Privacy and personal data

Data controller

Mayam Örgü is a hand-crochet bag workshop run by Zümrüt Ogün under the Turkish tradesperson tax exemption. Zümrüt Ogün is the controller of your personal data. You can reach me at info@mayamorgu.com.

What I collect

• When you order: your name, email address, phone number, delivery address, order note, chosen payment method and the bags in your order.
• When you write to me by email or WhatsApp: the conversation and your contact details.
• While you browse: the pages you view, the site you came from, your country and device type. These statistics are collected without cookies and do not build a profile that identifies you.
• Your cart and favourites stay in your own browser and never reach me.

What I use it for

• To take, confirm, prepare and ship your order and to write to you about it. Legal basis: entering into and performing the contract (KVKK art. 5/2-c).
• To meet record-keeping duties under consumer and tax law. Legal basis: legal obligation (KVKK art. 5/2-ç).
• To protect the order form from abuse and to improve the site. Legal basis: legitimate interest (KVKK art. 5/2-f).

I don't use your details for advertising or marketing, and I don't sell them to anyone.

Who it is shared with

• The courier: the name, phone number and address the shipment needs.
• Payment: my bank for transfers; the payment provider for card payments. Your card details never reach me.
• Site infrastructure: the site, order records and their backups are hosted on Cloudflare. The bot check on the order form (Turnstile) and the visit statistics are Cloudflare services too.
• Email: order notifications are sent through Cloudflare and kept in my inbox on Google's Gmail. If you write on WhatsApp, the conversation is kept by Meta's WhatsApp.
• Public authorities, where the law requires it.

Transfers abroad

Cloudflare, Google and Meta may keep their servers outside Turkey, so the details above may be transferred to those services' servers abroad to fulfil your order.

How long I keep it

I keep order records for as long as consumer and tax law require. After that I delete them or make them anonymous.

Your rights

Under article 11 of the KVKK you have the right to:

• learn whether your personal data is processed and, if so, ask for information about it,
• learn why it is processed and whether it is used for that purpose,
• know who it has been transferred to, in Turkey or abroad,
• have it corrected if it is incomplete or wrong,
• have it deleted or destroyed, and have a correction or deletion passed on to those it was transferred to,
• object to a result against you that comes only from automated analysis,
• claim compensation if you are harmed by unlawful processing.

How to make a request

Write to info@mayamorgu.com with enough information for me to confirm who you are. I answer free of charge within 30 days at the latest.