KVKK Data Subject Application Form

This page is a guide explaining how, when you wish to exercise the rights listed in Article 11 of Law No. 6698 on the Protection of Personal Data (Kişisel Verilerin Korunması Kanunu, KVKK), you may apply to Nura Aydınlatma in its capacity as data controller pursuant to Article 13 of the KVKK and to the Communiqué on the Procedures and Principles of Application to the Data Controller (Veri Sorumlusuna Başvuru Usul ve Esasları Hakkında Tebliğ).

The procedure described here applies to every data subject whose personal data are processed by Nura Aydınlatma, including customers who place orders through nuraaydinlatma.com, persons who fill in the contact form or reach us by telephone, WhatsApp and e-mail, subscribers to our newsletter and visitors to our showroom in Sultangazi.

You may find in the KVKK Disclosure Text (KVKK Aydınlatma Metni) which of your personal data are processed for which purpose and on which legal ground, to whom they are transferred and for how long they are retained. This page concerns only how your application is to be prepared and where it is to be sent.

Pursuant to the Communiqué on the Procedures and Principles of Application to the Data Controller (Veri Sorumlusuna Başvuru Usul ve Esasları Hakkında Tebliğ), your application must be made in Turkish and by one of the methods below. Whichever method you choose, your identity details must appear clearly in the application so that it can be verified that the application was made by you.

Oral requests conveyed by telephone or WhatsApp cannot be accepted as a formal KVKK application under the legislation; you may obtain general information through these channels, but to exercise your rights you must choose one of the methods above. As the site has no membership or account system, it is also not possible to submit your application through an account panel.

Pursuant to the Communiqué, the following information must appear in your application petition. Where this information is missing your application cannot be taken into evaluation; we therefore recommend that you check the list before sending your petition.

1. Your first name and surname.
2. Your Turkish identity number; if you are not a citizen of the Republic of Türkiye, your nationality together with your passport number or your identity number if you have one.
3. Your residential address or place of business address for service of notice.
4. Your e-mail address, telephone number and fax number for notification, if any.
5. The subject of your request; that is, which of the rights in Article 11 of the KVKK you wish to exercise and in respect of which of your personal data.
6. Information and documents relating to your request; for example your order number, the e-mail address you used when placing the order or the date on which you sent the contact form - details that will enable us to find you in our records.
7. Your signature in written applications; a secure electronic signature or a mobile signature in applications made electronically.

Writing your request as clearly and comprehensibly as possible makes the reply both faster and more accurate. If you have more than one request it is enough to list them as separate items; you do not need to prepare a separate petition for each request.

Your application may relate only to personal data belonging to you. If you are requesting information about personal data belonging to someone else, you must also attach to your petition the documents showing that you are authorised to represent that person.

Within the scope of Article 11 of the KVKK, you may make the following requests to Nura Aydınlatma in its capacity as data controller:

1. To learn whether your personal data are being processed.
2. To request information about them if your personal data have been processed.
3. To learn the purpose of processing your personal data and whether they are used in accordance with that purpose.
4. To know the third parties in the country or abroad to whom your personal data are transferred.
5. To request that your personal data be corrected if they have been processed incompletely or inaccurately.
6. To request the erasure or destruction of your personal data within the conditions laid down in Article 7 of the KVKK.
7. To request that the operations carried out pursuant to your correction, erasure and destruction requests be notified to the third parties to whom your personal data have been transferred.
8. To object to a result arising against you through the analysis of your processed data exclusively by automated systems.
9. To claim compensation for the damage if you suffer damage because your personal data have been processed unlawfully.

In practice the most frequent requests are: correction of the address or telephone information appearing in order and delivery records, erasure of a message sent through the contact form together with the contact details, removal from our records of the e-mail address kept for the newsletter subscription, and notification of which data are held about you.

If you do not wish to receive commercial electronic messages you do not need to make a separate KVKK application for this; you may use the unsubscribe link at the end of every message or withdraw your consent through the Message Management System (İleti Yönetim Sistemi, İYS). That route gives a faster result.

Your erasure and destruction requests are evaluated within the framework of the Regulation on the Deletion, Destruction or Anonymisation of Personal Data (Kişisel Verilerin Silinmesi, Yok Edilmesi veya Anonim Hale Getirilmesi Hakkında Yönetmelik). Data that must be retained for a certain period under tax and commercial legislation and under warranty and consumer law, such as order records, e-archive invoices and accounting records, cannot be erased before the relevant period expires. In such a case your request is answered with an explanation of the grounds, and the data in question are kept solely within the scope of the retention obligation, without being used for any other purpose.

Your application is concluded as soon as possible depending on the nature of your request and in any event within thirty days at the latest from the date on which the application reaches Nura Aydınlatma. The period of thirty days starts to run on the date the application reaches us.

As a rule your application is concluded free of charge. However, if meeting your request additionally requires a cost, the fee in the tariff determined by the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) may be charged; if the answer is given on a recording medium such as a CD or a flash drive, an amount equal to the cost of the recording medium may be requested. If it emerges that the application arose from an error of Nura Aydınlatma, the fee collected is refunded to the data subject.

In order to be sure that the applicant really is you, we may request additional information or documents verifying your identity. Likewise, if the subject of your request is not sufficiently clear or it cannot be understood which record it relates to, we may ask you for clarification so that the evaluation can be made correctly.

Our answer is sent in writing to the address you stated in your application or electronically to the e-mail address you notified. If your request is accepted, the necessary action is taken; if it is rejected, the grounds for rejection are explained. Correspondence relating to your application is used solely for the purpose of evaluating the application.

If your application is rejected, if you find the answer given insufficient or if no answer is given within the period, you may lodge a complaint with the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) within thirty days from the date on which you learn of the answer and in any event within sixty days from the date of the application.

Pursuant to Article 14 of the KVKK, the route of complaint to the Board cannot be used before the route of application to the data controller has been exhausted. For this reason, before applying to the Board you must first send your request to us and await the answer.

Your right to claim compensation under the general provisions on the ground that your personality rights have been infringed, and your right to have recourse to other legal remedies, are reserved. Consumer disputes relating to your order, such as defective goods, delivery or the right of withdrawal, fall outside the scope of the KVKK; for such requests you may apply to the consumer arbitration committees or the consumer courts pursuant to Law No. 6502 on the Protection of Consumers (Tüketicinin Korunması Hakkında Kanun).

• Prepare your application in Turkish and state your request clearly; if it cannot be understood which right you wish to exercise, your application cannot be evaluated.
• Give in full the information that enables us to verify your identity; messages arriving from an e-mail address that is not in our records and sent without a signature are not deemed valid applications.
• Do not add to your petition personal data going beyond the subject of your request, and in particular special categories of personal data such as health, belief or biometric data.
• Never share payment information such as card numbers and passwords in any application; your card details are in any case not stored by Nura Aydınlatma.
• Applications repeated at short intervals on the same subject may be evaluated within the scope of the answer given to the previous application.

The identity and contact details you provide in your application and the documents relating to your request are processed for the purposes of recording your application, verifying your identity, evaluating your request and giving you an answer. This processing is based on the legal grounds set out in Article 5 of the KVKK, namely that processing is necessary for the data controller to fulfil its legal obligation and that data processing is necessary for the establishment, exercise or protection of a right.

Application and answer records are retained throughout the periods of limitation prescribed in the relevant legislation so that we can meet our audit and evidential obligations; at the end of the period they are deleted, destroyed or anonymised in accordance with the Regulation on the Deletion, Destruction or Anonymisation of Personal Data (Kişisel Verilerin Silinmesi, Yok Edilmesi veya Anonim Hale Getirilmesi Hakkında Yönetmelik). By the nature of the work, your application is seen only by the limited number of our employees who deal with the matter.

For detailed information about the processing of your personal data you may review the KVKK Disclosure Text (KVKK Aydınlatma Metni), for the use of cookies and local storage the Cookie Policy (Çerez Politikası), and for our general data practices the Privacy and Security Policy (Gizlilik ve Güvenlik Politikası).