As Lydia Reklam Organizasyon Turizm Sanayi Ticaret Limited Şirketi ("Tekstilbox" or the "Company"), we attach great importance to the security of your personal data. This Information Notice has been prepared, in our capacity as data controller, in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform, in order to inform you about the purposes and legal grounds for processing your personal data, to whom it may be transferred, the method of collection, and your rights under the KVKK.
1. Data Controller
- Company: Lydia Reklam Organizasyon Turizm Sanayi Ticaret Limited Şirketi
- Address: Mehmet Nesih Özmen Mahallesi, Savur Sokağı No:22/2, 34173 Merter, Güngören / İstanbul, Türkiye
- Phone: +90 (212) 637 03 34
- E-mail: info@tekstilbox.com
- Website: tekstilbox.com
2. Personal Data Processed
The following personal data may be processed through our website, forms, e-mail, telephone and other communication channels:
| Data Category | Personal Data |
|---|---|
| Identity | First name, last name |
| Contact | E-mail address, phone number, address |
| Customer Transaction | Request, quotation and order details, message contents, correspondence |
| Transaction Security | IP address, date and time information, browser information, security verification (reCAPTCHA) data |
3. Purposes of Processing
Your personal data is processed for the following purposes:
- Receiving, evaluating and responding to your requests and questions
- Preparing and sending quotations
- Carrying out order, sales and service processes
- Contacting you
- Ensuring the security of the website and forms, and preventing spam and misuse
- Fulfilling our legal obligations and providing information to authorised institutions and organisations
- Establishing, exercising and protecting our legal rights in potential disputes
4. Method of Collection and Legal Grounds
Your personal data is collected through the contact and quotation forms on our website, e-mail, telephone, trade fairs and events, and face-to-face meetings, by fully or partially automated means or by non-automated means provided that it is part of a data recording system.
This data is processed based on the following legal grounds set out in Article 5(2) of the KVKK:
- (c) Processing is directly related to the establishment or performance of a contract: Preparing quotations, carrying out order and service processes
- (ç) Processing is necessary for the data controller to fulfil its legal obligation: Obligations arising from tax, commercial and related legislation
- (e) Processing is necessary for the establishment, exercise or protection of a right: Retention as evidence in potential disputes
- (f) Processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject: Responding to requests, communication activities and ensuring website security
5. Transfer of Personal Data
Your personal data may be transferred to the following recipient groups for the purposes stated above and within the conditions set out in Articles 8 and 9 of the KVKK:
- Business partners and suppliers we receive services from: Hosting, IT, cargo and logistics service providers, only to the extent required by the service
- Financial advisors and legal counsel: For the purpose of fulfilling legal obligations and conducting legal processes
- Authorised public institutions and organisations and judicial authorities: Upon request, within the scope of obligations arising from legislation
6. Transfer of Personal Data Abroad
Within the scope of the Google reCAPTCHA service used to ensure the security of the forms on our website, your IP address and browser information are transferred to Google LLC, whose servers are located abroad. This transfer is carried out in accordance with the conditions and appropriate safeguards set out in Article 9 of the KVKK. For information on Google's data processing activities, please see the Google Privacy Policy.
7. Retention Period
Your personal data is retained for as long as required by the purposes of processing and for the statutory retention periods set out in the relevant legislation. Upon expiry of these periods, your data is deleted, destroyed or anonymised.
8. Your Rights Under Article 11 of the KVKK
As a data subject, you may exercise the following rights by applying to our Company:
- To learn whether your personal data is processed
- To request information if your personal data has been processed
- To learn the purpose of processing and whether it is used in line with that purpose
- To know the third parties to whom your personal data is transferred in Turkey or abroad
- To request correction of your personal data if it is incomplete or inaccurate
- To request deletion or destruction of your personal data within the conditions set out in Article 7 of the KVKK
- To request that the correction, deletion or destruction be notified to third parties to whom your personal data has been transferred
- To object to a result against you arising from the analysis of the processed data exclusively through automated systems
- To claim compensation for damages arising from the unlawful processing of your personal data
9. Application Method
To exercise the rights listed above, you may submit your requests to our Company in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, using the following methods:
- In person with a wet-signed written petition, or by sending it via a notary public to Mehmet Nesih Özmen Mahallesi, Savur Sokağı No:22/2, 34173 Merter, Güngören / İstanbul, Türkiye
- By e-mail signed with a secure electronic signature or mobile signature to info@tekstilbox.com
- By e-mail to info@tekstilbox.com from the e-mail address you have previously notified to our Company and which is registered in our system
Your application must include your first name, last name, signature (if the application is in writing), Turkish ID number (for foreign nationals, nationality and passport or ID number), residential or business address for notification, e-mail address for notification (if any), phone number, and the subject of your request.
Your application will be concluded free of charge as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request. However, if the process requires an additional cost, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board. If your application is rejected, you find the response insufficient, or no response is given in due time, you may file a complaint with the Personal Data Protection Board pursuant to Article 14 of the KVKK.
10. Changes to This Information Notice
Our Company may amend this Information Notice in line with changes in legislation or updates to our data processing activities. The current version is always published on this page, and the date of the latest update is shown at the top of the page.
For detailed information about cookies, please see our Cookie and Privacy Policy.
Last updated: 20.10.2026
