Personal Data Privacy Notice (KVKK)

Data controller

Under Law No. 6698 on the Protection of Personal Data (Kişisel Verilerin Korunması Kanunu, “KVKK”), the data controller is Feza Innovation Bilişim Ticaret Limited Şirketi, which operates under the Feza İnovasyon brand. This text has been prepared for persons who visit our website, use our contact form, place orders through our site and use the customer account.

• Address: Huzurevleri Mah. 80. Yıl Bulvarı No: 45/1B, Çukurova / Adana
• MERSİS (Central Registration System) number: 0385218140400001
• Email for KVKK applications: [email protected]
• Website: fezainnovation.com

Which data do we process?

When you visit our site, technical records such as IP address, time of visit and browser/device information are processed; when you use the contact form, your full name, your contact details and your message; and when you place an order, your order and billing details.

• Website visit and security: IP address, date and time of the visit, the page requested, browser and device information, security and error records.
• Contact form or application: full name, email address, the subject you are interested in and the content of the message. Your IP address is used for a short time to limit abuse.
• Order and invoice: full name, email address, phone number and billing address; for an individual buyer, optionally the Turkish identity number (T.C. kimlik numarası); for a business buyer, company name, tax office and tax number; the content, amount, payment method and status of the order; contract approval records (the approved text and its version, the time of approval, IP address, browser information). With payment by card, your card details do not reach us; they are entered on the payment institution’s page.
• User account (customer account): your email address and an irreversible hash of your password (the password itself is not stored); if you choose to save them to your account, your full name, your phone number and your billing details (the Turkish identity number is not stored in the account); records of the verification, sign-in and password reset links sent to your email address and of the sessions (including IP address); your order history.
• Email correspondence: when you write to us by email, your name, your email address and the content of the correspondence.
• Cookies and similar technologies: strictly necessary cookies and browser storage for the cart, the session, payment access and the cookie choice.

We ask you not to share special categories of personal data (such as health, religion or ethnic origin) in your messages; our site is not designed to process data of this kind.

Purpose and legal basis

Your data is processed in order to keep the website secure and working, to resolve technical problems, to respond to your contact requests, to receive and fulfil orders, and to fulfil legal obligations. The legal basis on which we rely for each purpose is as follows:

• Ensuring the operation of the website, information security and the detection of technical problems: access and security records; our legitimate interest, provided that it does not harm your fundamental rights and freedoms (KVKK Art. 5/2-f).
• Receipt, answering and finalisation of the contact form and applications: contact form and email data; if your request relates to a quote or a pre-contractual discussion, being directly related to the conclusion of a contract (Art. 5/2-c), in other cases our legitimate interest (Art. 5/2-f).
• Creation, performance and invoicing of the order: order and invoice data; the conclusion or performance of a contract (Art. 5/2-c) and the legal obligation arising from tax and commercial legislation (Art. 5/2-ç).
• Creation and management of the user account: account data; the performance of a contract (Art. 5/2-c).
• Fulfilment of legal obligations and the establishment, exercise or protection of rights in possible disputes: order, approval and correspondence records; legal obligation (Art. 5/2-ç) and the establishment, exercise or protection of a right (Art. 5/2-e).

We do not send messages for marketing purposes; if we send them in the future, we will obtain your approval for this separately.

Method of collecting personal data

Your personal data is collected electronically, directly from you or automatically, by means of the technical records and cookies generated during your visit to the website, the contact form, the order form, the customer account and email.

Transfer of personal data

Your personal data is not sold. It may be transferred to the following groups of recipients, limited to the stated purposes and to the extent necessary:

• Website hosting and IT infrastructure: our site, our database and our email server run on the servers of netcup GmbH (Germany) in Vienna (Austria).
• Access, content delivery and security: access to the site is provided via Cloudflare, Inc. (USA); your IP address and the technical information sent by your browser are processed on the servers of this service. With Cloudflare Web Analytics, aggregate visit statistics are kept without using cookies and without identifying visitors individually.
• Company email: a copy of the emails you send to [email protected] is also stored in our company’s email account provided by Google LLC (USA).
• Payment: if you choose to pay by card, your full name, email address, phone number, billing address, IP address and the order amount are transferred, for the collection of the payment, to the payment institution iyzi Ödeme ve Elektronik Para Hizmetleri A.Ş. (Türkiye).
• Accountancy and legal services: invoice and accounting records to our accountant; in the event of a dispute, the necessary records to our legal adviser.
• Authorised public institutions and organisations: within the scope of a statutory obligation or a request from a competent authority.

Because of the hosting (Austria), access and security (USA) and company email (USA) services, your data is transferred abroad. The transfer is carried out in accordance with the conditions in Article 9 of the KVKK and limited to the stated purposes.

Cookies

On our website, strictly necessary cookies and browser storage are used for the cart, the session, payment access and security; these do not require permission. No analytics, advertising or marketing cookies are used.

The names, purposes, providers and durations of the cookies are set out in the Cookie Policy (https://fezainnovation.com/en/cookie-policy).

Retention period

Your personal data is retained for the period necessary for the relevant processing purpose and limited to the retention obligations in the legislation; at the end of the period it is deleted, destroyed or anonymised.

• Website access and security records: 10 days on our server.
• Contact form and application records: 2 years.
• Order, invoice and contract approval records: 10 years (Art. 82 of the Turkish Commercial Code, Türk Ticaret Kanunu).
• User account: account details until you close your account (when you close it, your profile details, your password hash and your email address are deleted); sessions 7 days; order records linked to your account 10 years.
• Email correspondence: 2 years; correspondence relating to an order or a contract 10 years.
• Cookies: the duration stated for each cookie in the Cookie Policy.

Data subject rights and applications

Under Article 11 of the KVKK, with regard to your personal data:

• To learn whether your personal data is processed,
• To request information about this if it has been processed,
• To learn the purpose of the processing and whether the data is used in accordance with its purpose,
• To know the third parties to whom your personal data is transferred, domestically or abroad,
• To request the correction of your personal data that has been processed incompletely or inaccurately,
• To request the deletion or destruction of your personal data within the framework of the conditions laid down in Article 7 of the KVKK,
• To request that the correction, deletion or destruction operations be notified to the third parties to whom your personal data has been transferred,
• To object to a result arising against you as a consequence of the processed data being analysed exclusively by means of automated systems,
• To claim compensation for the damage if you suffer damage because your personal data has been processed contrary to the law

are the rights you have.

You may submit your application concerning your rights, together with information suitable for verifying your identity and your request, in writing to the address Huzurevleri Mah. 80. Yıl Bulvarı No: 45/1B, Çukurova / Adana or to [email protected] from your email address that you have previously notified to us and that is registered in our system. Your applications are finalised free of charge as soon as possible, depending on the nature of the request, and within thirty days at the latest; if the operation requires a separate cost, the tariff set by the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) may be applied.

Nature of this text

This text is for information purposes; it does not mean that you give explicit consent to the processing of your personal data or that you must accept this text in order to benefit from our services. Where there is an optional operation that requires explicit consent, this consent is obtained by clearly stating the purpose of the processing and by means of a separate option that is not pre-ticked; your not giving consent does not prevent you from benefiting from our other services.