Overview
This Privacy Notice explains how GAYA GIDA İTHALAT İHRACAT LİMİTED ŞİRKETİ processes personal data in connection with accenzy.com, customer orders and related services. GAYA is the data controller for the processing activities described here, except where another party acts as an independent controller under applicable law.
1. Data Controller
GAYA GIDA İTHALAT İHRACAT LİMİTED ŞİRKETİ
Registered office: Yakuplu Mah. 200. Sk. İnşaat Blok No: 7 İç Kapı No: 2, Beylikdüzü, İstanbul, Türkiye
MERSİS: 0389139196600001
VKN: 3891391966
Phone: +90 554 141 53 05
2. Personal Data We Process
Depending on how you use the site, we may process identification and contact data; billing and delivery information; order, return and customer-service records; payment transaction references; fraud and security signals; website/device information such as IP address, browser data and cookie identifiers; and marketing preferences. We do not intend to store customers’ full payment-card numbers or CVV. Card data should be processed through the bank or authorized payment provider used at checkout.
3. Why We Process Personal Data
We process personal data to create and fulfil orders; take and verify payments; arrange delivery and returns; provide customer support; detect and prevent fraud; maintain website and account security; comply with accounting, tax, consumer, e-commerce and other legal obligations; establish, exercise or defend legal claims; improve our services through permitted analytics; and send marketing communications where a valid legal basis or consent exists.
4. Legal Bases
Under Turkish Personal Data Protection Law No. 6698 (KVKK), processing may rely on the necessity to establish or perform a contract, compliance with a legal obligation, establishment/exercise/protection of a right, legitimate interests that do not override the fundamental rights and freedoms of the data subject, and explicit consent where the law requires consent. We do not treat consent as the legal basis where another lawful basis properly applies.
5. Who We Share Data With
Where necessary for the purposes described above, data may be shared with authorized banks and payment providers, carriers and fulfilment providers, website hosting and technology providers, email/customer-support providers, fraud and security providers, professional advisers, accountants, auditors, public authorities and other parties where disclosure is required by law. We limit disclosure to what is reasonably necessary for the relevant purpose.
6. International Transfers
Because ACCENZY may use service providers and fulfilment partners in more than one country, personal data may be transferred outside Türkiye. Where Turkish data-protection law applies, cross-border transfers are carried out using a lawful transfer mechanism and safeguards required by KVKK Article 9 and related secondary legislation.
7. Cookies and Similar Technologies
Essential cookies may be used where necessary for functions such as security, cart operation and checkout. Analytics, personalization or advertising cookies that require consent will not be activated until the appropriate consent is obtained. Visitors must be able to reject non-essential cookies as easily as they can accept them and can later change their preferences through the cookie settings tool.
8. Marketing Communications
Marketing emails or messages are sent only where permitted by applicable law. Consent for marketing must be separate from acceptance of the Terms or Privacy Notice and must not be pre-selected. Customers can unsubscribe at any time using the method provided in each marketing message. Where Turkish commercial-message rules apply, permissions and withdrawals are handled consistently with the İleti Yönetim Sistemi (İYS) requirements.
9. Retention
We retain personal data only for as long as required for the purpose for which it was collected and for applicable legal retention periods. E-commerce and distance-sales transaction records that must be retained under Turkish rules are kept for at least three years. Longer retention may apply to accounting, tax, commercial or legal-claim records where required by law.
10. Security
We use reasonable administrative, technical and organizational safeguards appropriate to the nature of the data and the risks involved. No internet transmission or storage system is completely secure, but we work to reduce risk and restrict access to authorized persons and service providers.
11. Your Rights
Where KVKK applies, data subjects may exercise the rights provided under Article 11, including requesting information about processing, learning the purpose of processing and recipients, requesting correction or deletion where conditions are met, objecting to certain adverse results of exclusively automated processing, and requesting compensation where unlawful processing causes damage. Additional rights may apply under the mandatory law of the customer’s place of residence.
12. Exercising Your Rights
Requests may be submitted through the legally permitted channels using the contact details above. We may request information necessary to verify identity before responding. Requests are handled within the periods required by applicable law.
13. Changes to This Notice
We may update this Notice when our processing activities, service providers or legal requirements change. The latest version will be published on accenzy.com with the revision date.