GDPR Policy

VEEV DAY. TÜK. MALL. LTD. ŞTİ. (“Wifu”) takes utmost care to protect privacy and confidentiality and to ensure continuous compliance with the Personal Data Protection Law.

In order to comply with the Personal Data Protection Law No. 6698 (“KVKK”), it adopts the basic principles stipulated by the KVKK and fulfills its obligations regarding data security.

This Personal Data Processing Policy provides the following information to the relevant persons;

Wifu collects personal data through membership forms, purchase forms and event participation forms on the Wifu website in accordance with the personal data processing conditions stipulated in the KVKK and in line with the legal reasons specified in this Personal Data Processing Policy.

•Identity Information: Name, surname, Date of Birth,

•Contact Information: Email address, Phone Number

•Financial Information: Invoice information

•Risk Management Information: IP address, Time Zone, operating system,

•Transaction Security Information: Password, country information, city information

•Marketing Information: Cookie records, targeting information, evaluations showing habits and preferences

•Legal Process and Compliance Information: Start and end time of the service provided, type of service utilized, amount of data transferred, commercial electronic communication consent given by the Data Subject electronically

•Marketing Information: Emails sent based on the commercial electronic communication consent given by the Data Subject

Website Visitors

•Location Information: Country, city

•Risk Management Information: IP address, session information

•Marketing Information: Cookie records, targeting information, evaluations showing habits and preferences

•Marketing Information: Marketing e-mail messages sent based on the commercial electronic communication consent given by the Data Subject

•Request/Complaint Management: Records of transactions made during the evaluation or management process of complaints and/or requests submitted by the Data Subject regarding the purchased product or service

•Performing membership transactions,

•Improving the services offered through the Wifu website, developing new services and providing information regarding them,

•For the performance of distance contracts established with users, analyzing the preferences, likes and needs of customers with commercial electronic communication consent, and providing special promotions, opportunities and benefits to customers,

•Performing remarketing, targeting, profiling and analysis in line with the explicit consent of the users, and promoting and marketing products and services in line with the preferences and likes of the customers,

•Resolving user problems and complaints,

•Improving the User experience on the website,

•Tracking accounting and purchasing transactions,

•Legal processes and compliance with legislation,

•Responding to information requests from administrative and judicial authorities,

•Making necessary arrangements to ensure the security of information and transactions and to prevent malicious use,

•Making necessary arrangements to ensure that processed data is up-to-date and accurate

•Improving the services offered through the website, developing new services and providing information regarding them,

•For visitors with commercial electronic communication consent; analyzing their preferences, likes and needs, and providing special promotions, opportunities and benefits to visitors,

•Performing remarketing, targeting, profiling and analysis in line with the explicit consent of the visitors, and promoting and marketing applications, goods/products and services in line with the preferences and likes of the visitors,

•Resolving visitor problems and complaints,

•Legal processes and compliance with legislation,

•Responding to information requests from administrative and judicial authorities,

•Ensuring the security of information and transactions and preventing malicious use,

•Making necessary arrangements to ensure that processed data is up-to-date and accurate,

•Fulfilling legal obligations

Wifu undertakes to take all necessary technical and administrative measures and to show due diligence to ensure the security of your personal data.

Wifu takes necessary measures to prevent unauthorized access to personal data, misuse, unlawful processing, disclosure, alteration or destruction of personal data. Wifu uses generally accepted security technology standards such as firewalls and encryption when processing personal data.

Wifu, regarding preventing unlawful access to the personal data it processes, preventing unlawful processing of this data, and ensuring the preservation of personal data:

Despite Wifu taking necessary information security measures, if personal data is damaged or falls into the hands of unauthorized third parties as a result of attacks on platforms operated by Wisha Natural or Wisha Natural systems, Wifu immediately notifies the relevant persons and the Personal Data Protection Board of this situation and takes the necessary measures.

Wifu transfers personal data to third parties only for the purposes specified in this Personal Data Processing Policy and in accordance with Articles 8 and 9 of the KVKK.

Website usage preferences and browsing history, personal data collected through the membership form and other forms for the purpose of fulfilling the distance sales contract, profiling, and communicating with relevant persons in line with their likes and preferences, are shared with our business partners located domestically/abroad who provide cookie services. Personal data transfers carried out in this scope take place through secure environments and channels offered by the relevant third party. In all cases where personal data transfer is not required, depending on the content and scope of the service received from third parties, transfer is made using masked personal data.

Electronic commerce infrastructure services are received for the Wifu website. Shopify servers are located in the United States. You can access their Privacy Policies here .

Payment infrastructure services are received for our electronic commerce site. Iyzico servers are hosted domestically. You can access their Privacy Policies here.

It is used for measuring usage and email marketing for our electronic commerce site. Klaviyo servers are hosted in the United States. You can access their Privacy Policies here .

It is an online marketing tool that allows us to show our ads in Google search results or on partner sites. Google Ads servers are hosted in the United States. Your personal data is not transferred directly but is shared using masking methods. You can access their Privacy Policies here .

Site performance and analytics technology services are received for our electronic commerce site. Google Analytics servers are hosted in the United States. Your personal data is not transferred directly but is shared using masking methods. You can access their Privacy Policies here .

The personal data subject to domestic and international transfer mentioned above are protected not only by technical measures to ensure their security but also legally through KVKK-compliant provisions included in our contracts, taking into account whether the counterparty of the legal relationship is a data controller or a data processor.

When transferring personal information to countries outside Turkey during information sharing as stated above, it is ensured that the data is transferred in accordance with this policy and as permitted by the applicable data protection law.

Reflect Studio retains the personal data it processes in accordance with the KVKK for the periods stipulated in the relevant legislation or required by the processing purpose. In our Personal Data Storage and Disposal Policy, these periods are approximately as follows:

Membership records: 10 years

All records regarding accounting and financial transactions: 10 years

Cookies: Maximum 3 years

Traffic information regarding online visitors: 2 years

Resumes: 1 year

Personal data regarding customer companies: 10 years after the legal relationship ends

Personal data regarding suppliers: 10 years after the legal relationship ends

The rights of the Data Subject regarding personal data processed by Wisha Natural, in accordance with KVKK Article 11, are listed below:

To exercise your rights over your personal data; you can make your application using the methods specified in the "Application Form" on the Reflect Studio website and exercise your rights.

Wifu stores the personal data it processes through the website and Platform for the periods stipulated by the relevant laws and/or required by the processing purpose, in accordance with KVKK Article 7, 17 and Turkish Penal Code Article 138. If these periods expire, it will erase, destroy or anonymize the data in accordance with the provisions of the Regulation on the Deletion, Destruction or Anonymization of Personal Data.

The deletion of personal data by Wifu refers to the process of making personal data completely inaccessible and unusable for the relevant users. Wifu implements user-level access authorizations and restrictions for this. It takes necessary measures to perform the deletion process in databases.

The anonymization of personal data by Wifu refers to making personal data unable to be associated with a specific or identifiable natural person, even when matched with other data.

Wifu explains in detail the methods for erasure, destruction, and anonymization, as well as the technical and administrative measures taken, within the scope of its Personal Data Retention and Destruction Policy prepared in accordance with the Regulation on the Deletion, Destruction, or Anonymization of Personal Data.

Wifu may amend this Personal Data Processing Policy at any time. These amendments shall become effective immediately upon the publication of the new amended version of the Personal Data Processing Policy. Relevant individuals will be informed of any changes to this Personal Data Processing Policy.