Data controller
draganddrop digital
Address: Gazi Kemal Paşa Mahallesi 11015 Sokak No:11/1 - Turkey - Ayvalık
Phone: +90 532 361 37 16
Email: info@draganddrop.tr
Processed personal data
Name, surname, email, phone, delivery and billing address, order and payment information, membership information, favorite/list activities, cart information, support requests, device and transaction security information, cookie records, IP address and site usage data may be processed.
Payment card information is securely processed through payment institutions and the Shopify infrastructure; card information is not stored by our store as full card numbers.
Purposes of processing and legal grounds
Data is processed for the purposes of creating orders, receiving payments, delivering products, managing return and support processes, managing membership accounts, improving customer experience, conducting campaign and informational communications, ensuring security and preventing fraud, fulfilling legal obligations, and protecting rights in case of disputes.
Legal grounds include the establishment and performance of a contract, legal obligation, legitimate interest, establishment/exercise/protection of a right, and explicit consent.
Transferred Parties
Data may be shared with Shopify and its hosting infrastructure, payment institutions, shipping and logistics companies, email/SMS service providers, accounting and invoicing services, technical support providers, authorized public institutions, and legally authorized bodies.
For international orders or when using cloud infrastructure, data may be transferred abroad; these transfers are made through mechanisms compliant with applicable data protection rules.
Shelf life
Data is retained for the period necessary for the processing purpose and for the statutory retention periods for tax, commercial, consumer, accounting, and evidentiary obligations. At the end of the period, it is deleted, destroyed, or anonymized.
Your Rights
In accordance with your rights under KVKK Article 11, you have the right to learn whether your personal data is being processed, to request information, to learn the purpose of processing and whether it is used in accordance with the purpose, to know the third parties to whom it is transferred, to request correction of incomplete or incorrect data, to request its deletion or destruction, to object, and to demand compensation in case you suffer damage.
Customers within the EU/EEA may also have rights to access, rectification, erasure, restriction, portability, objection and withdrawal of consent.
Cookies and security
The site may use cookies for basic operation, cart, session, security, performance, analytics, and marketing purposes. For non-essential cookies, you can use your browser settings or the cookie preference panel, if available.
Technical and administrative measures are implemented for the protection of personal data.
Application and contact
For privacy and personal data requests, you can contact us at info@draganddrop.tr or at +90 532 361 37 16.