KVKK Disclosure Text
Personal Data Protection and Processing Policy
Last Updated: October 20, 2025
In accordance with the Personal Data Protection Law No. 6698 ("KVKK"), as Duru Bez Çanta San. Tic. Ltd. Şti. ("Company" or "Data Controller"), we would like to inform you about the processing of your personal data. This disclosure text has been prepared to inform you about the purposes for which your personal data will be processed, to whom and for what purpose it may be transferred, the collection method and legal reason, and your rights.
1Data Controller
Information about our company acting as "Data Controller" under KVKK:
Title: Duru Bez Çanta San. Tic. Ltd. Şti.
MERSIS No:
Tax Office:
Tax No:
Address: Merkez Mah. Soguksu Cad. No:47, Kagithane / Istanbul
Email: mail@durucanta.com
Phone: +90 (212) 612 35 11
2Processed Personal Data
Categories of personal data processed by our company:
📋 Identity Information
Name, surname, national ID number, date of birth, gender
📞 Contact Information
Phone number, email address, full address
💼 Customer Information
Company title, tax number, authorized person details, order history
💳 Financial Information
Bank account information, invoice details, payment history
🖥️ Transaction Security Information
IP address, cookie records, browser information, site usage data
📦 Order and Delivery Information
Order details, delivery address, shipment tracking information
3Data Collection Method
Your personal data is collected through the following methods:
- Membership and order transactions through the website (durucanta.com)
- Contact forms and quote request forms
- Email, phone and WhatsApp communication
- Physical forms and contracts
- Social media channels
- Cookies and similar technologies
- Fairs, events and promotional activities
4Processing Purposes and Legal Reasons
Your personal data is processed for the following legal reasons specified in Articles 5 and 6 of KVKK:
📝 Contractual Relationship
- Fulfillment of order transactions
- Product delivery and invoicing
- Customer service support
- Order tracking and notification
⚖️ Legal Obligation
- Invoicing and record keeping as required by tax legislation
- Commercial bookkeeping obligation
- Information security processes
- Audit and reporting requirements
🤝 Legitimate Interest
- Conducting and developing business activities
- Increasing customer satisfaction
- Improving product and service quality
- Ensuring business continuity
✅ Explicit Consent
- Marketing and promotional activities
- Campaign and promotion notifications
- Personalized product recommendations
- Customer profiling and analysis studies
5Personal Data Transfer
Your personal data may be transferred to the following recipient groups in accordance with the fundamental principles stipulated in KVKK and in line with processing purposes:
- Cargo and Logistics Companies: For delivery operations
- Financial Institutions: For payment transactions and invoicing
- Suppliers: For product supply processes
- Law and Consulting Firms: For legal processes
- Government Agencies: As required by legal obligations
- IT Service Providers: For infrastructure and security services
Note: Your personal data is not transferred abroad. When overseas transfer is required, your explicit consent will be obtained within the framework of KVKK provisions.
6Your Rights Under KVKK
Pursuant to Article 11 of KVKK, as a personal data subject, you have the following rights:
Request Information
Finding out whether your personal data is processed
Request Details
Requesting information if processed
Learn Purpose
Learning the processing purpose and whether used in accordance with the purpose
Transfer Information
Knowing third parties to whom data is transferred domestically/abroad
Correction Request
Requesting correction of incomplete or incorrectly processed data
Deletion/Destruction
Requesting deletion/destruction of data under KVKK conditions
Right to Object
Objecting to results of analysis through automated systems
Damage Compensation
Claiming compensation for damages due to unlawful processing
7Application Method and Process
You can apply through the following methods to exercise your rights under KVKK:
📧 Application by Email
You can apply from your registered electronic mail (KEP) address or the email address you have notified to our Company:
mail@durucanta.com
📮 Application by Mail
You can send to the following address in an envelope marked "Personal Data Protection Law Information Request":
Duru Bez Çanta San. Tic. Ltd. Şti.
Merkez Mah. Soguksu Cad. No:47
Kagithane / Istanbul
👤 In-Person Application
You can apply by visiting our company address in person and verifying your identity.
⏱️ Response Time
Your applications will be concluded free of charge within a maximum of 30 (thirty) days depending on the nature of the request. However, if the process requires a separate cost, the fee determined by the Personal Data Protection Board may be charged.
📋 Information Required in Application
- Name, surname and signature if the application is written
- National ID number
- Residential or business address for notification
- Email address, phone and fax number for notification, if any
- Subject of the request
8Data Security Measures
Our company takes the following technical and administrative measures pursuant to Article 12 of KVKK to prevent unlawful processing of personal data, prevent unauthorized access to data, and ensure data preservation:
- Establishing information security management system
- Determining and controlling access rights to personal data
- Storing personal data in secure environments
- Using SSL/TLS encryption technologies
- Regular security updates and tests
- Employee training and obtaining confidentiality commitments
- Entering into confidentiality agreements with third-party data processors
- Establishing incident response and log recording systems
Our Contact Information
For your requests and questions under KVKK:
Company Title:
Duru Bez Çanta San. Tic. Ltd. Şti.
MERSIS No:
Email:
mail@durucanta.com
Phone:
+90 (212) 612 35 11
Address:
Merkez Mah. Soguksu Cad. No:47, Kagithane / Istanbul
This Disclosure Text has been prepared in accordance with the Personal Data Protection Law No. 6698 and relevant legislation.