EXPLANATION TEXT UNDER THE LAW ON THE PROTECTION OF PERSONAL DATA


1. Data Controller

This Explanation Text has been prepared by Damla Kaya (serenith way) as the data controller, in accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”), to inform you about the processing of your personal data.

2. Processed Personal Data

Depending on the nature of your relationship with serenith way and your use of our website, the following personal data may be processed:

  • Identity Information,
  • Contact Information,
  • Customer Transaction Information,
  • Financial Information,
  • Transaction Security Information,
  • Marketing and Communication Information,

Payments made by credit and debit card may be processed by authorized payment service providers.

3. Purposes of Processing Personal Data

Your personal data may be processed for the following purposes, depending on its nature:

  • Execution of membership and customer account processes,
  • Receiving, preparing, processing, and delivering orders,
  • Execution of payment, invoicing, and accounting processes,
  • Processing returns, exchanges, and refunds,
  • Execution of customer relations and after-sales support services,
  • Evaluation and resolution of requests, suggestions, and complaints,
  • Ensuring the security of the website and information systems,
  • Prevention of unauthorized or unlawful transactions and misuse,
  • Keeping and storing records of sales and customer transactions,
  • Fulfilling legal obligations and providing necessary information to authorized persons, institutions, and organizations,
  • Executing legal processes and establishing, exercising, or protecting our rights,
  • Sending announcements and information about our products, collections, and serenith way, where necessary permissions are obtained.

4. Legal Grounds for Processing Personal Data

Your personal data is processed based on one or more of the legal grounds specified in Article 5 of the KVKK, depending on the nature of the processing activity:

  • Being directly related to the establishment or performance of a contract,
  • Being mandatory for the data controller to fulfill its legal obligation,
  • Being mandatory for the establishment, exercise, or protection of a right,
  • Being mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

In cases where none of the above legal grounds exist and the processing of personal data is subject to explicit consent, your personal data is processed with your explicit consent.

Commercial electronic messages for marketing purposes are sent when the necessary permissions are obtained under the relevant legislation. Detailed information about data processing activities carried out through cookies and similar technologies can be found in our Cookie Policy.

5. Transfer of Personal Data

Your personal data, for the purpose of fulfilling the above-mentioned objectives and within the scope of Article 8 of the KVKK, may be transferred to:

  • payment service providers and banks,
  • shipping and logistics companies and delivery service providers,
  • accounting and financial advisory service providers,
  • information technology and technical infrastructure service providers,
  • legal advisors,
  • audit service providers,
  • legally authorized public institutions and organizations,
  • legally authorized private law persons

within the framework of relevant legislation.

In the event of international transfer of personal data, such transfers will be carried out in accordance with the procedures and safeguards stipulated in Article 9 of the KVKK and relevant legislation.

6. Method of Collecting Personal Data

Your personal data may be collected electronically or physically through:

  • our website,
  • membership and order screens,
  • contact form,
  • showroom,
  • telephone,
  • e-mail,
  • cookies and similar technologies,
  • payment infrastructures,
  • cargo and delivery service providers,
  • authorized public institutions and organizations.

7. Storage of Personal Data

Your personal data is stored for the period stipulated in the relevant legislation or for the period necessary for the purpose for which it is processed. Upon the expiry of these periods and the disappearance of the reasons requiring the processing of personal data, your personal data is deleted, destroyed or anonymized in accordance with the relevant legislation.

8. Rights of the Data Subject

As a data subject, in accordance with Article 11 of the KVKK, you have the right to:

Learn whether your personal data is processed,

  • Request information if it has been processed,
  • Learn the purpose of processing your personal data and whether it is used in accordance with its purpose,
  • Learn the third parties to whom the data is transferred,
  • Request correction of your personal data if it is incomplete or incorrectly processed,
  • Request the deletion or destruction of your personal data when legal conditions arise,
  • Request notification of corrections or deletions to third parties,
  • Object to a result against you arising from the analysis solely by automatic systems,
  • Request compensation for damages if you suffer damage due to unlawful processing of your data.

These rights are applicable to you.

9. Application Method

You can submit your applications, along with documents verifying your identity and your application text, through the following methods:

  • In person or via notary public to the address: 19 Mayıs Mahallesi Hrant Dink Sokak No: 116/A, Şişli, Istanbul, Turkey,
  • Via your e-mail address previously provided to us and registered in our system, to hello@serenithway.com,
  • By other methods stipulated in the relevant legislation.

Your application must include:

  • Your first and last name,
  • Your signature if the application is written,
  • Your T.R. identity number for Turkish citizens; for foreigners, your nationality, passport number, or identity number if available,
  • Your residential or business address for notifications,
  • Your e-mail address, telephone, and fax number for notifications, if any,
  • Your request subject.

Your applications will be concluded free of charge as soon as possible and no later than thirty (30) days, depending on the nature of the request. However, if the transaction related to the application requires an additional cost, a fee determined by the Personal Data Protection Board may be charged.