KVKK Privacy Notice
Data Controller: Pegia Dış Ticaret A.Ş. — Kazlıçeşme Mah. Prof. Dr. Muammer Aksoy Cad. No: 4/C Zeytinburnu/Istanbul 34020 — destek@derimarket.net — Registered Electronic Mail (KEP): pegia@hs01.kep.tr. This text has been prepared pursuant to Article 10 of the Law No. 6698 on the Protection of Personal Data (“KVKK”) to fulfill the disclosure obligation regarding activities conducted through https://www.derimarket.net.
Personal data processed
Identity and contact information (full name, address, telephone number, email); membership and customer transaction information (orders, returns, invoices); payment-related information (processed by payment institutions; card data is not stored by us); marketing preferences; transaction security and usage data (IP, logs, cookie data).
Purposes and legal grounds for processing: Receiving, fulfilling and delivering orders, processing returns, and providing after-sales support (KVKK Article 5/2-c: establishment and performance of a contract); issuing invoices and fulfilling legal record-keeping and retention obligations (Article 5/2-ç: fulfillment of a legal obligation); establishment, exercise and protection of a right (Article 5/2-e); site security and prevention of fraud (Article 5/2-f: legitimate interest); sending commercial electronic messages and personalized marketing if you provide consent (Article 5/1: explicit consent - consents are managed through the IYS and may be withdrawn at any time).
Transfer
Your personal data may be transferred, limited to the relevant purposes, to courier and logistics companies, payment and e-invoicing service providers, call center/support service providers, and legally authorized institutions and organizations. Because the servers of our e-commerce infrastructure (Shopify) and certain service providers are located abroad, your data is transferred abroad. These transfers are carried out under Article 9 of the KVKK, based on an adequacy decision regarding the country to which the transfer is made, where such a decision exists; where no such decision exists, they are carried out based on appropriate safeguards established through the signing of standard contracts announced by the Personal Data Protection Board and notification to the Personal Data Protection Authority within 5 business days from the signing date.
Collection method
Your data is collected electronically through forms on the site, membership and ordering processes, cookies, and email/telephone communication channels.
Retention
Data is retained for the retention and limitation periods prescribed by the relevant legislation (including tax, commercial and consumer legislation), while marketing data is retained until explicit consent is withdrawn, and is deleted, destroyed or anonymized at the end of the applicable period.
Your rights (KVKK Article 11)
To learn whether your personal data has been processed; to request information if it has been processed; to learn whether it is used in accordance with its purpose; to know the third parties to whom it has been transferred domestically or abroad; to request correction if it has been processed incompletely or inaccurately; to request its deletion or destruction; to request notification of these actions to the third parties to whom the data was transferred; to object to a result arising against you from analysis conducted exclusively through automated systems; to request compensation for damages arising from unlawful processing.
Application
You may submit your requests in writing by completing the KVKK Application Form published on the site or, together with documents verifying your identity, by sending them to destek@derimarket.net or pegia@hs01.kep.tr, or to the postal address above. Your application will be concluded free of charge within 30 days at the latest. If you are not satisfied with the result, you retain the right to file a complaint with the Personal Data Protection Board.