KVKK – SALEM&CO.

KVKK – Clarification Text on the Protection of Personal Data

Within the scope of the Personal Data Protection Law (“KVKK”) No. 6698, SALEM&CO. attaches importance to protecting the privacy and security of your personal data.

Under the KVKK, MAS LALE SAN. TIC. LTD. ŞTİ, operating under the brand SALEM&CO., acts as the Data Controller with respect to personal data processed within the scope of the website salemandcoofficial.com and related customer services.

1. Personal Data Processed

Depending on your interaction with SALEM&CO., the following personal data of yours may be processed:

Name and surname;
E-mail address and phone number;
Billing and delivery address;
Order and transaction information;
Customer account information;
Payment-related information received from payment service providers;
Shipping, delivery, and tracking information;
Correspondence within the scope of customer services;
Personalization and engraving information;
Photographs, drawings, handwriting, designs, or similar materials provided by you for custom orders;
IP address, browser, device, cookie, and website usage information;
Marketing and communication preferences.

2. Purposes of Processing Personal Data

Your personal data may be processed for the following purposes:

Creation, processing, and delivery of orders;
Execution of payment and refund transactions;
Preparation of personalized or custom-made products;
Execution of shipping, delivery, and customs procedures;
Management of return and exchange requests;
Provision of customer services;
Management of customer accounts;
Prevention of fraud and ensuring website security;
Fulfillment of accounting, tax, customs, and other legal obligations;
Development of the website, products, and services;
Conducting marketing and promotional communications, provided that you have given your explicit consent or as permitted by law;
Establishment, exercise, or protection of legal rights.

3. Method and Legal Basis for Personal Data Collection

Your personal data may be collected electronically via our website, Shopify infrastructure, payment systems, customer accounts, contact forms, e-mail correspondence, cookies and similar technologies, shipping companies, and service providers.

Depending on the relevant processing activity, your personal data may be processed based on the following legal grounds specified in the KVKK:

It is expressly provided for in the laws;
It is directly related to the establishment or performance of a contract;
It is necessary for the data controller to fulfill its legal obligation;
Data processing is necessary for the establishment, exercise, or protection of a right;
Data processing is necessary for the legitimate interests of the data controller, provided that it does not harm your fundamental rights and freedoms;
Your explicit consent, in cases where such consent is required.

4. Transfer of Personal Data

Your personal data may be shared with the following persons and institutions to the extent necessary for the provision of services and the conduct of business activities:

Shopify and other e-commerce service providers;
Payment service providers and financial institutions;
Shipping companies, courier firms, customs brokers, and customs authorities;
Business partners providing production, engraving, packaging, and order preparation services;
IT, hosting, analysis, e-mail, security, and customer service providers;
Accountants, lawyers, tax consultants, and other professional advisors;
Legally authorized public institutions and organizations.

Since SALEM&CO. may use Shopify and other international service providers, your personal data may be transferred abroad provided that the necessary conditions under the KVKK are met and appropriate security mechanisms are implemented.

5. Your Rights Under Article 11 of the KVKK

Pursuant to Article 11 of Law No. 6698, you may have the following rights regarding your personal data:

To learn whether your personal data is processed;
To request information if your personal data has been processed;
To learn the purpose of processing your personal data and whether it is used in accordance with its purpose;
To know the third parties to whom your personal data is transferred domestically or abroad;
To request the correction of your personal data if it is processed incompletely or incorrectly;
To request the deletion or destruction of your personal data under the legal conditions;
To request notification of correction, deletion, or destruction processes to third parties to whom your data has been transferred;
To object to the emergence of a result against you as a result of the analysis of processed data exclusively through automated systems;
To request the removal of damages in case you suffer damage due to the unlawful processing of your personal data.

6. How Can You Exercise Your Rights?

You may contact us via the information below to exercise your rights under the KVKK:

Data Controller:
MAS LALE SAN. TIC. LTD. ŞTİ, operating under the brand SALEM&CO.

E-mail:
customercare@salemandcoofficial.com

Website:
salemandcoofficial.com

Address:
Çankaya Mah. Silifke Cad. Üzüm İş Hanı
Akdeniz / Mersin / Turkey

We kindly request you to write “KVKK Talebi” (KVKK Request) in the subject line of your e-mails regarding your applications under the KVKK.

Specifying the following information in your application will help your request be evaluated more quickly:

Name and surname;
E-mail address associated with your order or customer account;
The right you wish to exercise;
Information necessary to explain your request.

We may request additional information to verify your identity.

Your applications will be finalized as soon as possible according to the nature of the request and, in any case, within the periods stipulated in the relevant legislation. If an additional cost arises in accordance with the legislation, a fee may be charged in accordance with the tariff determined by the competent authorities.

7. Security of Personal Data

SALEM&CO. implements reasonable technical and administrative measures to protect your personal data against unauthorized access, loss, misuse, alteration, or unlawful disclosure.

However, no website, electronic communication, or data storage method is one hundred percent secure.