KVKK Privacy Notice

This English text is provided for information only. In case of any discrepancy, the Turkish version prevails.

This privacy notice has been prepared to inform you about your personal data processed through the doceelegante.com website, pursuant to Article 10 of Law No. 6698 on the Protection of Personal Data (KVKK) (the "Law") and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform (Aydınlatma Yükümlülüğünün Yerine Getirilmesinde Uyulacak Usul ve Esaslar Hakkında Tebliğ).

1. DATA CONTROLLER

Data controller: Mehmet Koçhan (sole proprietorship) — Doce Elegante Tax office: Kızılmurat Tax Office (Kızılmurat Vergi Dairesi Müdürlüğü) Tax identification number: 5730451262 Address: Gazipaşa Mahallesi, 1966. Sokak, No: 17, İç Kapı No: 3, 33000 Tarsus / Mersin E-mail: doceelegante@gmail.com

2. CATEGORIES OF PERSONAL DATA PROCESSED

Identity: first name, last name. Contact: e-mail address, telephone number, delivery and billing address. Customer transaction: order, cart and favourites records, order amount, return and exchange requests, messages you send to us. Finance: whether the payment has been approved, payment and refund amounts. Your card number and card security details are not seen, recorded or stored by us; payment takes place on the secure page of the licensed payment institution. Transaction security: IP address, session information, browser and device information, security logs. Legal transaction: the version and time of approval of the contracts and information texts you have approved, your cookie preferences. Marketing: e-newsletter subscription, only if you have given your explicit consent.

3. PURPOSES OF PROCESSING AND LEGAL GROUNDS

Receiving your order, collecting its payment through the payment institution, preparing it, handing it over to the carrier and delivering it; carrying out return, exchange and withdrawal processes — Article 5(2)(c) of the Law (establishment or performance of a contract).

Issuing invoices, fulfilling record-keeping and notification obligations arising from distance sales, electronic commerce and tax legislation, responding to requests from competent authorities — Article 5(2)(ç) of the Law (legal obligation).

Creating and managing your membership account — Article 5(2)(c) of the Law (establishment or performance of a contract).

Responding to your support requests, demands and complaints — Article 5(2)(c) and Article 5(2)(f) of the Law (legitimate interest).

Ensuring the security of the site and of payments, preventing fraud and misuse, using cookies that are strictly necessary for the site to function — Article 5(2)(f) of the Law (legitimate interest).

Establishing, exercising and protecting rights in the event of a dispute — Article 5(2)(e) of the Law.

Sending e-newsletters and campaign announcements; using non-essential (analytics) cookies — Article 5(1) of the Law (explicit consent). Your explicit consent is requested separately from this text, in the relevant form or in the cookie preferences panel, and may be withdrawn at any time.

4. METHOD OF COLLECTION

Your personal data is collected electronically, by automated means, through the membership, order, contact and newsletter forms on the site, cookies and server logs.

5. GROUPS OF PERSONS TO WHOM PERSONAL DATA IS TRANSFERRED

Payment institution (PayTR — licensed payment and electronic money institution): transaction information necessary for receiving and refunding payments. Carrier (Kolay Gelsin): first name, last name, address and telephone information for delivery and returns. Infrastructure service providers: technical services for hosting the site and storing data (database: Supabase, European Union — Frankfurt; site hosting and content delivery: Cloudflare). E-mail delivery service provider: e-mail address and order details for delivering order notification e-mails. Analytics service provider (Google Analytics): usage data that does not directly identify the individual, only if you give explicit consent to analytics cookies. Financial advisor (mali müşavir) and competent public institutions and organisations: within the scope of obligations and requests arising from legislation.

6. TRANSFER ABROAD

The servers of the infrastructure providers we use to host the site and store data are located abroad: database service Supabase (European Union — Frankfurt, Germany), site hosting and content delivery Cloudflare (global server network). For this reason, the personal data listed in Section 2 is transferred to these providers' servers abroad for the purpose of operating the site and processing your orders.

7. RETENTION PERIOD

Your personal data is retained for as long as required by the purpose of processing and until the end of the retention and limitation periods stipulated in the relevant legislation. For example, records relating to electronic commerce and contracts are kept for the periods stipulated in the relevant legislation, and records subject to tax legislation are kept for the period stipulated in the tax legislation. Upon expiry of the period, the data is erased, destroyed or anonymised.

8. YOUR RIGHTS

Pursuant to Article 11 of the Law, you have the right to: learn whether your personal data is processed; request information if it has been processed; learn the purpose of processing and whether it is used in accordance with that purpose; know the third parties to whom it is transferred domestically or abroad; request rectification if it has been processed incompletely or inaccurately; request erasure or destruction within the framework of the conditions in Article 7 of the Law; request that these operations be notified to third parties to whom the data has been transferred; object to a result to your detriment arising from analysis exclusively by automated systems; and claim compensation for damage if you suffer damage due to unlawful processing.

9. APPLICATION

You may submit your requests concerning your rights, together with information identifying you, to doceelegante@gmail.com from the e-mail address registered with us, or in writing to our address above. Your application will be concluded free of charge as soon as possible according to the nature of the request and within thirty days at the latest.