Privacy Policy

1. Controller

MEVAM TEKSTİL SANAYİ VE TİCARET LİMİTED ŞİRKETİ ("Velstoff", "biz") Adres: Piri Reis Mah. 2308. Sk. A Blok No: 4A İç Kapı No: 2, Esenyurt / İstanbul, Türkiye Vergi Dairesi / No: Esenyurt / 6201253593 MERSİS: 0620125359300001 Ticaret Sicil No: 252551-5 E-posta: info@velstoff.com KEP: mevamtekstil@hs01.kep.tr

2. Personal data we process

Depending on how you use the platform, we process:

• Identity and contact: name, company name, e-mail, phone, country, address
• Commercial: tax number, IBAN (sellers), order and invoice data
• Security: sign-in records, IP address, browser information
• Consent records: the version of the document accepted, date and IP address
• Documents uploaded during seller onboarding (tax certificate, trade registry records, etc.)
• If you write a product review: the review text and rating

3. Purposes

• Creating, reviewing and approving buyer accounts and seller applications
• Taking orders, invoicing, shipping and customs formalities
• Processing payments and seller payouts
• Handling support requests and complaints
• Meeting legal obligations and establishing evidence
• Securing the platform and preventing abuse

4. Legal bases

We rely on performance of a contract, compliance with a legal obligation, the establishment or defence of legal claims and our legitimate interests (GDPR Art. 6(1)(b), (c), (f); KVKK Art. 5/2). Where processing is based on consent, you may withdraw it at any time.

5. Recipients and international transfers

There is no European Commission adequacy decision for Türkiye. Data of data subjects in the European Union is transferred only as far as necessary for the performance of the contract between us (GDPR Art. 49(1)(b)) and under standard contractual clauses agreed with our service providers (GDPR Art. 46(2)(c)). You may request a copy of the safeguards applied.

Data may be shared with the following categories of recipients:

• Hosting and infrastructure providers (servers in Germany; CDN and DNS internationally)
• E-mail service provider (Türkiye)
• Carriers and customs brokers (necessary for shipping)
• Payment service providers
• AI-assisted translation service — Anthropic PBC (USA): used to translate product and review texts, so your review text may be processed for this purpose
• Competent public authorities where legally required

6. Retention

We keep data for as long as the purpose requires and for the statutory retention periods (ten years for commercial books and records, five years under tax legislation). After that it is deleted, destroyed or anonymised.

7. Your rights

You have the right to:

• Learn whether your personal data is processed and request information about it
• Learn the purpose of processing and whether it is used accordingly
• Know the third parties to whom data is transferred, in Türkiye or abroad
• Request rectification of incomplete or inaccurate data
• Request erasure or destruction where the conditions are met
• Request restriction of processing and data portability
• Object to decisions based solely on automated processing that adversely affect you
• Object, on grounds relating to your particular situation, to processing based on legitimate interests (GDPR Art. 21)
• Withdraw your consent at any time where processing is based on consent (GDPR Art. 7(3))
• Claim compensation for damage arising from unlawful processing

8. How to contact us

Send requests to info@velstoff.com or to our registered electronic mail address mevamtekstil@hs01.kep.tr. Requests under the GDPR are answered within one month (Art. 12(3)); depending on the complexity of the request this may be extended by two further months, in which case we will tell you. Requests under the Turkish KVKK are answered within thirty days. You may lodge a complaint with the supervisory authority of your EU member state or with the Turkish Personal Data Protection Board at any time.

We are not established in the European Union. Under GDPR Art. 27(2) we have not designated a representative in the Union: our processing is occasional, does not include large-scale processing of special categories of data, and is unlikely to result in a risk to the rights and freedoms of data subjects. If that assessment changes we will appoint a representative and publish their identity here.

9. Cookies

We do not use advertising or analytics cookies. See our Cookie Policy for details.