Last Updated: 21.07.2025 Effective Date: 21.07.2025

1. INTRODUCTION

At Bama Dekor, we take utmost care in protecting your personal data. This Privacy Policy explains how personal data is collected, used, stored, and protected when you visit our website, purchase our products, or use our services.

We operate in accordance with the Personal Data Protection Law No. 6698 (PDPL) and relevant legislation.

2. DATA CONTROLLER

Data Controller: Bama Dekor
Address: Seyfi Demirsoy Mahallesi, Ulubat Sk., 06160 - Altındağ / Ankara / Türkiye
Email: info@bamadekor.com
Phone: +90 555 431 60 90

3. PERSONAL DATA COLLECTED

3.1 Data We Collect Directly

• Name, surname
• Email address
• Phone number
• Delivery and billing addresses
• Date of birth (optional)
• Payment information (through secure payment systems)

3.2 Automatically Collected Data

• IP address
• Browser information
• Website usage data
• Cookie data
• Visit times and duration

4. PURPOSES OF DATA COLLECTION

We collect your personal data for the following purposes:

• Processing order transactions
• Providing customer services
• Product delivery
• Billing operations
• Measuring customer satisfaction
• Sending campaign and promotional information (with your consent)
• Fulfilling legal obligations
• Improving website performance

5. DATA SHARING

Your personal data is not shared with third parties except in the following cases:

• Legal requirements
• Cargo and delivery companies (only necessary information for delivery)
• Payment service providers (for secure payment processing)
• Technical support providers (with data security ensured)

6. DATA SECURITY

For the security of your personal data:

• SSL certificate is used
• Data storage on secure servers
• Regular security updates
• Limited access control
• Data encryption methods are implemented

7. DATA RETENTION PERIOD

Your personal data is retained for:

• Order data: 10 years (due to tax legislation)
• Contact information: Until account closure
• Website usage data: 2 years
• Marketing permissions: Until cancelled

8. YOUR RIGHTS

Your rights under PDPL include:

• Learning whether your personal data is processed
• Requesting information about your processed personal data
• Learning the purpose of processing and whether it is used appropriately for this purpose
• Knowing third parties to whom personal data is transferred domestically or abroad
• Requesting correction if personal data is processed incompletely or inaccurately
• Requesting deletion or destruction of personal data
• Requesting notification of correction, deletion, destruction operations to third parties to whom personal data has been transferred
• Objecting to the emergence of a result against the person solely through automated systems analysis of processed data
• Requesting compensation for damages in case of damage due to unlawful processing of personal data

9. COOKIES

Cookies are used on our website to improve user experience:

• Essential Cookies: Necessary for site functionality
• Analytics Cookies: To measure site performance
• Marketing Cookies: For personalized content (with consent)

You can manage your cookie settings through your browser.

10. CHILDREN'S PRIVACY

We do not knowingly collect personal data from children under 13. If we become aware that we have collected children's data without parental consent, we will delete it immediately.

11. POLICY CHANGES

This Privacy Policy may be updated when necessary. You will be informed about significant changes via email or website announcement.

12. CONTACT

For questions about our privacy policy:

• Address: Seyfi Demirsoy Mahallesi, Ulubat Sk., 06160 - Altındağ / Ankara / Türkiye
• Email: info@bamadekor.com
• Phone: +90 555 431 60 90

Data Protection Board: You can apply at kvkk.gov.tr to exercise your rights.

---

GDPR COMPLIANCE (FOR EU CUSTOMERS)

For customers in the European Union, we also comply with the General Data Protection Regulation (GDPR). You have additional rights under GDPR including:

• Data portability
• Right to be forgotten
• Right to restrict processing
• Right to object to processing

EU Representative: [If applicable] Contact for EU matters: [EU contact email]

INTERNATIONAL DATA TRANSFERS

When transferring personal data outside Turkey/EU, we ensure adequate protection through:

• Adequacy decisions
• Standard contractual clauses
• Binding corporate rules
• Other appropriate safeguards

AUTOMATED DECISION MAKING

We may use automated decision-making for:

• Fraud prevention
• Risk assessment
• Personalized recommendations

You have the right to request human intervention in these processes.

DATA BREACH NOTIFICATION

In case of a personal data breach, we will:

• Notify relevant authorities within 72 hours
• Inform affected individuals if there is high risk
• Take immediate action to contain the breach
• Conduct thorough investigation