GDPR Data Protection Notice
Last updated: 1 December 2025
1. Data Controller
bupazarim.com is the data controller under Law No. 6698 on the Protection of Personal Data (KVKK).
2. Data Processed
Identity (name-surname), contact (email), transaction security (IP, device information), customer transactions (order, payment), marketing (if consent given).
3. Processing Purposes
Contractual obligation, legitimate interest, legal obligation and explicit consent.
4. Transfers
Payment service provider, e-invoice provider, authorised public institutions.
5. Collection Method
Electronically via web forms, cookies and customer communication channels.
6. Your Rights
Access, rectification, deletion, portability, objection, remedy for damages (KVKK Art. 11).
7. Application
You may apply in writing via destek@bupazarim.com or iletisim.html.
8. Storage
Data is retained for a minimum of 10 years as required by relevant legislation.
9. Security Measures
Encryption, access logs, network security, staff training.
10. Changes
This data protection notice is updated when necessary; the current version is on this page.