PRIVACY AND PERSONAL DATA PROTECTION POLICY

At Yahya Efendi Baklavaları, we attach great importance to the privacy and protection of personal data obtained through the website www.yahyaefendibaklavalari.com.

This Privacy and Personal Data Protection Policy has been prepared to explain the purposes for which personal data is processed, how it is protected, and the rights of users within the scope of the Law No. 6698 on the Protection of Personal Data (“KVKK”).

1. Data Controller

In accordance with KVKK, your personal data is processed by the data controller whose information is given below.

Data Controller: Yahya Efendi Baklavaları

Authorized Person: Muhammet Abdülkadir Akyıldız

Tax Office: Fatih

Tax Identification Number: 0440571835

Address: Akşemseddin Mah. Sarıgüzel Cad. Serdar Apt. No: 59/C Fatih / Istanbul

Phone: +90 534 967 40 67

Email: info@yahyaefendibaklavalari.com

2. Personal Data Processed

The following personal data may be processed within the scope of transactions carried out through the website:

Name and surname

Phone number

Email address

Delivery address and billing address

Order and transaction information

Technical data related to site usage (IP address, cookie information, etc.)

3. Purposes of Processing Personal Data

The collected personal data is processed for the following purposes:

Execution of order processes,

Preparation and delivery of products,

Communication with customers,

Evaluation of requests, suggestions and complaints,

Fulfillment of accounting and legal obligations.

4. Legal Basis for Personal Data

Your personal data is processed for the following purposes:

Personal data is processed based on the following legal grounds:

It is directly related to the establishment and performance of a contract,

The data controller fulfills its legal obligations,

The legitimate interest of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

5. Method of Collecting Personal Data

Your personal data is collected electronically through:

order and contact forms on the website,

emails and telephone calls,

automatically during your use of the site.

6. Transfer of Personal Data

Your personal data may be transferred to:

cargo and logistics companies,

payment service providers,

authorized public institutions and organizations within the scope of legal obligations,

only as required by the service and in accordance with the legislation.

It will not be shared with third parties outside of these.

7. Retention Period of Personal Data

Your personal data is stored for the periods stipulated in the relevant legislation and for the period required by the purpose of processing. Upon expiry of these periods, personal data will be deleted, destroyed, or anonymized.

8. Data Security

Yahya Efendi Baklavaları takes the necessary technical and administrative measures to prevent:

unlawful processing of personal data,

unauthorized access,

loss or alteration.

9. Rights of the Data Subject

In accordance with Article 11 of the KVKK (Personal Data Protection Law), everyone has the right to:

learn whether their personal data is being processed,

request information regarding processing if it is being processed,

learn the purpose of processing and whether it is being used in accordance with its purpose,

request correction if it is incomplete or inaccurate,

request deletion or destruction when legal conditions are met,

learn the third parties to whom the processed data has been transferred.

10. Application and Communication

You can submit your requests regarding your rights under the Personal Data Protection Law (KVKK) through the following contact information:

Email: info@yahyaefendibaklavalari.com

Phone: +90 534 967 40 67

Your applications will be evaluated and finalized as soon as possible within the scope of the legislation.

11. Cookies

Cookies are used on our website to improve user experience and measure site performance. You can restrict the use of cookies at any time through your browser settings.

12. Policy Changes

This Privacy and Personal Data Protection Policy may be updated as needed. The updated text enters into force on the date it is published on the site.