Personal Data Protection Notice

This notice is given by Emel Arı (EMELARI BOUTIQUE, Fener Mah. Bülent Ecevit Blv. Saraçoğlu Sitesi B Blok No: 9 D, Muratpaşa / Antalya), as data controller under Personal Data Protection Law No. 6698 (KVKK). The Turkish text prevails.

Data we process

• Identity: first and last name
• Contact: e-mail address, telephone number, delivery and billing address
• Customer transactions: order contents, order and invoice records, requests and complaints
• Payment: amount and payment method. Card details are entered on iyzico’s payment page and never reach us.
• Transaction security: IP address, cookie and log records

Purposes and legal grounds

• Taking, delivering, invoicing and returning orders — necessary for the conclusion and performance of a contract (KVKK art. 5/2-c)
• Meeting obligations under tax, commercial and consumer legislation and answering authorised public bodies — legal obligation (art. 5/2-ç)
• Answering requests and complaints, and establishing or defending rights — art. 5/2-c and 5/2-e
• Keeping the website secure and preventing fraud — legitimate interest (art. 5/2-f)

We do not send marketing messages and do not process special categories of personal data.

How we collect it

Electronically, through the forms on the website and the cookies described in the Cookie Policy.

Who we share it with

• Cargo companies, to deliver the order
• iyzi Ödeme ve Elektronik Para Hizmetleri A.Ş. (iyzico), to take the payment
• Our accountant, e-invoicing and e-mail service providers
• Authorised public institutions, when the law requires it

The website and its database run on servers of Vercel Inc. and Neon Inc. in the United States. Personal data are transferred abroad for this purpose in accordance with the conditions in Article 9 of the KVKK.

How long we keep it

For the periods set by law — for example 10 years for invoices and accounting records and 3 years for distance-contract records — after which the data are deleted, destroyed or anonymised.

Your rights (KVKK art. 11)

• To learn whether your personal data are processed and, if so, to request information about it
• To learn the purpose of processing and whether data are used for that purpose
• To know the third parties, in Turkey or abroad, to whom data are transferred
• To ask for incomplete or incorrect data to be corrected, and for data to be deleted or destroyed under Article 7
• To ask for those corrections or deletions to be notified to the third parties the data were transferred to
• To object to a result against you arising exclusively from automated analysis
• To claim compensation for damage caused by unlawful processing

Send requests to info@emelari.example, or in writing to Fener Mah. Bülent Ecevit Blv. Saraçoğlu Sitesi B Blok No: 9 D, Muratpaşa / Antalya. They are answered free of charge within 30 days at the latest.