This notice provides information under Personal Data Protection Law No. 6698 about the processing of personal data during membership, order and customer communication processes at DESARJ. Providing this information does not constitute explicit consent.

Data controller

Business / data controller: Raşit Saraylıoğlu (DESARJ)
Address: Örnek Mah. Şehit Cahar Dudayev Cad. Yılmazlar No: 97, Ataşehir / İstanbul
Tax office: Ümraniye — Tax identification number: 7450229830
Email: [email protected]
Phone: +90 532 266 51 41

Collection methods and scope of data

Data is obtained electronically through the store's membership, order and contact forms, email, phone and WhatsApp conversations initiated by you, and through invoices and transaction documents where necessary. Names, contact and address details, required invoicing information, order/payment/return records and request contents are processed. Do not share sensitive information unrelated to the service you use through support channels.

Purposes and legal bases

• Account creation, order receipt, payment, delivery and returns: establishing or performing a contract under Article 5/2-c of the Law.
• Issuing invoices and keeping mandatory transaction records: provisions of law and legal obligations under Articles 5/2-a and 5/2-ç.
• Dispute and complaint records: establishing, exercising or protecting a right under Article 5/2-e.
• Records required for service and transaction security: legitimate interests under Article 5/2-f, provided your fundamental rights and freedoms are not harmed.
• Optional operations requiring explicit consent: explicit consent obtained separately where necessary. Marketing communication permissions are assessed separately from membership.

Recipient groups

Data needed for orders and store services may be transferred, limited to the relevant purpose, to the ikas e-commerce infrastructure and technical service providers; to iyzico and banks for collection/refunds; to carriers and logistics providers for delivery/returns; and to accounting/legal service providers and authorised public bodies for legal procedures. Transfers are subject to the conditions in Article 8 of the Law. Where international delivery or external services require transfer abroad, the conditions in Article 9 also apply.

Retention and deletion

Data is retained only for the period required by the processing purpose and statutory retention obligations. When processing grounds cease to apply, deletion, destruction or anonymisation procedures are carried out. Deletion requests are assessed alongside ongoing statutory retention obligations.

Your rights under Article 11

You may learn whether your data is processed; request information if it has been processed; and learn the processing purpose, whether use is consistent with that purpose, and domestic/international recipients. You may request correction of incomplete or incorrect data, deletion or destruction under statutory conditions, and notification of those actions to recipients. You may object to an adverse outcome resulting solely from automated analysis and seek compensation for damage caused by unlawful processing.

How to apply

Send your requests in writing to the address above, or email [email protected] from the email address you previously provided and that is registered in our system. Include your name, request, contact details for a response and the information required by the Communiqué on the Procedures and Principles of Application to the Data Controller; sign written applications. We may request information required to verify your identity. Applications are answered as soon as possible and within 30 days at the latest; statutory fee exceptions remain applicable.

Privacy Policy · Personal Data Notice · Distance Sales Agreement · Returns and Exchanges · Delivery and Shipping · Contact