting and tax advisers (for legal obligations)
• Business partners and third parties (for service provision)
• Judicial and administrative authorities (in case of legal obligation)
• Marketing and advertising partners (with your explicit consent)

Your data is not transferred to third countries outside Turkey unless necessary, and where transfer occurs, it is carried out in accordance with applicable legal regulations.

6. Method of Collection of Personal Data

Your personal data is collected through the following methods:

• Directly: Registration forms, customer information forms, e-commerce platform, mobile application
• Automatically: Browser cookies, server logs, analytics tools, pixel technologies
• From Third Parties: Business partners, sales representatives, social media platforms

7. Your Rights Under PDPA Article 11

Under the PDPA, you have the following rights:

• Right to Be Informed: The right to learn whether your personal data is being processed and, if so, what that data is
• Right of Access: The right to request access to personal data processed about you
• Right to Correction: The right to request correction of your personal data that is incorrect, incomplete or unlawfully processed
• Right to Erasure: The right to request deletion of your personal data (where legal grounds exist)
• Right to Restrict Processing: The right to request restriction of the processing of your data
• Right to Data Portability: The right to obtain personal data you have provided in a structured, commonly used and machine-readable format
• Right to Object: The right to object to processing carried out for prohibited purposes
• Rights Related to Automated Decision Making: The right not to be subject to decisions based solely on automated processing

8. How to Exercise Your Rights

To exercise the rights mentioned above, you can send your request in writing to the following address or email address:

• Postal Address: [ADDRESS]
• Email Address: [PDPA_EMAIL]
• PDPA Contact Person: [CONTACT PERSON]

Your request must include your ID Number, a signed petition and a document proving your identity (photocopy). The Company will complete your request within a maximum of 30 days.

9. Cookie Policy

What are cookies? Cookies are small text files stored on your computer or mobile device. When you visit our website, we may use cookies to improve your experience.

Types of Cookies We Use:

• Essential Cookies: Required for the website to function (session, security)
• Preference Cookies: Cookies that remember your preferences (language selection, theme)
• Analytical Cookies: Cookies that track visitor behaviour (Google Analytics, etc.)
• Marketing Cookies: Cookies for advertising and marketing purposes (social media pixels, etc.)

Controlling Cookies: You may not accept cookies or delete them from your browser settings. However, blocking some cookies may prevent you from using some features of the website.

10. Updates and Changes

The Company reserves the right to update this transparency notice due to changes in operations, legislation or other reasons. We will inform you of any important changes.

11. Contact and Complaints

For complaints and issues regarding the processing of your personal data:

• You can contact our Company directly: [PDPA_EMAIL]
• You can contact the Turkish Data Protection Authority (PDPA)
• You can contact the relevant judicial authorities

12. Additional Information

Security of Your Data: The Company takes technical and administrative measures to ensure the security of your personal data. However, we cannot guarantee the complete security of data transmitted over the internet.

Data Retention Period: Your personal data will be deleted after the processing purpose is completed and legal obligations are fulfilled.

Automated Decision Making: The Company does not use technologies that make decisions based solely on automated processing of your personal data and that significantly affect your rights.

This transparency notice has been prepared by [BUSINESS NAME], effective date: [DATE]

Last Updated: [DATE]

Contact Information:
[BUSINESS NAME]
[ADDRESS]
Email: [PDPA_EMAIL]
PDPA Contact Person: [CONTACT PERSON]