1. Controller and scope
The provider identified below determines purposes and means for website accounts, carts, orders and support. This notice covers those activities. Acknowledging it does not consent to marketing or health-data processing.
2. Collection, purposes and grounds
Electronic sources are account / order forms, social-login verification, support correspondence and technical requests. Identity, contact and orders support contracts (KVKK 5/2-c), compulsory records statutory duties (ç), disputes legal claims (e), and IP / security balanced legitimate interests (f). Analytics needs separate consent.
3. Recipients, transfers and retention
Necessary recipients may include authorised staff, hosting / security, chosen login, payment / invoice providers and authorities. PayTR processes cards in its own screen. Overseas transfers require KVKK Art.9 and applicable GDPR Chapter V assessment; no completed safeguard is guaranteed here. Retention follows purpose and legal duties, then deletion or anonymisation is assessed. This account / payment notice does not request health data or consent; sensitive features need separate information and an Art.6 condition.
4. Rights and requests
KVKK Art.11 provides information, correction, conditional deletion / recipient-notification, objection to adverse automated analysis and compensation rights. Write from your account email to [email protected]; proportionate identity checks may apply. KVKK requests are answered within 30 days. Authority complaints remain available. See Privacy for additional applicable GDPR rights.