DEPOTRA PDPL DISCLOSURE TEXT
Data Controller
Pursuant to the Law on the Protection of Personal Data No. 6698 (“KVKK”), your personal data are processed by [COMPANY NAME], acting as the data controller, whose details are provided below.
Company Name: [COMPANY NAME]
Brand: Depotra
MERSIS No: [MERSIS NO]
Address: [COMPANY ADDRESS]
E-Mail: [KVKK E-MAIL ADDRESS]
Phone: [PHONE]
1. Personal Data Processed
Depending on the nature of the transaction and relationship, Depotra may process the following personal data:
- Identity information: name, surname
- Contact information: phone number, e-mail address, delivery / invoice address
- Customer transaction information: order, cart, return, request, complaint, membership, and transaction history
- Financial information: payment method, payment transaction information, partially masked payment records
- Transaction security information: IP address, session records, device and browser information, log records
- Marketing information: campaign preferences, commercial communication consent / rejection records
- Legal transaction information: dispute, request, and application records
2. Purposes of Processing Your Personal Data
Your personal data may be processed for the following purposes:
- creating and managing your membership account,
- receiving, confirming, preparing, shipping, and delivering orders,
- carrying out payment transactions and monitoring finance / accounting processes,
- managing return, exchange, withdrawal, and after-sales support processes,
- conducting customer service activities,
- evaluating requests, suggestions, and complaints,
- ensuring information security and preventing fraud and abuse,
- fulfilling legal obligations,
- sending campaign, promotion, advertisement, and marketing communications if you provide consent.
3. To Whom and For What Purposes Your Personal Data May Be Transferred
Your personal data may be transferred, in accordance with legislation and for the purposes specified above, to:
- payment institutions and banks,
- cargo / logistics companies,
- e-invoice / e-archive and accounting service providers,
- suppliers providing information technology, hosting, software, infrastructure, and security services,
- business partners providing customer support and call center services,
- public institutions and organizations legally authorized,
- private persons or institutions legally authorized upon request.
4. Method and Legal Basis for Collecting Your Personal Data
Your personal data may be collected through the website, mobile application, call center, e-mail, cookies, contact forms, membership and order forms, return / support forms, and similar physical or electronic channels.
Your personal data may be processed on the legal bases set out in KVKK, in particular:
- where it is directly related to the establishment or performance of a contract,
- where it is necessary for the data controller to fulfill its legal obligations,
- where it is necessary for the establishment, exercise, or protection of a right,
- where it is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject,
- where it is expressly stipulated by the relevant legislation,
- where explicit consent is obtained in cases requiring explicit consent.
5. Your Rights as a Data Subject
Pursuant to Article 11 of KVKK, you have the following rights:
- to learn whether your personal data are processed,
- to request information if your personal data have been processed,
- to learn the purpose of processing and whether they are used in accordance with that purpose,
- to know the third parties to whom personal data are transferred domestically or abroad,
- to request correction if personal data are incomplete or incorrectly processed,
- to request deletion or destruction within the framework of the conditions set out in the relevant legislation,
- to request notification of correction, deletion, or destruction transactions to third parties to whom personal data have been transferred,
- to object to the occurrence of a result against you through the exclusive analysis of processed data by automated systems,
- to request compensation if you suffer damage due to unlawful processing of personal data.
6. Application Method
You may submit your requests within the scope of KVKK in writing to [COMPANY ADDRESS], via [KEP ADDRESS], via registered electronic mail to [KVKK E-MAIL ADDRESS], or through other methods accepted under the legislation. Your applications shall be evaluated within the framework of the applicable legislation.
7. Retention and Updates
Depotra retains personal data for the periods permitted by the relevant legislation or for as long as required by the purpose of processing. This text may be updated in line with legislative changes, operational needs, or technical requirements.