Personal Data Protection (KVKK) Disclosure Notice

Last Updated: March 01, 2025

This disclosure notice has been prepared by Eken Mobilya in accordance with Article 10 of the Personal Data Protection Law No. 6698 (KVKK).

1. Data Controller

Your personal data is processed by Eken Mobilya San. ve Tic. A.Ş. ("Eken Mobilya") as the data controller.

2. Purposes of Processing Your Personal Data

Your personal data is processed for the following purposes:

• Creating and managing membership accounts
• Receiving, processing and preparing orders for delivery
• Processing payments (via Iyzico)
• Managing cargo and delivery processes
• Providing customer service and after-sales support
• Fulfilling legal obligations (tax, accounting, trade registry, etc.)
• Conducting analyses to improve service quality
• With your explicit consent: marketing and promotional communications

3. Categories of Personal Data Processed

| Category | Example Data | |---|---| | Identity | Name, surname | | Contact | Email address, phone number | | Location | Delivery and billing address | | Financial | Order amount, payment information (card data is not stored by Eken) | | Transaction Security | IP address, session information, transaction log |

Important: The Turkish Identification Number (TC Kimlik) is only transmitted to the Iyzico payment infrastructure and is never stored in our database.

4. Legal Bases for Processing

Your personal data is processed under the following legal bases:

• Performance of contract: Order and delivery processes
• Legal obligation: Tax legislation, consumer law
• Legitimate interest: Site security, service quality analysis
• Explicit consent: Marketing communications (optional)

5. Transfer of Personal Data

Your personal data may be transferred only to the following parties for order, payment and logistics processes:

• Iyzico Ödeme Hizmetleri A.Ş. – Payment infrastructure
• Cargo companies – Delivery
• Financial advisor/accounting – Legal obligations
• Turkish Republic's authorised public institutions and organisations – As required by legislation

Your data is not transferred abroad.

6. Personal Data Retention Periods

| Data Type | Retention Period | |---|---| | Order and invoice information | 5 years (as required by tax legislation) | | Membership data | During membership + deactivation after 2 years of inactivity | | Marketing consent | Until withdrawn | | Security logs | 1 year | | Guest cart | 30 days |

7. Your Rights Under KVKK

In accordance with Article 11 of KVKK, you have the following rights:

• To learn whether your personal data is being processed
• To request information if it has been processed
• To learn the purpose of processing and whether it is used in accordance with its purpose
• To learn the third parties to whom data is transferred
• To request correction of incomplete or incorrect data
• To request deletion or destruction under Article 7 of KVKK
• To object to results arising against you through analysis via automated systems
• To claim compensation for damages due to unlawful processing of data

8. How to Apply

You can reach us through the following channels to exercise your rights:

• Email: kvkk@ekenmobilya.com
• Post: Camikebir, Cafer Baıran Cd No:24, 42770 Kulu/Konya
• Phone: (0332) 641 64 42

Your application will be answered within 30 days.