NOTICE ON THE PROCESSING AND PROTECTION OF PERSONAL DATA

Pursuant to Law No. 6698 on the Protection of Personal Data (“KVKK”)

Envira GmbH — Data Controller

Law No. 6698 on the Protection of Personal Data (“KVKK”) entered into force on April 7, 2016. As the data controller under the KVKK, Envira GmbH attaches the utmost importance to protecting your privacy and personal data. This privacy notice has been prepared in accordance with Article 10 of the KVKK and the “Regulation on the Procedures and Principles for Fulfilling the Obligation to Inform.”With this notice, our Company informs all visitors—whether or not they are members of our website—as well as our customers and other third parties about the processing and protection of personal data and their related rights.

Definitions & Scope

Under Article 3/1(d) of the KVKK, personal data means any information relating to an identified or identifiable natural person. As Envira GmbH, we process data provided by website visitors, customers who make online purchases, and other third parties within the framework of the KVKK and applicable regulations.

The categories of data we process may include, without limitation:

Identity data: name, surname, photograph, Turkish ID number
Contact data: phone numbers, address, e-mail address
Membership data: membership ID, error logs generated during use
Customer data: order records, date and time of use, search terms and filter settings, reviews, order history, bonus points, invoicing and payment information
Marketing data: cookie data, targeting information, reports and analytics regarding preferences and reviews

Methods of Data Collection & Use of Cookies

Your personal data are collected electronically during your website visit, registration, or online purchase. They may also be collected in writing, orally, or electronically in the course of our business relationship, including via our call centers, branches, or during contract execution.

Our website uses cookies. A cookie is a file of letters and numbers stored in your browser or on your device’s hard drive that enables device identification. Information collected through cookies, log files, GIFs, or third-party sources may be stored to create a profile of your preferences. These data are also used to present personalized advertisements, promotions, and offers, and to tailor website content to your interests.

We use both session cookies (deleted when you close your browser) and persistent cookies (remain on your device). You can remove cookies at any time via your browser’s help settings.

Purposes of Processing

Envira GmbH processes personal data within the scope of Articles 5 and 6 of the KVKK, in particular for the following purposes:

Carrying out membership procedures (if requested)
Identity verification during online purchases
Storing address and contact information for communication
Concluding distance sales contracts and fulfilling legal obligations under consumer protection legislation
Contacting customers for contract performance (product delivery, returns, exchanges)
Improving our services and informing customers about products and campaigns
Enhancing customer satisfaction, analyzing our customer base, and conducting marketing and advertising activities
Handling customer complaints and suggestions
Fulfilling statutory reporting obligations to public authorities
Protecting and exercising our legal rights

Legal Bases for Processing

Your personal data are processed on the grounds set out in Articles 5 and 6 of the KVKK and applicable laws of the Republic of Türkiye, including:

Compliance with a legal obligation
Conclusion or performance of a contract
Legitimate interests of the data controller
Fulfillment of legal duties

Where required, your data may also be processed and transferred on the basis of your explicit consent.

Transfer of Personal Data

Your personal data may be transferred in accordance with the principles of the KVKK and Articles 8 and 9 to the following recipients:

Partner banks for financial and payment transactions
Law firms for the exercise and defense of legal claims
Competent public authorities and courts in fulfillment of legal obligations

Retention Periods

Your personal data are retained for the periods stipulated in applicable laws and regulations. Where no statutory period is specified, Envira GmbH retains data for as long as necessary to fulfill the purposes of processing. After the expiry of statutory or purpose-based periods, data are deleted, destroyed, or anonymized. Longer retention is possible only to establish, exercise, or defend legal claims.

Your Rights under Article 11 KVKK

You may apply to Envira GmbH to:

(a) learn whether personal data are processed,
(b) request information regarding processed data,
(c) learn the purpose of processing and whether data are used in accordance with that purpose,
(d) learn the third parties to whom data are transferred domestically or abroad,
(e) request rectification of incomplete or inaccurate data,
(f) request deletion or destruction of personal data pursuant to Article 7 of the KVKK,
(g) request notification of rectification or deletion to third parties to whom data were transferred,
(h) object to results that arise to your detriment from analysis of data exclusively by automated systems,
(i) request compensation for damages arising from unlawful processing.

Your rights have been exercisable since October 7, 2016. Fees may be charged for processing applications in accordance with Article 13 of the KVKK.

How to Exercise Your Rights

You can submit your applications by following the procedures described in our Application Form available here: insert link. Please ensure your request includes sufficient information to verify your identity and to identify the data processing activity concerned.

Contact Information

Data Controller: Envira GmbH

E-mail: [email protected]

Address: (insert registered address)