1. Parties and Scope

This Privacy and Personal Data Protection Policy (“Policy”) has been prepared to define the principles regarding the processing of personal data of users, visitors, members, and customers within the scope of all services provided through the website and mobile interfaces of the Nettegeo brand.

This Policy has been prepared in accordance with:

• The Personal Data Protection Law No. 6698 (KVKK) in force in Türkiye,

• The European Union General Data Protection Regulation (GDPR),

• Relevant secondary legislation.

All individuals who visit the website, become members, make purchases, or benefit from the services in any manner shall be deemed to have accepted this Policy.

2. Definitions

Personal Data: Any information relating to an identified or identifiable natural person
Data Subject: The natural person whose personal data is processed
Data Controller: Nettegeo, which determines the purposes and means of processing personal data
Processing: Any operation performed on personal data

3. Collected Personal Data

The following personal data may be collected by Nettegeo:

3.1 Identity Information

• Name, surname

• Turkish ID number (only when required for invoicing)

3.2 Contact Information

• Email address

• Phone number

• Full address

• City, district, postal code

3.3 Account and Membership Information

• Username

• Password (stored in encrypted form)

• Membership date

• Account activity records

3.4 Order and Financial Information

• Order history

• Invoice details

• Payment method information (credit card details are never stored)

3.5 Technical Data

• IP address

• Browser information

• Device information

• Session data

• Log records

3.6 Marketing and Cookie Data

• Cookie records

• Website navigation data

• Campaign and preference information

4. Method of Collecting Personal Data

Personal data is collected through automatic or partially automatic means via:

• Membership registration

• Order creation

• Contact forms

• Cookies

• Email, phone, or live support channels

5. Purposes of Processing Personal Data

Personal data is processed for the following purposes:

• Managing membership processes

• Processing, preparing, and delivering orders

• Carrying out invoicing procedures

• Customer service and support activities

• Fulfilling legal obligations

• Preventing fraud

• Ensuring website security

• Marketing, promotions, and notifications (with explicit consent)

• Improving user experience

6. Legal Grounds for Processing Personal Data

Personal data is processed based on:

• Establishment and performance of contracts

• Fulfillment of legal obligations

• Legitimate interests

• Explicit consent

7. Transfer of Personal Data

Nettegeo may share personal data, limited to what is necessary, with:

• Cargo and logistics companies

• Payment service providers

• E-invoicing and accounting firms

• Legal and financial consultants

• Authorized public institutions

International data transfers are carried out in compliance with GDPR and KVKK and with appropriate technical and administrative safeguards.

8. Cookies

Nettegeo uses cookies to improve user experience.

Types of Cookies Used:

• Mandatory cookies

• Performance cookies

• Analytical cookies

• Marketing cookies (optional)

Users may delete or block cookies via browser settings.

9. Data Security

Nettegeo implements technical and administrative measures including:

• SSL certificates

• Strong encryption methods

• Access restrictions

• Updated software infrastructure

• Regular security audits

10. Retention Period of Personal Data

Personal data is retained based on:

• Legal obligations

• Contractual duration

• Legitimate interests

Upon expiration of the retention period, data is deleted, destroyed, or anonymized.

11. Rights of the Data Subject

Under KVKK and GDPR, data subjects have the right to:

• Learn whether personal data is processed

• Request access to personal data

• Request correction of incomplete or inaccurate data

• Request deletion or destruction of personal data

• Object to processing

• Withdraw explicit consent

• Submit complaints and requests

12. Application Method

Data subjects may submit requests via:

• Email

• Contact form

• Written application

Requests are responded to within 30 days at the latest.

13. Policy Updates

Nettegeo reserves the right to update this Policy in line with legislative changes and service scope. Updates take effect upon publication on the website.

14. Entry into Force

This Policy is effective as of the publication date. Continued use of the website constitutes acceptance of this Policy.