KVKK Privacy Notice

1. Data Controller

Under Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data may be processed, within the scope explained below, by Özel Ada Ticaret Ltd. Şti. (referred to below as the "Company" or "Yak Gelsin") as data controller.

2. Personal Data Processed

Our Company may process the following personal data:

• Identity data: First name, last name
• Contact data: Phone number, e-mail address, delivery address
• Transaction data: Order history, preferred payment method, the time you confirmed the Preliminary Information Form / Distance Sales Agreement, the time of an order cancellation or cancellation request and, if you wrote one, the reason for cancelling
• Loyalty card: Phone number, name, numbers of stamps and rewards
• Membership: If you sign up: email address, password (stored only as an irreversible hash, never in plain text), first and last name, phone number, delivery address and province / district if you enter them, the time you accepted this notice, the orders linked to your account, extra addresses you save, products you add to your favourites and products you ask us to notify you about (with the email notification consent you gave for them and its time; you can withdraw it at any time from My Account or the link in the email)
• Cancellation / return / exchange requests: Request type, reason, the description you write and any product photos you attach (photos are kept in a private store accessible only to the business)
• Notification subscription: If you allowed notifications, the browser subscription address (endpoint) and encryption keys; if you chose a province / district in the notification box or when ordering, the province and district you chose and the corresponding delivery area, so that we can send campaign notifications specific to your area (your name, phone number and full address are not added to this record)
• Reviews: If you leave a review, your name, rating and comment
• Dealership application: If you fill in the dealership application form, your full name, company name, phone number, e-mail address (if you entered one), province / district, business type, the products you are interested in, your estimated monthly purchase and the note you wrote
• Institutional supply request: If you fill in the institutional supply quote form, the type of organisation, organisation name, contact person's full name, phone number, e-mail address (if you entered one), province / district, the products you need, the estimated quantity, the delivery frequency and the note you wrote
• Technical data: IP address, cookie data, browser and device information
• Marketing data: Campaign preferences, notification permissions

3. Purposes of Processing

The personal data collected is processed for the following purposes:

• Carrying out the order, delivery and invoicing processes
• Meeting customer service and support requests
• Assessing dealership applications and contacting the applicant
• Assessing institutional supply requests and contacting the requester
• Fulfilling legal obligations
• Marketing and campaign notifications (with your explicit consent)
• Site security and the prevention of fraud
• Statistical analysis and service development

4. Transfer of Personal Data

Your personal data may be shared with haulage partners for delivery and, within the scope of legal obligations, with authorised public institutions and bodies. No online payment is taken on our site; when you pay by credit card on delivery, your card details are processed only on the relevant bank's POS device. The service providers (data recipients) we use to run the site are:

• Supabase (database): order, loyalty card, product review, notification subscription and dealership application records.
• Vercel (hosting): the infrastructure the site is served from; with every request the IP address and browser information go into technical logs.
• Resend (e-mail): forwarding order, quote and dealership application notifications to the business by e-mail and, if you entered an e-mail address when ordering, sending you the order confirmation; the e-mail contains your order, application and contact details.
• Google Analytics (Google): only if you gave cookie consent; visit and order statistics.
• Google Ads (Google): only if you also consented to ad measurement; whether a visit from a Google ad turned into an enquiry or order.
• Web push services (Google Firebase Cloud Messaging, Apple Push Notification service, Mozilla Push Service): only if you allowed notifications; your browser's subscription address is used through these services.
• WhatsApp (Meta): when your order is sent as a WhatsApp message and when we correspond with you on WhatsApp.
• ipapi.co (estimating the province from the IP address): when the payment page opens (if you have not chosen a province before) and when you press the location button in the delivery check on a product page, your IP address is sent to this service in order to suggest your province; the province returned is shown only as a suggestion and can be changed by you.
• Upstash (rate limiting, when enabled): to prevent abuse, your IP address is kept as a short-lived counter key for order, quote, dealership application, loyalty card and coupon requests and is deleted when the period ends.

Because the servers of these service providers are located outside Turkey (mainly in the USA and European Union countries), the data above is transferred abroad. The transfer is made within the conditions laid down in Article 9 of KVKK (Law No. 6698); for Google Analytics, Google Ads and web push the transfer takes place only with your consent, and you can withdraw your consent at any time.

5. Method of Collection and Legal Basis

Your personal data is collected by automatic and manual means through the website order form, the membership form, the request form on the My Orders page, the contact form, the dealership application form, the institutional supply quote form, WhatsApp and phone calls. The legal basis is KVKK Article 5/2(c) (performance of a contract) and Article 5/2(ç) (legal obligation). Your explicit consent is obtained separately for Google Analytics and Google Ads ad measurement (cookie consent), web push notifications (browser permission) and marketing notifications.

6. Your Rights

Under Article 11 of KVKK you have the following rights:

• To learn whether your personal data is processed
• To request information about it if it has been processed
• To learn the purpose of the processing and whether the data is used in line with that purpose
• To know the third parties, in Turkey or abroad, to whom the data is transferred
• To ask for the data to be corrected if it has been processed incompletely or incorrectly
• To ask for the data to be erased or destroyed
• To object and to claim compensation for damage

To use these rights you can apply in writing to info@yakgelsin.com, together with documents that verify your identity.

7. Cookies

Our website uses cookies for session, analytics and marketing purposes. You can manage your cookie preferences in your browser settings and make your choices in the cookie consent window shown on our site.

8. Contact

For any question or request about your personal data:
E-mail: info@yakgelsin.com
Phone: +90 531 585 62 29
Address: Mimar Sinan Mah. Beydağ Cad. No:10, 35750 Ödemiş, İzmir, Türkiye