KVKK Information Notice
KVKK Information Notice
This notice is not a consent request. Seller: MERT ARAZ; address: Mimar Sinan Mahallesi, Selmani Pak Caddesi, No: 48, İç Kapı No: 111, Üsküdar / İstanbul, Türkiye; email: info@byhendi.com; telephone: +905323417907; tax/registration: Vergi Dairesi: Üsküdar; VKN: 0730701617. Brand: Byhendi. Confirmation of controller capacity and relationship to the store: MERT ARAZ is the owner and data controller of the Byhendi store..
1. Collection, purpose and legal ground
Activity/data/purpose/legal-ground mapping for electronically collected form, account, order, address and support data and security records: Account: name/email/password hash and verification; address/checkout: recipient, phone, address and email; order: items, amount, reference and status; support: sender/message; security: rate limits/session; notifications: recipient/delivery status. No live card data collection exists in source.. Specific processing conditions are identified for each purpose; vague blanket consent is not requested.
2. Recipients and transfers
Necessary data may be shared within confirmed services with hosting, communication, carrier, payment and accounting recipients or legally authorised bodies. Actual recipients/purposes/countries: The application has PostgreSQL, Redis and SMTP configuration points; these do not identify provider legal entities or countries. The owner-confirmed carrier is DHL eCommerce. Hosting/SMTP/CDN provider identity and countries cannot be established from source code; the execution report records this limitation.. For international transfers, the KVKK mechanism is Source code cannot verify hosting or SMTP/CDN countries or an international-transfer mechanism. No claim of Türkiye-only processing or a particular safeguard is made; actual service agreements require legal review before publication.. No provider or country is assumed.
3. Retention
Periods depend on purpose, account status, legal retention and limitation/dispute needs. Category-specific periods/grounds: Accounts, addresses, checkout, orders, support and email event records are stored in PostgreSQL. Verification codes are valid for 10 minutes; expiry does not mean deletion. No automatic deletion schedule is implemented for those records; no invented retention period is stated.. Deletion/destruction/anonymisation process: Saved addresses can be deleted through the account. There is no general automatic account/record erasure or anonymisation flow. Access, correction and erasure requests can be sent through the official contact channel, subject to applicable legal retention duties.. Closing an account does not immediately erase every legal record. Actual technical/organisational safeguards: The source uses Django password hashing, CSRF protection, permission checks, email verification codes, rate limits, signed operation tokens and secure-cookie settings for HTTPS. Absolute security is not guaranteed.. Absolute security is not promised.
4. Rights and requests
Rights include asking whether data are processed; information about processing, purposes, use and recipients; correction; qualifying deletion/destruction and recipient notification; objection to adverse automated analysis and compensation for unlawful processing. Request and identity verification procedure: MERT ARAZ; info@byhendi.com; +905323417907. Responses follow legal deadlines.