1.Data controller
Under Turkish Personal Data Protection Law No. 6698 (“KVKK”), your personal data is processed by our company, whose details are provided below, acting as the data controller.
- Legal name
- Abdurahman Muslu
- Address
- Bekbele Mah. 65. Menderes Sk. No: 7 A, İskenderun / Hatay
- bilgi@esilamarket.com
- Email for KVKK requests
- bilgi@esilamarket.com
2.Personal data processed
If you visit our website, create an account, place an order or contact us, the following categories of data may be processed:
| Category | Example data |
|---|---|
| Identity | First name, surname; company name on business invoices; Turkish ID number (T.C. Kimlik No) on personal invoices where required |
| Contact | Email address, mobile number, delivery and billing addresses |
| Customer transactions | Order history, cart contents, Esila Puan transactions, requests and complaints |
| Financial | Billing details, tax office (vergi dairesi) and tax number, payment status. We do not store your card details; they are processed by the payment institution. |
| Transaction security | IP address, session information, one-way password hash, login records |
| Marketing | Newsletter subscription, cookie preferences and interactions with promotions if you have given permission |
3.Purposes of processing
- Creating and managing your account,
- Receiving orders, collecting payments, issuing invoices, packing and delivering orders,
- Managing withdrawal, return, exchange and warranty procedures,
- Operating the Esila Puan loyalty programme,
- Responding to requests and complaints and managing customer relations,
- Ensuring information security and preventing fraud and misuse,
- Fulfilling obligations under tax, commercial and consumer legislation and providing information to competent authorities,
- Sending commercial electronic communications and offering personalised promotions if you have given your explicit consent.
4.Legal grounds and collection method
Your personal data is collected electronically through website forms, account and order pages, email, telephone and cookies. We rely on the following legal grounds set out in Article 5 of KVKK (Turkish Personal Data Protection Law No. 6698):
- Establishment or performance of a contract (Art. 5/2-c): account registration, orders, delivery, returns.
- Legal obligation (Art. 5/2-ç): invoices, tax records, retention required by consumer legislation.
- Establishment, exercise or protection of a right (Art. 5/2-e): retention as evidence in the event of a dispute.
- Legitimate interests (Art. 5/2-f): information security, measurement of service quality.
- Explicit consent (Art. 5/1): commercial electronic communications, analytics and marketing cookies.
5.Transfer of personal data
Your personal data may be transferred to the following groups of recipients, solely for the purposes stated above:
- Shipping and logistics companies (name, address and telephone number for delivery),
- Payment institutions and banks (for payment collection),
- Suppliers providing us with hosting, email and software services,
- Accountants, legal advisers and auditors,
- Competent public institutions and authorities upon request.
If data is transferred abroad, the conditions set out in Article 9 of KVKK are complied with. Our website is hosted in the Amazon Web Services data centre in Frankfurt (Germany); transactional e-mails are sent via Resend from Ireland (EU). The conditions of Article 9 of the KVKK apply to these transfers abroad.
6.Retention period
Your data is retained for the period required by the purpose of processing and for the limitation periods prescribed by applicable legislation; at the end of this period, it is deleted, destroyed or anonymised. For example, invoices and accounting records are retained for 10 years under the Tax Procedure Law and the Turkish Commercial Code, and distance sales transaction records are retained for at least 3 years under the relevant regulation.
7.Your rights under Article 11 of KVKK
By applying to the data controller;
- Finding out whether your personal data has been processed and, if so, requesting information about this,
- Finding out the purpose of processing and whether your data is used in accordance with that purpose,
- Knowing the third parties to whom your data has been transferred within Türkiye or abroad,
- Requesting rectification if your data has been processed incompletely or incorrectly,
- Requesting deletion or destruction under Article 7 of KVKK,
- Requesting that third parties to whom your data has been transferred be notified of rectification, deletion and destruction,
- Objecting to a result that is to your detriment arising from analysis exclusively through automated systems,
- Requesting compensation if you suffer damage due to unlawful processing
are rights you may exercise.
8.How to submit a request
You may submit your requests, together with information identifying you, in accordance with the Communiqué on the Procedures and Principles for Applications to the Data Controller:
- By a petition bearing your handwritten signature, delivered in person or through a notary to Bekbele Mah. 65. Menderes Sk. No: 7 A, İskenderun / Hatay,
- From your email address registered in our system to bilgi@esilamarket.com
Requests are resolved free of charge within 30 days at the latest; if the process entails an additional cost, the tariff determined by the Personal Data Protection Board may apply.
For details about cookies, please see our Cookie Policy; for our general practices, please see our Privacy Policy.