Sushi Sepeti (“Company”) attaches great importance to the protection of your personal data. In this regard, we take the necessary technical and administrative measures in full compliance with the Law on the Protection of Personal Data No. 6698 (“LPPD”) and all other applicable legislation.

This Personal Data Protection and Privacy Policy (“Privacy Policy”) has been prepared to inform our users about the processing, protection, storage, and transfer of personal data obtained through the sushisepeti.com.tr website and mobile application.

LEGAL BASIS AND GENERAL PRINCIPLES

In the processing of personal data, the following principles are observed:

• Compliance with the law and the rules of good faith,

• Accuracy and, where necessary, being up-to-date,

• Processing for specific, explicit, and legitimate purposes,

• Being relevant, limited, and proportionate to the purpose for which they are processed,

• Retention for the period stipulated in the relevant legislation or required for the purpose for which they are processed.

PERSONAL DATA PROCESSED

The following types of data may be collected and processed by Sushi Sepeti:

• Identity and contact information (name, surname, email, phone, address, etc.),

• Purchase details, payment and billing information,

• IP address, cookie data, device information,

• Information shared via social media accounts,

• Call center voice recordings, email correspondences, etc.

PURPOSES OF PROCESSING PERSONAL DATA

Your personal data is processed for the following purposes:

• Fulfilling legal obligations,

• Performance of sales contracts and provision of customer services,

• Improving user experience,

• Carrying out marketing, campaigns, promotions, and advertising activities,

• Conducting surveys and customer satisfaction analyses,

• Preventing fraud and ensuring security.

DATA SHARING AND STORAGE

Your personal data may be shared, in line with the purposes stated above, with our business partners, suppliers, IT service providers, payment institutions, and official authorities, within necessary limits.

Your data is stored securely on domestic and international servers for the period required by relevant legislation. Data whose retention period has expired is deleted, destroyed, or anonymized.

RIGHTS OF THE DATA SUBJECT

Pursuant to Article 11 of the LPPD, data subjects have the right to:

• Learn whether their personal data is being processed,

• Request information if it has been processed,

• Learn whether it is used in accordance with its purpose,

• Learn whether it has been transferred to third parties,

• Request the correction of incorrect data,

• Request deletion or destruction,

• Object to adverse outcomes resulting from analysis by automated systems,

• Demand compensation for damages in case of unlawful processing.

To exercise these rights, you may apply with a secure electronic signature to [email protected].

COOKIE POLICY

Through the sushisepeti.com.tr website and mobile applications, user preferences, visit history, device and browser information may be collected via cookies and similar technologies.

Cookies are used to improve user experience, provide personalized content, and conduct advertising and marketing activities. Cookie preferences can be changed from your browser settings.

SECURITY AND DATA PROTECTION MEASURES

To ensure the security of your data, our Company takes technical and administrative measures. Unauthorized access to data is prevented; the confidentiality, integrity, and availability of data are maintained.

THIRD-PARTY LINKS

The sushisepeti.com.tr website and applications may contain links to third-party sites. Our Company is not responsible for the privacy practices of these sites.

POLICY CHANGES

Sushi Sepeti reserves the right to make changes to this policy. Updates will be announced at www.sushisepeti.com.tr.