logo

Personal Data Protection Notice (KVKK)

This Notice has been prepared to inform you, in accordance with Article 10 of Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), about the personal data processing activities carried out by [COMPANY NAME], acting as data controller, through the website [WEBSITE ADDRESS] ("Site").

1. Data Controller

In accordance with KVKK, your personal data may be processed as described below by [COMPANY NAME] (Address: [FULL ADDRESS], Registration No.: [COMPANY REGISTRATION NUMBER]), acting as the data controller.

2. Purpose of Processing Personal Data

The personal data collected is processed for the following purposes, within the scope of the personal data processing conditions set out in Articles 5 and 6 of KVKK:

  • Carrying out membership registration and account management processes

  • Managing order, delivery, and invoicing processes

  • Conducting customer relationship management processes and responding to customer requests

  • Sending commercial electronic messages, campaigns, and announcements, where explicit consent has been obtained

  • Developing the Site and the services offered, and improving the user experience

  • Fulfilling legal obligations and complying with statutory retention requirements

  • Ensuring Site security and preventing fraud or misuse

  • Following up on requests and complaints, and conducting legal proceedings where necessary

3. Categories of Personal Data Processed

  • Identity Data: Name, surname, national identification number (where required for invoicing)

  • Contact Data: Phone number, email address, delivery and billing address

  • Customer Transaction Data: Order history, invoice information, call center records, request and complaint records

  • Transaction Security Data: IP address, cookie records, session information, device and browser information

  • Marketing Data: Shopping and browsing preferences, campaign participation history (subject to explicit consent)

Payment card details are processed by our payment providers/banks and are not stored by [COMPANY NAME].

4. Transfer of Personal Data

Within the scope of the purposes stated above and in accordance with the conditions set out in Articles 8 and 9 of KVKK, your personal data may be transferred to:

  • Contracted courier/logistics companies, for the purpose of delivering your order,

  • Banks and payment institutions, for the purpose of processing payments,

  • Competent public authorities, where required to fulfill legal obligations,

  • Service providers (such as cloud storage, email/SMS delivery services, and accounting/financial advisory service providers)

as necessary.

5. Method and Legal Basis for Collecting Personal Data

Your personal data is collected electronically through the Site's membership form, order process, contact form, call center, and other electronic communication channels. Your personal data is processed on the basis of the following legal grounds:

  • Processing is directly related to the establishment or performance of a contract,

  • Processing is mandatory for the data controller to fulfill its legal obligations,

  • Processing is necessary for the establishment, exercise, or protection of a right,

  • Processing is necessary for the legitimate interests of the data controller, provided this does not violate your fundamental rights and freedoms,

  • You have provided your explicit consent (such as for marketing communications)

6. Your Rights as a Data Subject (KVKK Art. 11)

In accordance with Article 11 of KVKK, as a data subject you have the right to:

  • Learn whether your personal data is being processed,

  • Request information regarding the processing of your personal data, if any,

  • Learn the purpose of processing and whether your data is used in accordance with that purpose,

  • Know the third parties, domestic or international, to whom your personal data has been transferred,

  • Request correction of incomplete or inaccurate personal data,

  • Request the erasure or destruction of your personal data within the framework of the conditions set out in KVKK,

  • Request that any correction, erasure, or destruction be notified to third parties to whom your personal data has been transferred,

  • Object to any outcome that results to your detriment through analysis of your data solely by automated means,

  • Request compensation for damages arising from the unlawful processing of your personal data.

7. How to Submit a Request

You may submit requests related to the rights listed above, along with documents verifying your identity, through the following channels:

  • In writing, to [FULL ADDRESS],

  • Via email to [EMAIL ADDRESS], using a registered/secure electronic signature, mobile signature, or the email address previously registered with us in our system

Your request will be resolved free of charge within a maximum of 30 (thirty) days, depending on its nature. If the request requires an additional cost, a fee may be charged in accordance with the tariff set by the competent data protection authority.

8. Updates

[COMPANY NAME] reserves the right to update this Notice in line with changes to applicable legislation. The updated Notice takes effect as soon as it is published on the Site.

© 2025 Boomerrang. Tüm Hakları Saklıdır.

Posttik E-Ticaret Altyapısı