KVKK Clarification Text

DABOV

KVKK Clarification Text

KVKK Disclosure Text

Last update and text version: September 2, 2026

This text explains how we process your personal data when you visit dabov.com.tr, make a purchase, create an account, sign up for the e-newsletter, or communicate with us. This disclosure text is not, in itself, an explicit consent or a commercial electronic message permission. For processes where we require your explicit consent, we offer you separate choices.

1. Data Controller

Your personal data is processed by ESPESYAL KAHVE GIDA SANAYİ VE TİCARET LİMİTED ŞİRKETİ (“DABOV”) in the capacity of data controller.

Address: Caferağa Mah. General Asım Gündüz Cad. No: 62 İç Kapı No: 5, 34710 Kadıköy / İstanbul
Phone: +90 533 441 37 40
E-mail: info@dabov.com.tr
Istanbul Chamber of Commerce Registration No: 1086565

2. Personal data we process

  • Identity and contact: full name, e-mail, phone, delivery and billing address.
  • Customer transactions: shopping cart, order, product and variant preferences, order amount, discount, invoice, delivery, return, support and complaint records.
  • Payment and risk: payment method, transaction result and limited fraud/risk indicators. Your full card number and card security code are not stored by DABOV.
  • Account and marketing: customer account information, e-newsletter subscription, commercial message preference and the time/source of this preference.
  • Communication and business partnership: your message, order number, city, business name and type, website or social media account, estimated consumption and services you are interested in.
  • Transaction security and usage: IP address, device and browser information, session, date-time, error and security logs, and site usage and campaign interactions to the extent you permit.

3. Purposes of processing and legal grounds

  • To receive your order, finalize payment, deliver products, operate your customer account, and carry out returns and after-sales support, we rely on the establishment or performance of a contract as per Article 5/2-c of the KVKK (Personal Data Protection Law).
  • To generate invoices and commercial records, manage distance sales and consumer applications, and respond to requests from authorized institutions, we rely on our legal obligation as per Article 5/2-ç of the KVKK.
  • To protect dispute and complaint records and to defend or exercise claims, we rely on the establishment, exercise, or protection of a right as per Article 5/2-e of the KVKK.
  • To ensure site and account security, prevent abuse and fraud, answer your general product questions, and evaluate business partnership applications, we rely on our legitimate interest as per Article 5/2-f of the KVKK, provided it does not harm your fundamental rights and freedoms, following the balancing test we conduct.
  • To send e-newsletters, campaigns, and commercial electronic messages; and to use non-mandatory functional, analytical, or marketing technologies, we rely on your explicit consent as per Article 5/1 of the KVKK to the extent necessary, and on the separate permission you provide under relevant electronic message legislation. You can withdraw these choices at any time.

Using the contact form or making a purchase does not imply that you have given marketing permission.

4. With whom may we share your data?

We may share your data only to the extent necessary for the relevant purpose with; our e-commerce, hosting, and payment infrastructure provider Shopify; the payment institution and bank you choose; DHL eCommerce and relevant logistics service providers for order delivery or returns; our corporate e-mail, information technology, security, and support service providers; our financial advisor, auditor, and legal consultants. When you give commercial electronic message permission, sharing may occur with communication service providers and the Message Management System (İYS) as required by law. When required by law, we may transfer information to courts, enforcement offices, law enforcement units, the Personal Data Protection Authority, and other authorized public institutions.

If you use services provided to you directly by Shopify, such as Shop or Shop Pay, Shopify may process certain data as a data controller. You can review the Shopify Consumer Privacy Policy for these transactions and your rights before Shopify.

5. International transfer

The systems of Shopify and some technology sub-providers may be located outside of Turkey. Due to the use of these services, your personal data may be processed abroad only to the extent necessary for the provision and security of the relevant service. In the case of international transfer, we rely on the relevant mechanism applicable to the processing from among the adequacy decision, appropriate safeguards, or other transfer conditions stipulated in Article 9 of the KVKK. If a transfer requires your explicit consent, such consent is obtained separately from the disclosure and on a voluntary basis.

6. Collection method

We collect your data through information you enter into Shopify store, cart, payment, customer account, e-newsletter, communication, and business partnership forms; and through e-mail, phone, delivery, and return processes via electronic or physical methods. Transaction security and usage data you permit may be generated automatically while you use the site.

7. Retention periods

  • Distance sales contract, order, preliminary information, and consumer transaction records are kept for 3 years from the relevant transaction.
  • Records of invoice, accounting, and commercial books are kept for the periods stipulated in the Tax Procedure Law, the Turkish Commercial Code, and relevant legislation.
  • General communication and unfinished business partnership requests are kept for a maximum of 2 years from the last communication; form and site security logs under DABOV’s control are kept for a maximum of 1 year.
  • Your e-newsletter and commercial message preference is kept until you unsubscribe; the permission record is kept for the period necessary to meet legal obligations and potential disputes.
  • Customer account data is kept as long as your account is open and thereafter for the applicable legal periods.

If there is a dispute, investigation, or legal retention obligation, we keep only the relevant records for the duration of this process and the statutory limitation period; at the end of the period, we delete, destroy, or anonymize them.

8. Your rights under the KVKK

In accordance with Article 11 of the KVKK, you have the right to learn whether your personal data is being processed; to request information if it has been processed; to learn whether it is used for its intended purpose; to know the third parties to whom it is transferred; to request correction if it is processed incompletely or incorrectly; to request deletion or destruction when conditions are met; to request notification of correction, deletion, or destruction to third parties to whom it has been transferred; to object to a result against you resulting from analysis solely by automated systems, and to demand compensation if you suffer damage due to unlawful processing.

You may submit your request along with information that allows us to verify your identity by sending it in person or in writing to Caferağa Mah. General Asım Gündüz Cad. No: 62 İç Kapı No: 5, 34710 Kadıköy / İstanbul; with a secure electronic signature; or via the e-mail address previously reported to DABOV and registered in our system with the subject "KVKK Application" to info@dabov.com.tr. We will conclude your application free of charge within the procedures and timeframes specified in the legislation; if the transaction incurs additional costs, the tariff determined by the Board may be applied.

9. Cookies and your preferences

We use non-mandatory cookies and similar technologies only in accordance with your choice. You can find the categories, purposes, providers, and how to change your preferences in our Cookie Policy.