KVKK Disclosure Text

This disclosure text has been prepared pursuant to Article 10 of Law No. 6698 on the Protection of Personal Data (Kişisel Verilerin Korunması Kanunu, KVKK) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation (Aydınlatma Yükümlülüğünün Yerine Getirilmesinde Uyulacak Usul ve Esaslar Hakkında Tebliğ), in order to inform you about how your personal data are processed by Nura Aydınlatma in its capacity as data controller.

The text covers visitors to nuraaydinlatma.com, customers who place orders through the site, persons who reach us via the contact form or by telephone, WhatsApp and e-mail, newsletter subscribers and visitors to the showroom in Sultangazi. The data controller details are set out below.

In this text the expression "data subject" means the natural person whose personal data are processed, and the expression "data controller" means Nura Aydınlatma, which determines the purposes and means of processing the data.

Depending on the type of relationship we have with you, the data categories below may be processed; not every category is processed for every data subject. The data of a visitor who merely views the site are far more limited than those of a customer who places an order.

As the site has no membership or account system, data such as user name, password and profile history are not processed. We do not request or process special categories of personal data listed in Article 6 of the KVKK, such as health, religion or biometric data; we kindly ask you not to share such information with us in the contact form or in the content of a message.

Your personal data are processed for the purposes below, in accordance with the principles set out in Article 4 of the KVKK of being processed lawfully and in good faith, being processed for specified, explicit and legitimate purposes, and being relevant, limited and proportionate to the purposes for which they are processed:

• Establishing the distance sales contract, receiving, confirming and recording your order.
• Preparing your order at the central warehouse in Sultangazi, packing it, handing it over to the courier, delivering it to the address you have given and sending you the tracking number.
• Collecting the payment, verifying the payment result and refunding the amount in the event of a return.
• Issuing the e-archive invoice and sending it to the e-mail address you have notified.
• Meeting withdrawal, return and exchange requests; assessing applications concerning defective goods, the two-year manufacturer warranty and spare parts.
• Examining notifications of damaged delivery and replacing the product recorded in a report free of charge with a new one.
• Concluding questions, requests and complaints submitted through the contact form, telephone, WhatsApp and e-mail, and providing support relating to product assembly.
• Meeting requests made during a showroom visit and preparing a special quotation for shipment abroad.
• Ensuring the security of the site and the server and preventing malicious use and automated form submission.
• Fulfilling the obligations arising from legislation to keep books, documents, invoices and records.
• Responding to requests and inspections from authorised public institutions and organisations and exercising the right of defence in legal disputes.
• Where your explicit consent exists, sending the newsletter containing campaign, new product and discount announcements.

Your personal data are not processed for the purposes of profiling, behavioural advertising or solely automated assessment producing a result to your detriment. No analytics or tracking tools such as Google Analytics, Meta Pixel, advertising pixels or heat maps are used on the site.

Your personal data are processed on the basis of the processing conditions listed in Article 5 of the KVKK. The table below shows which purpose rests on which legal ground.

For processing activities based on explicit consent you may withdraw your consent at any time. To unsubscribe from the newsletter you may use the refusal link at the end of every message or send us an e-mail. Withdrawal of consent does not affect processing lawfully carried out up to the date of withdrawal. For details concerning commercial electronic messages you may review the Commercial Electronic Message Disclosure and Consent Text (Ticari Elektronik İleti Aydınlatma ve Onay Metni).

Your personal data are collected through the channels below, by wholly or partly automated means or by non-automated means provided that they form part of a data filing system:

• The information you enter at the order and payment steps on nuraaydinlatma.com.
• The name, e-mail address, optional telephone number, subject and message you send through the form on the contact page.
• The e-mail address and consent record you provide through the newsletter form.
• The information you share in telephone, WhatsApp and e-mail correspondence.
• The request, quotation and order information you convey verbally during your visit to the showroom in Sultangazi.
• The NEXT_LOCALE cookie that is strictly necessary for the site to function, together with server access and security records.
• The information communicated by banks and payment institutions regarding the payment result.
• The delivery status information coming from the courier company.

Your cookie consent preference is not sent to our servers; it is stored only in your own browser's local storage under the key "nura-cerez-onayi". A Google Maps map is embedded on the contact and store pages and a Cloudflare Stream video player on the home page; when this content loads, the relevant providers may place their own cookies and access your technical data. For details you may review the Cookie Policy (Çerez Politikası).

Your personal data are not sold, rented out or shared with third parties for marketing purposes. Transfers are made only within the limits of the purposes stated above and in accordance with Articles 8 and 9 of the KVKK.

Recipient groups within Türkiye

• Contracted courier companies: first name, surname, address and telephone number for delivery of the shipment.
• Banks and payment institutions: the transaction information needed for collection, 3D Secure verification and refunds; card details are taken directly by those institutions.
• E-invoice and e-archive service provider: identity, contact and order information for the issuing of the invoice.
• Information technology, hosting and e-mail infrastructure providers: limited access within the scope of operating, backing up and maintaining the systems.
• Professionals such as lawyers and financial advisers: limited to the data necessary for legal and financial processes.
• Authorised public institutions and organisations and judicial authorities: in the cases provided for by legislation and limited to the scope requested.

The site infrastructure runs on our own server hosted in Türkiye; order and product data are held on the Saleor e-commerce infrastructure. Contracts are concluded with service providers requiring that data be processed only in accordance with our instructions and that the necessary technical and administrative measures be taken.

Transfer abroad

While embedded content on the site such as the Google Maps map and the Cloudflare Stream video player is loading, technical data such as the IP address and browser information may reach the servers of providers located abroad. Apart from this, we have no routine processing activity requiring your personal data to be transferred abroad.

In cases where a transfer abroad is required, the order of priority laid down in the current Article 9 of the KVKK is applied: transfers are first made to countries in respect of which an adequacy decision has been taken by the Personal Data Protection Board. Where there is no adequacy decision, the transfer is based on one of the appropriate safeguards, such as a standard contract signed between the parties and notified to the Board, an undertaking approved with the Board's permission, or binding corporate rules. Where those safeguards cannot be provided either, a transfer may be made only if one of the incidental situations listed in the Law exists and limited to those situations.

Your personal data are retained for as long as is necessary for the purpose for which they are processed, having regard to the minimum retention periods and limitation periods laid down in legislation.

Where the retention period expires or the reasons requiring processing cease to exist, your personal data are deleted, destroyed or anonymised in accordance with the provisions of the Regulation on the Deletion, Destruction or Anonymisation of Personal Data (Kişisel Verilerin Silinmesi, Yok Edilmesi veya Anonim Hale Getirilmesi Hakkında Yönetmelik).

Pursuant to Article 11 of the KVKK you may exercise the following rights by applying to the data controller:

1. To learn whether your personal data are being processed.
2. To request information about them if your personal data have been processed.
3. To learn the purpose of processing your personal data and whether they are used in accordance with that purpose.
4. To know the third parties within the country or abroad to whom your personal data are transferred.
5. To request that your personal data be corrected if they have been processed incompletely or inaccurately.
6. To request the erasure or destruction of your personal data within the conditions laid down in Article 7 of the KVKK.
7. To request that the operations carried out pursuant to your correction, erasure and destruction requests be notified to the third parties to whom your personal data have been transferred.
8. To object to a result arising to your detriment through the analysis of your processed data exclusively by automated systems.
9. To claim compensation for the damage if you suffer damage because your personal data have been processed unlawfully.

You may submit your requests concerning the rights above to us in accordance with the procedure set out in the Communiqué on the Procedures and Principles of Application to the Data Controller (Veri Sorumlusuna Başvuru Usul ve Esasları Hakkında Tebliğ). In your application you must clearly state your first name, surname, signature, Turkish identity number (for foreign nationals, nationality and passport number), your address for service, your e-mail address and telephone number for notification if any, and the subject of your request.

You may deliver your application by a written petition bearing a wet signature to the address given in the corporate details, in person or through a notary public, send it using a secure electronic signature or mobile signature, or send it from the e-mail address you have previously notified to us and which is registered in our system to the e-mail address in the corporate details. For a ready application template and detailed guidance you may use our KVKK Data Subject Application Form (KVKK Veri Sahibi Başvuru Formu) page.

Your application is concluded as soon as possible depending on the nature of the request and in any event within thirty days at the latest from the date it reaches us, and the reply is notified to you in writing or electronically. Applications are as a rule free of charge; where the operation additionally entails a cost, the fee in the tariff determined by the Personal Data Protection Board may be charged.

Nura Aydınlatma may update this disclosure text because of changes in legislation, decisions of the Personal Data Protection Board and changes occurring in its services, in the infrastructures it uses or in its business processes. The current text is always published on this page and takes effect at the moment it is published; you can see which version you are reading from the last update information at the top of the page.

For your questions and suggestions concerning the processing of your personal data you may reach us through the telephone, WhatsApp or e-mail channels in the corporate details. We recommend that you consider this text together with the Privacy and Security Policy (Gizlilik ve Güvenlik Politikası), the Cookie Policy (Çerez Politikası) and the KVKK Data Subject Application Form (KVKK Veri Sahibi Başvuru Formu).