Last updated: 11/14/2025

This Information Text has been prepared to inform you about the processing, storage, transfer, and user rights of personal data collected through the website www.obiadosolea.business (“Site”) operated by Birsen Uzun Aydın (Sole Proprietorship), the owner of the Obiado’s Olea brand, in accordance with the Law No. 6698 on the Protection of Personal Data (GDPR).

By using the Site, you are deemed to have accepted the conditions specified in this policy.

1. Personal Data Processed

Obiado’s Olea may process the following data categories within the scope of its activities:

  • Identity Information: Name, surname, Turkish ID number or tax number (invoicing)
  • Contact Information: E-mail, phone, address
  • Customer Transaction Information: Order number, product information, invoice and delivery information
  • Financial Data: Payment method, amount information (credit card data is processed by the payment provider)
  • Marketing Data: Campaign and promotion messages, if explicit consent is obtained
  • Technical Data: IP address, session information, cookie data, log records

2. Means of Processing Personal Data

Personal data is processed for the following purposes:

  1. Receiving orders, preparing products, and carrying out invoicing and delivery processes
  2. Managing customer services and after-sales support processes
  3. Fulfilling legal obligations (tax, commercial registration, accounting)
  4. Managing membership, login, password reset, and account management processes
  5. Ensuring site security and improving user experience
  6. Sending promotional, campaign, and informational messages, if explicit consent is obtained

3. Transfer of Personal Data

The collected data may be transferred to the following individuals and organizations:

  • To authorized public institutions and organizations, as required by legal obligations
  • To cargo companies (for delivery purposes)
  • To accounting, tax, or financial advisors (for invoicing processes)
  • To payment service providers (for payment transactions)
  • To business partners providing IT support and hosting services (for Site infrastructure)

Data is transferred abroad only with explicit consent or within the scope of standard contract provisions approved by the Personal Data Protection Board.

In transfers to European Union countries, measures are taken in accordance with GDPR Article 46.

4. Method and Reason for Data Collection

Personal data is obtained through the following means:

  • Order, contact, or membership forms created on the Site
  • E-mail, telephone, or customer support channels
  • Visitor behavior data via cookie technologies

Legal reasons:

  • Law No. 6502 on the Protection of the Consumer
  • Law No. 6563 on the Regulation of Electronic Commerce
  • Tax Procedure Law No. 213
  • GDPR Articles 5 and 6 (explicit consent, performance of the contract, fulfillment of legal obligations)

5. Retention Period of Personal Data

Personal data is stored for the period determined in accordance with legal obligations and processing purposes:

  • Invoice and accounting records: 10 years
  • Order and customer relations records: 5 years
  • Commercial communication permission records: 3 years
  • Cookie and session information: 1 year or until deleted by the user

6. Data Security

Obiado’s Olea takes all necessary technical and administrative measures to protect personal data against unauthorized access, loss, alteration, or disclosure:

  • SSL-certified data transmission
  • Secure server infrastructure and access control
  • Up-to-date software and antivirus systems
  • Employee confidentiality agreements

7. Rights of the Data Subject

Users have the following rights in accordance with GDPR Article 11:

  1. Learning whether their personal data has been processed
  2. Requesting information if it has been processed
  3. Learning the purpose of processing and whether it is used in accordance with its purpose
  4. Knowing the third parties to whom the data is transferred
  5. Requesting correction if the data is incomplete or incorrectly processed
  6. Requesting the deletion or destruction of data within the framework of the conditions stipulated in the law
  7. Objecting to the emergence of a result against them as a result of analysis through automatic systems
  8. Requesting compensation for the damage

To exercise these rights, you can apply in writing to [email protected] or via registered e-mail (KEP). Your requests will be answered within 30 days at the latest, as required by Article 13 of the GDPR.

8. Data Controller and Contact Information

Title: Birsen Uzun Aydın (Sole Proprietorship)
Brand: Obiado’s Olea
Address: Mehmet Nesin Özmen Mah. Savaş Cad. Karadal Sk. No: 26, Güngören / İstanbul
Phone: +90 539 229 88 42
E-mail: [email protected]

Obiado’s Olea acts as a “data controller” within the scope of the Law No. 6698 on the Protection of Personal Data (GDPR) and the General Data Protection Regulation (GDPR) valid in the European Union.