This information notice is provided by Romantik Butik Hazır Giyim Ticaret ve Sanayi Limited Şirketi("ROMANTİK BUTİK", "we") as data controller under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK"). It explains which personal data we process through romantikbutik.com, for which purposes and on which legal grounds, to whom it is transferred, how long it is kept and what your rights are. In case of any difference, the Turkish text prevails.
Partly automatically and partly by automated means: through the forms you fill in on the website (membership, order and payment, contact, newsletter, back-in-stock, saving your cart), through cookies and similar technologies, through server logs, through the responses of the payment institution, our shipping integration platform Basit Kargo and the courier companies, through our store management software (Nebim) and through the e-mails and WhatsApp messages you send us.
| Purpose | Legal ground (KVKK Article 5) |
|---|---|
| Taking, paying for, preparing and delivering your order; returns, withdrawal and refunds; membership account | Necessary for the establishment and performance of a contract (Art. 5/2-c) |
| Invoices and e-archive invoices, accounting and tax records, retaining distance contract records, answering authorities | Compliance with a legal obligation (Art. 5/2-ç) |
| Customer service, contact form, complaints and back-in-stock notifications you request | Performance of a contract (Art. 5/2-c) and our legitimate interest (Art. 5/2-f) |
| Site security, fraud prevention, finding faults (including session recording), server access logs | Legal obligation (Art. 5/2-ç) and our legitimate interest (Art. 5/2-f) |
| Measuring site usage (visit statistics, approximate location), measuring and improving advertising (Meta pixel and Conversions API), determining purchase interest level | Our legitimate interest (Art. 5/2-f) |
| Newsletter and campaign messages | Your explicit consent (Art. 5/1) and your commercial message approval under Law No. 6563 (see our Explicit Consent Text) |
| Reminder e-mails about your unfinished cart: at most three e-mails to the address you gave at checkout, on the cart page or earlier from this browser; every e-mail has a link to turn reminders off | Our legitimate interest (Art. 5/2-f) |
| Establishing, exercising or protecting a right (e.g. disputes) | Art. 5/2-e |
The purchase interest level is used only to group visits for advertising and is not used for any decision that has legal effects on you or similarly significantly affects you.
| Recipient | Data and purpose | Location |
|---|---|---|
| OVH (hosting) | All data processed on the website (database, server logs, session recordings) is stored on servers in OVH's data centre. | Germany (abroad) |
| Meta Platforms (Meta Platforms, Inc. and its affiliates) | Meta pixel (from your browser) and Conversions API (from our server, for every event with the same event identifier): pages and products viewed, searches on the site (the search term), items added to cart or favourites, checkout, payment details entered, purchase amount and items, sign-up and newsletter events; IP address, browser information, _fbp and _fbc identifiers; e-mail, phone, first and last name, city, province, postal code, country, customer number and, if you added them to your account, gender and date of birth, hashed with SHA-256 (sent as an irreversible hash, not as readable text). Purpose: measuring and improving our advertising. Meta may also process this data under its own policies. | Abroad (mainly USA) |
| Garanti Ödeme ve Elektronik Para Hizmetleri A.Ş. | Name, e-mail, phone, address, IP address, order amount and basket for payment, fraud prevention and refunds. Card details are transmitted to Tami over an encrypted connection to complete the payment. | Türkiye |
| Banks | Payment details for bank transfers and card refunds. | Türkiye |
| Basit Kargo (Gemen Bilgi Teknolojileri ve Ticaret Ltd. Şti.), shipping integration platform | To create and track your shipment: name, phone, e-mail, delivery address (province, district, address), order number, product names and quantities, parcel size, order amount and payment type. Your shipment is passed to the courier through this platform. | Türkiye (according to Basit Kargo, some of its server and cloud services may be located abroad) |
| Courier companies: (the carrier you choose at checkout for orders with a shipping fee), Aras Kargo (free shipping on orders of 3.500 TL and above), Aras Kargo (returns) | Name, address and phone for delivery and returns. | Türkiye |
| Nebim V3 store management software | Name, phone, e-mail, address, order lines and invoice details for stock, order and invoice processing; the software runs on the server in our store in Samsun. | Türkiye |
| E-archive invoice integrator and the Revenue Administration | Invoice details (name, address, items, amounts) for issuing e-archive invoices. | Türkiye |
| E-mail service providers | Order and information e-mails are sent through our e-mail sending provider. When you write to bilgi@romantikbutik.com, the correspondence is kept on the servers of our e-mail provider (Google). | Türkiye / abroad |
| WhatsApp (Meta) | Your messages, if you contact us via WhatsApp. | Abroad |
| Vimeo (video player) and Google Maps (map on the Our Stores and store location pages) | When a video or map loads, your IP address and browser information, so that the content can be shown. Videos are played with Vimeo's do-not-track setting. | Abroad (mainly USA) |
| Our accountant, legal advisers, authorised public institutions and courts | Only the data required by law or for a dispute. | Türkiye |
Your data is not sold to third parties.
Because our website is hosted in Germany (OVH), all personal data processed on the website is stored abroad. The following recipients also process data abroad:
| Recipient | Data | Country |
|---|---|---|
| OVH (hosting) | All data processed on the website | Germany |
| Meta Platforms | The Meta pixel and Conversions API data listed in section 4; your messages if you contact us via WhatsApp | Mainly USA |
| E-mails you send to bilgi@romantikbutik.com; IP address and browser information when the map on store location pages loads | Mainly USA | |
| Vimeo | IP address and browser information when a video loads | Mainly USA |
| Basit Kargo | The shipment details listed in section 4 | Not named (the provider states that some of its server and cloud services may be located abroad) |
| Our e-mail sending provider | Order and information e-mails | Türkiye or abroad, depending on the provider |
You are informed of these transfers with this notice.
| Data | Period |
|---|---|
| Orders, invoices, accounting records and payment records | 10 years (Tax Procedure Law and Turkish Commercial Code) |
| Pre-Contractual Information Form, distance sales agreement and approval records | 3 years (Regulation on Distance Contracts) |
| Membership account | While your membership continues; after you close your account, data not subject to a legal retention period is deleted |
| Contact form, customer service and complaint records | 2 years after the request is closed |
| Commercial message permission and its records | Until you withdraw it; then 3 years to prove the permission |
| Site visit records (visitor number, IP address, pages, approximate location) | 1 year, then deleted or anonymised |
| Server access logs (traffic data) | For the period required by Law No. 5651 and its secondary legislation (at most 2 years) |
| Session recordings | 7 days, deleted automatically |
| Incomplete cart and the e-mail left for cart reminders | 90 days |
| Data sent to Meta | According to Meta's own retention policy |
At the end of these periods, personal data is deleted, destroyed or anonymised.
On each visit, your browser is assigned a random visitor number (mrz_zid); the pages you view, the time, your IP address and browser information are recorded with it. Your approximate location (province, district) and internet service provider are determined automatically from your IP address using a database on our own server; your IP address is not sent to third parties for this purpose. If you sign in, your visits in the same browser are linked to your account. The cookie box shown at the bottom of the page on your first visit informs you about this; it does not record a consent. Details are in our Cookie Policy.
To find faults and improve the site, page interactions during your visit (page views, clicks, scrolling) are recorded and can be replayed by our authorised staff. Recordings are linked to your visitor number and, if you sign in, to your account. Everything you type into form fields is masked in your browser before anything is sent; areas showing your address, phone number or e-mail address are also masked. Recording stops before the card fields on the payment page are opened, so card details are never recorded. Recordings are kept on our own server for 7 days and deleted automatically. They are not used for advertising and are not sent to Meta.
Card payments are processed through Garanti Ödeme ve Elektronik Para Hizmetleri A.Ş. (Tami). The card number, expiry date and security code you enter on the payment page are transmitted over an encrypted connection (SSL/TLS) via our server only to Tami to carry out the payment; they are not recorded, logged or stored by us. Payments are verified by your bank with 3D Secure. We keep only the first 6 and last 4 digits of the card (for instalment options and the payment record).
You have the right to:
You can withdraw your commercial message permission at any time from your My Account page or by writing to bilgi@romantikbutik.com. Details are in our Explicit Consent Text.
Under the Communiqué on the Procedures and Principles for Applications to the Data Controller, you can send your request: in writing with a wet signature to Zafer Mah. Gazi Cad. No: 107/2 İlkadım / Samsun; via registered e-mail (KEP), secure electronic signature or mobile signature; or from the e-mail address you previously gave us and which is registered in our system, to bilgi@romantikbutik.com. Your application must include your name and surname, signature (for written applications), Turkish ID number (for foreign nationals, nationality and passport or ID number), your residential or business address for notification, your e-mail address, phone or fax number for notification, and the subject of your request. We conclude your application free of charge as soon as possible and within 30 days at the latest; if the process requires an additional cost, the fee set by the Personal Data Protection Board may be charged. If your application is rejected, the answer is insufficient or not given in time, you may complain to the Personal Data Protection Board within 30 days of learning the answer and in any case within 60 days of your application.
Romantik Butik Hazır Giyim Ticaret ve Sanayi Limited Şirketi, Zafer Mah. Gazi Cad. No: 107/2 İlkadım / Samsun, bilgi@romantikbutik.com · +90 546 234 55 17. For cookies and similar technologies, see our Cookie Policy; for commercial message permissions, our Explicit Consent Text.