This is a courtesy translation. The legally binding version is the Turkish text.
Data controller: Henks Ticaret ve Bilişim Hizmetleri A.Ş. (MERSİS: 0461039910500019), M. Fevzi Çakmak Mah. Mustafa Kemal Bulvarı No:40A, 35445 Urla/İzmir, Turkey.
Processed Data
Identity (name), contact (email, phone, delivery address), customer transaction (order and return records, invoice data), transaction security (IP, log records), marketing (only with explicit consent, newsletter).
Purposes
Conclusion and performance of the sales contract (ordering, delivery, returns), invoicing and statutory retention obligations, request/complaint management, site security, and, with explicit consent, promotional communications.
Legal Grounds
KVKK Art. 5/2-c (performance of contract), Art. 5/2-ç (legal obligation — invoicing, e-commerce legislation), Art. 5/2-f (legitimate interest — security), Art. 5/1 (explicit consent — newsletter/marketing).
Transfer
Shipping companies (delivery), payment institution (collection), financial advisor/competent authorities (legal obligation), hosting and infrastructure providers (including servers abroad).
Retention
Order and invoice records are retained for the statutory periods under tax and e-commerce legislation (minimum 10 years); other data is retained for the period necessary for the purpose.
Your Rights (KVKK Art. 11) and How to Apply
Under Article 11 of the KVKK, you have the right to: learn whether your personal data is being processed; request information if it has been processed; learn the purpose of processing and whether it is used in accordance with that purpose; know the third parties to whom it is transferred domestically or abroad; request correction if it is incomplete or inaccurate; request deletion or destruction under the conditions set out in the law; request that correction/deletion/destruction be notified to third parties to whom the data has been transferred; object to any outcome against your interests arising from analysis exclusively by automated systems; and claim compensation for damages arising from unlawful processing. You may submit your requests in writing via the contact form on the site; requests are responded to within 30 days at the latest.