Personal Data Protection Notice (KVKK)

1. Data Controller

• Company: Mehmet Çopur (Seçkin Halı)
• Tax / MERSİS Number: 2610137088 (Zeytinburnu Vergi Dairesi)
• Address: Yeşiltepe Mah. 74. Sk. S. Çakaloğlu Apt. No: 41/A, Zeytinburnu / İstanbul
• Email for KVKK Inquiries: seckin.hali24@gmail.com

2. Personal Data Processed

• Identity: First name, last name.
• Contact: Email address, phone number, delivery address.
• Customer Transactions: Orders, order and delivery statuses, favorites, saved addresses.
• Transaction Security: Non-reversible password hashes, session tokens, one-way IP hashes, browser details, login attempts.
• Marketing: Exclusively upon your prior explicit opt-in, commercial communication preferences and consent history.

3. Processing Purposes

• Creating and managing your membership account.
• Receiving, preparing, delivering your orders, and providing status updates.
• Responding to your inquiries, requests, and feedback.
• Ensuring account and transaction security and preventing fraud or abuse.
• Fulfilling legal, tax, accounting, and consumer protection obligations.
• Sending marketing, campaign, and new collection notifications subject to your consent.

4. Legal Grounds

Your personal data is processed pursuant to KVKK Article 5/2 on the legal grounds of: necessity for the establishment or performance of a contract (c), fulfillment of statutory legal obligations (ç), establishment, exercise, or defense of a legal right (e), and legitimate interests of the data controller provided that fundamental rights and freedoms are not harmed (f).

Commercial electronic messages are sent strictly on the basis of your explicit consent pursuant to Turkish Law No. 6563 on the Regulation of Electronic Commerce.

5. Data Transfers

• Logistics & Courier Partners: Contact details (name, phone, delivery address) necessary for shipping and delivery.
• Payment Processors: Information required for authorized payment completion once the online payment gateway is operational.
• IT Service Providers: Cloud infrastructure and web hosting providers maintaining system operations.
• Commercial Message Management System (İYS): Opt-in records as mandated by statutory Turkish regulations.
• Authorized Public Authorities: When legally compelled by statutory requests.

6. Collection Methods

Your personal data is collected via automated or semi-automated digital means through membership, order, and contact forms on our website, as well as store visits and telephone communications.

7. Data Retention

Your data is retained for the duration necessitated by the processing purposes and statutory retention periods stipulated by Turkish law. Upon expiration, data is securely erased, destroyed, or anonymized. Commercial electronic communication consent records are kept for the periods mandated by statutory electronic commerce regulations.

8. Your Rights (KVKK Article 11)

• Learn whether your personal data is being processed,
• Request information if your personal data has been processed,
• Learn the purpose of processing and whether data is used in accordance with its purpose,
• Know the third parties to whom personal data is transferred domestically or abroad,
• Request rectification of incomplete or inaccurate personal data,
• Request erasure or destruction of personal data under the conditions set forth in KVKK Article 7,
• Request notification of rectification, erasure, or destruction to third-party recipients,
• Object to negative outcomes resulting exclusively from automated analysis systems,
• Claim compensation for damages incurred due to unlawful processing of personal data.

9. Application Procedure

You may convey your requests regarding your rights to seckin.hali24@gmail.com via email or in writing to Yeşiltepe Mah. 74. Sk. S. Çakaloğlu Apt. No: 41/A, Zeytinburnu / İstanbul. In accordance with the Communiqué on the Principles and Procedures for the Request to Data Controller, your application will be concluded free of charge within a maximum of 30 days.