PERSONAL DATA NOTICE (KVKK)

Last updated: 15.09.2026

At LIETO, we value the privacy and security of your personal data.

This notice is prepared under Personal Data Protection Law No. 6698 (“KVKK”) to inform you about the purposes and legal grounds for processing your personal data, possible recipients, collection methods and your rights concerning your data.

1. Data Controller

The data controller for your personal data under KVKK is:

Ebru Dönmez – LIETO

Address: Ayrancı Mah. Selimiye Cad. Beyazıt Apt. No: 9 İç Kapı No: 9 Çankaya / Ankara
Email: info@lieto.com.tr
Website: lieto.com.tr

2. Personal Data Processed

Depending on your relationship with LIETO, the following data may be processed:

Identity Information

• First name
• Surname

Contact Information

• Phone number
• Email address
• Delivery address
• Billing address

Order and Transaction Information

• Order details
• Purchased product details
• Order date
• Order amount
• Delivery information
• Return and cancellation information

Invoice and Financial Information

• Identity and contact information needed for invoicing
• Information required to fulfil tax obligations
• Payment transaction and reference information

Payment card information may be processed through the payment service provider’s systems. LIETO does not request your complete card information processed by payment providers for storage in its own systems.

Customer Communications

• Customer service requests
• Contact forms
• Complaints and suggestions
• Return and exchange requests
• Email correspondence

Transaction Security and Technical Data

• IP address
• Website usage and access information
• Device and browser information
• Session and transaction security records
• Information obtained through cookies

Marketing Information

• Email newsletter preferences
• Commercial electronic communication preferences
• Campaign and marketing interaction information

Personal data processing for marketing is carried out on the basis of the data subject’s explicit consent where required, or other valid legal conditions.

3. Processing Purposes and Legal Grounds

Your personal data may be processed for the following purposes:

Managing Orders and Sales

To receive orders, carry out sales, prepare orders and manage the sales relationship with the customer. These activities may rely on the legal ground of being directly related to the establishment or performance of a contract.

Invoicing and Legal Obligations

Necessary data may be processed for invoicing, accounting, tax legislation and other legal obligations. This may rely on the data controller’s need to fulfil a legal obligation.

Delivering Products

Identity, contact and delivery information may be processed to deliver ordered products, track shipping and resolve delivery problems. These activities may be carried out in performance of the sales contract.

Managing Customer Requests

To answer questions, provide support, assess complaints and manage returns and cancellations. These activities may rely on contract performance, the establishment, exercise or protection of a right, and the controller’s legitimate interests.

Transaction and Information Security

Technical and transaction security data may be processed to secure the website, prevent misuse and fraud, protect systems and investigate security incidents when necessary. This may rely on LIETO’s legitimate interests in information security and the safe conduct of its commercial activities.

Protecting Legal Rights

Data may be processed to establish, exercise or protect rights in a dispute, comply with requests from authorised public bodies and conduct legal proceedings.

Marketing and Commercial Communications

Data needed to send campaigns, new products, brand news and similar commercial communications may be processed under explicit consent and commercial communication permissions where required by law.

Declining marketing permission does not affect your right to purchase products or use essential services.

4. Collection Methods

Your personal data may be obtained wholly or partly by automated means, or by non-automated means as part of a data filing system, through:

• lieto.com.tr
• Shopify e-commerce infrastructure
• Order and payment screens
• Registration and contact forms
• Email
• Customer service communications
• Cookies and similar technologies
• Shipping and delivery processes
• Payment service providers
• Accounting and electronic document systems

5. Sharing Personal Data

Only to the extent necessary to provide the relevant service and in accordance with applicable legislation, data may be shared with:

• E-commerce infrastructure and technical service providers
• Payment service providers and financial institutions
• Shipping and logistics providers
• Accounting, e-invoice and e-archive providers
• Hosting, email and IT providers
• Legal and financial advisers
• Authorised public bodies
• Authorities legally entitled to obtain information

We aim to take the necessary technical and administrative measures to protect personal data during transfers.

6. International Data Transfers

Because LIETO’s e-commerce, cloud, hosting, analytics or other technical infrastructure may be located abroad, some personal data may be processed by providers abroad or transferred internationally.

In particular, Shopify and other international technology infrastructure used may involve processing abroad as part of their services.

Where international transfers are necessary, they are carried out under KVKK No. 6698’s international transfer provisions and appropriate transfer mechanisms required by applicable legislation.

7. Retention and Disposal

Data is retained for the period necessary for its processing purpose and for statutory retention periods required by applicable legislation.

When the reasons requiring processing cease and legal retention obligations end, data is deleted, destroyed or anonymised in accordance with applicable legislation.

8. Cookies and Similar Technologies

Cookies and similar technologies may be used on lieto.com.tr for:

• Essential website functions
• Sessions and cart operations
• Measuring website performance
• Improving the user experience
• Analytics and advertising where the necessary permissions exist

Non-essential cookies depend on user preferences and permissions to the extent required by applicable legislation.

Detailed cookie information will be explained in the separately published Cookie Policy.

9. Your Rights under KVKK

Under Article 11 of Law No. 6698, data subjects have the right to:

• Learn whether personal data is processed
• Request information if it has been processed
• Learn the purpose of processing and whether data is used accordingly
• Know the third parties to whom data is transferred domestically or abroad
• Request correction of incomplete or inaccurate data
• Request deletion or destruction where statutory conditions are met
• Request notification of correction, deletion or destruction to third-party recipients
• Object to a result against them arising solely from automated analysis of processed data
• Request compensation for damage caused by unlawful processing

10. How to Submit a Request

You may submit requests regarding your KVKK rights to LIETO as data controller:

Email: info@lieto.com.tr

Or by post:
Ebru Dönmez – LIETO
Ayrancı Mah. Selimiye Cad. Beyazıt Apt. No: 9 İç Kapı No: 9
Çankaya / Ankara

Your request may need to include information clearly identifying you and your request.

Duly submitted requests are assessed and resolved as soon as possible according to their nature and within statutory time limits.

11. Updates to This Notice

LIETO may update this notice due to changes in legislation, processing activities or service providers.

The current notice takes effect from its publication on lieto.com.tr.

LIETO
The land’s legacy.

Data controller: Ebru Dönmez
Email: info@lieto.com.tr
Website: lieto.com.tr