Personal Data Protection (KVKK) Information Notice

This Information Notice has been prepared in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK") to inform visitors and customers of www.umaysoba.com about how their personal data is collected, processed, protected, and what rights they have regarding their personal information.

1. Data Controller

As the Data Controller within the scope of the Turkish Personal Data Protection Law No. 6698 (KVKK), Umay Soba attaches great importance to protecting the confidentiality and security of personal data obtained through website visits, product inquiries, online orders, customer communications, and after-sales services.

Company: Umay Soba

Website: www.umaysoba.com

E-mail: info@umaysoba.com

Phone: +90 543 874 68 32

Address: Osmangazi Neighborhood, Ortapazar Street, Rasım Kut Apartment No:24/1, Osmangazi, Bursa, Türkiye

2. Why Do We Process Your Personal Data?

Your personal data may be processed for purposes including providing information about our pellet stoves, wood-burning stoves, fireplace stoves, stove accessories, and other products, processing your orders, verifying payments, arranging deliveries, providing after-sales services, handling warranty procedures, and improving customer satisfaction.

Your personal data may also be processed for the following purposes:

Managing order and sales processes
Verifying payment transactions
Preparing and shipping purchased products
Providing warranty and after-sales support
Managing returns and withdrawal requests
Responding to customer inquiries
Complying with legal obligations
Maintaining information security
Preventing fraud and unauthorized use
Improving the performance and functionality of our website

3. What Personal Data Do We Collect?

Depending on the services provided, we may collect and process the following categories of personal data:

Full name
Telephone number
E-mail address
Billing and delivery address
Order details
Payment transaction information (payment card details are not stored by Umay Soba)
IP address
Browser and device information
Cookie data
Customer support communications

Payment card information used during online transactions is processed securely by authorized payment service providers and is never stored on Umay Soba's systems.

4. Legal Basis for Processing Personal Data

Your personal data is processed in accordance with Articles 5 and 6 of the Turkish Personal Data Protection Law No. 6698 (KVKK).

Depending on the nature of the processing activity, your personal data may be processed on one or more of the following legal grounds:

Where processing is expressly required by law.
Where processing is necessary for the establishment or performance of a contract.
Where processing is necessary for the Seller to comply with its legal obligations.
Where processing is necessary for the establishment, exercise, or protection of legal rights.
Where processing is necessary for the legitimate interests of Umay Soba, provided that such processing does not violate your fundamental rights and freedoms.
Where your explicit consent has been obtained, where required by law.

5. With Whom May Your Personal Data Be Shared?

Your personal data may be shared only to the extent necessary for the purposes described in this Information Notice and in accordance with applicable legislation.

Your personal data may be shared with the following parties where necessary:

Contracted shipping companies for the delivery of purchased products.
Banks and authorized payment service providers for processing payment transactions.
Accounting and financial consultancy service providers.
Information technology, hosting, and server infrastructure providers.
Authorized public authorities where required by applicable law.
Courts and other competent legal authorities where legally required.

Under no circumstances are your personal data sold, rented, or disclosed to unauthorized third parties for commercial purposes.

6. How Do We Collect Your Personal Data?

Your personal data may be collected electronically through www.umaysoba.com and, where necessary, through physical or written communication channels.

Personal data may be obtained through the following methods:

Order and contact forms.
Customer communication forms.
E-mail correspondence.
Telephone conversations.
Customer support records (where applicable).
Cookies and similar technologies.
IP addresses and server log records.

7. Data Retention Period

Your personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected and for the retention periods required under applicable laws and regulations.

Once the legal retention period expires or the purpose of processing no longer exists, your personal data will be securely deleted, destroyed, or anonymized in accordance with the relevant legislation.

However, certain personal data may continue to be retained where required for ongoing legal proceedings, regulatory obligations, audits, or other legal requirements.

8. Your Rights Under the KVKK

In accordance with Article 11 of the Turkish Personal Data Protection Law No. 6698 (KVKK), you have the following rights regarding your personal data:

To learn whether your personal data is being processed.
To request information if your personal data has been processed.
To learn the purpose of processing your personal data and whether it is used in accordance with that purpose.
To learn the third parties to whom your personal data has been transferred, whether within Türkiye or abroad.
To request the correction of incomplete or inaccurate personal data.
To request the deletion or destruction of your personal data in accordance with Article 7 of the KVKK.
To request that corrections, deletions, or destruction of personal data be notified to third parties to whom the data has been transferred.
To object to any outcome that is against your interests resulting exclusively from the automated processing of your personal data.
To request compensation for damages if you suffer a loss due to the unlawful processing of your personal data.

Umay Soba aims to evaluate and respond to all requests submitted under the KVKK free of charge within the time limits specified by the applicable legislation. However, if the request requires additional costs, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board.

9. Protection of Your Personal Data

Umay Soba implements appropriate technical and organizational measures to ensure the confidentiality, integrity, and security of your personal data.

These measures include, but are not limited to:

Using secure server infrastructure.
Protecting systems against unauthorized access.
Restricting access to personal data to authorized personnel only.
Regularly updating and monitoring information systems.
Applying administrative and organizational safeguards to protect personal data.

Although we implement reasonable security measures, no method of electronic transmission or internet-based storage can be guaranteed to be completely secure. Therefore, users are also encouraged to take appropriate precautions to protect their own personal information.

10. Data Security and Confidentiality

Umay Soba is committed to maintaining the confidentiality of all personal data collected through its website and services. Personal data is processed only for the purposes described in this Information Notice and is not disclosed to unauthorized third parties except where required or permitted by applicable law.

Appropriate technical and administrative safeguards are implemented to protect personal data against unauthorized access, alteration, disclosure, loss, misuse, or unlawful processing.

Our security infrastructure is regularly reviewed and updated in line with technological developments and current information security standards to ensure the continued protection of your personal data.

11. Applications Under the KVKK

In accordance with Article 11 of the Turkish Personal Data Protection Law No. 6698 (KVKK), you may submit requests regarding your rights as a data subject to Umay Soba using the methods prescribed by the applicable legislation.

Your requests may be submitted in writing or through any other application methods approved by the Turkish Personal Data Protection Authority.

Applications will be evaluated and concluded free of charge within a maximum of thirty (30) days, depending on the nature of the request. However, if processing the request requires additional costs, a fee may be charged in accordance with the tariff determined by the Turkish Personal Data Protection Board.

12. Contact Information

Company: Umay Soba

Website: www.umaysoba.com

E-mail: info@umaysoba.com

Phone: +90 543 874 68 32

Address: Osmangazi Neighborhood, Ortapazar Street, Rasım Kut Apartment No:24/1, Osmangazi, Bursa, Türkiye

If you have any questions, comments, or requests regarding the processing of your personal data, you may contact Umay Soba using the contact details provided above.

13. Updates to This Information Notice

Umay Soba reserves the right to update or amend this Personal Data Protection (KVKK) Information Notice where necessary due to legal requirements, technological developments, operational changes, or improvements to our services.

The updated version becomes effective as of the date it is published on www.umaysoba.com. We recommend that users review this page periodically to stay informed about any changes.

14. Entry into Force

This Personal Data Protection (KVKK) Information Notice becomes effective on the date it is published on www.umaysoba.com.

By visiting our website or using our services, users acknowledge that they have read, understood, and accepted the provisions set out in this Information Notice.

Last Updated: June 2026

Personal Data Protection (KVKK) Information Notice