Last updated: November 14, 2025
This Data Retention and Disposal Policy has been prepared in accordance with the Personal Data Protection Law No. 6698 (KVKK) to establish the principles, rules and responsibilities regarding the retention and disposal processes of personal data collected through the website www.obiadosolea.business (“Site”) operated by Birsen Uzun Aydın (Sole Proprietorship), owner of the Obiado’s Olea brand.
By using the Site, you are deemed to have accepted the terms specified in this policy.
1. Purpose
This policy has been prepared to regulate the processes of securely storing personal data processed by Obiado’s Olea in accordance with Personal Data Protection Law No. 6698 (“KVKK”) and related legislation, and deleting, destroying or anonymizing them through appropriate methods when the processing purpose ceases or the legal period expires.
2. Scope
This policy covers the personal data of all natural persons associated with Obiado’s Olea, including customers, visitors, suppliers, business partners and job applicants.
3. Legal Basis
- Personal Data Protection Law No. 6698
- Regulation on Deletion, Destruction or Anonymization of Personal Data
- KVKK Board Decisions and Guidelines
- Other relevant legislative provisions
4. Definitions
- Deletion: Making personal data inaccessible and irretrievable for relevant users.
- Destruction: Physical or digital destruction of personal data in a way that cannot be recovered in any way.
- Anonymization: Making data unable to be associated with identifiable persons.
5. Retention Principles
- Personal data is stored only for the necessary period and limited to processing purposes.
- Data whose retention period has expired or whose processing purpose has ceased is included in the periodic disposal plan.
- Technical and administrative security measures are applied during storage operations (encryption, access restriction, backup).
- Data is accessible only by authorized personnel.
6. Retention Periods
| Data Category | Retention Period | Legal Basis |
|---|---|---|
| Customer information, order and invoice records | 10 years | Tax Procedure Law, Turkish Commercial Code |
| Accounting and financial data | 10 years | Tax Procedure Law |
| Commercial communication consent records (SMS/Email approvals) | 3 years | Law on Regulation of Electronic Commerce |
| Customer service, support requests, complaint records | 3 years | KVKK Article 5, Consumer Law |
| Cookie and session information | 1 year or until user deletion | KVKK Article 5, ePrivacy |
| Camera recordings (if any) | 30 days | Legitimate interest, security |
| Human resources application data | 2 years | Labor Law, KVKK Article 5 |
7. Disposal Methods
7.1. Deletion Methods
- When user accounts are closed, personal data in the system is made inaccessible.
- Data deleted from servers is systematically removed from backups.
- Data in cloud systems is permanently deleted through relevant service provider interfaces.
7.2. Destruction Methods
- Documents in physical media are destroyed through paper shredders or secure disposal companies.
- Digital data is destroyed through irreversible overwriting or magnetic erasure (degaussing) methods.
7.3. Anonymization
- Data to be used for statistical or analytical purposes is anonymized by making it unidentifiable.
8. Periodic Disposal
- Obiado’s Olea conducts the periodic disposal process at least twice a year.
- Data whose retention period has expired is deleted, destroyed or anonymized during these periods.
- Disposal operations are recorded and documented with a “Data Disposal Report”.
9. Rights and Requests
Personal data subjects have the following rights under Article 11 of KVKK:
- Learning whether their personal data is being processed
- Requesting correction if processed incompletely or incorrectly
- Requesting deletion or destruction when the processing purpose ceases
Requests can be submitted in writing or by email to [email protected]. Applications are responded to within 30 days in accordance with KVKK Article 13.
10. Effective Date and Updates
This Data Retention and Disposal Policy came into effect on October 10, 2025.
Obiado’s Olea reserves the right to update this policy according to legislative changes or revisions in business processes.
The current version is always published at www.obiadosolea.business.
11. Data Controller and Contact Information
Title: Birsen Uzun Aydın (Sole Proprietorship)
Brand: Obiado’s Olea
Address: Mehmet Nesin Özmen Mah. Savaş Cad. Karadal Sk. No: 26, Güngören / Istanbul
Phone: +90 539 229 88 42
Email: [email protected]
The person responsible for the Data Retention and Disposal process is Birsen Uzun Aydın as Data Controller. When necessary, operations are carried out in coordination with data processing service providers (hosting, cargo, email, payment infrastructure, etc.).
