KVKK
PERSONAL DATA PROTECTION AND PROCESSING INFORMATION NOTICE
Last Updated: October 21, 2026
1. Identity of the Data Controller
Pursuant to Turkish Personal Data Protection Law No. 6698 (“KVKK”), your personal data is processed by the data controller identified below in accordance with applicable legislation.
Trade Name: Tarhan Moda Tasarım Otomotiv Sanayi ve Ticaret Limited Şirketi
Brand: Surikka
Website: https://surikka.com/
Address: İsmet Kaptan Mahallesi, Tanaçan İş Merkezi, Floor 4, No. 72/3, Çankaya / İzmir, Türkiye
Contact: You may contact us through the communication channels and customer support services provided on the Surikka website.
2. Personal Data Processed
Depending on your use of our website, purchases, and communications with us, we may process the following categories of personal data:
Identity Information: First name, surname, and, where required, identity information necessary for invoicing.
Contact Information: Telephone number, email address, billing address, and delivery address.
Customer Transaction Information: Order number, order details, product preferences, purchase history, and return or exchange requests.
Financial Information: Payment transaction details, payment method, and payment status information necessary to process and track payments.
Transaction Security Information: IP address, session and transaction records, security logs, and necessary technical data.
Request and Complaint Information: Customer service communications, support requests, complaints, and information relating to their resolution.
Marketing Information: Marketing communication preferences, consent records, and campaign interactions, where applicable.
Cookie Information: Data collected through cookies used to operate and secure the website and remember your preferences.
Not all categories of personal data are necessarily processed for every visitor or customer. The data processed depends on the service used and the transaction performed.
3. Purposes of Processing Personal Data
Your personal data may be processed, to the extent permitted by applicable law and limited to the relevant purposes, for the following purposes:
Creating and managing customer accounts and memberships.
Receiving, preparing, invoicing, and delivering orders.
Processing payments, collections, and accounting transactions.
Managing returns, exchanges, cancellations, and after-sales support.
Responding to customer inquiries, information requests, and complaints.
Managing customer relationships and improving service quality.
Ensuring the security of our website and information systems.
Preventing fraud and unauthorized transactions and verifying transactions.
Fulfilling legal obligations and responding to lawful requests from competent authorities.
Managing financial, accounting, auditing, and record-retention processes.
Conducting campaigns, advertising, promotional, and marketing activities where the required consent or other applicable legal basis exists.
Measuring website performance and improving user experience, subject to obtaining the required permissions where applicable.
4. Legal Grounds for Processing Personal Data
Your personal data is processed on the basis of the applicable legal grounds set out in Article 5 of KVKK.
Accordingly, your personal data may be processed where:
Processing is necessary for the establishment or performance of a contract to which you are a party.
Processing is necessary for the data controller to fulfill its legal obligations.
Processing is necessary for the establishment, exercise, or protection of a legal right.
Processing is necessary for the legitimate interests of the data controller, provided that your fundamental rights and freedoms are not prejudiced.
Processing is expressly provided for by law.
Your explicit consent is obtained where required by the nature of the relevant processing activity.
Activities requiring explicit consent will not be carried out without such consent where it is legally required. As a general rule, declining marketing activities that are not necessary for contract performance will not prevent you from making a purchase.
5. Transfer of Personal Data
Your personal data may be transferred, where legally permitted and to the extent necessary, to the following categories of recipients, subject to appropriate safeguards:
Courier and Logistics Companies: For the delivery and tracking of orders.
Payment Service Providers and Banks: For payment processing and collection.
E-commerce, Hosting, and IT Service Providers: For operating the website, managing orders, maintaining data security, and providing technical support.
Accounting, Financial, and Consultancy Service Providers: For maintaining financial records and fulfilling relevant obligations.
Competent Public Authorities and Judicial Bodies: To fulfill legal obligations or respond to legally valid requests.
Legal Advisors and Auditors: To manage legal matters and protect legal rights.
Marketing and Analytics Service Providers: To conduct relevant activities lawfully and subject to the required permissions.
Personal data is transferred only to the extent necessary for the relevant service and where an appropriate legal basis exists. The inclusion of a service provider category in this notice does not mean that the company necessarily uses every service listed.
Where personal data is transferred abroad, the requirements and safeguards set out in Article 9 of KVKK shall apply.
6. Methods of Collecting Personal Data
Your personal data may be collected electronically or physically through the following channels, depending on the services provided:
Membership, order, and payment pages on our website.
Contact and customer support forms.
Telephone, email, WhatsApp, and other customer communication channels.
Return, exchange, and complaint requests.
Cookies and similar technologies.
Information obtained from courier, payment, and other service providers to the extent necessary for the relevant transaction.
Physical sales and invoicing processes, where applicable.
7. Retention and Security of Personal Data
Surikka aims to implement the necessary technical and administrative measures, in accordance with applicable legislation, to prevent unlawful processing of personal data, prevent unauthorized access, and ensure the secure retention of personal data.
Your personal data is retained for the periods required by applicable legislation or for as long as necessary for the purposes for which it was processed. Once the retention purpose has ceased and no other legal obligation requires continued retention, the data will be deleted, destroyed, or anonymized in accordance with applicable legislation.
8. Cookies and Similar Technologies
Our website may use cookies to ensure its proper functioning, maintain security, remember your preferences, and, where applicable, improve the user experience.
Where required by applicable legislation, non-essential analytics, advertising, and marketing cookies will be used only after the necessary consent has been obtained. You may manage your cookie preferences through the cookie settings provided on our website or through your browser settings.
Further information regarding the types of cookies used, their purposes, retention periods, and relationships with third parties may be provided in a separate Cookie Policy published on our website, where applicable.
9. Rights of Data Subjects
Under Article 11 of KVKK, you have the following rights regarding your personal data:
To learn whether your personal data is being processed.
To request information if your personal data has been processed.
To learn the purpose of processing and whether your personal data is being used in accordance with that purpose.
To know the third parties to whom your personal data has been transferred, domestically or abroad.
To request the correction of incomplete or inaccurate personal data.
To request the deletion or destruction of your personal data under the conditions set out in Article 7 of KVKK.
To request notification of correction, deletion, or destruction operations to third parties to whom your personal data has been transferred.
To object to a result arising against you through the analysis of your personal data exclusively by automated systems.
To claim compensation for damages if you suffer harm due to the unlawful processing of your personal data.
These rights may be exercised subject to the conditions, procedures, and exceptions provided for under KVKK and applicable legislation.
10. Applications and Contact
You may submit requests concerning your rights under Article 11 of KVKK in accordance with Article 13 of KVKK and the applicable application procedures.
You may submit your request, together with information sufficient to verify your identity, through the current contact channels published on the Surikka website or in writing to the data controller's registered address.
Your application will be evaluated and concluded within the periods prescribed by applicable legislation. Where a fee may be charged for processing an application, the applicable legal provisions and fee limits shall apply.
11. Effective Date and Updates
This Information Notice has been prepared to explain the principles governing the processing of personal data. It may be updated to reflect changes in applicable legislation or our personal data processing activities.
The current version of this notice will be published on the Surikka website.
Surikka
Tarhan Moda Tasarım Otomotiv Sanayi ve Ticaret Limited Şirketi
Website: https://surikka.com/