Privacy and Security

Personal Data Protection and Privacy Policy

Introduction
This Personal Data Protection and Privacy Policy ("Policy") is established in accordance with the laws of the Republic of Turkey. The Policy is prepared in compliance with personal data protection legislation and outlines how the Company, AgaDigital Elektronik Mağazacılık ve Ticaret Anonim Şirketi ("Company"), collects, processes, stores, and protects personal data. The Company’s headquarters is located at Yenibosna Merkez Mh. Ladin St. Kuyumcukent Site, No: 4 M/Z030 Bahçelievler, İstanbul, registered in the Istanbul Trade Registry with registration number 793832 and MERSİS number 0631060010200010.

This Policy details how the Company handles personal data, including information about the types of personal data collected, the purposes for processing this data, data retention periods, data sharing practices, and the rights of data owners regarding their personal information.

Purpose of the Privacy Policy

The purpose of this Policy is to inform data owners about the following:

Types of personal data processed by the Company.
Methods of collection and legal grounds for processing personal data.
Purposes for processing personal data.
Duration of data storage.
Third parties with whom personal data may be shared.
Company’s obligations regarding data security.
Conditions for deletion, destruction, and anonymization of personal data.
Rights of data owners concerning their personal data and how to exercise these rights.
How to submit requests related to personal data under the Personal Data Protection Law No. 6698 (“KVKK”) and relevant legislation.
How to submit questions or suggestions regarding this Policy.
How changes to the Policy will take effect.

What Data Do We Process?

The Company operates the website www.agakulche.com (“Website”). Users who wish to purchase products through the Website (“User”) must register by providing an email address as their username (“Username”) and creating a password (“Password”). Once registered, the User becomes a member (“Member”) of the Website.

In compliance with KVKK and relevant legislation, the following personal data may be collected from Members:

Name and surname
Address
Date of birth
Telephone number
Email address
Turkish Identification Number (if applicable)
IP address
Website activity data (e.g., mouse movements, usage dates/times, filtering preferences, error reports)
Location information (e.g., GPS data)
Username and Password
Support call records, requests, and complaints
Payment information (e.g., debit/credit card details)

Methods and Legal Reasons for Collecting Your Personal Data

The Company collects personal data from Users (hereafter referred to as "Data Owners") as follows:

Directly from Users: When they provide their information while registering on the Website.
Automatically: Through the Website, based on their activity.

The Company may process personal data without the explicit consent of the Data Owner if one or more of the following conditions are met:

It is explicitly provided for in the law.
It is necessary for establishing or executing a contract.
It is mandatory for the data controller to fulfill its legal obligations.
It has been made public by the Data Owner.
Processing is mandatory for establishing or protecting a right.
It serves the legitimate interests of the Company, provided that it does not harm the freedoms of the Data Owner.

Purpose of Processing Your Data

The Company processes personal data for several purposes, including but not limited to:

Fulfilling obligations arising from the Law on Consumer Protection No. 6502, Distance Contracts Regulation, and Law No. 6563 on the Regulation of Electronic Commerce.
Ensuring the security of Members' personal data.
Delivering products and services to Members.
Conducting customer relations and satisfaction analyses.
Responding to inquiries, suggestions, or complaints from Members.
Marketing communications and promotions.
Evaluating member feedback regarding services and products.
Legal compliance and fulfilling obligations.

Changes to the Privacy Policy

This Policy was prepared on [insert date] and was last updated on [insert date]. The Company reserves the right to amend this Policy at any time to comply with changing conditions and applicable legislation. In the event of any changes to the Policy, the effective date and content will be updated by the Company. Such changes will come into effect immediately upon publication, without the need for additional approval or acceptance from the Data Owners.