KVKK Privacy Notice
Privacy Notice on the Processing of Personal Data for Customers, Members and Visitors
This notice has been prepared by Ryder Act in its capacity as data controller in accordance with Turkish Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles for Fulfilment of the Obligation to Inform.
1. Data controller
Ryder Act Tekstil Kurumsal Hizmetler Turizm Sanayi Ticaret Limited Şirketi · Kemankeş Karamustafapaşa Mah., Kemankeş Cad., D Blok Paket Postanesi No: 40, Unit 108, Beyoğlu / Istanbul · MERSİS: 0735115833200001 · contact@ryderact.com
2. Personal data processed, purposes and legal bases
| Data category | Purpose of processing | Legal basis (Article 5 of KVKK) |
|---|---|---|
| Identity and contact (first name, surname, email, phone, delivery and billing address) | Receiving and delivering orders, invoicing, returns and exchanges | Establishment and performance of a contract; legal obligation |
| Customer transaction data (order history, cart, enquiries and complaints) | After-sales support and managing requests and complaints | Performance of a contract; legitimate interest |
| Financial data (payment amount and transaction information; Ryder Act does not store card details) | Receiving payments and issuing refunds | Performance of a contract; legal obligation |
| Transaction security (IP address, device and session data) | Website security, fraud prevention and statutory recordkeeping | Legal obligation; legitimate interest |
| Marketing (email, phone, shopping preferences and cookie data) | Announcing campaigns and updates, personalised advertising | Explicit consent |
| Event participation (name, contact details and events attended) | Registration and information for Ryder Act Studio events | Performance of a contract |
| Instagram messaging (username and message content) | Responding to questions and automated messaging flows | Legitimate interest; taking steps to establish a contract upon request |
Commercial electronic messages for marketing purposes are sent only with your approval under Law No. 6563, and you may opt out free of charge at any time.
3. Method of collection
Your personal data is collected, partly or wholly by automated means, through ryderact.com, registration and payment forms, email, Instagram messages and cookies.
4. Disclosure and transfers
We share personal data only as necessary for the purposes set out above with:
- Delivery carriers (shipping and returns)
- iyzico Ödeme Hizmetleri A.Ş. (payments)
- Shopify (ecommerce infrastructure)
- Meta Platforms and Google (advertising and analytics, for cookies to which you have explicitly consented)
- Our Instagram messaging automation service provider
- Our accountant and legal advisers (legal obligations)
- Authorised public institutions and bodies when lawfully requested
Because Shopify, Meta and Google operate servers outside Türkiye, these transfers take place under appropriate safeguards provided by Article 9 of KVKK or with your explicit consent.
5. Retention
We retain your data for as long as required by its processing purpose and applicable legal retention periods (including those in the Turkish Tax Procedure Law and Turkish Commercial Code for invoices and accounting records). Once the period ends, data is deleted, destroyed or anonymised.
6. Your rights (Article 11 of KVKK)
You may apply to the data controller to find out whether your data is processed; request information if it has been processed; learn the purpose of processing and whether it is used in accordance with that purpose; learn which third parties in Türkiye or abroad have received it; request correction of incomplete or inaccurate data; request deletion or destruction under Article 7 of KVKK; request notification of such corrections, deletions or destruction to recipients; object to a result against you arising solely from automated analysis; and claim compensation for damage arising from unlawful processing.
7. Applications
You can send your requests in writing to the address above, via registered electronic mail (KEP), secure electronic signature or mobile signature, or by using the email address registered in our system to contact contact@ryderact.com. Depending on the nature of the request, we will respond free of charge within 30 days at the latest. Where processing the request incurs an additional cost, the fee set by the Personal Data Protection Board may apply.