Personal Data Protection Law (KVKK) Information Text

INFORMATION TEXT ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

Data Controller: [ŞİRKET TAM RESMİ ÜNVANINIZ] Address: [ŞİRKET TAM ADRESİNİZ] Email: info@habos.com

Dear Visitor and Customer,

As Habos Store ( [ŞİRKET KISA ADI] ), acting as the "Data Controller" in accordance with the Law No. 6698 on the Protection of Personal Data ("KVKK"), we attach utmost importance to the security of your personal data. With this awareness, we place great emphasis on the processing and storage of all personal data belonging to all individuals associated with our company, including those who benefit from our products and services, in accordance with the rules of law and fairness.

With full awareness of this responsibility, and in our capacity as "Data Controller" as defined under the KVKK (Turkish Personal Data Protection Law), we process your personal data in the manner explained below and within the limits mandated by the legislation.

1. Which of your personal data do we process?

When you visit our website or make a purchase, the following data about you may be processed:

  • Identity Information: Your name, surname, and Turkish Republic Identity Number (for mandatory invoicing purposes).

  • Contact Information: Your email address, phone number, delivery and billing address.

  • Customer Transaction Information: Your order history, products purchased, and information regarding requests and complaints.

  • Transaction Security Information: Your IP address, website login and logout logs, and password and login credentials.

  • Marketing Information: Your shopping habits, cookie records (if you have given your explicit consent).

Note: Your credit card information is not stored on our servers; it is encrypted during the payment process and transmitted to the relevant payment institution.

2. For what purposes do we process your personal data?

Your personal data is processed for the following purposes:

  • Establishment and execution of the distance selling contract (Receiving the order, shipping the product).

  • Issuing invoices and fulfilling tax obligations (as required by Law No. 213 on Tax Procedure).

  • Managing customer service processes, resolving requests and complaints.

  • Implementation of information security processes (maintaining log records as required by Law No. 5651).

  • Providing information to the relevant public institutions and organizations.

  • With your explicit consent, we may send you promotional materials, campaign notices, and newsletters.

3. To Whom and for What Purpose the Processed Personal Data May Be Transferred

Your collected personal data will be processed in accordance with the personal data processing conditions specified in Articles 8 and 9 of the KVKK (Law on Protection of Personal Data);

  • In order to deliver your order, we will use our contracted shipping companies .

  • In order to receive your payment, we work with Payment Service Providers (e.g., Iyzico, Banks),

  • We provide website infrastructure services to Shopify Inc. (Due to the servers being located abroad, data is transferred abroad for technical reasons),

  • This information may be transferred to Tax Offices and, upon request, to Judicial Authorities in order to fulfill our legal obligations.

4. Method and Legal Basis for Personal Data Collection

Your personal data is collected electronically through our website, mobile application, or email channels. This data is processed based on the legal grounds specified in Article 5 of the KVKK (Personal Data Protection Law), namely: "It is directly related to the establishment or performance of a contract" (making a purchase), "It enables the data controller to fulfill its legal obligations" (issuing an invoice), and "It is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject." Marketing activities are based on the legal ground of "Explicit Consent".

5. Rights of the Personal Data Subject (Article 11 of the Personal Data Protection Law)

In accordance with Article 11 of the Law, you can exercise the following rights by applying to our company:

  • To find out whether your personal data is being processed,

  • If it has been processed, request information about it.

  • To learn the purpose of processing and whether it is being used for its intended purpose.

  • Knowing the third parties to whom it is transferred, domestically or internationally.

  • Requesting corrections if it is incomplete or incorrectly processed.

  • You can request the deletion or destruction of your personal data within the framework of the conditions stipulated by the KVKK (Personal Data Protection Law).

  • Don't object to an outcome that goes against you.

  • You have the right to claim compensation for damages you have suffered as a result of unlawful processing.

6. Application Method

You can submit your requests under the KVKK (Personal Data Protection Law) in writing or via registered electronic mail (KEP) address, secure electronic signature, mobile signature, or using the email address you previously provided to us and which is registered in our system, to info@habos.com .

Your application must include: your full name and signature (if the application is in writing), your Turkish Republic Identity Number, your residential or business address for notification purposes, your email address (if applicable), your telephone and fax numbers, and the subject of your request.