KVKK Information Text
Information Text on Processing of Personal Data under Law No. 6698 (KVKK)
As Hiber Bilişim, acting as the data controller under the Turkish Personal Data Protection Law No. 6698 (“KVKK”), we would like to inform you about how your personal data is processed, for which purposes, and your rights. This text explains what data is collected, the legal grounds for processing, and to whom it may be transferred.
Data Controller
Hiber Bilişim
Address: [...]
E-mail: [...]
Phone: [...]
Processed Personal Data
When you purchase a product, create a membership, submit a request/complaint, or simply visit our website, the following personal data may be processed:
- Identity information (name, surname, Turkish ID number – only when legally required for invoicing)
- Contact details (phone, e-mail, billing/delivery address)
- Financial data (payment details, invoice records; processed solely by the payment service provider—Hiber Bilişim does not store credit card information)
- Customer transaction data (order history, support tickets, conversation notes)
- Marketing preferences (only if consent is given)
- Technical log information (IP address, visit duration, browser type)
Purposes of Data Processing
Personal data is processed for the following purposes:
- Receiving, invoicing, and delivering orders
- Managing returns, exchanges, and warranty processes
- Handling customer service requests
- Fulfilling legal obligations (tax, consumer protection laws)
- Marketing and newsletter communications (subject to explicit consent)
- Analyzing website traffic and improving service quality
Transfer of Personal Data
Your data may be shared with the following third parties only to the extent necessary for the purposes listed above:
- Shipping companies (name, surname, delivery address, phone for delivery)
- Payment institutions and banks (payment processing)
- Accounting and legal advisors (where legally required)
- Authorized public institutions and organizations (upon lawful request)
- Infrastructure and service providers (hosting, e-mail, analytics services – may involve international transfers under strict confidentiality agreements)
Your data is never sold or commercially shared with third parties without your explicit consent.
Collection Method and Legal Grounds
Personal data is collected via our website, order forms, e-mail, telephone, or face-to-face communication. Processing is based on the legal grounds set out in Article 5 of the KVKK:
- Directly related to the establishment or performance of a contract,
- Legitimate interests of the data controller,
- Performance of a legal obligation, and
- Explicit consent (for marketing communications, etc.).
Data Security
Appropriate technical and administrative measures are taken to protect your data. Our website is secured with an SSL certificate. However, please note that no method of transmission over the Internet is 100% secure; we recommend exercising caution.
Retention Period
Personal data is retained only for the periods prescribed by applicable laws or as long as necessary for the purpose of processing. Upon expiry of legal retention periods, data is securely disposed of.
Your Rights Under KVKK
As a data subject, you have the following rights under Article 11 of the Law:
- Learn whether personal data is processed,
- Request information if personal data has been processed,
- Learn the purpose of processing and whether it is used accordingly,
- Know the third parties to whom personal data is transferred domestically or abroad,
- Request correction of incomplete or inaccurate data,
- Request deletion or destruction under the conditions stipulated in the law,
- Request notification of the correction, deletion or destruction to third parties to whom data has been transferred,
- Object to an adverse result that arises solely from automated processing,
- Claim compensation for damages resulting from unlawful processing.
You may submit your requests regarding these rights in writing or by e-mail to the data controller. Your requests will be concluded as soon as possible and within 30 days at the latest free of charge (a fee may be charged according to the tariff set by the Personal Data Protection Authority if the process requires additional costs).
Changes
Hiber Bilişim reserves the right to amend this information text. Updates will take effect upon publication on our website. Last updated: [...]
