Privacy Policy
This policy explains how personal data is processed when using esnafbuy. As the operator is based in Türkiye and enables business within the EU, we observe both the EU GDPR and the Turkish Data Protection Law (KVKK No. 6698).
1. Controller
Controller / Veri Sorumlusu: [Company], [address], Türkiye, email: [privacy@esnafbuy.com].
2. Data processed
Master data (company, name, address), contact data, account data, order and transaction data, usage data (logs, IP address, timestamps) and communication content.
3. Purposes & legal bases
Contract performance and pre-contractual steps (Art. 6(1)(b) GDPR; KVKK Art. 5).
Compliance with legal obligations (c), legitimate interests such as security and abuse prevention (f), and consent (a), e.g. for non-essential cookies.
4. Cookies & analytics
We use strictly necessary cookies and — only with consent — optional cookies. Consent can be withdrawn at any time via the cookie notice.
5. Recipients & processors
Hosting/infrastructure services, payment providers (e.g. iyzico) and map services (OpenStreetMap/Nominatim) receive data as necessary to provide the service.
6. International transfers
For transfers between Türkiye and the EU we ensure appropriate safeguards (e.g. standard contractual clauses or explicit consent under KVKK).
7. Retention
Data is deleted once the purpose ceases and no statutory retention periods apply.
8. Your rights
You have the right to access, rectification, erasure, restriction, portability and objection (GDPR) and the corresponding rights under KVKK Art. 11.
Complaints can be filed with the competent supervisory authority (EU DPA or the Turkish KVKK authority).
9. Privacy contact
Please direct privacy requests to: [privacy@esnafbuy.com].