Yiğit Alüminyum Profil | Last updated 7 October 2026
This is an English translation provided for convenience. The Turkish text is the binding version.
This notice explains how the data of website visitors, customers, delivery recipients and people who contact us is processed under the Turkish Personal Data Protection Law No. 6698 (KVKK).
1. Data controller
Data controller and trade name: MUSTAFA YİĞİT YİĞİT ALÜMİNYUM PROFİL
Address in the trade registry: Beylikdüzü OSB Mah. Birlik Sanayi Sitesi Açelya Cad. No: 1/1/17 Beylikdüzü / İstanbul
Contact and application address: Beylikdüzü OSB Mah. Birlik Sanayi Sitesi Açelya Cad. No: 1/1 İç Kapı No: 17 Beylikdüzü / İstanbul
Email: info@yigitaluminyumprofil.com | Phone: 0532 642 72 80
2. How data is collected
Your data is collected through the order and contact areas of our Shopify-based website, email, telephone, WhatsApp when you choose to use it, payment and shipping notifications, delivery and invoice documents, and essential cookies and technical logs. Processing is carried out by automated means in electronic form, or by non-automated means as part of a data filing system.
3. Data processed, purposes and legal grounds
Quotation and order: Name and surname, contact details, delivery and invoice addresses, product, quantity, amount and payment transaction details are processed under KVKK Article 5/2-c in order to prepare quotations, conclude the sales contract and carry out payment, delivery, cancellation and returns.
Invoicing and legal obligations: Invoice, tax and accounting records and the identity details required by legislation are processed under Articles 5/2-a and 5/2-ç in order to issue documents and meet statutory retention obligations.
Communication: Name and surname, contact details and message content are processed under Article 5/2-c for requests relating to a contract, under Article 5/2-ç for statutory applications, and under Article 5/2-f, provided your fundamental rights are not harmed, for replying to general questions.
Representative and delivery recipient: The necessary name, contact and delivery details of a person communicating on behalf of a company and of a delivery recipient who is not a party to the contract are processed under Article 5/2-f, on the basis of the legitimate interest in carrying out corporate communication and delivery, provided their rights and freedoms are not harmed.
Security and protection of rights: IP address, browser, access time and technical transaction logs are processed under Article 5/2-f, provided your fundamental rights and freedoms are not harmed, in order to prevent unauthorised access, misuse and transaction errors. Dispute and application records are processed under Article 5/2-e to the extent necessary to establish, exercise or protect a right.
Essential cookies: Cookie data needed to run the cart and order session is processed under Article 5/2-c; necessary technical security and preference records are processed under Article 5/2-f, provided your fundamental rights are not harmed. Non-essential analytics and advertising cookies are not used.
Please do not share special categories of personal data that are not needed for an order or for communication. Notifications about your order, shipment and request are sent to deliver the service; your contact details are not used in this context to send campaign or advertising messages.
4. Recipients and purposes of transfer
The necessary data is transferred to Shopify and authorised technical service providers to operate the site and manage orders; to banks and payment institutions to carry out payment and refunds; to carriers for delivery; and to e-document and accounting service providers and the accountant for invoicing and accounting. No more data is shared than the relevant service requires.
Necessary records may be provided to authorised public bodies and judicial authorities to meet legal obligations, and to authorised legal service providers to protect legal rights. Transfers within Türkiye are subject to KVKK Article 8 and the processing conditions described above.
5. Transfer of data abroad
The Shopify infrastructure may involve identity, contact, order and technical transaction data being processed by Shopify entities and service providers located abroad, or being accessed from abroad, while the site, order and technical services are provided. If you choose to communicate via WhatsApp, message and contact data may likewise be processed by an international service provider.
These transfers are subject to the conditions in KVKK Article 9. Regular transfers abroad require an applicable adequacy decision or an appropriate safeguard provided for by law. Reading this notice, placing an order or viewing the cookie notice does not replace the required transfer conditions.
6. Retention and your rights
Your data is kept for as long as the purpose of processing and the legislation require. Invoice and commercial records are kept for the relevant statutory periods; dispute records are kept for the relevant limitation periods. Data whose retention and processing conditions have ended is erased, destroyed or anonymised.
You may exercise your rights under KVKK Article 11. These include obtaining information about your data, learning to whom it has been transferred, requesting rectification and, where the legal conditions are met, erasure or destruction, requesting that these operations be notified to recipients, objecting to a result against you arising solely from automated analysis, and claiming compensation for damage caused by unlawful processing.
You may submit your application to the application address above, signed, by hand or by post, or to info@yigitaluminyumprofil.com from the email address you previously gave us and which is registered in our system. Other valid application methods recognised by legislation are reserved. Requests are answered in writing or electronically within 30 days at the latest. Applications are free of charge as a rule; if an additional cost arises, only the tariff set by the Personal Data Protection Board applies.