Data controller
Birenk processes the data of customers, visitors, business partners and people who use our communication channels as data controller. This notice covers processing through our website, contact forms, customer service, store and commercial relationships.
Personal data we process
Depending on your relationship with us, we may process identity and contact details; order, quotation and invoice information; delivery addresses; customer transaction records; requests and complaints; website usage and security records; and legal transaction information.
Birenk does not store full payment-card details. These are processed by payment providers and banks under their own security standards.
Purposes and legal grounds
Data is processed to provide products and services, manage quotations and orders, arrange delivery and after-sales support, respond to enquiries, maintain security, comply with legal duties and handle disputes.
Processing relies on performance of a contract, legal obligations, establishment or protection of a right, legitimate interests and, where required, explicit consent.
Data disclosures
Where necessary, data may be shared with logistics providers, payment institutions, technology and hosting providers, accountants, legal advisers, authorized public bodies and service partners.
Where data is transferred abroad, the safeguards and transfer conditions required under KVKK are applied.
Retention and security
Data is retained for the period required by its purpose and applicable law, then deleted, destroyed or anonymized. Administrative and technical safeguards are used against unauthorized access, loss and misuse.
Your rights under KVKK
Under Article 11 of KVKK, you may:
- Learn whether your personal data is processed and request information about processing.
- Learn the purpose of processing and whether data is used accordingly.
- Know the third parties in Türkiye or abroad to whom data is transferred.
- Request correction of incomplete or inaccurate data and, where conditions apply, deletion or destruction.
- Object to adverse results produced solely by automated analysis and seek compensation for unlawful processing.
How to apply
Send requests by email or post with information sufficient to verify your identity and a clear description of your request. Applications are concluded free of charge as soon as possible and no later than 30 days; a statutory fee may apply where processing creates an additional cost.