PRIVACY NOTICE REGARDING THE PROTECTION AND PROCESSING OF PERSONAL DATA

YT Shisha ((hereinafter referred to as the “Company” or “YT Shisha”) places great importance on ensuring that the personal data of our customers, potential customers, and all individuals visiting our website is processed in accordance with the Constitution of the Republic of Turkey and the Law on the Protection of Personal Data No. 6698 (“KVKK”), as well as other relevant legislation.

This privacy notice has been prepared by us, in our capacity as the data controller, to fulfill our obligation to provide information pursuant to Article 10 of the Personal Data Protection Law (KVKK).

1. Identity of the Data Controller

In accordance with the KVKK, your contact is, in its capacity as the data controller, YT Shisha It is a sole proprietorship.

• Address: Avcılar / Istanbul
• Email: info@ytshisha.com

2. Purpose of Processing Personal Data

Your personal data collected through our website (YT Shisha) (first name, last name, phone number, email address, shipping and billing addresses, IP address, shopping cart information);

• The establishment and performance of the Distance Sales Contract and the Pre-Contract Information Form,
• Receiving your orders, processing payments, and managing shipping and delivery,
• The preparation of legal and commercial documents such as invoices, delivery notes, etc.,
• Managing return, exchange, and right of withdrawal processes in accordance with consumer protection laws,
• Tracking and resolving customer requests and complaints,
• Compliance with data retention, reporting, and disclosure obligations arising from legal regulations,

is processed in accordance with the conditions set forth in Articles 5 and 6 of the KVKK for these purposes.

3. To Whom and for What Purposes Personal Data May Be Disclosed

Your personal data collected will be processed for the purposes specified above and in accordance with Articles 8 and 9 of the Personal Data Protection Law (KVKK);

• In order for your orders to be delivered, we have partnered with to shipping and courier companies,
• To ensure that payment transactions are processed securely, licensed by the BDDK to payment institutions and banks ((Virtual POS service providers),
• We use the services of these providers to fulfill our legal obligations (such as issuing invoices, filing tax returns, etc.) to tax advisors and accounting departments,
• In order to protect our Company’s rights in the event of any potential legal disputes to our legal advisors,
• Legally authorized to public institutions and organizations can be transferred.

4. Method and Legal Basis for the Collection of Personal Data

Your personal data is collected electronically through automated or partially automated methods when you register on our website, place an order, fill out the contact form, or contact our customer service department.

This data is processed in accordance with Article 5(2)(c) of the KVKK ““Provided that it is directly related to the conclusion or performance of a contract, the processing of personal data belonging to the parties to the contract is necessary”, (in accordance with subparagraph (c) “"It is necessary for the data controller to fulfill its legal obligation" and pursuant to subparagraph (f) ““Provided that it does not infringe upon the fundamental rights and freedoms of the data subject, the processing of data is necessary for the legitimate interests of the data controller” is processed based on legal grounds.

5. Rights of the Data Subject (Data Subject) Under the Personal Data Protection Law (KVKK)

Pursuant to Article 11 of the KVKK, data subjects:

• The right to know whether personal data is being processed,
• To request information regarding the processing of personal data,
• The right to learn the purpose of the processing of personal data and whether it is being used in accordance with that purpose,
• The right to know the third parties to whom personal data is transferred, whether domestically or internationally,
• The right to request the correction of personal data if it has been processed incompletely or incorrectly,
• The right to request the deletion or destruction of personal data within the framework of the conditions set forth in the KVKK legislation,
• The right to object to a decision made solely through the automated processing of personal data that results in adverse consequences for the individual,
• They have the right to request compensation for damages suffered as a result of the unlawful processing of personal data.

To exercise your rights as described above and submit your requests, info@ytshisha.com You can always contact us via this address. Your requests will be processed free of charge as soon as possible, depending on their nature, and no later than thirty days.