This Privacy Notice has been prepared by GAİJİN MÜCEVHERAT VE AKSESUAR LİMİTED ŞİRKETİ (the “Company”), as data controller, under the Turkish Personal Data Protection Law No. 6698 (“KVKK” or the “Law”) and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform.
1. Data Controller
Trade Name: GAİJİN MÜCEVHERAT VE AKSESUAR LİMİTED ŞİRKETİ
MERSİS No: 0388188995400001
Address: Vezir Hanı, Vezir Han No.15, Istanbul/Türkiye
Website: www.deliadore.com
Email: info@deliadore.com
2. Personal Data We Process
- Identity: Name and surname; Turkish ID number for invoices of individual buyers
- Contact: Email address, phone number, delivery and billing address
- Customer transaction: Orders, product and personalisation choices, order history, campaigns and coupons used, requests and complaints
- Financial: Payment amount and method; tax office and tax number for corporate buyers (your card details are not processed by the Company; they are collected directly by the payment institution)
- Transaction security: IP address, device and browser information, site usage logs
- Marketing: Cookie data, shopping and interest preferences (subject to your consent)
- Membership: Account information if you create an account
3. Purposes and Legal Grounds
- Taking, producing and delivering orders, handling payments and refunds, and providing customer support: establishment or performance of a contract (Law Art. 5/2-c)
- Creating invoice and accounting records and responding to requests from authorities: compliance with a legal obligation (Art. 5/2-ç)
- Ensuring transaction and site security, preventing fraud, and improving our services and user experience: legitimate interest (Art. 5/2-f)
- Protecting our rights in legal disputes: establishment, exercise or protection of a right (Art. 5/2-e)
- Sending commercial electronic messages, personalised advertising and marketing, and using non-essential cookies: explicit consent (Art. 5/1)
4. Transfer of Personal Data
Your personal data may be transferred, limited to the purposes above and in line with Articles 8 and 9 of the Law, to:
- Shipping and logistics companies (Yurtiçi Kargo, PTT Kargo, DHL), for delivery
- PayTR and banks, for payments and refunds
- Accounting and invoicing service providers, for legal invoicing and record-keeping obligations
- Our e-commerce platform (Shopify) and IT, analytics and marketing service providers, to run the site and, with your consent, for marketing
- Competent public authorities and courts, under legal obligations
Because the servers of our e-commerce platform and some analytics and marketing providers are located abroad, your personal data may be transferred abroad in line with the conditions set out in Article 9 of the Law. For deliveries to recipients abroad, your delivery details are transferred to the destination country through the relevant carrier.
5. Method of Collection
Your personal data is collected electronically, by partly or fully automated means, through the order, membership and contact forms on our website, email and phone conversations, and cookies and similar technologies.
6. Retention
Your personal data is kept for as long as required for the purpose of processing and for the periods set out in the relevant legislation (for example, 10 years for commercial books and records). When that period ends, your data is deleted, destroyed or anonymised.
7. Your Rights
Under Article 11 of the Law, you have the right to:
- learn whether your personal data is processed,
- request information if it has been processed,
- learn the purpose of processing and whether it is used for that purpose,
- know the third parties in Türkiye or abroad to whom it is transferred,
- request correction if it is incomplete or inaccurate,
- request deletion or destruction under the conditions in Article 7 of the Law,
- request that corrections, deletions and destructions be notified to the third parties to whom it was transferred,
- object to a result against you arising from analysis exclusively by automated systems,
- claim compensation for damage caused by unlawful processing.
8. How to Apply
You can send your requests, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller, from the email address registered with us to info@deliadore.com, or in writing to our address above. Your application will be concluded free of charge within 30 days at the latest; if the process requires an additional cost, the fee set by the Board may be charged.
You can withdraw any consent you have given at any time.