KVKK Privacy Notice

1. Data Controller

2. Processing of Your Personal Data

Gerçeği Arayanlar processes customers’ personal data securely and lawfully under Law No. 6698 on the Protection of Personal Data (KVKK).

2.1 Personal Data Processed

We may collect and process personal data in the following categories:

• Identity Data: Name, surname, email address, phone number
• Address Data: Delivery address, billing address
• Payment Data: Bank account details (IBAN), payment references, transaction dates
• Order Data: Purchased products, order dates, shipment tracking numbers
• Communication Records: Email correspondence, support request history
• Technical Data: IP address, browser type, visit history, cookie data
• Preferences: Product favorites, preferred payment method

2.2 Legal Bases for Processing

We process your data under the following legal bases:

1. Performance of a Contract (KVKK Art. 5/2/c): Completing the purchase contract and delivery by cargo
2. Legal Obligation (KVKK Art. 5/2/d): Tax laws, customs rules, accounting records
3. Legitimate Interest (KVKK Art. 5/2/f): Customer service, product development, fraud prevention
4. Consent (KVKK Art. 5/2/a): Marketing and newsletters (only with your explicit consent)

2.3 Purposes of Processing

We process personal data for the following purposes:

• Completing purchases and delivering by cargo
• Issuing invoices and keeping accounting records
• Providing customer service and support
• Improving products and services
• Complying with legal obligations
• Preventing fraud and abuse
• Statistical analysis and marketing (with consent)
• Analyzing site usage via cookies and similar technologies

2.4 Retention Periods

Your data will be retained for the following periods:

• Contract-based data: Minimum 6 years after the order (Turkish Commercial Code and tax laws)
• Marketing data: Until you withdraw consent
• Technical data: 12 months (unless a legal claim requires longer retention)
• Communication records: 3 years (for customer service)

2.5 Recipients of Data

Personal data may be shared with:

• Cargo companies: Your delivery address (DHL, Aras Kargo, PTT, etc.)
• Banks/financial institutions: Payment verification and transfer processing
• Accountants/tax advisors: Tax and accounting compliance
• Public authorities: Court orders, administrative investigations
• Processors: Email, web hosting, and analytics providers

Your data will never be shared for commercial advertising, marketing sales to third parties, or data brokerage.

2.6 Data Transfers

Personal data is processed in Türkiye. If an international transfer is required, it will be made under KVKK Art. 8 to countries with adequate protection or with appropriate safeguards.

3. Your Rights

Under KVKK you have the following rights:

3.1 Right to Be Informed

You may request information on whether and how your personal data is processed.

3.2 Right of Access

You have the right to learn about personal data concerning you.

3.3 Right to Rectification

You may request correction of inaccurate or incomplete personal data.

3.4 Right to Erasure

Subject to exceptions in law, you may request deletion of your personal data.

3.5 Right to Restrict Processing

You may request restriction of processing of your personal data.

3.6 Right to Data Portability

You may request your personal data in a structured, commonly used, machine-readable format.

3.7 Right to Object

You may object to processing based on legitimate interest or marketing.

4. How to Exercise Your Rights

To exercise the rights above, contact:

Email: hello@gercegiarayanlar.com
Subject line: "KVKK Rights Request"

Your request will be answered in writing within 30 days. Where necessary, this period may be extended by another 30 days.

5. Right to Lodge a Complaint

You may lodge complaints regarding your KVKK rights with the Personal Data Protection Authority (Kişisel Verileri Koruma Kurulu).

Personal Data Protection Authority
Address: Yüksek İhtisas Cad. No. 1, 06100 Çankaya/Ankara
Tel: +90 312 219 91 00
Web: www.kvk.gov.tr

6. Security Measures

We take the following measures to protect your personal data:

• SSL/TLS encryption for data in transit
• Regular security updates
• Access controls and authorization management
• Backup and recovery systems
• Abuse and fraud monitoring

7. Withdrawal of Consent

You may withdraw consent given for marketing, newsletter, or analytics purposes at any time by writing to hello@gercegiarayanlar.com.

8. Cookie Policy

For detailed cookie information, please visit our Cookie Policy page.

---

This notice reflects our commitment to data security and privacy. For questions, contact hello@gercegiarayanlar.com.