PRIVACY NOTICE & DATA PROTECTION POLICY

At Vangeliza, we value your privacy and are committed to protecting your personal data. This Privacy Notice explains how VANGELIZA TEKSTİL SANAYİ VE DIŞ TİCARET LİMİTED ŞİRKETİ ("Vangeliza", "we", "us", or "our") collects, uses, stores, discloses, and protects your personal information when you visit or make a purchase from www.vangeliza.com.tr (the "Website"). This policy has been prepared in accordance with applicable data protection legislation, including the Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") and the General Data Protection Regulation ("GDPR") for international customers where applicable.

1. DATA CONTROLLER

For the purpose of applicable data protection laws, the Data Controller is:

Company Name:

VANGELIZA TEKSTİL SANAYİ VE DIŞ TİCARET LİMİTED ŞİRKETİ

Registered Address:

H. Edip Adıvar, Balcı Sk. No: 24, 34382 Şişli / Istanbul / Türkiye

MERSİS Registration No.:

0883-0311-0250-0012

Telephone:

+90 212 320 81 75

E-mail:

[email protected]

2. PERSONAL DATA WE COLLECT

We collect personal data that you provide directly to us, as well as information collected automatically when you navigate our Website.

A. Information You Provide Directly:

Identity Data: Full name, Turkish ID number / Tax ID (where applicable for invoicing).
Contact Data: Delivery address, billing address, e-mail address, telephone number.
Account & Profile Data: Username, password, order history, communication preferences, customer feedback, product reviews.
Transaction & Financial Data: Order details, payment confirmation records, invoice details, return/refund records. (Note: We do NOT store complete credit/debit card numbers; card payments are processed securely by authorized payment gateway partners).

B. Information Collected Automatically:

Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system, device details.
Usage Data: Pages viewed, products viewed, search terms, access times, clickstream data, referring website addresses.
Cookies & Tracking Technologies: Information collected via essential and analytical cookies (for detailed info, please refer to our Cookie Policy).

3. PURPOSES & LEGAL GROUNDS FOR PROCESSING

We process your personal data based on specific legal grounds provided under KVKK (Article 5) and GDPR (Article 6):

1. Order Processing & Contract Performance:

- Purpose: To process orders, manage payments, deliver products, handle returns, and provide customer support.

- Legal Ground: Necessity for the performance of a contract (Distance Sales Agreement).

2. Legal Obligations:

- Purpose: To comply with tax regulations, commercial laws, consumer protection laws, and legal requests from public authorities.

- Legal Ground: Compliance with legal obligations.

3. Legitimate Interests:

- Purpose: To prevent fraud, ensure website security, optimize user experience, conduct internal analytics, and improve our services.

- Legal Ground: Necessary for our legitimate business interests, provided these do not override your privacy rights.

4. Consent (where explicitly granted):

- Purpose: Sending marketing communications, newsletters, promotional offers, personalized recommendations, or non-essential analytical cookies.

- Legal Ground: Your explicit consent (which can be withdrawn at any time).

4. SHARING AND DISCLOSURE OF PERSONAL DATA

We do not sell, rent, or trade your personal data to third parties. We share personal data only with trusted third-party service providers who assist us in operating our Website and conducting our business, subject to strict confidentiality obligations:

Courier & Logistics Providers: (e.g., DHL and local postal carriers) to deliver your purchases to your shipping address.
Payment Service Providers & Banks: (e.g., virtual POS infrastructure) to securely authorize and process transactions.
IT Infrastructure & Hosting Providers: (e.g., Ticimax website platform and server infrastructure) to host and maintain the Website.
Professional Advisors & Legal Authorities: Tax advisors, auditors, legal counsel, or public regulatory authorities when required by law.

5. INTERNATIONAL DATA TRANSFERS

If you access our Website or place an order from outside Türkiye, your personal data may be transferred to, stored, and processed in Türkiye where our primary servers and operations are located. Any international data transfer is conducted in compliance with applicable data protection laws, using appropriate safeguards such as Standard Contractual Clauses or statutory adequacy decisions.

6. DATA RETENTION

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, tax, or reporting requirements.

Customer & Order Records: Retained for the statutory period required by commercial and tax legislation (typically 10 years).
Account Information: Retained while your account remains active or until you request its deletion.
Marketing Data: Retained until you withdraw your consent or opt out. Upon expiry of the applicable retention period, your personal data will be securely deleted, destroyed, or anonymized.

7. DATA SECURITY

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, loss, misuse, alteration, or destruction. These measures include SSL encryption for web communication, firewalls, secure access controls, and restricted data access for authorized personnel only.

8. YOUR LEGAL RIGHTS

Under applicable data protection laws (KVKK Article 11 and GDPR Chapter III), you have the following rights regarding your personal data:

Right to Access / Information: Right to know whether your data is being processed and request a copy of it.
Right to Rectification: Right to request correction of inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten"): Right to request deletion of your data where legal grounds apply.
Right to Restriction of Processing: Right to request limiting how we use your data under certain circumstances.
Right to Object: Right to object to processing based on legitimate interests or direct marketing purposes.
Right to Withdraw Consent: Right to withdraw your marketing or cookie consent at any time without affecting prior lawful processing.
Right to Complaint: Right to lodge a complaint with the Personal Data Protection Authority (KVKK Board) in Türkiye or your local Supervisory Authority in the EU.

9. HOW TO EXERCISE YOUR RIGHTS

To exercise any of your rights listed above, please submit a written request to us via:

E-mail: [email protected] (using the email address registered to your account)
Postal Mail: VANGELIZA TEKSTİL SANAYİ VE DIŞ TİCARET LİMİTED ŞİRKETİ, H. Edip Adıvar, Balcı Sk. No: 24, 34382 Şişli / Istanbul / Türkiye

We will respond to your request within 30 days at the latest, in accordance with applicable laws.

10. CHANGES TO THIS PRIVACY NOTICE

We may update this Privacy Notice from time to time to reflect changes in our legal obligations or business practices. The updated version will be posted on this page with a revised "Effective Date." We encourage you to review this page periodically.