Privacy and Protection of Personal Data | eczanecantasi.com

ECZANECANTASI.COM PRIVACY NOTICE ON THE PROTECTION AND PROCESSING OF PERSONAL DATA
This Information Notice applies to the personal data of users (“Data Subjects”) who shop, register as members, or visit the eczanecantasi.com website ("Site") in accordance with the Personal Data Protection Law No. 6698 ("KVKK").
1. Identity of the Data Controller
Your personal data may be processed by [eczanecantasi.com] in its capacity as the data controller within the scope described below.
  • Address: [Küçükyalı Merkez Mah. Cami Sok. No. 10 Z06] 
  • Email: [info@eczanecantasi.com]
  • Phone: [0542 381 9994]
  • MERSIS No. / Tax ID No.: [Enter Numbers if Available]
2. Your Personal Data Processed and Collection Methods
Based on the transactions you conduct through our website, the following personal data is collected digitally, either fully or partially automatically:
  • Identification Information: First name, last name, Turkish ID number (if required for invoicing processes).
  • Contact Information: Shipping and billing addresses, email address, cell phone number.
  • Customer Transaction Information: Order and purchase history, shopping cart information, and information provided in request and complaint forms.
  • Transaction Security Information: IP address, website login and logout records, cookie data.
  • Payment Information: Preferred payment method, billing details. (Important Note: Credit card PINs and full card details are never stored by our Company; they are processed directly through the infrastructure of a licensed payment processor).
3. Purposes of Processing Personal Data
Your collected personal data is processed in accordance with the conditions specified in Articles 5 and 6 of the KVKK for the following purposes:
  • The sale, invoicing, and delivery (shipping processes) of products you order through eczanecantasi.com,
  • To process, track, and manage your membership and member profile,
  • Conducting post-sale support, returns, exchanges, and customer service processes,
  • Ensuring information security and the cybersecurity of the website, and fulfilling data retention obligations arising from applicable laws,
  • If you provide your explicit consent: sending you personalized promotions, discounts, and newsletters via email or SMS (commercial electronic communication processes).
4. Parties to Which Personal Data Is Disclosed and the Purpose of Disclosure
Your personal data is shared with the following third parties in accordance with Article 8 of the Personal Data Protection Law (KVKK) and for the purposes specified above:
  • Shipping Companies: Your address and contact information for the delivery of products,
  • Payment Institutions: Relevant banks and payment service providers to ensure secure payment processing,
  • Infrastructure and Server Providers: Technical service providers for the purpose of hosting the website, managing the database, and maintaining the e-commerce infrastructure,
  • Government Agencies: Authorized public institutions and judicial authorities, as required to fulfill our legal rights and obligations.
5. Legal Basis for the Collection of Personal Data
Your personal data is processed based on the following legal grounds set forth in Article 5 of the Personal Data Protection Law (KVKK):
  • Conclusion and performance of a contract: To fulfill the requirements of the product purchase and membership agreements,
  • Explicit provision in laws and legal obligations: Our obligations under the Regulation on Distance Contracts, the Turkish Commercial Code, and the Tax Procedure Code,
  • Legitimate interest of the data controller: To ensure the security of the website and improve service quality,
  • Explicit Consent: Marketing, advertising, and the sending of commercial communications (subject to your explicit consent).
6. Rights of the Data Subject (Data Owner)
Pursuant to Article 11 of the Personal Data Protection Law (KVKK), you may exercise the following rights regarding your personal data by contacting eczanecantasi.com:
  • To learn whether your personal data has been processed,
  • To request information regarding such processing, if it has occurred,
  • To learn the purpose of the processing and whether it is being used in accordance with that purpose,
  • To know the third parties to whom your personal data has been transferred, whether within or outside the country,
  • To request the correction of your personal data if it has been processed incompletely or incorrectly,
  • Request that it be erased or destroyed in accordance with the law.
You may submit your requests in writing to our physical address listed above, in accordance with the Communiqué on Procedures and Principles for Applications to the Data Controller, or to our email address [info@eczanecantasi.com] using secure electronic signature or mobile signature methods, or through the email address registered in our system.