Privacy Policy

1. Introduction

At Edu Fab Tech, we are committed to respecting your personal information and protecting your privacy. This Privacy Policy explains how personal data collected through our website and services is collected, used, stored, and protected.

By using our Site or availing of our services, you accept that we process your personal information in accordance with this policy.

Last Updated: January 2025

This policy has been prepared in accordance with the Personal Data Protection Law No. 6698 (KVKK) and the European Union General Data Protection Regulation (GDPR).

2. Data Controller

Edu Fab Tech
Address: Silahtarağa Caddesi No: 161, Eyüp, Istanbul, Turkey
Email: info@edufabtech.com
Phone: +90 536 868 82 21

3. Personal Data Collected

When you visit our website, create an account, or use our services, the following types of personal data may be collected:

3.1 Identity Information

First name, last name
National ID number (when required for invoicing)
Date of birth

3.2 Contact Information

Email address
Phone number
Postal address (for delivery)
Billing address

3.3 Financial Information

Order history
Payment method preferences
Invoice information
Note: Credit card numbers are not stored; payment transactions are made through secure third-party payment systems

3.4 Technical and Usage Information

IP address
Browser type and version
Operating system
Pages visited and click behavior
Device information (mobile, tablet, desktop)
Cookie data
Referral URL (where you came to our site from)
Session duration and interaction data

3.5 User Content

Product reviews and ratings
Customer service correspondence
Survey and feedback responses
Vendor application information

4. Methods of Collecting Personal Data

Your personal data is collected through the following methods:

Registration forms and order forms on the website
Customer service communication via email, phone, or live chat
Cookies and similar tracking technologies
Social media interactions
Vendor application processes
Newsletter subscriptions

5. Purposes of Processing Personal Data

We may process your collected personal data for the following purposes:

5.1 Service Delivery

Order processing and delivery
Account management and authentication
Customer service support
Return and exchange transactions
Processing payment transactions
Invoice preparation

5.2 Communication and Marketing

Order updates and notifications
Marketing emails and SMS notifications (with your consent)
Newsletters and campaign announcements
Product recommendations and personalized content
Surveys and customer satisfaction research

5.3 Analysis and Improvement

Website traffic and user behavior analysis
Improving user experience
Increasing product and service quality
A/B testing and performance optimization
Market research

5.4 Security and Legal Obligations

Fraud prevention and security monitoring
Fulfilling legal obligations
Meeting tax and accounting requirements
Dispute resolution
Responding to legal requests

6. Sharing Personal Data

We do not share your personal data with third parties except in the following situations:

6.1 Service Providers

Trusted third-party service providers we work with to deliver our services:

Cargo Companies: For product delivery (Aras Cargo, Yurtiçi Cargo, etc.)
Payment Organizations: For secure payment transactions (İyzico, PayTR, etc.)
Email Service Providers: For communication and marketing emails
SMS Providers: For order notifications
Cloud Storage Services: For data storage
Analytics Tools: Google Analytics, etc.
Customer Support Software: Live support systems

These service providers process your data only on our behalf and according to our instructions, and are subject to confidentiality obligations.

6.2 Legal Requirements

We may disclose your personal data to authorized institutions in the following situations:

Legal obligation or court order
Public safety or judicial processes
To protect our rights and property
To prevent fraud or security threats

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of our company's assets, your personal data may be part of the transferred assets.

6.4 Explicit Consent

In situations not specified above, we obtain explicit consent from you before sharing your data.

7. Storage and Security of Personal Data

7.1 Retention Period

We retain your personal data for as long as required by the processing purpose and within the framework of our legal retention obligations:

Account Information: As long as your account is active
Order and Invoice Information: 10 years as required by tax legislation
Marketing Permissions: Until you withdraw your consent
Communication Records: During the dispute period, maximum 3 years
Cookie Data: Periods specified in the cookie policy

7.2 Security Measures

We take various technical and administrative security measures to protect your personal data:

SSL/TLS encryption (HTTPS protocol)
Storage in secure data centers
Regular security updates and patches
Strong encryption algorithms
Access control and authorization systems
Personnel privacy training
Regular security audits
Data backup systems

However, we cannot guarantee 100% security of information transmitted over the internet. For your own account security, it is important to use strong passwords and not share your password with anyone.

8. Rights of Personal Data Subjects Under KVKK

In accordance with Article 11 of KVKK No. 6698, as a personal data subject, you have the following rights:

8.1 Right to Request Information

Learning whether your personal data is being processed
Requesting information about processing if your personal data has been processed
Learning the purpose of processing personal data and whether they are used in accordance with their purpose

8.2 Right to Rectification and Deletion

Requesting the rectification of your personal data
Requesting the deletion or destruction of your personal data
Requesting notification of actions taken to third parties to whom personal data has been transferred

8.3 Right to Object

Objecting to a result against you by analyzing processed data exclusively through automated systems
Requesting compensation for damages in case you suffer damages due to unlawful processing of your personal data

8.4 Application Method

To exercise these rights, you can apply through the following methods:

Email: Email to info@edufabtech.com with subject "KVKK Application"
Written Application: Petition with ID photocopy to Silahtarağa Caddesi No: 161, Eyüp, Istanbul
Personal Application: Personal application to the same address

Your applications will be answered free of charge within 30 days at the latest. If the transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged.

9. Cookies

9.1 What is a Cookie?

Cookies are small text files placed on your device when you visit our website. Cookies enable the site to function properly and improve your user experience.

9.2 Types of Cookies We Use

Essential Cookies

Required for the site to perform basic functions:

Session management
Storing cart information
Security and fraud prevention

Performance Cookies

Used to measure and improve site performance:

Page load times
Error reports
Traffic analysis

Functionality Cookies

Used to remember your preferences:

Language preferences
Region settings
User customizations

Targeting/Advertising Cookies

Used to show you ads relevant to your interests:

Google Ads
Facebook Pixel
Remarketing campaigns

9.3 Cookie Management

You can control, block, or delete cookies from your browser settings. However, if you block essential cookies, some features of our site may not function properly.

10. Children's Privacy

Our site and services are not intended for children under 18. We do not knowingly collect personal data from children under 18.

If we become aware that we have collected personal data from a child without parental/guardian consent, we will delete that information immediately. If you become aware of such a situation, please contact us.

11. International Data Transfers

Your personal data may be transferred to countries where our service providers' servers are located (such as the European Union, United States).

In international data transfers, we take appropriate protective measures in accordance with Article 9 of KVKK and Articles 44-49 of GDPR:

Standard contractual clauses
Adequacy decisions
Obtaining explicit consent

12. Third-Party Websites

Our site may contain links to third-party websites. We are not responsible for the privacy practices of these sites. When visiting third-party sites, we recommend reviewing their privacy policies.

13. Marketing Communications

With your explicit consent, we may send you marketing emails, SMS notifications, and push notifications.

13.1 Unsubscribing

To opt out of marketing communications:

Click the "unsubscribe" link in emails
Change your preferences from account settings
Write to us at info@edufabtech.com

Even after unsubscribing, you will continue to receive transactional emails (order confirmations, shipping notifications, etc.).

14. Data Breach Notification

In the event of a data breach that compromises the security of your personal data:

We notify the Personal Data Protection Board in accordance with KVKK
We inform affected users as soon as possible
We take necessary corrective measures

15. Policy Changes

We may update this Privacy Policy from time to time. When significant changes are made:

We publish the updated policy on our website
We change the "Last Updated" date
We may inform registered users via email
We may re-obtain consent for significant changes

We recommend that you regularly review our current privacy policy.

16. Contact Information

If you have questions, comments, or concerns about our privacy policy, you can contact us:

Edu Fab Tech
Data Controller
Address: Silahtarağa Caddesi No: 161, Eyüp, Istanbul, Turkey
Email: info@edufabtech.com
Phone: +90 536 868 82 21
Business Hours: Monday-Friday 09:00-18:00

17. Personal Data Protection Board

If you are not satisfied with the response to your applications regarding the processing of your personal data or if you do not receive a timely response, you have the right to file a complaint with the Personal Data Protection Board.

Personal Data Protection Authority
Address: Nasuh Akar Mahallesi, Ziyabey Caddesi, 1407. Sokak No: 4, 06520 Balgat-Çankaya/Ankara
Web: www.kvkk.gov.tr

By accepting this Privacy Policy, you consent to the processing of your personal data within the framework of the conditions specified above.