KVKK
KVKK COMPLIANCE STATEMENT
Effective Date: 11 February 2026
Last Updated: 11 February 2026
- Introduction
Altemurorman is committed to full compliance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”), the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the UK GDPR, and applicable legislation. This page summarizes our core obligations under KVKK, your rights as a data subject, and the organizational and technical measures we have implemented.
This KVKK Compliance Statement (“Statement”) explains how your personal data is collected, processed, shared, and protected when you use the Altemurorman platform (“Platform”). By accessing the Platform, you acknowledge that you have read and accepted this Statement. If you do not agree, please refrain from using the Platform.
- Scope of This Statement
- Data controller
- Purposes of processing and legal bases
- Methods of data collection
- Categories of personal data collected
- Your rights as a data subject
- Data sharing
- International data transfers
- Data retention periods
- Security measures
- Children’s privacy
- Updates to this Statement
- Data breach notification
- Right to lodge a complaint
- Contact details and supervisory authorities
- Data Controller
| Organization | Registered Address | Role | Primary Contact |
| Altemur Orman Gıda ve Danışmanlık Ltd. Şti. | Mutlukent Mh. 2037 Cd. No:16 Çankaya / ANKARA | Data Controller | http://altemurorman.com/ |
- Purposes of Processing and Legal Bases
Our legal obligations under applicable legislation, our legitimate interests, your lawfully obtained explicit consent, and the contracts concluded between us regarding the services purchased and/or provided constitute the legal bases for processing personal data.
We process your personal data to operate, provide, develop, and improve our services. Your personal data is processed when:
- Explicitly stipulated by law,
- Necessary for the establishment or performance of a contract,
- Necessary for compliance with legal obligations,
- Necessary for the establishment, exercise, or protection of a legal right,
- Made public by you in a lawful manner,
- Necessary for our legitimate interests, provided that your fundamental rights and freedoms are not harmed.
Your personal data may be used for:
- Processing orders, providing and fulfilling services, managing payments, and communicating regarding purchases,
- Executing payment processes and collections,
- Detecting and preventing fraud and other criminal activities, enhancing security, and managing financial risk,
- Operating the Platform, analyzing performance, resolving technical issues, and improving user experience,
- Promoting our services (subject to consent where required).
- Methods of Data Collection
Most of the data is provided directly by you. Your data is collected when:
- You register online, place orders, or contact us via the Platform,
- You place orders through e-commerce intermediary service providers,
- You complete surveys or provide feedback,
- You use the website via cookies.
In addition, data may be collected indirectly through cookies and similar identifiers during your browser or device interactions with the Platform. For details, please review our Cookie Policy.
- Categories of Personal Data Collected
Personal data collected includes:
- Information provided by you: Any data you provide while using our products and/or services. You may choose not to provide certain information; however, this may limit access to some features.
- Automatically collected information: Certain data regarding your interactions with our products and/or services, including how you interact with our products and features, is collected automatically. As with many websites, we collect data via cookies and other identifiers when your browser or device interacts with our Platform or related content across the web.
The categories of data collected include identity data, contact data, financial transaction data, content data, technical and usage data, cookie data, and marketing preferences.
We do not knowingly process special categories of personal data and do not knowingly process data of individuals under 18.
| Category | Processed Personal Data | Source | |||
| Identity Data | Name/surname, username, country, age, ID information, license number | You | |||
| Contact Data | Email address, phone number, postal address, order address, delivery address, social media account | You | |||
| Financial Transaction Data | Order ID, payment information, payment amount | Payment service providers | |||
| Content Data | URLs provided for promotional purposes, media titles; photographs of natural persons, audio recordings, camera recordings, subscription and membership details | You | |||
| Technical & Usage Data | IP address, log records, device fingerprint, browser type, clickstream, heatmaps, location data | Automatic | |||
| Cookie Data | Session identifiers, preferences, GPC signals | Cookies / trackers |
Your identity data is processed for emergency management, information security, compliance with legal obligations, finance and accounting, legal affairs, communications, business operations and audits, organizational management, storage and archiving, contract management, ensuring the security of data controller operations, informing authorized persons/institutions, and management activities.
Your contact data is processed for emergency management, information security, compliance with legal obligations, lawful conduct of activities, finance and accounting, assignment processes, legal affairs, communications, business operations and audits, organizational management, performance evaluation, storage and archiving, contract management, ensuring operational security, talent/career development, informing authorized persons/institutions, and management activities.
Your financial data is processed for emergency management, information security, compliance with legal obligations, lawful conduct of activities, finance and accounting, legal affairs, business operations and audits, organizational management, storage and archiving, contract management, remuneration policies, ensuring operational security, informing authorized persons/institutions, and management activities.
Your content data is processed for information security, compliance with legal obligations, lawful conduct of activities, legal affairs, business operations and audits, organizational management, storage and archiving, ensuring operational security, informing authorized persons/institutions, and management activities.
Your technical and usage data is processed for emergency management, information security, lawful conduct of activities, finance and accounting, business operations and audits, legal affairs, organizational management, storage and archiving, contract management, remuneration policies, ensuring operational security, informing authorized persons/institutions, and management activities.
Cookies, web analytics tools, and similar tracking technologies are used on our website in compliance with KVKK and GDPR.
Cookies are small text files stored on your device to analyze how visitors use the website, recognize returning users, and improve user experience. Data collected through these technologies may be transferred to and stored on servers of third-party service providers located domestically or abroad for the purpose of providing the service.
These technologies are used to ensure that the website operates in a more user-friendly, effective, and secure manner, to measure page visit frequency, and to analyze general browsing behavior. Your IP address may be processed in a pseudonymized manner that allows only approximate geolocation.
Non-essential cookies are used only with your explicit consent. You may change your cookie preferences at any time via your browser settings, refuse cookies, or delete them. However, disabling technical or functional cookies may prevent you from fully benefiting from certain website features.
Some cookies may remain on your device until manually deleted. For detailed information, please refer to our Cookie Policy.
Your personal data may be shared with trusted third-party service providers (e.g., payment processors, cloud service providers) who assist us in delivering our services. These third parties are subject to strict data protection obligations under KVKK and applicable laws and may process data only in accordance with our instructions.
The Platform may contain links to third-party websites (e.g., YouTube, Instagram). We are not responsible for the data protection practices of these sites. Please review their own privacy policies and KVKK compliance notices separately.
- Your Rights as a Data Subject
We aim to ensure that you are fully informed of all your data protection rights. You may choose not to provide certain information, supplement or update existing information. Subject to applicable law, you have the right to request access to your personal data or request deletion. Your rights may vary depending on your jurisdiction.
- Under the Turkish Personal Data Protection Law (KVKK), you have the following rights:
- To learn whether your personal data is processed,
- To request information if your personal data has been processed,
- To learn the purpose of processing and whether it is used in accordance with its purpose,
- To know the third parties to whom your personal data is transferred domestically or abroad,
- To request correction of incomplete or inaccurate personal data,
- To request deletion or destruction of personal data under Article 7 of KVKK,
- To request notification of correction/deletion to third parties to whom data has been transferred,
- To object to a result against you arising solely from automated processing,
- To claim compensation if you suffer damage due to unlawful processing.
You may submit your requests to http://altemurorman.com/. Requests will be handled free of charge in accordance with Article 11 of KVKK and concluded within 30 days.
- Under GDPR / UK GDPR, you have the following rights:
- Right of Access
- Right to Rectification
- Right to Erasure (Right to be Forgotten)
- Right to Restrict Processing
- Right to Object to Processing
- Right to Data Portability
- Right to Object to Automated Decision-Making
You also have rights under CCPA/CPRA (California), PIPEDA (Canada), LGPD (Brazil), and applicable APAC regulations, including rights to access, deletion, correction, opt-out of sale/share, limitation of use of sensitive data, and the right to lodge complaints with relevant supervisory authorities.
Requests must be submitted via http://altemurorman.com/ with your region and request type specified. Identity verification is required.
- Data Sharing
We do not sell your personal data.
Your personal data may be shared with trusted third-party service providers who assist us in providing our products and/or services (e.g., payment providers, cloud services). These parties are subject to strict confidentiality and data protection obligations and may process data only in line with our instructions.
Personal data is shared only in the following cases:
- Transactions with Third Parties
- Third-Party Service Providers
- Business Transfers
- Legal Obligations and Protection
Recipients and Transfer Safeguards
| Recipient | Purpose | Location / Safeguards |
| Group Companies | Operational activities | Türkiye |
| Service Providers (hosting, CDN, analytics) | Infrastructure services | EEA or SCC/IDTA safeguards |
| Payment Institutions | Billing and payment processing | Türkiye, US / EEA (under SCCs) |
| Competent Authorities | Tax and legal purposes | Relevant jurisdiction |
- International Data Transfers
Your personal data may be transferred outside Türkiye, the EEA, or the UK in compliance with applicable law. Transfers are conducted only with appropriate safeguards, including SCCs, UK IDTA, and additional technical security measures such as encryption and zero-trust access controls. Continued use of the Platform constitutes acknowledgment of these safeguards.
- Data Retention Periods
Personal data is retained only for as long as necessary for the purposes for which it was collected or as required by law.
| Data Type | Retention Period | Rationale |
| Order / Invoice records | 6 years | Tax and accounting regulations |
| Account identity and contact details | Active account + 2 years | Potential legal claims and defense |
| Marketing consent records | While consent remains valid | Proof of consent |
| Cookie data | Up to 14 months | Analytics limits |
| Backups after deletion requests | 30–90 days | Backup retention period |
- Security Measures
We implement physical, technical, and administrative safeguards to ensure confidentiality, integrity, and security of personal data in accordance with Article 12 of KVKK.
- Children’s Privacy
The Platform is not intended for individuals under the age of 18. Any personal data identified as belonging to minors will be deleted immediately.
- Updates to This Statement
We may update this Statement to reflect legal or operational changes. Significant updates will be announced on the website and/or via email. Continued use of the Platform constitutes acceptance of the updated Statement.
- Data Breach Notification
In the event of a data breach affecting your personal data, notifications will be made to data subjects and the relevant supervisory authorities as required by law.
- Right to Lodge a Complaint
If you believe your rights under KVKK have been violated, you may lodge a complaint with the Turkish Personal Data Protection Authority or your local data protection authority.
- Contact
If you have any questions or concerns regarding your personal data, you may contact our Data Protection Officer.
Email: _____________________
Contact Channels:
| Channel | Details |
| General Email | _______________________ |
| DPO Email | __________________________ |
| Postal Address | Mutlukent Mh. 2037 Cd. No:16 Çankaya / ANKARA |
Supervisory Authorities:
- For users in Türkiye: Turkish Personal Data Protection Authority (KVKK)
- For users in the EU/EEA and other regions: Your local data protection authority