# KVKK privacy notice

> Giyimport privacy notice under Turkish Personal Data Protection Law No. 6698: data processed, purposes, transfers and your rights.

Prepared by [Şirket ünvanı] as data controller under Turkish Personal Data Protection Law No. 6698 ("KVKK"). The Turkish version prevails.

Last updated: 2026-11-07

### Data controller

[Şirket ünvanı], [Açık adres]. Tax office/no: [Vergi dairesi] / [Vergi no]. MERSIS: [MERSİS no]. KEP: [KEP adresi].

### Categories of personal data

- Identity (name)
- Contact (email, phone, delivery address)
- Customer transaction (order number, order lines, plan and subscription data)
- Transaction security (IP address, browser data, sign-in and action logs, password hash)

### Purposes

- Establishing and performing the membership and plan contract
- Fulfilling orders of connected marketplace stores
- Running information security processes and managing/auditing access rights
- Answering requests and complaints
- Fulfilling legal obligations

### Legal bases

KVKK Art. 5/2-(c) contract, (ç) legal obligation, (f) legitimate interest; Art. 9 conditions for transfers abroad.

### Collection method

Electronically via sign-up and contact forms, automatically during panel use, and via marketplace APIs (Trendyol, Temu) authorized by our customers.

### Transfers

Personal data is stored on a server in the Netherlands (Amsterdam metro area) through our hosting provider [Barındırma sağlayıcısının ticari ünvanı] (transfer abroad). Data may be shared with competent public authorities only where legally required. Recipient data is accessible only to the relevant seller for order fulfilment.

### Retention

Recipient data is deleted 30 days after the order closes; account data after statutory periods following closure; log data after 365 days.

### Your rights (KVKK Art. 11)

- Learn whether your data is processed and request information
- Learn the purpose and whether it is used accordingly
- Know third parties to whom it is transferred in Türkiye or abroad
- Request rectification of incomplete/incorrect data and erasure where conditions are met
- Object to adverse outcomes of automated analysis
- Claim compensation for damage due to unlawful processing

### Applications

Send requests in writing to [Açık adres], to our KEP address [KEP adresi], or from your registered email to [İletişim e-postası]. Requests are answered free of charge within 30 days.