Customer Information Text
Information
This information notice has been prepared for members/visitors who place product orders via the website, mobile applications, and the Company’s social media accounts of the data controller Kalif Mimarlık Mühendislik Proje Yapı Taahhüt Üretim İthalat İhracat ve San. Ltd. Şti. (“KALİF DESIGN” or the “COMPANY”), as well as for customers who visit and shop at Kalif Design stores, in order to process personal data in accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”) and the European Union General Data Protection Regulation (“GDPR”).
Through this information notice, it is aimed to maintain and improve the activities carried out by the Company in compliance with the principles set forth in the KVKK.
Processed Personal Data and Collection Methods
Your personal data is collected through fully or partially automated means or by non-automated means provided that it is part of any data recording system, via:
Information you verbally declare in our stores or submit as documents,
Transactions you perform on the website or mobile application as a member or without membership,
Information and documents you provide during mutual communication via e-mail, social media, and other communication channels.
Data Categories and Processed Data
Identity Data: Name and Surname, Turkish ID Number (TCKN), Sole Proprietorship Information, Tax Number and Tax Office
Contact Data: Phone Number, Email Address, Address
Financial Information: Bank and IBAN Information
Transaction Security Data: Website login–logout information, username and password, IP information
Customer Transaction Data: Invoice information, payment information, order information
Marketing Data: Shopping history information, cookie records
Legal Bases and Purposes of Processing Personal Data
Your personal data may be processed by Kalif Design for the purposes and based on the legal bases set out below. If there is any change in the purpose of processing your personal data, your additional consent will be obtained.
Legal Bases
Within the scope of activities carried out by our Company, your personal data may be processed based on the following data processing conditions:
Where obtaining explicit consent is mandatory for data processing (KVKK Art. 5/1 and GDPR Art. 6/1/a)
Explicitly stipulated in laws (KVKK Art. 5/2-a)
Where it is necessary to process personal data of the parties to a contract, provided that it is directly related to the establishment or performance of the contract (KVKK Art. 5/2-c and GDPR Art. 6/1/b)
Where it is mandatory for the data controller to fulfill its legal obligation (KVKK Art. 5/2-ç and GDPR Art. 6/1/c)
Where data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (KVKK Art. 5/2-f and GDPR Art. 6/1/f)
These processing conditions are applied for the purposes below, in accordance with Law No. 6563 on the Regulation of Electronic Commerce, the Regulation on Commercial Communication and Commercial Electronic Messages, Law No. 6502 on the Protection of Consumers, Law No. 213 on Tax Procedure, the General Communiqué on Tax Procedure, and other relevant legal legislation.
Purposes
Fulfillment of our legal obligations arising from relevant legislation (including but not limited to Law No. 6563, the Regulation on Commercial Communication and Commercial Electronic Messages, Law No. 6502, Law No. 213, the General Communiqué on Tax Procedure, and other legislation)
Carrying out shopping transactions
Carrying out membership processes
Providing a service to view your shopping history
Evaluating your requests
Managing contract processes
Sending e-invoice / e-archive invoice related to your purchase
Issuing invoices and, in some cases, performing current account and reconciliation transactions
Fulfillment of legal obligations in cases where a product is purchased above a certain amount or where there is an explicit legal regulation for a specific product
Receiving payment if you wish to pay by credit card
Performing operational after-sales processes
Providing after-sales support services
Delivering the purchased products to you via cargo/shipping
Managing product return and refund processes
If commercial communication permission / explicit consent is provided: contacting you for general or personalized campaigns, advantages, promotions, advertisements, information notices, marketing activities, and commercial communications (SMS, email, etc.)
Resolving your issues, complaints, and requests communicated to us via our communication channels (phone, email, website, mobile application, social media, etc.) and contacting you when necessary
Improving user experiences on the website and mobile application and receiving technical consultancy accordingly
Exercising all rights (lawsuits, replies, objections) against official institutions such as courts, enforcement offices, and arbitration committees in case of disputes; conducting negotiation and settlement processes related to disputes
Tracking lawsuits and legal processes
Serving as evidence within the scope of security, review, and investigation
Conducting activities in compliance with legislation
Providing information to authorized persons, institutions, and organizations
Transfer of Personal Data and Purposes of Transfer
Your personal data processed within the scope of our activities may be transferred within Turkey, limited to the personal data required by the transaction, to:
Authorized institutions and organizations and legal entities, financial advisors, and judicial authorities, for fulfilling legal obligations such as providing information/documents and making legal notifications arising from legislation
Our lawyers and mediators, within the scope of exercising our legal rights
İleti Yönetim Sistemi A.Ş. (Message Management System) for records related to commercial communications
Our business partners and service providers, for purposes such as obtaining website hosting services, improving user experience on our website and mobile applications, IT technologies, marketing/advertising/analysis activities, operational services, payment services, and specialized consultancy/product and service support
Where necessary, payment institutions and authorized authorities, for detecting suspicious transactions and preventing unlawful transactions
Personal data processed within the scope of our activities is not transferred abroad by us. However, we would like to remind you that if you contact Kalif Design or place orders via social media accounts, the servers of the relevant social media platforms may be located abroad.
International Transfers (For EU/EEA Customers): Since our servers and headquarters are located in Turkey, if you are visiting our website or purchasing products from the European Union (EU) or European Economic Area (EEA), your personal data is transferred to Turkey. Turkey is currently not considered a country providing an "adequate level of protection" by the EU Commission. However, we ensure the security of your data by relying on the necessity of this transfer for the performance of the contract (GDPR Art. 49/1/b) (i.e., to deliver your order) and by implementing appropriate technical and administrative measures.
Ensuring Security and Confidentiality of Personal Data
In accordance with Article 12 of the KVKK, our Company takes all necessary technical and administrative measures to ensure an appropriate level of security in order to prevent unlawful processing and access and to ensure the preservation of personal data.
If personal data processed is obtained by others through unlawful means, our Company will notify the KVKK Board and the relevant person as soon as possible.
Deletion, Destruction, and Anonymization of Personal Data
Pursuant to Article 7 of the KVKK, even if personal data has been processed in accordance with relevant legislation, if the reasons requiring processing cease to exist, personal data shall be disposed of by our Company ex officio or upon the request of the data subject, using the method deemed appropriate in line with our retention and disposal policy prepared in compliance with KVKK legislation.
Rights of the Data Subject
Pursuant to Article 11 of the KVKK, you may apply to our Company and submit requests regarding your personal data on the following matters:
To learn whether your personal data is processed
To request information if your personal data has been processed
To learn the purpose of processing and whether it is used in accordance with the purpose
To know the third parties to whom personal data is transferred domestically or abroad
To request correction if personal data is processed incompletely or inaccurately, and to request notification of such correction to third parties to whom personal data has been transferred
To request deletion, destruction, or anonymization if the reasons requiring processing cease to exist, and to request notification of such action to third parties to whom personal data has been transferred
To object to a result arising against the data subject due to analysis of processed data exclusively through automated systems
To request compensation for damages if you suffer harm due to unlawful processing of your personal data
- Right to Restriction of Processing (GDPR Art. 18): To request the restriction of processing of your personal data under certain circumstances.
- Right to Data Portability (GDPR Art. 20): To receive your personal data in a structured, commonly used, and machine-readable format and to transfer those data to another controller.
- Right to Withdraw Consent (GDPR Art. 7): If processing is based on your consent, you have the right to withdraw your consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal).
- Right to Lodge a Complaint (GDPR Art. 77): Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.
Application Method
Data subjects may submit their applications and requests within the scope of the Law by filling out the “Application Form Under the Law on the Protection of Personal Data” available on the website address https://www.kalifdesign.com/contactus, and then:
Applying in person with your identity document to Anadolu Hisarı mah. İnönü cad. No: 4 İç Kapı No: 1, or sending it via a Notary Public, or
Sending it to [email protected] using the e-mail address previously notified to us and registered in our system.
Our Company will finalize application requests free of charge within 30 (thirty) days at the latest, depending on the nature of the request, in accordance with Article 13 of the Law. If the request is rejected, the reason(s) for rejection will be notified in writing or electronically together with the justification.
If the process requires an additional cost for our Company, a fee may be charged in accordance with the tariff specified in the “Communiqué on the Procedures and Principles of Application to the Data Controller.”
Note for EU Residents: While you can always contact us directly regarding your rights, under the GDPR, you also have the right to lodge a complaint with your local Data Protection Authority (DPA) within the EU.
This Information Notice may be revised by KALİF DESIGN when deemed necessary. In cases of revision, you will be informed accordingly.
