Clarification Text on Processing of Personal Data

Last updated: 23.06.2026

As Kuleli Evleri ("Company"), we attach great importance to the protection of your personal data within the scope of the Law on Protection of Personal Data No. 6698 ("KVKK") and related legislation. This Clarification Text has been prepared to transparently inform you about which of your personal data is processed, for what purposes, and on the basis of which legal grounds.

1. Data Controller

Pursuant to Article 3 of KVKK, "data controller" refers to the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system. In this context, the data controller is Kuleli Evleri.

2. Personal Data Processed

The following categories of personal data are processed by our Company:

Identity Data: Name, surname, Turkish ID number, date of birth
Contact Data: Email address, phone number, postal address
Financial Data: Payment information, invoice details, bank account information
Digital Trace Data: IP address, cookie data, browser and device information, log records
Marketing Data: Shopping preferences, areas of interest, behavioural data
Request/Complaint Data: Customer service call records, correspondence content

3. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

Fulfilment of services provided and management of membership processes
Management of order, payment and delivery processes
Execution of customer service and support processes
Fulfilment of legal obligations (tax, accounting, auditing, etc.)
Ensuring information security and system integrity
Sending commercial electronic messages and personalised marketing activities, if you have given consent
Evaluation of complaints, requests and applications
Dispute resolution and management of legal proceedings

4. Legal Bases for Processing Personal Data

Purpose of Processing	Legal Basis (KVKK Art. 5)
Establishment and performance of service agreement	Directly related to the establishment or performance of a contract (Art. 5/2-c)
Fulfilment of legal obligations	Legal obligation of the data controller (Art. 5/2-ç)
Information security and system management	Legitimate interest (Art. 5/2-f)
Marketing and personalised communication	Explicit consent (Art. 5/1)
Resolution of legal disputes	Establishment, exercise or protection of a right (Art. 5/2-e)

5. Methods of Collecting Personal Data

Your personal data is collected through the following channels, by automated or non-automated means:

Transactions carried out via website and mobile application
Membership and form-filling processes
Call centre and customer service interactions
Interactions via social media platforms
Email, SMS and similar electronic communication tools
Cookies and similar tracking technologies

6. Transfer of Personal Data

Your personal data may be transferred to the following parties, limited to and proportionate to the purposes stated above:

Suppliers, business partners and subcontractors from whom services are received
Payment institutions, banks and financial institutions
Cargo and logistics service providers
Cloud computing and server service providers
Authorised public institutions and organisations (within legal requirements)
Affiliated companies and group companies
Legal, financial and audit advisors

Where transfer abroad is concerned, the safeguards set out in Article 9 of KVKK are provided.

7. Retention Periods of Personal Data

Your personal data is retained for the period required by the purpose of processing and the statutory retention periods prescribed by relevant legislation. When these periods expire or the purpose of processing ceases to exist, your data is deleted, destroyed or anonymised.

Type of Data	Retention Period
Contract and invoice information	10 years (as required by Turkish Commercial Code)
Customer transaction records	Duration of membership + 3 years
Log and security records	2 years (as required by Law No. 5651)
Marketing communication data	Until consent is withdrawn
Cookie data	Varies by cookie type (session – up to 2 years)

8. Your Rights as a Data Subject

You have the following rights under Article 11 of KVKK:

To learn whether your personal data is being processed
To request information if your personal data has been processed
To learn the purpose of processing your personal data and whether it is used in accordance with its purpose
To know the third parties to whom your personal data is transferred domestically or abroad
To request correction if your personal data has been processed incompletely or inaccurately
To request deletion or destruction of your personal data under KVKK Art. 7
To request notification of correction and deletion/destruction operations to third parties
To object to decisions arising exclusively from automated analysis of processed data that are to your detriment
To request compensation for damages arising from unlawful processing of personal data

How to Apply: To exercise the above rights, you may send an email to web@medyae.com or submit a written application via our website's contact form. Your applications will be concluded free of charge within at most 30 days after your identity has been verified.

9. Cookie Usage

Our website uses cookies for session management, security, improving user experience and analytics purposes. You can manage your preferences for non-essential cookies through your browser settings. For detailed information about cookie types and their purposes, please refer to our Cookie Policy.

10. Changes to This Clarification Text

This Clarification Text may be updated in line with changes in legislation, decisions of the Personal Data Protection Authority, or developments in business processes. You can follow the current text on our website. You will be notified in the event of significant changes.