Privacy Notice
Version 1.0 · Effective:
This English text is a translation; if the two versions differ, the Turkish version prevails.
1. Data controller
This notice is provided under Article 10 of Turkey’s Personal Data Protection Law No. 6698 (KVKK) to inform people who visit trinishland.com, use the store links on the site, email us or order through a marketplace about how their personal data is processed.
The data controller is Eyüp Emir Güvenç, owner of the sole proprietorship trading as Trinishland. You can contact us through these channels:
- Email: info@trinishland.com
- Registered electronic mail (KEP):
eyupemir.guvenc@hs01.kep.tr(reachable only from a KEP account) - Postal address: KÜÇÜKBAKKALKÖY MAH. DEREBOYU CAD. R5 BLOK NO: 3 A İÇ KAPI NO: 48 ATAŞEHİR / İSTANBUL, Turkey
2. What data we process and why
Below we explain what data we obtain, from whom, for what purpose and by what means. The legal bases are in section 3, the parties who receive data in section 4, retention periods in section 5, and cookies and similar technologies in section 7.
2.1 When you visit the site
When you open trinishland.com, or medya.trinishland.com where our images are published, your browser automatically sends your IP address and technical request details (e.g. browser type, language preference, address of the requested page, referring page) to the servers of Cloudflare, which hosts our site. This information is processed to deliver the page to you and to protect the site against misuse. Cloudflare also produces aggregate traffic statistics for our domain from these requests. Your visit information is not stored by us.
2.2 When you click a store link
When you click a store link on a product page, or arrive directly at our redirect page (trinishland.com/link/…) through a link in a social media post, our counter running on Cloudflare automatically writes a count record before the page that redirects you to the store is shown. Our purpose is to see, in aggregate, how many times each product’s store link is clicked and from which countries, device types and sources (our site, another site, an in-app browser, direct) these clicks come.
What the record contains: which link was clicked (link code); the country derived from your IP address; a rough device class (mobile, tablet, desktop, bot or other); an in-app browser class (for example the browser inside the Instagram or Facebook app, or a normal browser); the class of where you came from (the path of the page on our site, the domain of another site if you came from one, or direct); a technical environment label and the time of the record. The device, in-app browser and source classes are derived on the fly from the browser identifier and referring-page information your browser sends; that information itself is not recorded. What the record does not contain: your IP address, cookies, your full browser identifier, parameters added to the link address and ad click IDs.
2.3 When you email us
When you write to info@trinishland.com, we process your name, email address, the content of your message and any attached files to answer your question. If your request concerns a purchase or a custom product, we also process this data to handle the correspondence about that request. This data is obtained electronically, through the email you send yourself.
Brevo, which delivers our outgoing emails, records an open event and a link-click event for each email; we use only the aggregate counts. When a link is clicked, it is redirected through Brevo’s server.
2.4 When you order through a marketplace
When you order through Trendyol, the data needed to ship and invoice your order (your name and surname, billing and delivery address and, if you are a business buyer, your tax ID number) reaches us from the marketplace. Your email address and telephone number are not passed to us. We process this data to ship and invoice the order and to keep the accounting records required by law. This data may be passed to the shipping company to deliver your order, to our accountant for the statutory books and, where invoicing legislation requires, to the Revenue Administration (Gelir İdaresi Başkanlığı); it is not passed to any other party.
3. How we collect data and on what legal basis
Your data is obtained by automated means when you use the site and the store links, electronically, through the email you send, when you write to us, and from the marketplace for marketplace orders. We do not rely on explicit consent for any processing, so we do not ask you for consent. The collection method and the legal basis of each processing activity are set out below.
| Processing | Collection method | Legal basis |
|---|---|---|
| Delivering pages and security (2.1) | Automated, with every request | Art. 5(2)(f) (legitimate interests) |
| Store-link counter (2.2) | Automated, on the server side | Art. 5(2)(f) (legitimate interests) |
| Theme preference (7) | In your browser, when you press the theme button | — (no personal data is processed) |
| Email correspondence (2.3) | Through the email you send | Art. 5(2)(c) (formation or performance of a contract) if the request concerns a purchase or custom product, otherwise Art. 5(2)(f) (legitimate interests) |
| Email open and click measurement (2.3) | Automated, by Brevo | Art. 5(2)(f) (legitimate interests) |
| Marketplace orders (2.4) | From the marketplace | Art. 5(2)(c) (formation or performance of a contract) and Art. 5(2)(ç) (legal obligation) |
4. Who receives your data
4.1 Service providers
Your data is passed, for the purposes stated below, to the following service providers:
- Cloudflare (hosting, network and email routing service; a data processor providing services on behalf of the data controller): hosting the site and delivering it to you, security, the store-link counter, routing incoming email. Cloudflare uses a global server network. Cloudflare’s privacy policy.
- Google (Gmail; mailbox) (a data processor providing services on behalf of the data controller): the mailbox in which our email is kept.
- Brevo (a data processor providing services on behalf of the data controller): delivering our outgoing email; it records an open/click event per email, and we use only the aggregate counts (2.3).
These providers’ servers may also be located outside Turkey; your data may be processed on those servers.
4.2 Other recipients
- Our accountant: keeping the statutory books and invoice records (2.4).
- Shipping company: delivering your order (2.4).
- Revenue Administration (Gelir İdaresi Başkanlığı): where invoicing legislation requires (2.4).
Marketplace order data may be passed only to the parties listed in 2.4.
5. How long we keep data
- Visit information that reaches Cloudflare while a page is delivered is not stored by us. Cloudflare’s own retention rules are governed by Cloudflare’s privacy policy.
- Store-link counter records are deleted at the end of the 3-month retention period stated by Cloudflare.
- Open and click events at Brevo are governed by Brevo’s own retention rules (Brevo’s privacy policy).
- The theme preference stays only in your browser until you delete it.
- Email correspondence is kept, if it relates to a sale (order, invoice, return, custom product request), for the statutory retention period for commercial documents; otherwise for 2 years from the last message, and then deleted.
- Data about marketplace orders is kept for the statutory document retention period.
6. Your rights under KVKK and how to apply
Under Article 11 of the Law, by applying to us you have the right, regarding yourself, to:
- a) learn whether personal data is processed,
- b) request information about it if your personal data has been processed,
- c) learn the purpose of processing and whether the data is used in line with that purpose,
- ç) know the third parties in Turkey or abroad to whom personal data is transferred,
- d) request correction of personal data that is incomplete or inaccurate,
- e) request erasure or destruction of personal data under the conditions set out in Article 7 of the Law,
- f) request that the operations under (d) and (e) be notified to third parties to whom the personal data has been transferred,
- g) object to a result against the person arising from analysis of the processed data exclusively by automated systems,
- ğ) claim compensation for damage suffered because of unlawful processing of personal data.
You may submit your application in Turkish: in writing to our postal address in section 1, to our registered electronic mail (KEP) address, using a secure electronic signature or mobile signature, or by writing to info@trinishland.com from an email address you have previously given us and that is in our records. Your application must include your name, surname and, if made in writing, your signature; your Turkish ID number (for foreign nationals, nationality and passport number); your address for notifications; if any, the email address or telephone number for notifications; and the subject of your request.
We will conclude your application as soon as possible depending on its nature and within 30 days at the latest. If your application is rejected, you find our answer insufficient or we do not answer in time, you may complain to the Personal Data Protection Board within 30 days of learning of our answer and in any case within 60 days of your application. You must apply to us before complaining to the Board.
7. Cookies and similar technologies
The cookies and similar technologies used on our site are listed below.
| Name | Type | Set by | Purpose | Duration | Consent |
|---|---|---|---|---|---|
theme |
Browser storage (localStorage) | Trinishland | Remembering the light/dark appearance you chose. Written only when you press the theme button; read on every page load and once a minute | Until you delete it | Not requested |
The theme preference stays only in your browser; it is not sent to us or anywhere else and does not identify you.
8. Changes
We update this notice when the data we process or our purposes change, before the new processing starts. The current version number and effective date appear at the top of the page.