Privacy, Personal Data Protection and Security Notice
Last Updated: September 2026
Deri Sitesi respects the privacy and security of its customers and website visitors.
This notice explains how personal data may be collected, used, shared and protected when you visit our website, create an account or place an order.
1. Data Controller
The data controller is:
Turan Bahadır – Deri Sitesi
Tax Number: 1310192296
Address: Nuripaşa Mah. İsa Yusuf Alptekin Sok. No:16 B, Zeytinburnu / Istanbul, Türkiye
Email: derisitesi@gmail.com
Telephone: +90 553 180 61 88
WhatsApp: +90 537 359 10 70
2. Personal Data We May Process
Depending on your interaction with our website, we may process information such as your name, billing and delivery address, telephone number, email address, order and product details, payment and transaction information, customer service communications, return and exchange records, IP address and technical or security logs.
For made-to-measure or customized products, measurements and sizing information provided by you may also be processed for the purpose of preparing your order.
3. Purposes of Processing
Personal data may be processed in order to:
-
receive, prepare and deliver orders;
-
process payments;
-
manage customer accounts and order history;
-
arrange shipping and delivery;
-
handle returns, exchanges and after-sales support;
-
respond to customer requests and communications;
-
comply with invoicing, accounting and legal obligations;
-
maintain website and account security;
-
prevent fraud and misuse; and
-
establish, exercise or protect legal rights.
Where consent is required for marketing or commercial electronic communications, the relevant permission will be obtained separately.
4. Legal Grounds for Processing
Personal data may be processed where necessary for the performance or formation of a contract, compliance with a legal obligation, establishment or protection of legal rights, legitimate interests that do not override your fundamental rights and freedoms, or on the basis of your explicit consent where required.
5. Sharing of Personal Data
Where necessary to provide our services, personal data may be shared with:
Yurtiçi Kargo, FedEx and, where requested, UPS or DHL, banks and payment service providers, accounting and professional service providers, website hosting and information technology service providers, and competent public or judicial authorities where required by law.
We do not sell your personal data to third parties for unauthorized advertising or commercial purposes.
6. International Transfers
Personal data may need to be transferred outside Türkiye in connection with international shipping or the use of service or technology providers located abroad.
Such transfers are carried out in accordance with applicable personal data protection legislation and the safeguards required under Turkish Law No. 6698 on the Protection of Personal Data.
Mandatory privacy rights available to customers under the laws applicable in their country remain unaffected.
7. Payment and Credit Card Security
Deri Sitesi does not store full credit card numbers or card security codes such as CVV/CVC in its own systems.
Credit card payments are processed through the secure infrastructure of the relevant payment service provider.
Our website uses SSL encryption to help protect data transmitted between your browser and our website.
8. IP Addresses and Security Logs
IP addresses and technical logs may be processed for website and account security, fraud and abuse prevention, troubleshooting and compliance with legal obligations.
Such information may be disclosed to authorized public authorities or judicial bodies where there is a lawful requirement to do so.
9. Cookies
Our website may use cookies and similar technologies to operate the website, remember preferences, measure website usage and improve our services.
Where required by applicable law, non-essential cookies are used subject to the user's preferences or consent.
Further information may be provided in a separate Cookie Policy.
10. Data Retention
Personal data is retained only for as long as necessary for the purpose for which it was processed and for any retention period required by applicable law.
When the reasons requiring processing no longer exist, personal data will be deleted, destroyed or anonymized in accordance with applicable legislation.
11. Your Rights
Subject to applicable data protection law, you may have the right to:
-
learn whether your personal data is being processed;
-
request information about the processing;
-
learn the purposes for which your data is processed;
-
learn the recipients to whom your data has been disclosed;
-
request correction of inaccurate or incomplete information;
-
request deletion or destruction where the legal requirements are satisfied;
-
request notification of certain corrections or deletions to recipients;
-
object to certain decisions based solely on automated processing; and
-
seek compensation where you suffer damage as a result of unlawful processing.
Requests regarding your personal data may be sent to derisitesi@gmail.com or to the business address stated above.
12. Links to Third-Party Websites
Our website may contain links to websites operated by third parties. Deri Sitesi is not responsible for the content, security or privacy practices of third-party websites.
13. Security
Deri Sitesi applies appropriate technical and administrative measures designed to protect personal data against unauthorized access, unlawful processing, loss or misuse.