This notice is provided under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") and the Communiqué on the Procedures and Principles of the Obligation to Inform, to explain how personal data is processed on the dokunnfc.com website (the "Site"). The Turkish version prevails.
1. Data Controller
- Seller / Data Controller: Atakan ALKAN (DOKUNNFC)
- Address: [Address to be added]
- Email: [Email to be added]
- Phone: [Phone to be added]
- Tax Office / No: [Tax office to be added] / [Tax number to be added]
- Website: dokunnfc.com
2. Personal Data Processed
- Identity: first name, last name
- Contact: email address, phone number, delivery address
- Customer transactions: order details and history, order notes, the destination address you give for NFC products, bank transfer reference
- Financial (IBAN card orders only): the name and IBAN you ask us to show on the card, and the bank name
- Transaction security: IP address, session and sign-in records, an irreversible hash of your password (the password itself is never stored)
No card data is collected; payment is by bank transfer only. No special categories of personal data are processed.
3. Purposes and Legal Bases
- Performance of a contract (KVKK art. 5/2-c): creating and managing your account; taking orders, matching payments, programming NFC products and delivering them; for IBAN cards, showing your name and IBAN, at your request, on the page linked to your card to anyone who scans it; sending order status, payment confirmation, shipping and password reset emails.
- Legal obligation (art. 5/2-ç): issuing invoices, keeping commercial books and records, responding to competent authorities.
- Establishing, exercising or defending a right (art. 5/2-e): handling withdrawals, returns and complaints, and evidence in possible disputes.
- Legitimate interest (art. 5/2-f): securing the Site and accounts, preventing abuse and unauthorised access.
Your data is not used for marketing or advertising, so no explicit consent is requested.
4. Collection Method
Data is collected electronically, through the registration, order, address and profile forms you fill in, and automatically through server logs and strictly necessary cookies while you use the Site.
5. Recipients and Purposes of Transfer
- Courier companies: name, phone and delivery address, for delivery only.
- Competent public authorities: where the law requires, to fulfil legal obligations.
- Infrastructure providers: hosting (Vercel, USA), database (Neon, Germany/EU), email delivery (Resend, USA) and image storage (Cloudflare, USA), to provide the service.
Some infrastructure providers are located abroad. These transfers are made under KVKK art. 9 using the standard contracts published by the Personal Data Protection Board, notified to the Authority.
6. Retention
- Order, payment and invoice records: 10 years, as required by law (Turkish Commercial Code art. 82, Tax Procedure Law art. 253).
- Account data: while your account exists. When it is deleted at your request, data other than order records still under statutory retention is deleted or anonymised.
- Security logs: as long as the security purpose requires.
Expired data is periodically deleted, destroyed or anonymised.
7. Your Rights under KVKK art. 11
You may apply to the data controller to:
- learn whether your personal data is processed,
- request information about the processing,
- learn the purpose of processing and whether data is used accordingly,
- know the third parties in Turkey or abroad to whom data is transferred,
- request correction of incomplete or inaccurate data,
- request deletion or destruction under KVKK art. 7,
- request that corrections, deletions and destructions be notified to the recipients,
- object to an adverse outcome produced solely by automated analysis,
- claim compensation for damage caused by unlawful processing.
8. How to Apply
Under the Communiqué on the Procedures and Principles of Application to the Data Controller, send your request with information identifying you:
- in writing to the address above, or
- from the email address registered on the Site to [Email to be added].
Requests are answered free of charge within 30 days at the latest; if the action requires an additional cost, the fee in the Board's tariff may be charged.
Last updated: October 9, 2026