Privacy Notice on the Protection of Personal Data
Under Turkish Personal Data Protection Law No. 6698 ("KVKK"), as data controller, Tuğçe Yay ("ByTooche") would like to inform you about the personal data processed while you use the website bytooche.com.
1. Data controller
| Trade name | Tuğçe Yay |
|---|---|
| Address | Bahçelievler Mah. 1832 Sokak No.8 D.22 Karşıyaka İZMİR |
| Phone | +90 541 144 41 04 |
| info@bytooche.com | |
| Tax office / no. | Karşıyaka / 9430230311 |
| Website | bytooche.com |
2. What data we process, for what purpose and on what legal basis
| Activity | Data processed | Purpose | Legal basis (KVKK Art. 5/2) |
|---|---|---|---|
| Orders | First name, last name, email, phone, delivery address, order contents and amount, payment status, order note; if a corporate invoice is requested, company name, tax office and tax/Turkish ID number | Receiving, preparing, delivering and invoicing the order; order tracking; withdrawal and return procedures | Performance of a contract (c), legal obligation (ç) |
| Contract approval | Time of approval, the approved Pre-Contractual Information Form and Distance Sales Agreement text | Proof of approval under distance selling legislation | Legal obligation (ç), establishing and protecting a right (e) |
| Information emails | Email address, order and shipping details | Sending the order confirmation and the shipping tracking number | Performance of a contract (c), legal obligation (ç) |
| Contact form | First name, last name, email, message content | Answering your questions, requests and complaints | Legitimate interest (f); performance of a contract (c) if order-related |
| Wholesale quote form | Company name, first name, last name, email, phone, products of interest, quantity and message content | Preparing and sending you a wholesale or corporate order quote | Conclusion of a contract (c), legitimate interest (f) |
| Cart and favourites | Products you add to your cart (linked to the session cookie). Your favourites are stored only in your browser and are not sent to us. | Letting you continue shopping where you left off | Conclusion and performance of a contract (c) |
| Security | Session cookie; IP address (in memory only, for at most 1 hour) | Keeping your session, preventing abuse such as many failed attempts | Legitimate interest (f) |
We do not receive or store your card details; payment takes place on the infrastructure of a licensed payment institution. No commercial electronic messages for campaigns or advertising are sent to you.
3. Who we share your data with
- Courier company: recipient name, delivery address and phone number, for delivery.
- Payment institution: the order amount and the buyer details requested by the payment institution, to take the payment.
- Accountant and authorised public institutions: for obligations arising from invoicing and tax legislation and requests of authorised bodies.
- Email service provider (transfer abroad): information emails are sent via Google LLC's Gmail service; therefore your email address and the email content may be transferred to servers abroad. This transfer is made in accordance with the conditions set out in Article 9 of KVKK.
- Hosting provider: the company providing the server on which the website and the database run.
4. Collection method
Your personal data is collected electronically and by automated means when you fill in the order, order tracking, contact and wholesale quote forms and use the website. For information on the cookies used, see the Cookie Policy.
5. Retention period
Order, invoice and contract records are kept for the periods required by the relevant legislation (up to 10 years under tax and commercial law). Contact messages and wholesale quote requests are kept for as long as needed to resolve your request and any possible disputes. Data whose period has expired is deleted, destroyed or anonymised.
6. Your rights (KVKK Art. 11)
By applying to the data controller, you have the right to learn whether your personal data is processed; to request information if it has been processed; to learn the purpose of processing and whether it is used in accordance with that purpose; to know the third parties to whom it is transferred in Turkey or abroad; to request its correction if it is incomplete or inaccurate; to request its deletion or destruction under the conditions in Article 7 of KVKK; to request that these actions be notified to third parties to whom the data was transferred; to object to a result against you arising from analysis exclusively by automated systems; and to claim compensation if you suffer damage due to unlawful processing.
7. How to apply
You can send your requests in writing to Bahçelievler Mah. 1832 Sokak No.8 D.22 Karşıyaka İZMİR, or from the email address you used in your order or form to info@bytooche.com. Your application is concluded free of charge as soon as possible depending on its nature and within 30 days at the latest; if the procedure involves an additional cost, the fee in the tariff set by the Personal Data Protection Board may be charged.