PRIVACY POLICY

Company Name: EKD TEKSTİL SANAYİ VE TİCARET LİMİTED ŞİRKETİ
Trade Name / Brand: HE-QA
Website: https://www.he-qa.com

1. Purpose and Scope

This Privacy Policy sets forth the principles regarding the confidentiality, security, and processing of personal data of users/visitors receiving services through the https://www.he-qa.com website and/or mobile application operated by EKD Tekstil Sanayi ve Ticaret Ltd. Şti. (“Company” or “HE-QA”).

HE-QA is committed to processing personal data in a manner that respects fundamental rights and freedoms, with transparency and accountability.

2. Collected Data

HE-QA may collect the following categories of personal data during user interactions on the website:

• Identity Data: Name, surname, ID number
• Contact Data: Email address, phone number, physical address
• Customer Transaction Data: Order history, shopping preferences, delivery and billing details
• Financial Data: Payment method and transaction amount (credit card information is securely processed by payment service providers and not stored by HE-QA)
• Transaction Security Data: IP address, browser information, session cookies
• Marketing Data: Campaign preferences, survey responses, newsletter subscriptions

3. Purposes of Personal Data Processing

Collected data may be processed for the following purposes:

• Providing products and services, managing order and payment processes
• Creating and managing user accounts
• Providing customer support
• Handling billing and delivery operations
• Complying with legal obligations
• Improving and personalizing the user experience
• Conducting marketing and advertising activities (with explicit consent)
• Responding to legal demands and implementing security measures

4. Methods and Legal Grounds for Collecting Personal Data

Personal data may be collected through electronic means such as the website, mobile application, cookies, email, and social media platforms, and through physical means when necessary.

Legal grounds for processing personal data under the Law on the Protection of Personal Data (KVKK):

• Article 5/2(c): Directly related to the establishment or performance of a contract
• Article 5/2(ç): Necessary for compliance with the data controller’s legal obligations
• Article 5/2(f): Based on the legitimate interests of the data controller, provided that it does not violate fundamental rights and freedoms
• Article 5/1: Based on the explicit consent of the data subject for marketing, advertising, and promotional purposes

5. Cookies and Other Technologies

HE-QA uses cookies and similar technologies to enhance and analyze user experience on the website. These technologies collect usage data, generate statistics, and provide personalized content based on preferences.

Please refer to the Cookie Policy for detailed information.

6. Retention and Disposal of Personal Data

Personal data is retained for legally mandated periods. After these periods expire, data is regularly anonymized, deleted, or destroyed.

Retention examples:

• Invoice data: 10 years
• Customer support records: 3 years
• Marketing data: Until consent is withdrawn

7. Recipients and Purpose of Data Transfer

Personal data may be shared solely for the purposes listed in this policy and only with:

• Shipping companies
• Payment service providers (e.g., PayTR, Iyzico)
• Financial advisory and legal consultancy firms
• Cloud-based software/service providers
• Authorized public institutions and organizations upon request

Personal data is not transferred abroad. If such transfer becomes necessary, explicit consent will be obtained in accordance with Article 9 of KVKK.

8. Personal Data Security

HE-QA implements technical and administrative measures to ensure the security of personal data. These include:

• SSL encryption
• Secure payment infrastructure
• Access-controlled authorization systems
• Employee confidentiality agreements
• Periodic data backups

9. Data Subject Rights (KVKK Art. 11)

Data subjects have the right to:

• Learn whether personal data is processed
• Request information regarding processing
• Learn the purpose of processing and whether it is being used accordingly
• Learn the third parties to whom data is transferred
• Request correction of incomplete or inaccurate data
• Request deletion or destruction under KVKK Article 7
• Request notification of correction or deletion to third parties
• Object to decisions based solely on automated processing
• Request compensation for damages arising from unlawful processing

10. Application Methods

Requests regarding these rights may be submitted via the following channels:

Company Name: EKD Tekstil Sanayi ve Ticaret Ltd. Şti.
Address: Erenler Mah. 1201 Sok. No:7/1 İç Kapı No:207, Erenler/Sakarya
Email: [email protected]
KEP: [email protected]
MERSIS No: 0326049308900001
Phone: 0850 377 54 54

Requests will be processed free of charge within 30 days.

11. Policy Updates

This Privacy Policy may be updated in line with legal requirements or internal company practices. Updates will be published on the website and take effect upon publication.