Privacy & Data Protection

This notice has been prepared to inform you about the scope within which personal data obtained through the ESTANBUL platform is processed.

Your personal data is processed, stored, and protected in accordance with Law No. 6698 on the Protection of Personal Data ("KVKK") and other applicable legislation.

Under this policy, the data controller is:

Mehmet Sıdık Gökalp – ESTANBUL

Tax Office: ALEMDAĞ VERGİ DAİRESİ

Tax ID: 44821016208

Address: Ümraniye / İstanbul

Contact: support@estanbul.co

The following personal data may be processed within the scope of the services provided:

• Name and surname
• Your Email
• Phone number
• Delivery and billing address
• Order and payment information
• Customer support records

During use of the platform, the following technical data may also be processed:

• IP address
• Browser and device information
• Visited pages
• Referral information
• Date and time logs

Your personal data may be processed for the following purposes:

• Creation and fulfillment of orders
• Management of payment processes
• Provision of delivery and logistics operations
• Provision of customer support services
• Evaluation of requests and complaints
• Ensuring platform security
• Prevention of misuse and fraudulent activities
• Improvement of user experience

In addition, the following processes may be carried out in line with applicable legislation:

• Accounting and finance processes
• Tax obligations
• Obligations arising under consumer law

Where the user has given explicit consent, commercial electronic communications may be sent regarding:

• New products
• Campaigns
• Announcements

Users may opt out of receiving such communications at any time through the emails sent to them or by contacting support@estanbul.co.

Personal data is collected through the following channels by automated or partially automated means:

• Forms on the platform
• Order and payment screens
• Membership and newsletter registration areas
• Customer support channels
• Cookies and similar technologies

Data is processed on the following legal grounds:

• Establishment or performance of a contract
• Compliance with the data controller's legal obligations
• Establishment, exercise, or protection of a right
• Legitimate interests of the data controller

Where explicit consent is required, it is obtained separately.

Your personal data may be shared, only to the extent necessary, with the following parties:

• Payment infrastructure providers
• Cargo and logistics companies
• Hosting and infrastructure service providers
• Software and technical service providers
• Authorized public institutions and authorities

Since part of the platform's technical infrastructure may operate through services located abroad, personal data may be transferred to service providers located both domestically and internationally.

Personal data is retained for as long as necessary for the purposes for which it is processed and for the periods required by applicable legislation.

Once the retention period expires or the purpose of processing ceases to exist, the data is deleted, destroyed, or anonymized.

Under Article 11 of KVKK, you have the following rights:

• To learn whether your personal data is being processed
• To request information if your personal data has been processed
• To learn the purpose of processing
• To know the third parties to whom the data is transferred
• To request correction of incomplete or inaccurate data
• To request deletion or destruction where the legal conditions are met
• To object to processing activities
• To claim compensation in case of damage

To exercise any of these rights, you may contact us via email at support@estanbul.co.