Privacy Policy
This is an informational translation. The Turkish version is legally binding.
Last updated: 28 April 2026 · Effective: 28 April 2026
At nuki.com.tr we are committed to protecting your personal data to the highest standard. This Privacy Policy has been prepared in accordance with the Personal Data Protection Law No. 6698 (KVKK), the Electronic Commerce Law No. 6563, the principles of the EU General Data Protection Regulation (GDPR) and Article 20 of the Constitution of the Republic of Türkiye. For the full disclosure notice, see our KVKK Disclosure Text page.
1. Data Controller
| Field | Value |
|---|---|
| Company name | TEKNORA PAZARLAMA VE DIŞ TİCARET LİMİTED ŞİRKETİ |
| Address | Atatürk Mah. Meriç Cad. Kardelen 3 Sitesi A Blok No: 19A, İç Kapı No: 2, Ataşehir / İstanbul |
| info@nuki.com.tr | |
| Phone | +90 532 202 91 46 |
2. Data We Collect
- Identity: Name/surname; Turkish ID number or tax number when required for invoicing.
- Contact: Email, phone, address.
- Customer transaction: Order, invoice, payment, return, request and complaint records.
- Transaction security: IP address, log records, browser/device data, session information.
- Marketing: Cookie/pixel data subject to your consent, communication preferences, segment information.
3. Purposes of Processing
- Establishing and performing the distance sales contract
- Managing orders, invoices, shipping and payment processes
- Customer communication and after-sales support
- Compliance with legal obligations (tax, e-commerce, consumer legislation)
- Fraud prevention and information security
- Personalised marketing, with your explicit consent
4. Legal Basis
KVKK Article 5/2: necessary for the establishment/performance of a contract, fulfilment of a legal obligation, establishment/exercise/protection of a right and legitimate interest. For processing that requires explicit consent, your consent is obtained pursuant to KVKK Article 5/1.
5. Data Sharing
Data are shared only with: courier companies, PCI-DSS-certified payment providers (PayTR, etc.), financial advisors, hosting/IT suppliers and authorised public authorities (on legally mandated request). International transfers are made under KVKK Article 9, either with explicit consent or with appropriate technical safeguards.
6. Retention Periods
| Data type | Retention period |
|---|---|
| Order and invoice records | 10 years (Turkish Commercial Code Art. 82, Tax Procedure Law Art. 253) |
| Commercial electronic message consent/refusal records | 3 years |
| Log records | 2 years (Law No. 5651) |
| Membership data | Duration of membership + 10 years |
7. Security Measures
- SSL/TLS 1.3 encrypted data transmission
- Server-level WAF and DDoS protection
- Role-based access control with least-privilege principle
- Periodic penetration testing and independent security audits
- Regular backups and disaster recovery plan
- Payment data are processed by a PCI-DSS-certified provider; nuki.com.tr does not store card details
8. Your Rights (KVKK Article 11)
You have the right to: learn whether your data are being processed, request information, request correction, request deletion/destruction, learn about third parties to whom data are transferred, object to automated analysis results, and claim compensation for unlawful processing. See KVKK Disclosure Text for details.
9. Cookies
For detailed cookie usage information, see the Cookie Policy page.
10. Children's Data
nuki.com.tr does not target persons under 18 and does not knowingly collect data from children. If data are received without parental consent, they are deleted as soon as this is discovered.
11. How to Apply
To exercise your rights, write to us at info@nuki.com.tr. Requests will be concluded free of charge within a maximum of 30 days.
12. Policy Updates
This policy may be revised in line with legislative or process changes. The current version is always published on this page.