Information Notice on the Protection and Processing of Personal Data

INFORMATION NOTICE ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

Data Controller: Avrupa Temizlik Hizmet Çözümleri Tic. Ltd. Şti.

Website: https://www.avrupatedarik.com

Address: Tekstilkent Koza Plaza, Block A, Floor 1, No: 2-38, Esenler / Istanbul, Türkiye

Phone: +90 212 216 2 550

Last Updated: October 9, 2026

1. Purpose and Scope

As Avrupa Temizlik Hizmet Çözümleri Tic. Ltd. Şti. ("Avrupa Tedarik" or the "Company"), we attach great importance to protecting the personal data of our customers, registered users, suppliers, business partners, and website visitors.

This Privacy Notice has been prepared in accordance with Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") to inform data subjects about the processing of personal data collected through https://www.avrupatedarik.com and within the scope of our commercial activities.

Your personal data is processed lawfully and fairly, for specific, explicit, and legitimate purposes, and in a manner that is relevant, limited, and proportionate to the purposes for which it is processed.

2. Categories of Personal Data Processed

Depending on the nature of the services provided by our Company, the following categories of personal data may be processed:

Identity Information

First and last name
Identification information required for invoicing and legal compliance
Identity and tax information relating to sole proprietorships

Contact Information

Phone number
Email address
Billing and delivery addresses
Information provided in communication requests

Customer Transaction Information

Order number and order history
Information about purchased products
Payment amount and payment status
Invoice information
Shipping and delivery information
Cancellation, return, and exchange requests
Customer service inquiries

Membership and Account Information

User account information
Encrypted passwords and account security data
Account preferences
Shopping cart and favorite product information

Transaction Security and Technical Information

IP address
Transaction date and time
Session and access logs
Browser and device information
Cookie preferences

Corporate Customer and Business Partner Information

Company name and corporate contact information
Name, surname, and contact details of authorized representatives
Tax office and tax identification number
Transaction information relating to dealership, procurement, and dropshipping processes

Marketing Information

Where the relevant legal requirements are met, information concerning promotional communication preferences, commercial electronic communication permissions, and marketing activities may be processed.

Only personal data necessary for the activities carried out is processed.

3. Purposes of Processing Personal Data

The personal data collected is processed for the following purposes:

3.1. Membership and Account Management

Creating customer accounts, carrying out membership procedures, ensuring account security, and providing account-related services to users.

3.2. Order and Sales Transactions

Receiving, verifying, and preparing orders, processing payments, delivering products, and providing after-sales services.

3.3. Invoicing and Accounting

Issuing invoices, maintaining accounting records, fulfilling tax obligations, and managing financial transactions.

3.4. Shipping and Delivery

Forwarding orders to shipping and logistics service providers, completing deliveries, and tracking delivery processes.

3.5. Customer Services

Responding to customer inquiries, evaluating requests, resolving complaints, and managing return or exchange procedures.

3.6. Corporate Sales and Procurement Services

Managing wholesale sales, corporate purchasing, dealership activities, supplier relationships, dropshipping, and integration services.

3.7. Information Security

Preventing unauthorized access, detecting suspicious transactions, ensuring system security, and protecting legal rights in potential disputes.

3.8. Advertising and Marketing

Informing customers about campaigns, discounts, new products, and special offers, provided that the necessary permissions have been obtained and the relevant legal requirements have been met.

4. Legal Grounds for Processing Personal Data

Your personal data may be processed based on the following legal grounds specified in Article 5 of the KVKK:

Necessity for the Establishment or Performance of a Contract — Article 5(2)(c)

Managing membership, orders, sales, payments, deliveries, and customer services.

Compliance with the Data Controller's Legal Obligations — Article 5(2)(ç)

Issuing invoices, fulfilling tax and accounting obligations, and responding to lawful requests from authorized public authorities.

Establishment, Exercise, or Protection of a Right — Article 5(2)(e)

Resolving potential disputes, evaluating legal claims, and protecting legal rights.

Legitimate Interests — Article 5(2)(f)

Ensuring information security, improving service quality, and managing operational processes, provided that such processing does not prejudice the fundamental rights and freedoms of data subjects.

Explicit Consent — Article 5(1)

Carrying out advertising, marketing, analytics, and similar activities where explicit consent is required and no other legal basis for processing is available under the law.

Refusal to provide explicit consent for consent-based processing activities does not prevent customers from accessing essential ordering and shopping services.

5. Methods of Collecting Personal Data

Your personal data may be collected electronically or physically through the following channels:

AvrupaTedarik.com website
Membership and order forms
Payment and checkout pages
Contact and support forms
Telephone and email correspondence
Cookies and technical access logs
Corporate sales and procurement processes
Authorized business partners and order integration systems

Personal data is processed through automated or non-automated methods based on the applicable legal grounds.

6. Sharing and Transfer of Personal Data

Your personal data may be transferred to the following categories of recipients, limited to the purposes of processing and subject to the necessary security measures:

Shipping and Logistics Companies: Name, surname, telephone number, and delivery address information necessary to deliver orders.

Banks and Payment Service Providers: Transaction information necessary to process and verify payments and manage refunds.

Accounting and E-Invoicing Service Providers: Information required for statutory accounting, taxation, and invoicing procedures.

Technical Service Providers: Data necessary for website hosting, technical support, data security, and operation of the e-commerce infrastructure.

Suppliers and Business Partners: Information necessary to fulfill orders and manage corporate procurement, dropshipping, and logistics operations.

Authorized Public Institutions and Authorities: Information required to comply with legal obligations and respond to lawful official requests.

Personal data is not transferred to third parties except under the conditions permitted by applicable legislation.

7. International Transfers of Personal Data

Personal data may be transferred internationally where service providers located outside Türkiye are used for website infrastructure, analytics, advertising, cloud services, or other technical services.

Such transfers may be carried out in accordance with the requirements and appropriate safeguards established under Article 9 of Turkish Personal Data Protection Law No. 6698.

[This section must be completed before publication to reflect the actual service providers used, categories of data transferred, recipient groups, and the legal grounds for international data transfers.]

8. Use of Cookies

AvrupaTedarik.com may use cookie technologies to ensure the proper functioning of the website, remember user preferences, evaluate website performance, and conduct advertising activities where the necessary permissions have been obtained.

Cookies may be categorized as essential, functional, analytics, and marketing cookies based on their intended purposes.

Non-essential cookies are activated with the user's explicit consent where no other lawful basis for processing is available under the applicable legislation.

Users may modify their cookie preferences through the cookie management panel available on the website.

Further information regarding cookie types, providers, purposes of use, and retention periods is provided in the separately published Cookie Notice.

9. Retention and Disposal of Personal Data

Personal data is retained for the period necessary to fulfill the purposes for which it is processed and in accordance with applicable legal retention obligations.

When the legal or practical reasons requiring the retention of personal data cease to exist, the data is deleted, destroyed, or anonymized in accordance with the KVKK and applicable legislation.

Retention and disposal procedures are carried out with consideration for the type of data and the purpose of processing.

10. Security of Personal Data

Our Company is responsible for implementing the necessary technical and administrative measures to prevent unlawful processing of personal data and unauthorized access to such data.

These measures are based on restricting access privileges, conducting data security controls, ensuring system security, and limiting access to personal data to authorized individuals only.

11. Rights of Data Subjects Under the KVKK

Pursuant to Article 11 of Turkish Personal Data Protection Law No. 6698, individuals whose personal data is processed have the following rights:

To learn whether their personal data is being processed.
To request information regarding the processing of their personal data if it has been processed.
To learn the purpose of processing their personal data and whether it is being used in accordance with that purpose.
To know the third parties to whom their personal data has been transferred, whether domestically or internationally.
To request the correction of incomplete or inaccurate personal data.
To request the deletion or destruction of personal data under the conditions specified in Article 7 of the KVKK.
To request that corrections, deletions, or destruction of personal data be communicated to third parties to whom the data has been transferred.
To object to any outcome arising against them as a result of the analysis of their personal data exclusively through automated systems.
To request compensation for damages suffered as a result of unlawful processing of personal data.

12. Applications and Contact Information

You may use the following communication channels to exercise your rights under the KVKK.

Data Controller: Avrupa Temizlik Hizmet Çözümleri Tic. Ltd. Şti.

Postal Address: Tekstilkent Koza Plaza, Block A, Floor 1, No: 2-38, Esenler / Istanbul, Türkiye

Contact Email: sp@avrupatedarik.com

Phone: +90 212 216 2 550

Applications may be submitted in writing or through other methods permitted by the applicable legislation in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller.

For applications submitted by email, data subjects may use an email address previously provided to and registered with our Company.

Applications will be evaluated and responded to as soon as possible, depending on the nature of the request, and within a maximum of 30 days.

If processing the application requires additional costs, a fee may be charged in accordance with the tariff established by the Turkish Personal Data Protection Board.

13. Updates to This Privacy Notice

Our Company may update this Privacy Notice in response to changes in personal data processing activities or applicable legislation.

The latest version of this Privacy Notice will be published on https://www.avrupatedarik.com.

Avrupa Tedarik

We are committed to protecting your personal data and respecting your right to privacy.