Data Protection Notice (KVKK)
Under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), Şekeroğlu Baharat Gıda San. Tic. Ltd. Şti. ("Company") informs you, as data controller, about the processing of personal data we collect through mahirsekeroglu.com.
1. Data Controller
Your personal data is processed by Şekeroğlu Baharat Gıda San. Tic. Ltd. Şti. as data controller, within the scope of this notice.
Address: Öncüpınar Cad. No: 45, Merkez, Kilis, Türkiye · Email: info@sekeroglu.com · Phone: +90 348 813 00 00
2. Purposes of Processing
Creating and managing your membership/account.
Processing orders, delivery, invoicing and payment.
Handling customer requests, questions and complaints.
Planning and executing shipping and delivery.
Sending newsletter, campaign and marketing communications — only with your explicit consent.
Fulfilling legal obligations related to invoicing and accounting records.
Ensuring the security of the site and services, preventing fraud and misuse.
Statistical analysis and service quality improvement.
3. Categories of Personal Data Processed
Identity: First and last name.
Contact: Email address, phone number, delivery and billing address.
Customer Transactions: Order history, cart data, coupon usage, product reviews.
Security: Password (stored as an irreversible hash), IP address, session/cookie data.
Marketing: Newsletter subscription preference (processed only with your explicit consent).
Important: Your credit/debit card details are never stored by us; payments are processed directly through the secure systems of the relevant payment provider (iyzico and/or the bank's virtual POS infrastructure).
4. Recipients of Personal Data
Contracted courier/logistics companies, for the delivery of your orders.
Payment providers (iyzico and/or the bank's virtual POS provider) — your card details are processed by these providers and are never seen or stored by us.
Our accounting/ERP system, with limited and authorized access, for order and accounting processes.
Cloud/hosting providers, for hosting the site and its technical infrastructure.
Authorized public authorities, upon request and within the limits set by law.
5. Method of Collection and Legal Basis
Your personal data is collected electronically via the membership form, order form, contact form and newsletter subscription form on the website.
Your data is processed on the legal bases set out in Article 5/2 of the KVKK, including that it is "directly related to the establishment or performance of a contract", "necessary for compliance with a legal obligation", and "the data controller's legitimate interest, provided it does not harm your fundamental rights and freedoms"; marketing communications are additionally based on your explicit consent.
6. Your Rights (Article 11 of the KVKK)
Under Article 11 of the KVKK, you have the right to learn whether your personal data is processed, request information about it, learn the purpose of processing and whether it is used accordingly, know the third parties to whom it is transferred domestically or abroad, request correction if processed incompletely or incorrectly, request deletion or destruction within the conditions set out in the law, request notification of these operations to third parties to whom the data was transferred, object to a result that is to your detriment arising from analysis exclusively through automated systems, and request compensation for damages arising from unlawful processing.
7. How to Apply
You may submit requests regarding the rights above, together with documents verifying your identity, by emailing info@sekeroglu.com or applying in writing to our Company address.
Your requests will be concluded as soon as possible and within 30 (thirty) days at the latest.
