POLAT PAZARLAMA

KVKK Clarification Text

Last update: September 14, 2026

This text has been prepared to inform those who visit the POLAT PAZARLAMA web store, request information about products, and communicate with us regarding the processing of their personal data. It also explains the sharing specified below, which is carried out within the scope of delivery and invoicing.

1. Data controller

Official title and data controller: Semiha Polat
Brand: POLAT PAZARLAMA
Registered address: Beşevler Küçük Sanayi Sitesi, Mobilyacılar Çarşısı, 63. Blok No:16, Nilüfer / Bursa
E-mail: polatpazarlama@gmail.com
Phone: 0224 441 85 71 / 0533 526 14 99

2. What information is collected?

Communication and product requests: Your name, e-mail address, phone number if you share it, your message, and the name and link of the product you are inquiring about. If you use the information request link on the product page, the relevant product information is added to the form.
Delivery and invoicing: Name, phone number, and address for delivery; billing information shared by you for the issuance of invoices.
Newsletter: The e-mail address you enter in the separate newsletter form and your subscription request.
Customer account: The e-mail address provided during account login and transaction information regarding the verification of the session.
Website usage: Device, connection, and visit/interaction information processed by the Shopify infrastructure, as well as cookies and preference records.

Special categories of personal data, such as identification documents, card details, or health information, are not requested in the contact form. Do not include personal information in your message that is not related to your request. Sending an information request does not mean placing an order or making a payment.

3. Methods and purposes of collection

Information is collected through communication, newsletter, and account interfaces on the website, e-mail correspondence, and information provided via telephone. The website and related forms operate on the Shopify infrastructure. Technical usage and preference data are processed automatically through browser technologies. When the information provided via e-mail or in a conversation is entered into a recording system, these records are also within the scope of personal data processing.

Communication and product information are used to respond to your request, provide information about the product's price, dimensions, and suitability, and to track the transaction you have requested. Delivery information is processed to deliver the product to you; billing information is processed to issue the invoice. Account information is for login and session operations, necessary technical information is for the operation and security of the site, and preference records are for managing your choices. The newsletter request relates to the transmission of collection and product news.

4. Legal grounds for processing

In the processing of personal data, the following conditions in Law No. 6698 are taken as a basis according to the nature of the specific transaction:

Regarding data necessary for product selection, offers, requests directly related to the establishment of a contract, and delivery: Article 5/2(c): being directly related to the establishment or performance of a contract.
Regarding data necessary for obligations such as invoice issuance and responding to legal applications: Article 5/2(ç): compliance with the legal obligation of the data controller.
Regarding records necessary for the establishment, exercise, or protection of a right in a specific dispute: Article 5/2(e).
Regarding answering general questions and necessary site security operations: Article 5/2(f): legitimate interest, provided that it does not harm your fundamental rights and freedoms and the processing is necessary.
Regarding optional marketing, analysis, or personalization activities that require explicit consent: Article 5/1. Separate rules regarding commercial electronic messages also apply.

Reading this text or submitting the contact form does not mean you have given explicit consent to all processing activities. Submitting the contact form does not create a newsletter subscription. Disclosure and explicit consent are separate processes.

5. With whom and why is the information shared?

Courier / driver: The customer's name, phone number, and delivery address are shared to deliver the order to the customer.
Accountant: Billing information is shared for the issuance of invoices.
Shopify: Relevant information is processed through the platform for the presentation of the web store, communication and newsletter forms, and customer account functions.
E-mail service: The information you send to the announced Gmail address is processed in Google's e-mail service for the delivery of the e-mail and the conduct of correspondence.
Authorized institutions and judicial authorities: Information required within the scope of a valid legal request or legal obligation may be transmitted.

The Shopify Network Intelligence feature is enabled in the store. Within the scope of this service, Shopify may also process store interactions under its own data responsibility for purposes such as analysis, personalization, advertising, and service improvement. You can obtain information about Shopify's processing activities from the Shopify consumer privacy statement.

6. Service infrastructure abroad

The fact that the business does not send customer-related information directly to a person abroad does not mean that there is no processing abroad in the digital services used. The use of Shopify and Gmail may involve the processing and storage of relevant data in service infrastructures outside of Turkey. There is information about US hosting in the Shopify store settings; the scope of processing should not be considered limited to this information alone due to the sub-services of the service providers.

International transfers are subject to the rules in Article 9 of the Law. This text does not contain a statement that a specific standard contract has been signed or that a specific transfer assurance has been established. You can apply via the communication channels above regarding data processing and recipient information.

7. Cookies, preferences, and retention

You can open the Shopify preference window from the Cookie preferences link at the bottom of the page and manage your choices regarding necessary and optional categories. You can also send your request for change or withdrawal regarding your newsletter request to polatpazarlama@gmail.com.

Regarding retention, the basis is the period required by the relevant legislation or necessary for the purpose of the processing. It cannot be said that a single fixed period is applied for all data. When the reason for processing ceases to exist, an obligation to delete, destroy, or anonymize arises within the framework of Article 7 of the Law and relevant regulations. You may request information about the storage and deletion of your own data.

8. Your rights regarding your personal data

Within the scope of Article 11 of the Law, by applying to the data controller, you can:

Learn whether your data is being processed, and if so, request information.
Learn the purpose of the processing and whether the data is used in accordance with the purpose.
Learn the third parties to whom the data is transferred, either domestically or abroad.
Request the correction of incomplete or incorrect information.
Request the deletion or destruction of the data under the conditions in Article 7 of the Law.
Request that the correction, deletion, or destruction processes be notified to third parties to whom the data has been transferred.
Object to a result that arises to your detriment as a result of automatic analysis.
Request compensation for damages if you suffer harm due to unlawful processing.

9. Application and response

You can send your written and signed application to Semiha Polat, Beşevler Küçük Sanayi Sitesi, Mobilyacılar Çarşısı, 63. Blok No:16, Nilüfer / Bursa. You can apply to polatpazarlama@gmail.com using the e-mail address you have previously notified us of and which is registered in our system.

The application must include your name and surname, your signature in a written application, your T.R. identity number if you are a citizen of the Republic of Turkey; if you are a foreigner, your nationality and passport or identification number, if any; your notification address, your notification e-mail if any, your phone/fax number, and your request. You may attach relevant explanatory documents. Do not write identity information in the ordinary product inquiry form; use the channel appropriate for the nature of the application and do not send unnecessary copies of identity documents.

Applications are answered as soon as possible, depending on their nature, and within a maximum of 30 days. As a rule, no fee is charged; however, the tariff determined by the Board may be applied for transactions that require costs. In case of rejection of the application, insufficiency of the response, or failure to respond in due time, you have the right to file a complaint with the Board within 30 days from the date you learn of the response, and in any case within 60 days from the date of the initial application. It is required to apply to the data controller before filing a complaint with the Board.

10. Legislation and additional information

You can access the explanation of the rights of the data subject and the explanation on responding to applications by the Personal Data Protection Authority regarding rights and application methods. When there is a change in data processing activities, the relevant notification is updated; the update of this text does not replace the necessary explicit consent.