Last updated: 27. September 2026
Englische Übersetzung zur Information — maßgeblich ist die türkische Fassung.
This notice explains how SHERFA processes your personal data on https://sherfalux.com — the store, the 3D design studio, Keepsake and the Gift Advisor — under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK").
1. Data controller
[Şirket tam unvanı] ("SHERFA")
- Address: [Şirket açık adresi]
- MERSIS: [MERSİS numarası]
- E-mail: [email protected]
- Registered e-mail (KEP): [KEP adresi]
- Phone: [Telefon]
2. Data we process
- Identity: name and surname.
- Contact: e-mail, phone, delivery and billing address.
- Customer transactions: orders, quotes, cart, design versions, requests and complaints, Gift Advisor answers.
- Design content: sizes, metal, stones and engraving text you choose; processed images created from photos, handwriting or sound for Keepsake pieces; AI product photos you generate.
- Security: IP address, session and login records, a one-way hash of your password.
- Payment: amount and status only — card details are never stored by us; payments are taken by a licensed payment institution with 3D Secure.
- Marketing preferences, only with your explicit consent.
We do not ask for special categories of personal data. If a photo you upload for a Keepsake piece shows other people, you must have their permission.
3. Purposes
- Creating and managing your account,
- Designing, pricing, producing, invoicing and delivering orders,
- Performing the distance sales contract, withdrawals, returns and warranty,
- Preparing production previews for custom and Keepsake pieces,
- Gift recommendations and service improvement,
- Customer support,
- Information security and fraud prevention,
- Legal obligations (tax, commercial and consumer law),
- News and offers, only with your consent.
4. Legal grounds
- Performance of a contract (KVKK art. 5/2-c),
- Legal obligation (art. 5/2-ç),
- Establishing, exercising or defending a right (art. 5/2-e),
- Legitimate interest without harming your rights (art. 5/2-f),
- Explicit consent where required (art. 5/1).
5. Transfers
Data may be shared, only as needed, with insured couriers, payment institutions and banks, accounting and e-invoice providers, hosting / database / e-mail / storage providers, AI image and text providers (design parameters only — never your name or e-mail) and authorised public bodies.
Some infrastructure and AI providers may store data outside Türkiye. Such transfers follow KVKK art. 9 with appropriate safeguards (standard contracts) or, where required, your explicit consent.
6. How we collect data
Through forms on the site (account, orders, studio, Keepsake, Gift Advisor), e-mail and phone, and automatically through cookies. Keepsake photos, handwriting and sound are processed in your browser; only the processed image is sent when you press "Send to the atelier". Raw audio is never uploaded.
7. Retention
| Data | Period |
|---|---|
| Orders, invoices, accounting records | 10 years (Tax Procedure Law, Commercial Code) |
| Distance sales contract and pre-contract information | 3 years |
| Account and design records | While the account is active, then 2 years |
| Keepsake images | 1 year after delivery (re-making and warranty), or earlier on request |
| Gift Advisor answers of guests | 2 years, as anonymous statistics |
| Security logs | At least 2 years (Law No. 5651) |
8. Your rights
Under KVKK art. 11 you may ask whether your data is processed, request information, learn the purpose and recipients, request correction, deletion or destruction, request notification of these to recipients, object to decisions made solely by automated means, and claim compensation for unlawful processing.
9. How to apply
Send your request from your registered e-mail to [email protected], to our KEP address [KEP adresi], or in writing to [Şirket açık adresi]. We reply free of charge within 30 days.
10. Security
Encrypted connections (HTTPS), one-way hashed passwords, role-based admin access, and private storage for Keepsake images and AI photos, visible only to you and authorised atelier staff.
11. Changes
We may update this notice; the date at the top shows the latest revision.
[Şirket tam unvanı] · [Şirket açık adresi] · [email protected]