Personal Data Protection Law (KVKK) Information Text

1. Data Controller

Pursuant to the Personal Data Protection Law No. 6698 ("PDPL"), your personal data is processed by SEMFA KOZMETİK GIDA SANAYİ VE TİC. LTD. ŞTİ. (Yakuplu Mah. Hürriyet Blv. Skyport Sitesi Skyport Residence No:1 İç Kapı No:113 34524 Beylikdüzü / İstanbul, Beylikdüzü VD: 7601122860, Trade Registry No: 1047265, MERSIS No: 0760112286000001, Phone: 0 850 309 33 99, E-mail: info@evolvium.com.tr) as the data controller.


2. Personal Data Processed

Name, surname, phone number, e-mail address, delivery and billing address, order and transaction information, IP address, site usage data, customer request and complaint records, and transaction data related to the payment process (card information is processed by the payment institution and not stored by us).


3. Purposes of Processing Personal Data

Your personal data is processed for the purposes of receiving and delivering orders, processing payments, conducting customer service activities, managing return and exchange processes, carrying out accounting and financial transactions, fulfilling legal obligations, serving as evidence in potential disputes, and conducting marketing activities if explicit consent is given.


4. Transfer of Personal Data

Your personal data may be transferred, within the scope of Articles 8 and 9 of the PDPL, to authorized payment institutions (i̇yzico) for payment transactions, to cargo companies for product delivery, to third parties providing services within the scope of accounting and financial transactions, and to authorized public institutions and organizations within the framework of legal obligations.


5. Method of Collecting Personal Data and Legal Basis

Your personal data is collected electronically through our website, order forms, contact forms, and cookies. Your data is processed based on the legal grounds stated in Article 5/2 of the PDPL, namely "being directly related to the establishment or performance of a contract," "fulfillment of a legal obligation," and "establishment, exercise, or protection of a right." Marketing activities are carried out based on your explicit consent.


6. Storage Period

Order and invoice records are stored for 10 years as required by the Tax Procedure Law. Data processed for marketing purposes is retained until explicit consent is withdrawn or until the purpose of processing ceases to exist. Data whose storage period has expired is deleted, destroyed, or anonymized in accordance with regulations.


7. Data Security

Our company takes appropriate technical and administrative measures to prevent unlawful processing and access to personal data. Our website is protected by an SSL certificate, and payment transactions are carried out over a PCI-DSS compliant infrastructure.


8. Your Rights Under the PDPL

Pursuant to Article 11 of the PDPL; you have the right to learn whether your personal data is processed, to request information if it has been processed, to learn the purpose of processing and whether it is used in accordance with its purpose, to request correction if it is incomplete or incorrectly processed, to request its deletion or destruction, to know the third parties to whom it has been transferred, and to object to a negative outcome arising from data processed through automated systems.


You can submit your applications in writing to our address specified above or to the e-mail address info@evolvium.com.tr. Applications will be concluded within the period stipulated by the legislation.