1. DATA CONTROLLER
Data Controller: Efe Gerek
Address: Istanbul, Turkey
Email: [email protected]
Phone: +90 542 738 3773
Website: https://efegerek.com
2. PURPOSE OF PROCESSING YOUR PERSONAL DATA
In accordance with Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data is processed for the following purposes:
- Performing digital product and service sales
- Order tracking and providing customer services
- Issuing invoices and conducting payment transactions
- Fulfilling legal obligations
- Conducting communication activities
- Improving customer satisfaction and experience
- Conducting marketing activities (with explicit consent)
3. PERSONAL DATA PROCESSED
3.1. Identity Information
Name, surname, Turkish ID number (if required for invoicing)
3.2. Contact Information
Email address, phone number, address information
3.3. Customer Transaction Information
Order history, purchased products, payment information (card information is not processed, only kept by payment provider)
3.4. Transaction Security Information
IP address, browser information, cookie records
3.5. Financial Information
Invoice information, tax number (for corporate customers)
4. METHOD OF COLLECTING PERSONAL DATA
Your personal data is collected through the following methods:
- Online order forms through the efegerek.com website
- Communications made via email, phone, or social media
- During payment transactions (through Shopier/iyzico)
- Contact forms and support requests
- Through cookies and similar technologies
5. TRANSFER OF PERSONAL DATA
Your personal data may be transferred to third parties only in the following cases and to the necessary extent:
5.1. Payment Providers
To payment infrastructure providers such as Shopier, iyzico for the purpose of processing payments
5.2. Technology Service Providers
Companies providing web hosting, email services, cloud storage services
5.3. Legal Obligations
To public institutions and organizations when legally required
Security Commitment:
Your personal data is not transferred abroad. All your data is stored on servers located in Turkey.
6. RETENTION PERIOD OF PERSONAL DATA
Your personal data is retained for the period required by the processing purpose and/or for the periods stipulated in relevant legislation:
- Invoices and Financial Records: 10 years as per tax legislation
- Order Records: 10 years as per consumer legislation
- Communication Records: Until the processing purpose ceases
- Marketing Consents: Until consent is withdrawn
When the processing purpose ceases or the retention period expires, your data will be deleted, destroyed, or anonymized.
7. YOUR RIGHTS AS A DATA SUBJECT
In accordance with Article 11 of KVKK, you have the following rights as a data subject:
a) Right to Request Information
Learning whether your personal data is being processed
b) Right to Request Details
If processed, requesting information about it
c) Right to Learn Processing Purpose
Learning the purpose of processing personal data and whether they are used in accordance with their purpose
d) Right to Request Transfer Information
Knowing the third parties to whom personal data is transferred domestically or abroad
e) Right to Request Correction
Requesting correction if personal data is incomplete or incorrectly processed
f) Right to Delete/Destroy/Anonymize
Requesting deletion or destruction of personal data under the conditions stipulated in Article 7 of KVKK
g) Right to Request Notification
Requesting notification of correction, deletion or destruction operations to third parties to whom personal data has been transferred
h) Right to Object
Objecting to a result that occurs against the person through analysis of processed data exclusively by automated systems
i) Right to Request Compensation
Requesting compensation for damage in case of damage due to unlawful processing of personal data
8. HOW CAN YOU EXERCISE YOUR RIGHTS?
In accordance with Article 13 of KVKK and the Communiqué on the Procedures and Principles of Application to the Data Controller, you can submit your application to exercise the above-mentioned rights through the following methods:
📧 By Email:
You can send your application by email with the subject "KVKK Application".
📝 What Should Be Included in Your Application:
- Your name and surname
- Your Turkish ID number
- Your residential or workplace address for notification
- If any, your email address, phone and fax number for notification
- Subject of your request
⚠️ Important Note:
Your applications will be concluded free of charge within 30 (thirty) days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, a fee according to the tariff determined by the Personal Data Protection Board may be charged.
9. COOKIE POLICY
Cookies are used on our website to improve user experience and analyze site traffic. For detailed information about cookies, you can review our Privacy Policy.
10. SECURITY MEASURES
The security of your personal data is a priority for us. We take the following technical and administrative measures to protect your data:
- Secure data transmission with SSL certificate
- Secure server infrastructure (Cloudflare security layer)
- Regular security updates
- Limited access control
- Data encryption
- Regular backups
11. CHANGES TO THE NOTICE
This Notice may be changed due to changes in legal regulations or updates in operational processes. Changes will enter into force on the date they are published on our website. Notifications will be made via email for significant changes.
Last Update: January 24, 2026
Contact: [email protected]
Phone: +90 542 738 3773