FREE SHIPPING ON ALL ORDERS
As RETAY MAĞAZACILIK A.Ş. ("Company" or "SUMONE"), we act as the data controller under the Personal Data Protection Law No. 6698 ("KVKK"). This notice has been prepared to inform you about the purposes for which the personal data we obtain via iamsumone.com or our other channels is processed, to whom it may be transferred, and your rights in this regard.
1. Data Controller
- Company name: RETAY MAĞAZACILIK A.Ş.
- Address: Eski Hadımköy Yolu Cd. İstanbul / Büyükçekmece, Türkiye
- Phone: 0 212 970 27 05
- E-mail: destek@iamsumone.com
- Website: iamsumone.com
2. Personal Data Processed
| Data category | Example data |
|---|---|
| Identity | Name, surname |
| Contact | E-mail address, phone number, delivery and billing address |
| Customer transactions | Order, return, shipment tracking, request and complaint records |
| Transaction security | IP address, cookie records, session and login information |
| Finance | Payment method, transaction amount, invoice details |
| Marketing | Purchase history, messaging consents, campaign and newsletter preferences |
Credit card details entered during payment are never seen or stored by the Company; they are processed directly through the infrastructure of a licensed payment institution.
3. Purposes of Processing
- Orders and delivery: Creating your order, collecting payment, preparing and shipping the product
- Customer relations: Handling your requests, questions, returns and complaints, running support processes
- Membership: Creating and managing your account, presenting your order history
- Legal obligations: Issuing invoices, fulfilling accounting, tax and consumer law obligations
- Security: Ensuring site security, preventing fraud and misuse
- Improvement: Measuring site performance, developing our products and services
- Marketing: Sending commercial electronic messages about campaigns, discounts and news, where you have given explicit consent
4. Legal Grounds for Processing
- Establishment and performance of a contract (KVKK art. 5/2-c): Order, payment, delivery and return processes
- Legal obligation (KVKK art. 5/2-ç): Invoicing, accounting and statutory retention obligations
- Establishment and protection of a right (KVKK art. 5/2-e): Use as evidence in case of dispute
- Legitimate interest (KVKK art. 5/2-f): Site security, fraud prevention and improving service quality
- Explicit consent (KVKK art. 5/1): Sending commercial electronic messages and non-essential cookies
5. Method of Collection
Your personal data is collected electronically, by automatic and partly automatic means, through the membership and order forms on our website, our contact and support channels (e-mail, phone), cookies and similar tracking technologies, and our social media accounts.
6. Transfer of Personal Data
Your personal data may be shared with the following parties, limited to the purposes above:
- Shipping and logistics companies: for delivering the order
- Payment institutions and banks: for collecting payments and making refunds
- E-invoice, accounting and audit service providers: for fulfilling legal obligations
- IT, infrastructure and e-commerce service providers: for operating, hosting and securing the site
- Authorised public institutions and organisations: within the scope of requests arising from legislation
Where service providers with servers abroad are used, transfers are carried out in accordance with the KVKK provisions on transfers abroad.
7. Retention Period
Your personal data is retained for as long as necessary for the purpose for which it is processed and until the limitation and retention periods set out in the relevant legislation expire (as a rule 10 years for commercial and tax records). When the period expires, the data is deleted, destroyed or anonymised.
8. Your Rights as a Data Subject
Under Article 11 of the KVKK you have the right to:
- Learn whether your personal data is processed
- Request information if it has been processed
- Learn the purpose of processing and whether it is used in accordance with that purpose
- Know the third parties to whom data is transferred domestically or abroad
- Request correction if processed incompletely or inaccurately
- Request deletion or destruction within the conditions set out in the legislation
- Request that correction, deletion and destruction be notified to third parties to whom data has been transferred
- Object to a result against you arising from analysis exclusively by automated systems
- Claim compensation for damage suffered due to unlawful processing
9. How to Apply
You can submit requests regarding your rights, together with information verifying your identity, by e-mail to destek@iamsumone.com or in writing to the address above. Your applications are concluded free of charge within 30 days at the latest depending on their nature; if the process requires an additional cost, the fee set by the Personal Data Protection Board may be charged.
10. Updates
RETAY MAĞAZACILIK A.Ş. may update this Notice in line with legislative changes or developments in business processes. The current text takes effect on the date it is published on iamsumone.com.
