PRIVACY POLICY & GDPR

VitharBoost Privacy Policy & GDPR

This Privacy Policy and Disclosure Statement has been prepared in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and applicable legislation. It explains the principles regarding the processing of personal data by Yusuf Kacar Sole Proprietorship, acting as the data controller.

1. Information of the Data Controller

• Company Name: Yusuf Kacar Sole Proprietorship
• Address: FENERBAHÇE MAH. İĞRİP SK. NO: 13 İÇ KAPI NO: 1 34726 KADIKÖY/İSTANBUL, TURKEY
• Email: [email protected]
• Phone: +90 552 001 95 05
• Website: vitharboost.com

2. Categories of Personal Data Processed

• Identity Information: Name and surname
• Contact Information: Email address, phone number, residential address
• Customer Transaction Information: Order details, invoice records, customer support records
• Financial Information: Payment-related data (card details are processed directly by the payment service provider)
• Transaction Security Information: IP address, login/logout records, system logs
• Marketing Data: Purchase history, campaign preferences (processed only with explicit consent)
• Cookie Data: Website usage information collected through cookies

3. Purposes of Processing Personal Data

• Execution of order and sales processes
• Delivery of digital and/or physical products
• Processing payment transactions
• Providing customer support services
• Prevention of fraud and abuse
• Compliance with legal obligations
• Carrying out marketing activities where explicit consent is obtained

4. Legal Grounds for Processing

Personal data is processed based on the following legal grounds:

• Article 5/2-c of KVKK: Processing is necessary for the establishment or performance of a contract
• Article 5/2-ç of KVKK: Processing is necessary for compliance with a legal obligation
• Article 5/2-f of KVKK: Processing is necessary for the legitimate interests of the data controller
• Explicit consent (for marketing activities)

5. Transfer of Personal Data

• Payment service providers
• Hosting and infrastructure service providers
• Shipping companies (in case of physical product delivery)
• Authorized public institutions and authorities

Where necessary, personal data may be transferred abroad in accordance with Article 9 of KVKK, particularly if service providers are located outside Türkiye.

6. Retention Period

Personal data is retained for the period required by applicable legislation or for the duration necessary for the purposes of processing. Upon expiration of the retention period, data is deleted, destroyed, or anonymized in accordance with legal requirements.

7. Rights of the Data Subject

Pursuant to Article 11 of KVKK, data subjects have the right to:

• Learn whether their personal data is processed
• Request information if processed
• Request correction of incomplete or inaccurate data
• Request deletion or destruction of personal data
• Object to processing
• Claim compensation for damages arising from unlawful processing

You may submit your requests to [email protected].

8. Data Security

Personal data is protected through technical and administrative measures against unauthorized access, data loss, misuse, and unlawful processing. Necessary security safeguards are implemented to ensure data confidentiality and integrity.

9. Policy Updates

This policy may be updated from time to time. The current version is always available at vitharboost.com.