skip to content
choose language

your personal data is used only for your order and for talking with you..

privacy and personal data..

english translation for information.. if the two differ, the turkish text applies..

draft · to be reviewed by our lawyers · 5 november 2026

data controller

ekstrapazar's seller, atako teknoloji ve dış ticaret a.ş., is the data controller under turkish law no. 6698 on the protection of personal data (kvkk).. contact: bilgi@ekstrapazar.com.tr..

what data do we process..?

  • identity and contact: name, surname, email, phone, delivery and billing address..
  • order: products, amounts, delivery details, gift note and the recipient's name (for gift orders)..
  • payment: the result of the payment; your card details are processed by the payment provider and are not stored by us..
  • reviews and ratings: the review you write, your colour rating and the name you choose to show..
  • recommendations: the name and contact details of the person you recommend us to (only to send them a single message)..

purposes and legal grounds

  • taking your order and payment, delivering it, handling returns and withdrawals: making and performing the contract (kvkk 5/2-c)..
  • invoices and accounting records: legal obligation (kvkk 5/2-ç)..
  • answering your questions, improving the service, preventing misuse: legitimate interest (kvkk 5/2-f)..
  • campaign and newsletter emails: only with the separate explicit consent you give (the "stay informed" page; details below under news and promotional e-mails); consent is registered with iys and you can unsubscribe from every email with one click..

recipient details in gift orders

for an order placed with "let us carry your greeting..", you write the recipient's name, address and your greeting; we use them only to deliver this gift (performance of the contract, kvkk 5/2-c).. when ordering, you confirm that you are sharing these details only for delivery.. so as not to spoil the surprise we don't contact the recipient in advance; inside every gift parcel, on the back of the greeting card (or on a separate information card if no card was chosen), we explain who we are, where their details came from, how they are used and their rights.. the recipient's details are used for nothing but delivering the gift, and they receive campaign emails only if they give their own separate consent..

business membership applications

a business membership application collects the company's name, tax details and address, and the names, phones and emails of its authorised people.. these are processed to assess the application, open the account, invoice and run the partnership (making and performing the contract, legal obligation) and are not used for any other purpose.. applications that are not accepted are deleted after one year..

who do we share it with..?

only as far as the work requires: courier and delivery companies, the payment provider, the e-commerce platform (shopify; its servers are abroad), the email sending provider, our accountant and legally authorised bodies.. transfers abroad follow kvkk article 9.. your data is never sold or rented..

sharing with our group's other brands happens only under the group's shared privacy principles and with your consent..

news and promotional e-mails

promotional and newsletter e-mails are sent only with the separate consent you tick.. consent given on our sites' "stay informed" form covers every brand named one by one in the box..; it starts once you confirm the link sent to your email, and a confirmation notice follows.. we keep the time of the form and of the confirmation, your ip address, browser details, the version of the text you agreed to and the tag of the link that brought you to the form (e.g.. a trade-fair qr code..; to count which channels bring consent) (as proof..; for as long as turkish commercial-message law requires after your consent ends, at least three years..; then deleted).. if you tick a separate box for another company's brand, your name and email are shared with that company for that purpose only..; consent is registered with the turkish commercial message system (iys) as required.. you can withdraw it at any time through the link in every e-mail or by writing to us, free of charge..

how long do we keep it..?

  • invoices and accounting records: the period set by law (10 years)..
  • order and contact records: 3 years after the order is completed..
  • details of a person you recommended: 6 months after the message is sent..
  • a gift recipient's name, address and greeting: as part of the order, for the same period as the order records; not used for anything else..
  • reviews that are not published: 180 days..

your rights

you can use your rights under kvkk article 11 (to ask for information, correction, deletion, to object and the others) by writing to bilgi@ekstrapazar.com.tr; we reply within 30 days at the latest..