Tedor Carpet – Personal Data Policy (GDPR Compliant)

1. General Principles Tedor Carpet is committed to protecting the personal data of its international customers. All data processing activities are carried out in compliance with Turkish Law, the KVKK (Turkish Personal Data Protection Law), and the EU General Data Protection Regulation (GDPR).

2. Data Collected We may collect the following information:

  • Name, surname, address, email, phone number
  • Payment details (credit card, bank transfer, SWIFT information)
  • Logistics and delivery details
  • Technical data related to website usage (IP address, cookies, browser information)

3. Purposes of Data Processing Personal data is processed for:

  • Order management, payment processing, and product delivery
  • Providing customer support services
  • Managing international logistics and customs procedures
  • Fulfilling legal obligations
  • Improving user experience and conducting marketing activities (only with explicit consent)

4. Data Retention

  • Personal data is retained as long as necessary to fulfill contractual and legal obligations.
  • Once the retention period expires, data is securely deleted or anonymized.

5. International Data Transfer

  • Data may be shared with third parties such as logistics providers and payment processors.
  • Transfers are carried out with appropriate safeguards in line with GDPR and KVKK.
  • Data is shared only when necessary to complete the order.

6. Customer Rights (GDPR & KVKK) Customers have the right to:

  • Access their personal data
  • Request correction of inaccurate or incomplete data
  • Request deletion of their data (“right to be forgotten”)
  • Object to data processing activities
  • Request data portability

All requests can be submitted via [insert official email address].

7. Security Measures

  • SSL‑certified secure connections for all transactions
  • Encrypted payment infrastructure
  • Physical and digital safeguards against unauthorized access
  • Regular system updates and audits

8. Legal Framework This policy is governed by Turkish Law, KVKK, and GDPR. In case of disputes, Istanbul Courts shall have jurisdiction.