KVKK Disclosure Text

Effective Date: 10.08.2026

This text has been prepared in accordance with Article 10 of the Law on the Protection of Personal Data No. 6698 ("KVKK") to fulfill the disclosure obligation of Millenniums as the data controller.

1. Identity of the Data Controller

Title	Millenniums
Company Type	Individual
Address	Fındıklı mahallesi zümrütlü sokak no: 1 B Blok Daire 8 Maltepe/İSTANBUL, Maltepe/İstanbul
Tax Office / No	/
MERSIS No
Trade Registry No
KEP Address
Email	[email protected]
Phone	08504664536

2. Categories of Personal Data Processed

• Identity: first name, last name
• Contact: email, phone, address
• Customer transaction: order, delivery, return and request records
• Finance: invoice and payment information
• Transaction security: IP, log records, device and browser information
• Marketing: communication preferences, cookie-based browsing data (with consent)

3. Purposes of Processing

• Execution of membership and order processes
• Establishment and performance of contracts, delivery and return transactions
• Customer relations and support management
• Execution of finance, accounting and invoicing operations
• Execution of information security processes and prevention of misuse
• Providing information to authorized persons, institutions and organizations
• Execution of advertising, campaign and promotion processes with explicit consent

4. Legal Grounds (KVKK Art.5 and Art.6)

• Explicitly stipulated in laws
• Directly related to the establishment or performance of a contract
• Fulfillment of the data controller’s legal obligation
• Mandatory for the establishment, exercise or protection of a right
• Legitimate interest provided that fundamental rights and freedoms are not harmed
• Explicit consent (commercial electronic communication, marketing cookies, etc.)

5. Collection Method

Your personal data is collected through membership and order forms, payment steps, cookies, email, phone, call center, social media and support channels by automated or partially automated means.

6. Transfer

Your data may be transferred to cargo and logistics companies, payment institutions and banks, e-invoice integrators, IT and hosting service providers, financial and legal advisors, and authorized public institutions, only for the relevant purpose and to the extent necessary. If international transfer is required, the safeguards stipulated by KVKK will be ensured.

7. Retention and Disposal

Data is retained for the duration required by the purpose of processing and the statute of limitations/retention periods in the relevant legislation (commercial books 10 years, tax records 5 years); at the end of the period, it is deleted, destroyed or anonymized.

8. Rights of the Data Subject (KVKK Art.11)

1. To learn whether personal data is processed
2. If processed, to request information regarding this
3. To learn the purpose of processing and whether it is used in accordance with the purpose
4. To know the third parties to whom it is transferred domestically/abroad
5. To request correction of incomplete or inaccurate data
6. To request deletion or destruction
7. To request notification of correction and deletion to third parties to whom data has been transferred
8. To object to a result against them arising from analysis by automated systems
9. To demand compensation if they suffer damage due to unlawful processing

9. Application Procedure

You can submit your application together with information verifying your identity via

• Post: Fındıklı mahallesi zümrütlü sokak no: 1 B Blok Daire 8 Maltepe/İSTANBUL, Maltepe/İstanbul
• KEP:
• Email: [email protected]

Your request will be concluded free of charge as soon as possible and within 30 days at the latest, depending on its nature; if the process requires an additional cost, the fee in the Board’s tariff may be charged. In case your application is rejected or remains unanswered, you have the right to file a complaint with the Personal Data Protection Board.