Personal Data Protection Notice

Your personal data is processed by the following business acting as data controller:

Ticaret unvanı

Musa Yavuz

Marka

308FIRUZ

Adres

Süleyman Demirel Üniversitesi Göller Bölgesi Teknokenti, Çünür Mah. 102. Cd. No: 252, Merkez / Isparta 32100

Vergi dairesi / no

Davraz Vergi Dairesi / 49630180270

Gıda işletme kayıt no

TR-32-K012143

Telefon / WhatsApp

+90 535 810 43 38

E-posta

info.308firuz@gmail.com

İnternet sitesi

https://308firuz.com

When you complete the order form, the following data is processed:

• Identity data: first and last name; for individual invoices the Turkish national ID number, for corporate invoices the company title, tax office and tax number.
• Contact data: mobile phone number, e-mail address, delivery and billing address.
• Transaction data: order number, order contents, amount, order date and order note.

Because payment is handled over WhatsApp, no credit card or bank account information is collected or stored on this site.

• Receiving, preparing and delivering your order
• Issuing invoices and keeping statutory accounting records
• Contacting you about the order process
• Responding to your requests, questions and complaints
• Fulfilling obligations arising from legislation

Your personal data is not used for marketing, profiling or advertising and will not be processed for such purposes without your separate explicit consent.

Your data is collected electronically and directly from you, by way of the order form you complete.

Legal bases (KVKK art. 5/2):

• (c) Formation or performance of a contract: necessary in order to receive and deliver your order.
• (ç) Legal obligation: our obligation to issue invoices and retain accounting records.
• (f) Legitimate interest: keeping order records and establishing evidence in the event of a dispute.

Your personal data is never sold and never shared with third parties for marketing purposes. It is transferred only to the following groups of recipients, and only to the extent necessary:

• Courier and logistics companies — name, address and phone number so that delivery can be made.
• Accountant / bookkeeping service — invoice details for invoicing and statutory records.
• Hosting and infrastructure providers — so that the site and the database can operate. Servers may be located in the European Union; in that case the transfer takes place within the framework of KVKK art. 9.
• WhatsApp (Meta) — if you use WhatsApp to send us your order, the message content is subject to that platform's own privacy policy.
• Competent public authorities — where required by legislation and only to the extent requested.

Your data is kept for as long as necessary for the purpose for which it was processed and for the minimum periods required by legislation:

• Invoices and accounting records: 10 years, under the Tax Procedure Law and the Turkish Commercial Code.
• Order form records: for the statutory limitation period following delivery; afterwards they are deleted or anonymised.

Once the period expires, your data is deleted, destroyed or anonymised.

As a data subject you have the following rights:

• To learn whether your personal data is being processed
• To request information if it has been processed
• To learn the purpose of processing and whether the data is used in line with that purpose
• To know the third parties to whom the data is transferred, in Turkey or abroad
• To request correction if the data is incomplete or incorrect
• To request erasure or destruction within the conditions of KVKK art. 7
• To request that correction, erasure and destruction be notified to third parties to whom the data was transferred
• To object to a result against you arising from analysis carried out exclusively by automated systems
• To claim compensation if you suffer damage due to unlawful processing

You may send your requests to info.308firuz@gmail.com. Your application will be concluded free of charge within 30 days at the latest. If your application is rejected, you retain the right to lodge a complaint with the Turkish Personal Data Protection Board.

No advertising or tracking cookies are used on this site. Only:

• Language cookie — remembers the language you selected. A functional, non-essential cookie.
• Cookie preference record — when you dismiss the cookie notice, your choice is stored in your browser so that the notice does not reappear on every visit.
• Admin session cookie — created only when the site administrator signs in; it does not exist for visitors.

Your basket is not a cookie: it is kept in your browser's local storage (localStorage) and is not sent to our server.

Technical measures we take to protect your data include encrypting all traffic with HTTPS, restricting access to the admin panel with a strong password, two-factor authentication and session verification, limiting database access, and rate-limiting sign-in attempts.