Privacy Policy & Data Protection Notice
This policy explains how your personal data is collected, processed, transferred, and protected in accordance with the Turkish Personal Data Protection Law (KVKK No. 6698) and applicable international standards.
1. Data Controller
Name: Abdulrahman Abraşoğlu (VELTORI)
Address: Gökevler Mah. 538. Sk. Kristal Şehir 8 Blok No: 4 F İç Kapı No: 245, Esenyurt / Istanbul
Tax ID: 0020160706
2. What is Personal Data?
Personal data means any information that identifies you directly or indirectly, including your full name, contact details, IP address, payment information, order history, device/browser data, and similar identifiers.
3. Legal Grounds and Purposes of Processing
Your data is processed based on legal obligations, contractual necessity, explicit consent, and legitimate interest, for purposes such as:
- Order processing and delivery
- Customer service and communication
- Accounting and tax compliance
- Fraud prevention and security
- Marketing and analytics (only with consent)
4. Data Collection Methods
We collect data through automated tools (e.g., cookies, forms, checkout systems) and manually through customer support or service processes.
5. Data Sharing and Transfers
Your data may be shared with authorized service providers such as:
- Shopify (hosting and infrastructure – servers located in Canada/USA)
- Payment service providers (e.g., PayTR, İyzico, Stripe, or other licensed processors)
- Logistics and shipping partners
- Analytics and marketing platforms (e.g., Meta, Google)
In cases of international transfer, data is protected under KVKK Article 9 and appropriate security measures are applied.
6. Data Retention Periods
- Accounting and billing data: retained for 10 years (per tax law)
- Support and transaction history: retained for 5 years
- Marketing data: stored until consent is withdrawn
- Session and tracking data: up to 2 years
7. Your Rights Under Article 11 of KVKK
- To learn whether your data is being processed
- To request details about such processing
- To request correction of incomplete or inaccurate data
- To request deletion or destruction of data
- To request notification of third parties to whom data was transferred
- To object to unfavorable outcomes arising from automated processing
- To claim damages in case of unlawful processing
8. How to Apply
You may send your request in writing or via registered e-mail to:
Your application will be evaluated and responded to within 30 days as per Article 13 of KVKK.
9. Information About Potential Customer Data
Individuals who have not purchased any product or service but have contacted us via contact, membership, or campaign forms are considered “potential customers.” Their data is used only with explicit consent or legitimate interest for promotional, informational, and campaign-related purposes, and is deleted upon request.