Privacy policy
Privacy Policy and Data Protection Notice
This notice is provided to fulfil the disclosure obligation under Article 10 of the Turkish Personal Data Protection Law No. 6698 (KVKK). It explains how your personal data is processed when you visit cemira.com.tr, place an order, or contact us.
1. Data Controller
Cemira – Merih Tığlı
Address: Gökkuşağı Mah. 1209. Sok. No: 15/6 Çankaya / Ankara, Türkiye
Tax office / number: Başkent – 8430149688
E-mail: satis@cemira.com.tr
Registered electronic mail (KEP): merih.tigli@hs01.kep.tr
Phone: +90 532 437 24 46
2. Personal Data Processed
Identity: name, surname.
Contact: e-mail, phone, delivery address, billing address.
Customer transactions: order details, order history, return and cancellation requests, correspondence.
Transaction security: IP address, cookie records, browser and device information, on-site navigation data.
Financial: payment confirmation, order amounts.
Your card number, expiry date and CVV are never seen, recorded or stored by us. These are processed directly within the payment institution's infrastructure.
3. Purposes and Legal Grounds
Receiving, preparing, delivering orders and handling returns — Art. 5/2-c: directly related to the conclusion or performance of a contract.
Issuing invoices, accounting and keeping statutory records — Art. 5/2-a and 5/2-ç: expressly provided for by law and compliance with a legal obligation.
Responding to customer requests, complaints and return applications — Art. 5/2-c and 5/2-f.
Ensuring site security, detecting errors and measuring service quality — Art. 5/2-f: legitimate interest.
Exercising the right of legal defence in the event of a dispute — Art. 5/2-e.
Sending commercial electronic messages (campaigns, discount announcements) — Art. 5/1: your explicit consent. You are not obliged to give this consent; withholding it does not prevent you from shopping, and you may withdraw it at any time.
4. Transfer of Personal Data
Your data is shared only with the following parties and only to the extent necessary:
Courier companies — name, address and phone for delivery and returns.
Payment institutions and banks — to collect and refund payments.
Accountant and e-invoice / e-archive providers — for statutory record and invoicing obligations.
E-commerce infrastructure provider (Shopify) — for the operation of the store, order management and the analysis described in Article 5.
Competent public authorities — upon a request arising from legislation.
Your personal data is not otherwise sold, rented or transferred to third parties for marketing purposes.
5. Transfers Abroad
Our store runs on the Shopify platform and site data is hosted on Shopify's servers located outside Türkiye. Cookies from service providers established abroad may also be used to measure site traffic and advertising performance.
Transfers relating to order processing are carried out within the framework of Article 9 of the KVKK and only to the extent necessary for the performance of the contract. The data hosting location is the United States.
In addition, Shopify uses your customer data together with other Shopify data to improve products for our store and to improve advertising targeting and personalisation. This processing relies on legitimate interest under Article 5/2-f of the KVKK and takes place outside Türkiye. No other merchant can access your data. This activity also powers store functions such as abandoned cart reminders and on-site search. Transfers for analytics and advertising purposes rely solely on the explicit consent you give through your cookie preferences; if you reject those cookies, no such transfer takes place.
6. Retention Period
Your personal data is retained for as long as the purpose requires and in any case for the periods prescribed by applicable legislation: 5 years under the Tax Procedure Law and 10 years for commercial books and records under the Turkish Commercial Code. At the end of these periods your data is deleted, destroyed or anonymised.
Explicit consent given for commercial electronic messages remains valid until you withdraw it.
7. Cookies
Our site uses cookies.
Strictly necessary cookies: required for the cart, session continuity and security; the site does not work without them and they do not require consent.
Analytics and advertising cookies: operate only if you give consent. They are used to measure visit statistics and advertising performance.
You may delete or block cookies at any time from your browser settings. If you block strictly necessary cookies you may be unable to place an order.
8. Your Rights
Under Article 11 of the KVKK, by applying to the data controller you have the right to:
Learn whether your personal data is being processed.
Request information if it has been processed.
Learn the purpose of processing and whether it is used in accordance with that purpose.
Know the third parties to whom it is transferred domestically or abroad.
Request correction if it is processed incompletely or inaccurately.
Request erasure or destruction within the conditions set out in the Law.
Request that correction, erasure and destruction be notified to the third parties to whom the data was transferred.
Object to a result against you arising from analysis solely by automated systems.
Claim compensation if you suffer damage due to unlawful processing.
How to apply: Under the Communiqué on the Principles and Procedures of Application to the Data Controller, you may submit your application in writing to the address above, to our KEP address, using a secure electronic signature, or by e-mail to satis@cemira.com.tr from the e-mail address registered with us. Your application is concluded within 30 days at the latest and free of charge; if the process requires an additional cost, the fee set out in the tariff determined by the Board may be charged.
If your application is rejected, you find the response insufficient, or no response is given within the period, you may lodge a complaint with the Personal Data Protection Board.
9. Commercial Electronic Messages
Campaign, discount and promotional messages are sent only if you have consented. You may withdraw this consent at any time using the opt-out link in the message or by writing to satis@cemira.com.tr. Withdrawing consent does not affect notifications about your orders; order, shipping and return notifications are not commercial messages.
10. Data Security
Our site is encrypted with an SSL certificate. Access to your personal data is limited to what the work requires. Payment details are not stored by us.
11. Changes
This notice is updated when necessary. The current version is always published on this page.
Last updated: 17.09.2026