Illumination Text on the Protection of Personal Data (KVKK / GDPR)

As Sobroots ("Carry Your Roots"), the security and privacy of your personal data are of utmost importance to us. In this context, as the data controller, we would like to inform you about how we process your personal data, the purposes for which we use it, and your rights, in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK") and, where applicable, the General Data Protection Regulation ("GDPR").

1. What Personal Data Do We Process?

During your visits to our website and your purchases, we may process the following personal data:

• Identity Data: Name, surname.
• Contact Data: Email address, phone number, billing and delivery address.
• Customer Transaction Data: Order history, request and complaint information, billing information.
• Transaction Security Data: IP address, website login-logout information.

2. Purposes of Processing Your Personal Data

Your collected personal data is processed for the following purposes:

• Receiving, preparing, and delivering orders (including our operations in Turkey, Europe, and the Far East),
• Issuing invoices and fulfilling legal obligations,
• Providing customer service and resolving requests and complaints,
• With your explicit consent, informing you about our products and campaigns (announcements regarding our handmade leather bags).

3. To Whom and For What Purposes Your Personal Data May Be Transferred

Your personal data may be transferred, only for the purposes stated above, to:

• Cargo and logistics companies (for domestic and international deliveries),
• Payment infrastructure providers,
• Authorized public institutions and organizations in accordance with the relevant legal legislation,
• Our business partners from whom we receive e-invoice and accounting services. For shipments abroad (including Europe and the Far East), only the data necessary to ensure delivery is shared with international logistics companies. Since we do not have a physical store, all our processes are managed entirely in the digital environment.

4. Method and Legal Reason for Collecting Personal Data

Your personal data is collected electronically through our website via membership forms, order screens, and communication forms. Our processing activities are based on the legal grounds that "it is necessary for the establishment or performance of a contract" and "it is mandatory for the data controller to fulfill its legal obligation."

5. Your Rights

Under applicable data protection laws, you have the right to request access to your personal data, to have it corrected or deleted, to restrict or object to its processing, and to request data portability.

You can send your requests to us via the communication channels available on our website.

Sobroots - Carry Your Roots