Last updated: 3 October 2026

As Sadık Koşucuoğlu (“Orotalia” or the “Company”), we process your personal data as the data controller under Law No. 6698 on the Protection of Personal Data (“KVKK”), as explained below.

1. Data controller

Sadık Koşucuoğlu
Address: Molla Fenari Mh. Vezirhan Cd. No:41, Eminönü / İstanbul
Email: info@orotalia.com

2. Personal data processed

• Identity: first name, surname; Turkish ID number where required for invoicing,
• Contact: phone, email, delivery and billing addresses,
• Customer transaction: order, cart, return and request information, invoice information,
• Financial: payment and refund transaction records (card details are not stored by the Company and are processed by the payment institution),
• Transaction security: IP address, device and browser information, session records,
• Marketing: if you have given explicit consent, newsletter preferences, shopping history and cookie data.

3. Purposes of processing

• Receiving orders, collecting payment, delivering products and invoicing,
• Concluding and performing the distance sales contract, and carrying out withdrawal, return and exchange processes,
• Responding to customer service enquiries, requests and complaints,
• Fulfilling obligations arising from tax, commercial and consumer legislation,
• Ensuring the security of the Site and preventing fraud,
• Sending campaigns, new collections and newsletters, if you have given explicit consent.

4. Legal bases

Your personal data is processed on the legal bases set out in Article 5 of the KVKK, namely that processing is necessary for the conclusion or performance of a contract, for compliance with a legal obligation, for the establishment, exercise or protection of a right, and for our legitimate interests, provided that your fundamental rights and freedoms are not harmed; and, with respect to commercial electronic messages and marketing activities, on the basis of your explicit consent.

5. Method of collection

Your personal data is collected in electronic form, by automatic or partially automatic means, through our website, order and contact forms, email, phone and cookies.

6. Transfers

Your personal data may be transferred, limited to the purposes above, to cargo and logistics companies, payment institutions and banks, our e-commerce infrastructure provider (Shopify), accounting and e-invoice service providers, suppliers from whom we receive IT and hosting services, and, upon request, competent public institutions and organisations. Transfers that take place because infrastructure and hosting services are located abroad are made in accordance with Article 9 of the KVKK.

7. Retention period

Your personal data is retained for the period required by the purpose of processing and for the retention periods prescribed by the relevant legislation (e.g. 10 years for commercial books and documents); at the end of that period it is deleted, destroyed or anonymised.

8. Your rights

Under Article 11 of the KVKK, you have the right to: learn whether your personal data is being processed; request information if it has been processed; learn the purpose of processing and whether it is used in accordance with that purpose; know the third parties to whom it has been transferred; request correction if it is incomplete or inaccurate; request deletion or destruction when the conditions are met; request that these actions be notified to the third parties to whom the data has been transferred; object to an outcome against you resulting from analysis by automated systems; and claim compensation if you suffer damage due to unlawful processing.

You may submit your applications to info@orotalia.com or in writing to Molla Fenari Mh. Vezirhan Cd. No:41, Eminönü / İstanbul. Applications are concluded free of charge within 30 days at the latest.