Data Controller

Pursuant to Article 10 of KVKK, we inform you — as Data Controller — of the following regarding the processing of your personal data.

BÂROFE Moda Tekstil Ürünleri Sanayi ve Dış Ticaret Limited Şirketi

AOS 55. Street No: 42, Maslak B Block, No: 4, Unit 542

Sarıyer / Istanbul, Türkiye

info@barofe.com  |  www.barofe.com

1. Why Do We Collect It?

We collect your personal data in order to: process and manage your orders; handle payment and invoicing; manage shipping and delivery operations; provide customer service and handle complaints; fulfil our legal obligations; ensure site security and prevent fraud; conduct personalised marketing and advertising subject to your explicit consent; and carry out business development and analytics.

2. Legal Basis

Your personal data is processed on the following legal grounds: necessity for contract formation or performance (KVKK Art. 5/2-c); fulfilment of legal obligations (KVKK Art. 5/2-ç); explicit statutory requirement (KVKK Art. 5/2-a); legitimate interests of the data controller (KVKK Art. 5/2-f); and for marketing and profiling activities, your explicit consent serves as the legal basis (KVKK Art. 5/1).

3. Who Do We Share It With?

Your personal data may be shared, solely for stated purposes and with appropriate safeguards, with:

• E-commerce and payment providers — Shopify, Stripe, İyzico
• Cargo and logistics providers
• Digital analytics and marketing providers — Google, Meta
• Accounting and financial advisory providers
• Competent public authorities and courts, where legally required

4. How Do We Collect It?

Your personal data is collected via site registration and order forms, payment screens, customer service channels, and cookies and similar digital tracking technologies.

5. How Long Do We Keep It?

We retain your personal data for the following periods: order and invoice data for 10 years; payment records for 10 years; account and membership data for the duration of the active period plus 3 years; marketing data until consent is withdrawn; technical log data for 1 year. Data is destroyed through automated deletion or anonymisation upon expiry.

6. Your Rights

You have the right to: learn whether your personal data is being processed; request information if it is; learn its purpose and whether it is used accordingly; know third parties to whom it is transferred; request rectification of incomplete or inaccurate data; request deletion or destruction; object to decisions based solely on automated processing; and claim compensation for damages from unlawful processing.

To exercise these rights, submit a written application with identity verification to info@barofe.com. Applications are responded to within 30 days.