Last updated:
Contents
This English version is provided for information. In case of any discrepancy between the Turkish and English versions, the Turkish version prevails.
This notice has been prepared under Art. 10 of Law No. 6698 on the Protection of Personal Data (KVKK) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform, to inform you about the personal data processed when you use the backhome.com.tr website, contact us and shop with us. This notice is not a contract and does not depend on your approval.
1. Data controller
Your personal data is processed by the company whose details are given below, in its capacity as data controller:
- Trade name: BACKHOME ELEKTRONİK TASARIM SANAYİ TİCARET LİMİTED ŞİRKETİ (“BACKHOME”)
- Address: Sahabiye Mahallesi, Nil Caddesi, No: 27/A, Kocasinan / Kayseri
- MERSIS no: 0129100276400001
- Phone: 0533 680 06 85
- Email: [email protected]
- Registered email (KEP): [email protected]
2. Personal data processed, purposes and legal grounds
The table below shows each processing purpose together with the data processed for that purpose and its legal ground under the KVKK.
| Purpose | Data processed | Legal ground (KVKK Art. 5) |
|---|---|---|
| Receiving your order, taking payment, delivering the product and invoicing | Name and surname or trade name; email, phone, delivery and billing address; where required for the invoice, Turkish national ID number or tax office and tax number; order, basket, amount, discount applied, payment method and payment result. Card details are processed by the payment institution and are not seen by us. | Formation and performance of the contract (Art. 5(2)(c)); legal obligation (Art. 5(2)(ç)) |
| Preparing personalised products (e.g. a doorbell with a name or logo) | The name, text or logo you want on the product and the correspondence in which you sent it | Performance of the contract (Art. 5(2)(c)) |
| Handling withdrawal, return, exchange, defective product and warranty requests | Identity and contact details; order, delivery, return and warranty records; product and damage photos; IBAN for refunds by bank transfer/EFT; correspondence | Performance of the contract (Art. 5(2)(c)); legal obligation (Art. 5(2)(ç)) |
| Opening and managing your membership account; order tracking | Name and surname, email, phone, password (stored in irreversible form), saved addresses, order history, favourite and recently viewed products | Formation and performance of the contract (Art. 5(2)(c)) |
| Answering your questions (contact form, WhatsApp, email, social media messages) | Name and surname, phone, email, your message and the photos you share | Being directly related to the formation of a contract (Art. 5(2)(c)); legitimate interest (Art. 5(2)(f)) |
| Fulfilling the record-keeping, retention and disclosure obligations arising from tax, commercial and consumer legislation | Order, invoice, payment and correspondence records | Expressly provided for by law (Art. 5(2)(a)); legal obligation (Art. 5(2)(ç)) |
| Establishing, exercising and protecting our rights in disputes | The relevant order, transaction and correspondence records | Establishment, exercise or protection of a right (Art. 5(2)(e)) |
| Ensuring the security and operation of the site | IP address, browser and device information, session logs, strictly necessary cookies and similar records | Legitimate interest (Art. 5(2)(f)) |
| Site measurement by our infrastructure provider ikas (runs independently of your cookie preference) | Visitor, session and browsing IDs written to your browser; the page visited and the previous page; products and categories viewed; search terms; add-to-basket actions and basket contents; checkout steps and order; if you are logged in, your member ID and email address | Legitimate interest (Art. 5(2)(f)) |
| Only if you give consent: sending promotional, new product and announcement messages | Name and surname, email, phone; the scope, date and place of the consent | Consent given under Art. 6 of Law No. 6563 on the Regulation of Electronic Commerce, and explicit consent (Art. 5(1)) |
See it in your room: The room or wall photo you upload to the See it in your room tool on product pages is processed only in your browser, on your own device; it is not sent to our servers or to third parties, and we do not see or store it.
We do not request special categories of personal data (such as health, biometric data, religion or political opinion); please do not share such information in forms and messages.
3. Transfer of personal data
Your personal data is transferred, limited to the purposes above and in accordance with Arts. 8 and 9 of the KVKK, to the following recipient groups:
| Recipient group | Purpose of transfer |
|---|---|
| Our e-commerce infrastructure provider ikas | Operation of the site and its basket, checkout and membership pages, hosting of the data, order emails and site measurement |
| Payment institution and banks | Taking and refunding payments, transaction security |
| Contracted carrier | Delivery of the product and return shipping (name and surname, address, phone) |
| E-invoice and e-archive service provider, accountant | Issuing invoices and keeping accounting records |
| WhatsApp (Meta) | Delivery of messages when you choose to write to our WhatsApp line |
| Google (Google Fonts) | Loading of fonts from Google’s servers each time a page is opened (IP address and browser information) |
| Commercial Electronic Message Management System (İYS) | Recording of consent and opt-out records for commercial electronic messages as required by law |
| Legal advisers | Protection of rights in disputes |
| Authorised public institutions and organisations, judicial authorities | Provision of information in the cases provided for by law and upon request |
Transfers abroad
As Google’s servers are located abroad, the information sent to Google for fonts when pages load is transferred abroad. If you choose to write to our WhatsApp line, your messages are transmitted via the WhatsApp (Meta) infrastructure, through servers abroad. These transfers are made under Art. 9 of the KVKK on the basis of your explicit consent (KVKK Art. 9/6-a; the permission given in the cookie banner) or a standard contract with the provider (KVKK Art. 9/4). Location of the servers on which our infrastructure provider ikas hosts the data: the cloud infrastructure used by ikas (current location details are in ikas’s privacy policy).
4. Methods of collecting personal data
- Through forms on the site (by automated means): membership form, checkout page, My Account page, contact form, newsletter form, order tracking form,
- While you use the site (by automated means): strictly necessary cookies and similar records, ikas’s site measurement,
- Through messages you send to our WhatsApp, email, phone and social media accounts,
- Through transaction results received from the payment institution and the carrier (payment confirmation, delivery and return information),
- Through written applications, withdrawal forms and return parcels you send us (by non-automated means).
Detailed information on cookies is in the Cookie Policy.
5. Retention periods
- Information and documents relating to orders: 3 years (Distance Contracts Regulation).
- Invoices and accounting records: 5 years under tax legislation; commercial books and documents: 10 years under the Turkish Commercial Code (TTK).
- Consent and opt-out records for commercial electronic messages: 3 years after the consent ceases to be valid.
- Membership details: for as long as your membership continues; after membership ends, only for the statutory periods above.
- The name, text or logo you send for a personalised product: for the period needed for the order and any return or defect processes; after that, limited to the statutory retention period for the order.
- Contact correspondence: until your request is resolved, and then for the statutory limitation periods for possible disputes.
When the period expires, your data is deleted, destroyed or anonymised.
6. Your rights
Under Art. 11 of the KVKK, you have the right to learn whether your personal data is processed; to request information if it has been processed; to learn the purpose of processing and whether it is used in line with that purpose; to know the third parties, domestically or abroad, to whom it is transferred; to request its correction if it is incomplete or inaccurate, and its erasure or destruction under the conditions in Art. 7 of the KVKK, and to request that these operations be notified to the third parties to whom it has been transferred; to object to a result against you arising from analysis exclusively by automated systems; and to claim compensation if you suffer damage because of unlawful processing.
You can also update your membership details yourself on the My Account page. You can withdraw the explicit consent and the commercial message consent you have given at any time; details are in the Explicit Consent Statement.
7. Applications
You can send your requests regarding your rights in Turkish, in accordance with the Communiqué on the Procedures and Principles of Applications to the Data Controller, by one of the following methods:
- By a petition bearing your wet signature, delivered in person, by post or through a notary to Sahabiye Mahallesi, Nil Caddesi, No: 27/A, Kocasinan / Kayseri,
- By KEP to [email protected], signed with a secure electronic signature or mobile signature,
- From the email address registered in our system to [email protected].
Your application must include your name and surname and (for written applications) your signature, your Turkish national ID number (if you are not a Turkish citizen, your nationality and passport or identity number), your address for notifications, your email address and phone number if any, and the subject of your request.
We will resolve your application free of charge as soon as possible according to its nature and no later than 30 days; if the response is to be given in writing and exceeds ten pages, a processing fee of TRY 1 may be charged for each additional page. If your application is rejected, if you find the response insufficient or if no response is given in time, you may lodge a complaint with the Personal Data Protection Board within 30 days of learning of the response and in any case within 60 days of the application date.