Personal Data Protection Law (KVKK) Information Text

PRIVACY POLICY

ESPINA TEKSTİL İÇ VE DIŞ TİC. A.Ş.
(“Espina”, “we”, “us”, “our”)

1. Data Controller

ESPINA TEKSTİL İÇ VE DIŞ TİC. A.Ş.
Address: Boğazköy İstiklal Mah. Eski Edirne Cad. No:1232
Arnavutköy / Istanbul – Türkiye
Email: online@espina.com.tr
Phone: +90 (212) 683 80 16

Espina acts as the data controller within the meaning of applicable data protection laws, including the General Data Protection Regulation (GDPR) where applicable.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identity information (name, surname)

  • Contact details (email address, phone number, billing and shipping address)

  • Account information (username, password – encrypted)

  • Order and transaction details

  • Payment-related information (processed securely by payment service providers; we do not store full card details)

  • Technical data (IP address, browser type, device information)

  • Cookie and usage data (pages visited, session duration, preferences)

  • Communication records (customer support messages, emails)

3. Purposes of Processing and Legal Basis

Your personal data is processed for the following purposes and legal bases under Article 6 GDPR:

  • Performance of a contract (Art. 6(1)(b)):
    To process orders, payments, deliveries, returns, and customer support.

  • Legal obligation (Art. 6(1)(c)):
    To comply with tax, accounting, and consumer protection laws.

  • Legitimate interests (Art. 6(1)(f)):
    To improve our services, ensure website security, prevent fraud, and analyze performance.

  • Consent (Art. 6(1)(a)), where applicable:
    For marketing communications, newsletters, and non-essential cookies.

4. Sharing of Personal Data

We may share your personal data with trusted third parties only to the extent necessary, including:

  • Shopify Inc. / Shopify International Ltd. (e-commerce infrastructure)

  • Payment service providers (e.g. PayPal, Stripe)

  • Logistics and shipping companies

  • IT, hosting, analytics, and customer support service providers

  • Public authorities, courts, or regulators where legally required

All third parties process data under contractual confidentiality and data protection obligations.

5. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States and Canada, particularly through Shopify and cloud service providers.

Such transfers are safeguarded by appropriate legal mechanisms, including Standard Contractual Clauses (SCCs)approved by the European Commission, or other lawful transfer mechanisms under GDPR.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Ensure website functionality

  • Remember user preferences

  • Analyze website traffic and performance

  • Improve user experience

Where required by law, cookies are used based on your consent. You can manage or withdraw cookie preferences at any time through the cookie settings on our website or your browser.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, including:

  • Contractual and legal obligations

  • Accounting and tax requirements

  • Resolution of disputes

When data is no longer required, it is securely deleted or anonymized.

8. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration.

Access to personal data is restricted to authorized personnel only and handled with strict confidentiality.

9. Your Rights

Subject to applicable law, you have the following rights regarding your personal data:

  • Right to access

  • Right to rectification

  • Right to erasure (“right to be forgotten”)

  • Right to restriction of processing

  • Right to data portability

  • Right to object to processing

  • Right to withdraw consent at any time

  • Right to lodge a complaint with a supervisory authority

To exercise your rights, please contact us at online@espina.com.tr.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal or operational changes. The updated version will be published on our website with the effective date.

11. Contact

For any questions regarding this Privacy Policy or our data practices, please contact:

📧 online@espina.com.tr
📞 +90 (212) 683 80 16