Personal Data Protection

When you create an account on our website, place an order, use our contact and return forms, speak with our customer services team or visit our stores, we process your identity data (name, surname; Turkish ID or tax number where required for invoicing), contact data (phone number, e-mail, delivery and billing address), customer transaction data (order, invoice, return and warranty records), payment data (payment method and instalment details; your credit card details are never stored), transaction security data (IP address, cookie and session records) and your marketing preferences.

This data is collected through the forms on our website, e-mail and phone conversations, our stores and cookies, by fully or partly automated means or by non-automated means forming part of a data filing system. We do not request or process special categories of personal data such as health, religious or biometric data.

Your personal data is processed in line with the principles set out in Article 4 of the Law, for the following purposes:

• Managing your account and orders, collecting payment and issuing invoices
• Delivery, assembly and installation of products; warranty, return and exchange processes
• Responding to your questions, requests and complaints; after-sales support
• Fulfilling our obligations under tax, commercial, consumer and e-commerce legislation
• Ensuring the security of our website and stores, and preventing fraud
• Subject to your explicit consent, sending campaign and new product announcements and personalised offers

These activities rely on the legal grounds listed in Article 5 of the Law: the establishment or performance of a contract, compliance with our legal obligations, processing expressly provided for by law, the establishment, exercise or protection of a right, and our legitimate interests, provided your fundamental rights and freedoms are not harmed. Marketing activities rely solely on your explicit consent, which you may withdraw at any time.

Your personal data is never sold. Limited to the purposes above and only where necessary, it may be shared with cargo and installation service providers, banks and payment institutions, the suppliers providing our website infrastructure and IT services, our legal and financial advisers, our group companies, and — upon lawful requests — authorised public institutions; and, where you have given explicit consent, with messaging service providers and Türkiye's Commercial Electronic Message Management System (İYS). Transfers abroad are made only under the conditions set out in Article 9 of the Law.

Your personal data is retained for as long as the processing purpose requires and for the periods prescribed by legislation; at the end of these periods it is deleted, destroyed or anonymised. To keep your data secure, we take the technical and organisational measures required under Article 12 of the Law: our website is encrypted with SSL, payments are completed under bank protection with 3D Secure, and data can only be accessed by authorised personnel.

Under Article 11 of the Law you have the right to: learn whether your personal data is processed; request information if it has been; learn the purpose of processing and whether the data is used in line with that purpose; know the third parties to whom it is transferred; request correction of incomplete or inaccurate data; request its deletion or destruction under the conditions of Article 7; request that these corrections and deletions be notified to the third parties to whom the data was transferred; object to a result arising against you from analysis carried out exclusively by automated systems; and claim compensation for damages caused by unlawful processing.

You may submit requests concerning these rights, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller: in writing to our address above with your identity details and the subject of your request, via our registered e-mail (KEP) address with a secure electronic signature, or from the e-mail address registered in our system to orpak@orpak.com.tr. Applications are concluded within 30 days at the latest.