PERSONAL DATA PROTECTION INFORMATION NOTICE | HIERA

As HIERA DIŞ TİCARET LİMİTED ŞİRKETİ ("HIERA" or "the Company"), as the data controller under Turkish Personal Data Protection Law No. 6698 ("KVKK"), we value the security of your personal data. This Disclosure Notice has been prepared to inform you about the purposes for which your personal data is processed, with whom it may be shared, and your rights under the KVKK.

1. Data Controller

Title: HIERA DIŞ TİCARET LİMİTED ŞİRKETİ
Address: Yenişehir Mahallesi, Şht. Pyd. Çvş. Tuncay Özçoban Caddesi No:2 D:B A-1 Blok, 20040 Pamukkale / Denizli, Türkiye
Tax Office / Tax No: Gökpınar Tax Office – 8341665153
Registered E-mail (KEP): [email protected]
Phone: +90 546 588 02 16

2. Personal Data Processed

The following personal data may be processed by our Company:

Identity data: First name, last name
Contact data: Phone number, e-mail address, delivery and billing addresses
Customer transaction data: Order details, order history, requests and complaint records
Payment transaction data: Information related to payment transactions
Transaction security data: IP address, cookie records, session and access information

Note: Your credit and debit card details are processed by the payment service provider iyzico and are not retained or stored by our Company.

3. Purposes of Processing

Your personal data is processed for the following purposes:

Carrying out order processes and delivering products,
Executing payment transactions,
Managing membership and customer account operations,
Providing customer support services,
Evaluating requests, suggestions and complaints,
Fulfilling accounting, invoicing and other legal obligations,
Conducting information security processes,
Carrying out campaign, promotion and commercial electronic message activities, provided that you have given your explicit consent.

4. Transfer of Personal Data

Your personal data may be shared, to the extent necessary and in accordance with the relevant legislation, with payment service providers, cargo and logistics companies, e-invoice and accounting service providers, authorized public institutions, and hosting and software infrastructure service providers, in order to fulfill the purposes stated above.

5. Method of Collection and Legal Basis

Your personal data is collected electronically through our website, membership and order forms, contact forms, cookies, e-mail, telephone and other communication channels.

Your personal data is processed based on the legal grounds set out in Article 5 of the KVKK: "being necessary for the establishment or performance of a contract", "fulfillment of the data controller's legal obligation", and "the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed".

6. International Transfer of Personal Data

The database and application servers of our website are hosted in data centers located in Frankfurt, Germany, in order to optimize infrastructure and information-security standards. Data relating to membership and order transactions you carry out on our site is transferred abroad (to Germany) pursuant to Article 9 of the KVKK, because the technical infrastructure services are sourced from abroad. This data transfer is carried out based on the separate consent you provide under the "International Data Transfer Explicit Consent Statement" presented to you.

7. Your Rights Under the KVKK

Under Article 11 of the KVKK, you have the right to learn whether your personal data is processed, to request information if it has been processed, to learn the purpose of processing and the third parties to whom it has been transferred domestically or abroad, to request correction if processed incompletely or inaccurately, to request erasure of the data, and to claim compensation for damages arising from unlawful processing.

8. How to Apply

You may submit your requests to our Company via our registered e-mail address [email protected] or in writing with a wet signature to our company address. Your applications will be concluded within 30 (thirty) days at the latest.

Last Updated: 9 June 2026