Data Controller
As Emre Koçak - Outdooria (the "Company"), acting as data controller within the scope of Law No. 6698 on the Protection of Personal Data ("KVKK"), we attach great importance to the protection of your personal data.
This Disclosure Text has been prepared to inform you about the purposes for which your personal data is processed, to whom and for what purposes it may be transferred, the method and legal basis of personal data collection, and your rights under the KVKK.
Data Controller Contact Information: Emre Koçak - Outdooria — Address: Karacakaya Cad. No:83 Siteler/Ankara/Türkiye — Web: outdooria.com.tr — Email: [email protected]
Personal Data Processed
The following categories of personal data are processed by our Company:
Identity Information: Name, surname, Turkish ID number (where invoicing is required).
Contact Information: Phone number, email address, delivery and billing address.
Customer Transaction Information: Order details, order history, request and complaint records, invoice information.
Financial Information: Bank account details, IBAN (for refund transactions), payment records. Your credit card information is not stored by our Company; payment transactions are processed through a secure payment infrastructure.
Digital Footprint Information: IP address, cookie data, browser type, operating system, session information, on-site browsing data.
Marketing Information: Newsletter subscription preferences, campaign participation information.
Purposes of Processing Personal Data
Your personal data is processed for the following purposes:
Fulfillment of contractual obligations: Receiving, processing, and delivering your orders; managing return and exchange processes.
Fulfillment of legal obligations: Invoicing, obligations under tax legislation, information retention obligations arising from consumer legislation.
Customer services: Evaluating your requests, complaints, and suggestions; providing after-sales support.
Communication: Providing notifications regarding order status, cargo tracking, and your account.
Marketing and promotion: Sending commercial electronic messages with your explicit consent, informing you about campaigns and offers.
Site security and improvement: Ensuring site security, preventing fraud, improving service quality, enhancing user experience.
Statistical analysis: Conducting statistical studies on anonymized data.
Legal Basis for Processing Personal Data
Your personal data is processed based on the following legal grounds within the scope of Article 5 of the KVKK:
Establishment or performance of a contract: Execution of order, delivery, and return processes under the sales contract.
Explicitly stipulated by law: Obligations under the Tax Procedure Law, Turkish Commercial Code, Consumer Protection Law, and related legislation.
Legitimate interest of the data controller: Ensuring site security, improving service quality, preventing fraud (provided that fundamental rights and freedoms of the data subject are not harmed).
Explicit consent: Sending commercial electronic messages for marketing purposes, use of cookies (except strictly necessary cookies).
Transfer of Personal Data
Your personal data may be transferred to the following parties in line with the purposes stated above and in accordance with Articles 8 and 9 of the KVKK:
Business partners and service providers: Cargo and logistics companies (for delivery), payment institutions and banks (for payment transactions), information technology service providers (hosting, email, analytics), accounting and financial advisory service providers.
Authorized public institutions and organizations: To relevant public institutions and organizations upon request for the fulfillment of legal obligations.
International transfer: Some service providers used within the scope of analytics and infrastructure services (servers, email, analytics tools) may be located abroad. These transfers are carried out to countries that provide adequate protection within the scope of Article 9 of the KVKK or where the data controller commits to providing adequate protection.
Retention Period of Personal Data
Your personal data is retained for the duration required by the processing purposes and for the legal retention periods stipulated by the relevant legislation.
Commercial books and records: 10 years under the Turkish Commercial Code. Invoices and financial documents: 5 years under the Tax Procedure Law. Consumer transactions: 3 years under the Consumer Protection Law. Digital footprint data: Maximum 2 years from the cessation of the processing purpose.
Personal data whose retention period has expired is deleted, destroyed, or anonymized within periodic destruction periods or upon the application of the data subject.
Measures Regarding Personal Data Security
Our Company takes technical and administrative measures to ensure an appropriate level of security in order to prevent unlawful processing and access to your personal data and to ensure the protection of your personal data.
Technical measures: Ensuring data transmission security with SSL/TLS encryption, use of 3D Secure payment infrastructure, firewall and intrusion detection systems, regular security updates and patch management, access controls and authorization mechanisms.
Administrative measures: Maintaining a personal data processing inventory, informing employees about personal data protection, establishing response procedures in case of data breaches, executing data processing agreements with service providers.
Rights of the Data Subject
Pursuant to Article 11 of the KVKK, you have the following rights as a data subject:
Learning whether your personal data is processed. Requesting information if your personal data has been processed. Learning the purpose of processing of your personal data and whether they are used in accordance with their purpose. Knowing the third parties to whom your personal data is transferred domestically or abroad.
Requesting correction if your personal data has been incompletely or inaccurately processed. Requesting deletion or destruction of your personal data within the framework of the conditions stipulated in Article 7 of the KVKK.
Requesting notification of correction, deletion, and destruction operations to third parties to whom your personal data has been transferred. Objecting to the emergence of a result against you through the analysis of processed data exclusively by automated systems. Requesting compensation for damages in case you suffer loss due to unlawful processing of your personal data.
To exercise your rights, you may apply in writing to [email protected] with documents verifying your identity, or through other methods determined by the Personal Data Protection Board. Your applications will be concluded free of charge within 30 days at the latest; if the transaction requires an additional cost, the fee in the tariff determined by the Board may be charged.
Changes to the Disclosure Text
Our Company reserves the right to update this Disclosure Text in line with legal regulations and changes in Company policies. Updates will be published on this page and the "Last Updated" date will be changed.
In case of significant changes, you will be notified at your registered email address. Your continued use of our Site means that you accept the updated Disclosure Text.
This Disclosure Text was last updated on 09.04.2026.
Contact: Emre Koçak - Outdooria — Address: Karacakaya Cad. No:83 Siteler/Ankara/Türkiye — Web: outdooria.com.tr — Email: [email protected]