Skip to content

Privacy Policy

PRIVACY POLICY AND CLARIFICATION TEXT ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

Company Name: Oli Oli Tekstil Limited Şirketi

Address: Hobyar Mahallesi Aşirefendi Caddesi Türkiye Han Apt No:13/403 Fatih / ISTANBUL

Mersis No: 0614120265700001

Website: www.eleiofficial.com

Version: 0.0.1

[www.eleiofficial.com] is the owner of the website located at this domain name, including all affiliated pages and mobile applications (collectively referred to as the "Website"). The Company acts as the Data Controller in terms of the personal data of the Website's customers and users, in accordance with the Law No. 6698 on the Protection of Personal Data ("KVKK"). As the data controller, the Company attaches great importance to the privacy and protection of your personal data.

The purpose of this Privacy Policy and Clarification Text is to inform Website visitors and users about personal data processing activities, pursuant to the disclosure/clarification obligation regulated under Article 10 of the KVKK.

This Privacy Policy and Clarification Text may be updated when necessary to offer new services or to fulfill current legal requirements. Website users are expected to check for updates regularly.

Definitions

  • "Company", "we", or "us": Refers to Oli Oli Tekstil Limited Şirketi, located at Hobyar Mahallesi Aşirefendi Caddesi Türkiye Han Apt No:13/403 Fatih / ISTANBUL.

  • "Data Subject": Refers to the real person whose personal data is processed.

  • "Products": Refers to the items offered for sale on the Website.

Principles We Observe in Processing Personal Data

While processing personal data, the Company acts in compliance with the fundamental principles specified in the KVKK. These core principles are:

  • Compliance with the law and honesty/good faith rules,

  • Being accurate and, where necessary, kept up-to-date,

  • Being processed for specific, explicit, and legitimate purposes,

  • Being relevant, limited, and proportionate to the purposes for which they are processed,

  • Being retained for the period stipulated by relevant legislation or required for the purpose for which they are processed.

What is the Legal Basis for Processing Personal Data?

The Company processes personal data in accordance with the law only if at least one of the conditions specified in Article 5 of the KVKK is met:

  1. Explicit Consent of the Data Subject: The data subject's explicit consent must relate to a specific matter, be based on information, and be given with free will. Personal data is processed within the scope of this explicit consent and for the purposes stated therein. As a rule, if any of the other conditions listed below exist, there is no need to obtain separate explicit consent from the data subject.

  2. Explicitly Provided for by Law: In cases where data processing is permitted by law, the data subject's personal data is processed limited to the reasons and data categories specified in the relevant law.

  3. Physical Impossibility: Personal data may be processed if it is mandatory to protect the life or physical integrity of the data subject or another person, where the data subject is physically or legally incapable of giving consent.

  4. Directly Related to the Formation or Performance of a Contract: Personal data belonging to the parties of a contract may be processed provided that it is directly related to the establishment or performance of that contract.

  5. Fulfillment of the Company's Legal Obligations: Personal data may be processed if processing is mandatory for the Company to fulfill its legal obligations.

  6. Data Manifestly Made Public by the Data Subject: If the data subject has made their personal data public, it can be processed limited to the purpose of making it public.

  7. Mandatory Processing for the Establishment, Exercise, or Protection of a Right: Personal data may be processed if data processing is mandatory for the establishment, exercise, or protection of a right.

  8. Mandatory for Legitimate Interests: Personal data may be processed if it is mandatory for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the data subject.

Which Personal Data is Processed?

The table below provides detailed information on which personal data we process and under what conditions:

Personal Data Legal Basis Scope / Context
Customer's name, surname, title, T.C. identity number, tax number, address

(i) Performance of the sales contract,


(ii) Tax laws

 This information is recorded to invoice the order when a customer purchases a Product on the Website.
Customer's name, surname, and address details Performance of the sales contract Recorded for the delivery of the purchased Product.
Customer's name, surname, title, e-mail address Performance of the sales contract Recorded to manage customer satisfaction processes within the scope of contract performance, such as resolving possible complaints regarding the Product or delivery, notifying about delivery delays, or handling product returns when a customer purchases a Product from the Website.
Customer invoices

(i) Tax laws,


(ii) For the establishment or protection of a right

(i) Invoices are stored until the end of the relevant statute of limitations for the preparation of tax returns and tax audits.


(ii) Retained until the end of the legal statute of limitations to resolve legal disputes that may arise with customers and to defend against legal proceedings.
Customer contracts For the establishment or protection of a right Retained until the end of the legal statute of limitations to resolve legal disputes that may arise with customers and to defend against legal proceedings.
IP address Legitimate interest Processed to identify the IP addresses of those who violate the security of the Website or attempt to use it for illegal purposes, and to block them from re-entering the Website.
E-mail address Explicit consent We record your e-mail address only with your explicit consent, provided that you give your commercial electronic consent to receive campaigns, promotions, discount news, and monthly/weekly newsletters regarding our products and services.

    Transfer of Personal Data to Third Parties

    Depending on the processing conditions stated above, we need to transfer certain personal data to third-party companies and firms from which we receive services:

    • Payments for purchases made through the Website are processed via a third-party payment system provider, iyzico (iyzi Ödeme ve Elektronik Para Hizmetleri A.Ş.). When you purchase a Product from the Website, your identity details, order details, and the transaction amount are transferred to iyzico. The Company does not see your credit card credentials (credit card number, expiration date, etc.) provided to iyzico. For more details regarding the protection of your personal data, you can access iyzico's privacy policy here: https://www.iyzico.com/gizlilik-politikasi#gizlilik-kiisel-veri-politikasi

    • We utilize server hosting services for the operation of the Website. The companies providing server services process the personal data specified in Section III above in the capacity of Data Processor. We sign personal data processing agreements with these companies in compliance with the KVKK.

    • We receive services from a third-party service provider company for the design and maintenance of the Website. Within the scope of the services provided, this company may have access to personal data. We sign personal data processing agreements with this company in compliance with the KVKK.

    • Where legally required or to prevent a crime, we share your personal data with law enforcement forces and other authorized institutions.

    Transfer of Personal Data Abroad

    Below is a description of which personal data may be transferred abroad:

    • If users consent to receive commercial electronic messages, their e-mail addresses are shared with our electronic message service provider to send campaigns, promotions, discount news, and monthly/weekly newsletters about our products and services. We use the Mailchimp Platform, established by The Rocket Science Group LLC, located at 675 Ponce de Leon Ave. NE, Suite 5000, Atlanta, GA, 30308 USA, as our electronic message service provider. You can read Mailchimp's privacy policy here: https://mailchimp.com/legal/privacy/

    • We use the Google Universal Analytics service provided by Google Inc. to analyze how users use the Website. Google Universal Analytics processes personal data such as cookies, other identifiers, and IP addresses to provide this service.

      Address: Google Inc. 1600 Amphitheatre Parkway Mountain View CA 94043, U.S.A.

      You can read the security and privacy policy of Google Universal Analytics here: https://support.google.com/analytics/answer/2838718?hl=tr&ref_topic=6010376

    • Please read our Cookie Policy to get more information about cookies and to understand how you can configure your Cookie Settings.

    Administrative and Technical Measures Regarding the Security of Personal Data

    In accordance with Article 12 of the KVKK, the Company takes all necessary technical and administrative measures to prevent unlawful processing of personal data, to prevent unlawful access to such data, and to ensure the safe retention of data, thereby preventing the unlawful processing of personal data by third parties.

    Retention Period of Personal Data

    If the reasons requiring the processing of personal data cease to exist, the personal data is deleted, destroyed, or anonymized.

    Rights of Data Subjects Regarding Their Personal Data

    Pursuant to Article 11 of the KVKK, data subjects possess the right to:

    • Learn whether their personal data is being processed,

    • Request information if their personal data has been processed,

    • Learn the purpose of the processing of personal data and whether they are used in accordance with their purpose,

    • Know the third parties to whom personal data is transferred at home or abroad,

    • Request rectification of personal data if it is processed incompletely or inaccurately, and request notification of this transaction to third parties to whom the personal data has been transferred,

    • Request the deletion or destruction of personal data in the event that the reasons requiring its processing cease to exist—despite being processed in accordance with the KVKK and other relevant legal provisions—and request notification of this transaction to third parties to whom the personal data has been transferred,

    • Object to the occurrence of a result against themselves by analyzing the processed data exclusively through automated systems,

    • Claim indemnification for damages suffered due to the unlawful processing of personal data.

    Data subjects may submit their requests regarding the rights listed above to the Company via the contact information provided below. Requests can be sent in writing, via a registered electronic mail (KEP) address, secure electronic signature, mobile signature, or by using the electronic mail address previously notified to the Company and registered in our system.

    Requests will be concluded free of charge as soon as possible and within thirty days at the latest. If the transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board will apply.

    Contact Information

    For any questions regarding your personal data, you can reach the Company using the contact details below:

    • Company Name: Oli Oli Tekstil Limited Şirketi

    • Mersis No: 0614120265700001

    • Address: Hobyar Mahallesi Aşirefendi Caddesi Türkiye Han Apt No:13/403 Fatih / ISTANBUL

    • E-Mail: info@eleiofficial.com

    • Phone: +90 532 4748282