This notice explains processing of personal data for membership, orders, proforma invoices, support and website use under Turkish Law No. 6698 (KVKK). Updated: 14 September 2026.
1. Data controller
[ŞİRKET UNVANI], [ADRES]; registration/MERSIS [MERSİS NO]; tax number [VKN]; telephone [TELEFON]; registered electronic mail [KEP]. Website: alldieselparts.com.tr. Contact: [email protected].
This is an information notice, not consent. Acknowledging it does not constitute marketing consent or consent to every processing activity.
2. Data, purposes and legal grounds
- Account: name, surname, email and account transactions are processed to establish and perform the membership relationship (Article 5(2)(c)). Necessary access/security records are processed for legitimate interests, subject to protection of your fundamental rights (5(2)(f)). Optional information is not a registration requirement.
- Orders and proformas: contact, delivery and billing details, goods, quantity, price, proforma and payment status are used to establish and perform the sales contract (5(2)(c)). Legally required tax and invoice information is processed for statutory requirements and legal obligations (5(2)(a) and (ç)). Refunds may require the account holder, IBAN and relevant payment evidence. Never send card details, CVV, PIN or one-time passwords.
- Communication: name, contact information, message and necessary attachments are processed for contract-related support (5(2)(c)), establishing or defending rights (5(2)(e)), legal requests (5(2)(ç)), or general enquiries under balanced legitimate interests (5(2)(f)). Do not submit unnecessary identity documents, health data or another person's data.
- Optional newsletters: email address and preferences are processed on consent where required (5(1)); commercial electronic message permission is obtained separately. Neither is a condition of shopping or membership. You can unsubscribe using the message link or our contact email. Necessary order/service messages are separate.
- Website operation: necessary IP, time, browser/session and error records support operation and security under balanced legitimate interests (5(2)(f)); legally required records rely on 5(2)(a)/(ç). Non-essential analytics/advertising must be separately explained by provider, purpose and duration, with appropriate choices and consent where required. This notice is not blanket cookie consent.
3. Collection
Data is collected electronically through forms, correspondence, order/proforma, payment/delivery processes and technical records, automatically or partly automatically, and from written records forming part of a filing system.
4. Recipients and transfers
- Hosting and email: Netinternet infrastructure in Türkiye, limited to information necessary for the service and security.
- Delivery: [KARGO/LOJİSTİK SAĞLAYICISI] receives necessary recipient, address, contact and shipment details.
- Payment/refunds: relevant banks receive necessary account-holder, amount and reference information.
- Accounting/e-invoicing: authorised accountant and [MUHASEBE/E-FATURA HİZMET SAĞLAYICISI] receive legally necessary fiscal records.
- Authorised authorities, courts and legal advisers receive information required by law or for disputes.
Domestic transfers follow Article 8 and the corresponding Article 5 grounds, with data minimisation. Hosting in Türkiye does not establish that every third-party process is domestic. If another overseas service or international delivery is used, recipient/country, data and purpose must be disclosed and an appropriate Article 9 transfer mechanism applied. This notice does not replace that mechanism.
5. Retention and protection
Data is retained only for the relevant purpose, mandatory retention period and necessary establishment or defence of rights. When all grounds cease, it is deleted, destroyed or anonymised according to law. Account deletion does not override statutory retention of invoices. The controller must implement appropriate technical and organisational measures under Article 12.
6. Your rights and applications
Under Article 11, you may learn whether data is processed, request information, learn the purposes and recipients, request correction or lawful erasure/destruction and notification to recipients, object to adverse results produced solely by automated analysis, and seek compensation for unlawful processing.
Apply in writing to [ADRES], by registered electronic mail to [KEP], using legally accepted secure electronic/mobile signature methods, or from your email already registered with us to [email protected]. Include name/surname, signature for written requests, legally required identification fields, notification address, optional email/telephone and the subject; only necessary identity verification is requested. Applications are answered within 30 days, normally free, with a lawful tariff only for additional costs. Subject to legal requirements, a complaint may be made to the Board within 30 days of learning the response and in any event within 60 days of the application.
Sources: KVKK information obligation; Application and complaint procedure; Netinternet email service.
Additional optional product features
When you request a stock notification, your email, the product and request record are processed to perform that notification service under Article 5(2)(c); the request is not advertising permission. If you submit a review, your name/display name, review and rating may be shown to visitors under 5(2)(d), limited to your intention to make that review public. Account/email and review-handling records rely on 5(2)(c) to provide the service and balanced legitimate interests under 5(2)(f) to prevent abuse. Do not put private contact details or unnecessary personal data in a review. A partner-advertising preference is not unlimited permission to transfer data to unspecified recipients; recipients, purposes, data and legal grounds must be separately disclosed before such sharing.