KVKK Privacy Notice

PDPL CLARIFICATION TEXT (Modalco)

Data Controller: MODALCO
Address: Karşıyaka mh. Odabaşı Cd. No:4089/3 Mamak/Ankara
E-mail: info@modalco.com

In accordance with the Personal Data Protection Law No. 6698 (“PDPL”), we inform you, in our capacity as the data controller, regarding your personal data processed through our website www.modalco.com (“Site”) and our physical/call center channels.

1. Which Data Do We Process?

  • Identity Information: Full name, Turkish ID number (optional and where necessary), billing details.
  • Contact Information: E-mail, phone, address.
  • Customer Transaction / Order: Cart, order history, return/cancellation requests, support logs.
  • Payment/Information Note: Card payments are received via the payment service provider; card data is not stored in Modalco systems.
  • Marketing: Campaign preferences, consent records, newsletter membership, notification preferences.
  • Transaction Security / Log: IP address, browser information, device information, session logs.
  • Cookie Data: Data regarding strictly necessary, performance, functional, and advertising/targeting cookies (details are in the Cookie Policy).

2. For Which Purposes Do We Process Data?

  • Establishment/performance of the contract: Receipt of orders, collection of payments, delivery and return processes.
  • Customer relations and support: Request/complaint management, account and membership operations.
  • Legal obligations: Invoice/ledger records arising from tax and commercial legislation, requests from authorized institutions.
  • Legitimate interest: Fraud and security audits, business development, measuring the Site's performance.
  • Cases requiring explicit consent: Commercial electronic messages (SMS/e-mail/push), advertising cookies, profiling.

3. Legal Bases (PDPL art. 5/2 and 5/1)

Your personal data is processed based on the following legal grounds:

  • Establishment/performance of a contract (art. 5/2-c)
  • Fulfillment of a legal obligation (art. 5/2-ç)
  • Establishment, exercise, or protection of a right (art. 5/2-e)
  • Legitimate interest (art. 5/2-f) — security, fraud prevention, product/service development
  • Explicit consent (art. 5/1) — for marketing messages and advertising cookies

4. Collection Methods

  • Directly from you: Membership/order forms, support channels, return processes.
  • Automated means: Cookies, analytical tools, log records.
  • From third parties: Cargo/payment service providers, marketing consent infrastructures (only where necessary).

5. Transferred Parties and Purposes

  • Cargo/logistics companies: Address and contact information for delivery processes.
  • Payment institutions/banks: Payment transactions, fraud prevention.
  • Legally authorized public institutions/officials: Upon request as required by legislation.
  • Suppliers/business partners: IT infrastructure, call center, customer relations, SMS/e-mail services.
    In the event of data transfer abroad (e.g., cloud services, analytical tools, e-mail services), compliance with explicit consent or adequate protection conditions determined by the Board is ensured within the scope of PDPL art. 9.

6. Retention Periods

Data is kept for the minimum period necessary for the purpose, in accordance with the periods stipulated in the relevant legislation and the Modalco Retention-Destruction Policy. Examples:

  • Order and invoice records: 10 years as required by Tax/Commercial law.
  • Customer support records: 3 years from the transaction.
  • Marketing consent/rejection records: Consent validity + 3 years.
    Once the period expires, data is securely deleted, destroyed, or anonymized.

7. Your Rights (PDPL art. 11)

By applying to us, you have the right to;

  • Learn whether your personal data is being processed,
  • Request information if it has been processed,
  • Learn whether it is being used in accordance with its purpose,
  • Know the third parties to whom it is transferred domestically/abroad,
  • Request the correction or deletion of the data,
  • Object to the emergence of an unfavorable result as a result of analysis based on automated systems,
  • Request compensation for damages due to unlawful processing.

8. Application Method

You may submit your requests within the scope of the PDPL via the “Data Subject Application Form” or through the following channels:

  • E-mail: info@modalco.com

Mail: Karşıyaka mh. Odabaşı Cd. No:4089/3 Mamak/Ankara – “PDPL Information Request”

  • Form: modalco.com/pages/kvkk-basvuru-formu
    Applications are concluded within at most 30 days according to their nature; in cases requiring additional costs, a fee may be charged according to the tariff determined by the Board.

9. Cookies and Commercial Messages

Cookie types, their purposes, and management are explained in the Cookie Policy. Advertising/targeting cookies and the sending of commercial electronic messages (SMS/e-mail/push) are subject to your explicit consent; you can withdraw your consent at any time via account settings or the unsubscribe links in the messages.

10. Security

Personal data is protected by administrative and technical measures (access authorization, encryption, logging, penetration tests, contractual security provisions, etc.). Contracts compliant with the PDPL are executed with suppliers.

11. Changes

This Clarification Text may be updated. The most current version is published on the Site; significant changes may be announced separately.