KVKK Disclosure Text
Effective Date: 06.08.2026
This text has been prepared in accordance with Article 10 of the Law on the Protection of Personal Data No. 6698 ("KVKK") for the purpose of fulfilling the disclosure obligation of Eskişehir Ambarcım as the data controller.
1. Identity of the Data Controller
| Title | Eskişehir Ambarcım |
| Company Type | Individual |
| Address | Barış Mahallesi Koşuyolu Caddesi Marmara Nakliyeciler Sitesi A Blok No: 7 Gebze / Kocaeli, Gebze/Kocaeli |
| Tax Office / No | / |
| MERSIS No | |
| Trade Registry No | |
| KEP Address | |
| [email protected] | |
| Phone | 0 (530) 142 48 34 |
2. Categories of Processed Personal Data
- Identity: first name, last name
- Contact: email, phone, address
- Customer transaction: order, delivery, return, and request records
- Finance: invoice and payment information
- Transaction security: IP, log records, device and browser information
- Marketing: communication preferences, cookie-based browsing data (with consent)
3. Purposes of Processing
- Execution of membership and order processes
- Establishment and performance of contracts, delivery and return procedures
- Customer relations and support management
- Execution of finance, accounting, and invoicing operations
- Execution of information security processes and prevention of misuse
- Providing information to authorized persons, institutions, and organizations
- Execution of advertising, campaign, and promotion processes with explicit consent
4. Legal Grounds (KVKK Art.5 and Art.6)
- Explicitly stipulated by law
- Directly related to the establishment or performance of a contract
- Fulfillment of the data controller’s legal obligation
- Necessary for the establishment, exercise, or protection of a right
- Legitimate interest, provided that fundamental rights and freedoms are not harmed
- Explicit consent (commercial electronic communication, marketing cookies, etc.)
5. Collection Method
Your personal data is collected through membership and order forms, payment steps, cookies, email, phone, call center, social media, and support channels, by automated or partially automated means.
6. Transfer
Your data may be transferred to shipping and logistics companies, payment institutions and banks, e-invoice integrators, IT and hosting service providers, financial and legal advisors, and authorized public institutions, only for the relevant purpose and to the extent necessary. If transfer abroad is required, the safeguards stipulated by KVKK will be ensured.
7. Storage and Disposal
Data is retained for the duration required by the purpose of processing and the statute of limitations/retention periods specified in the relevant legislation (commercial books 10 years, tax records 5 years); at the end of this period, it is deleted, destroyed, or anonymized.
8. Rights of the Data Subject (KVKK Art.11)
- To learn whether their personal data is being processed
- If processed, to request information regarding this
- To learn the purpose of processing and whether it is used in line with that purpose
- To know the third parties to whom it is transferred domestically/abroad
- To request correction of incomplete or inaccurate data
- To request deletion or destruction
- To request notification of correction and deletion to third parties to whom data has been transferred
- To object to any outcome against them resulting from analysis carried out exclusively through automated systems
- To demand compensation if they suffer damage due to unlawful processing
9. Application Procedure
You may submit your application together with information verifying your identity via
- Mail: Barış Mahallesi Koşuyolu Caddesi Marmara Nakliyeciler Sitesi A Blok No: 7 Gebze / Kocaeli, Gebze/Kocaeli
- KEP:
- Email: [email protected]
Your request will be finalized free of charge as soon as possible and within a maximum of 30 days, depending on its nature; if the process requires additional costs, a fee may be charged according to the Board’s tariff. In case your application is rejected or remains unanswered, you have the right to file a complaint with the Personal Data Protection Board.
