KVKK

Clarification Text on Personal Data Protection (KVKK)

Dear Customers, Members, and Visitors, This Clarification Text sets forth the principles regarding the processing of your personal data by the Data Controller, Mert Özer (MZ Leather Craft) (hereinafter referred to as "MZ Leather Craft" or the "Company"), located at Koyunbaba Mah. Şebboy Sk. 3 No:5/3 Bodrum/Muğla / Turkey, in accordance with the Law on the Protection of Personal Data No. 6698 (the "Law" or "KVKK") and related legislation.

1. Your Personal Data Processed and Our Purposes of Processing

Website Visitors: During your website visits, cookies complying with legal regulations are used to provide targeted promotions and improve your shopping experience. Additionally, we process your IP address and navigation information to ensure information security and conduct operations in compliance with the legislation.

Our Members: We process your identity (name, surname), contact (e-mail and mobile phone), and transaction security (log record) personal data to perform your membership registration via the website, fulfill the requirements of the membership agreement, and provide you with the best possible service. To allow you to view your order history as a member, we process your shopping and payment information.

Customers Shopping via Online Channels: If you shop via the website with or without a membership; we process your identity, contact, customer transaction (product details, price, order date), legal transaction, and financial data for the purposes of executing the sales transaction, fulfilling the requirements of the distance sales agreement, issuing invoices, delivering the purchased product to your specified address, and providing post-sale support services. If the payment is made by credit/debit card, we process your credit/debit card data to be transferred to the payment institution to ensure the payment can be collected securely.

Customers Providing Commercial Electronic Communication Consent: If you grant commercial electronic communication consent to our Company (via SMS verification code or our website), your personal data will be processed for carrying out direct or indirect marketing activities and sending commercial electronic messages to you via your preferred channels regarding advertisements, promotions, campaigns, advantages, and product/service introductions. You have the right to revoke this consent at any time without providing any reason.

2. Method and Legal Grounds for Collecting Your Personal Data

Your personal data is collected electronically by entirely automatic or semi-automatic methods through our systems that record your purchases and memberships via our website. Your personal data is processed based on the following legal grounds specified in the Law:

KVKK Art. 5/1: Explicit consent (If you grant commercial electronic communication consent),

KVKK Art. 5/2 (c): Processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract (Performance of sales and membership agreements, product delivery),

KVKK Art. 5/2 (ç): It is mandatory for the data controller to be able to perform their legal obligations (Issuing invoices, legal retention periods),

KVKK Art. 5/2 (f): Processing of data is mandatory for the legitimate interests of the Company, provided that this processing shall not violate your fundamental rights and freedoms (Ensuring transaction security, executing operational processes).

3. Parties to Whom the Processed Personal Data is Transferred and the Purpose of Transfer

In accordance with Articles 8 and 9 of the KVKK, your personal data may be transferred to our contracted cargo companies to provide logistics (shipping) services, to the secure infrastructure of our payment business partner iyzico (İYZİ ÖDEME VE ELEKTRONİK PARA HİZMETLERİ A.Ş.) to execute payment processes securely, to our financial advisor to fulfill our financial and legal obligations, and to legally authorized public authorities and official institutions upon request.

4. Application Methods to the Data Controller and Your Rights

Under Article 11 of the Law, by applying to our Company, you have the right to learn whether your personal data is processed or not, to request information if processed, to learn the purpose of processing, to know the third parties to whom data is transferred domestically, to request the correction of incomplete/inaccurate data, and to request its deletion or destruction.

You may submit your requests in writing to our legal address in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, or by sending an e-mail to info@mzleathercraft.com using your e-mail address currently registered in our system.