PRIVACY POLICY AND
Personal Data Protection Law (KVKK) Information Text
Last Update Date: 09.09.2026
Data Controller and Contact Information
Pursuant to Turkish Personal Data Protection Law No. 6698 (“KVKK”), your personal data is processed by ALTIN KAPPAK İTHALAT İHRACAT SANAYİ VE TİCARET LİMİTED ŞİRKETİ (“the Company”) in its capacity as the data controller.
Your personal data collected through the www.fitbites.com.tr website operated by the Company and within the scope of the FitBites brand may be processed for the purposes and on the legal grounds explained in this Disclosure Notice.
Data Controller Information:
Trade Name: ALTIN KAPPAK İTHALAT İHRACAT SANAYİ VE TİCARET LİMİTED ŞİRKETİ
Brand: FitBites
Address: Akşemsettin Mahallesi, Sangüzel Caddesi No:105, 34080 Fatih/İstanbul, Türkiye
Email: info@fitbites.com.tr
Website: www.fitbites.com.tr
Personal Data Processed
When you visit our website, complete a contact or wholesale enquiry form, create an account, or place an order, the following personal data may be processed:
• First name and surname,
• Telephone number and email address,
• Delivery and billing addresses,
• Company or store information,
• Order, payment, and delivery information,
• The content of requests, suggestions, and complaints,
• IP address, device, browser, and website usage information,
• Technical data collected through cookies.
Your credit or debit card information may be processed by the contracted payment service provider. Our Company does not directly store your complete card details.
Purposes of Processing Personal Data
Your personal data may be processed for the following purposes:
• Receiving, preparing, invoicing, and delivering orders,
• Managing membership and customer account processes,
• Evaluating contact and wholesale enquiries,
• Providing customer service and after-sales support,
• Carrying out payment, accounting, and financial processes,
• Fulfilling legal obligations,
• Preventing fraud and unauthorised transactions,
• Improving the security and performance of the website,
• Sending campaign, promotional, and marketing communications where explicit consent has been provided.
Where required, your explicit consent shall be obtained separately for commercial electronic communications and marketing activities. Refusal to provide such consent shall not prevent you from accessing the Company’s essential products and services.
Method and Legal Basis for Data Collection
Your personal data may be collected through the website, membership and order pages, contact forms, email, telephone, cookies, and electronic systems by automated or partially automated means.
Your personal data is processed on the legal grounds that such processing is necessary for the establishment or performance of a contract, compliance with legal obligations, the establishment, exercise, or protection of a right, the legitimate interests of the data controller, and, where required, your explicit consent.
Transfer of Personal Data
Your personal data may be shared, to the extent necessary and for the stated purposes, with the following parties:
• Payment institutions and banks,
• Courier, logistics, and delivery companies,
• Accounting, invoicing, and technical service providers,
• Website infrastructure, hosting, and security service providers,
• Marketing and analytics service providers—subject to explicit consent where required,
• Authorised public authorities, courts, and other legally authorised bodies.
Our website operates using Wix infrastructure. As Wix and certain service providers used by the Company may have systems or servers located outside Türkiye, your personal data may be transferred abroad. Such transfers are carried out where one of the conditions specified in Article 9 of the Turkish Personal Data Protection Law (KVKK) is met and the necessary technical and administrative security measures have been implemented. Where explicit consent is required as the legal basis, your personal data shall not be transferred abroad without first obtaining your explicit consent.
Cookies, Storage Period and Data Security
-
COOKIES
Cookies may be used to ensure the proper functioning and security of our website, remember user preferences, and measure website performance.
Essential cookies are used to provide the website’s core functions. Functional, analytics, and advertising/marketing cookies operate subject to the visitor’s preferences and explicit consent where required.
You can change your cookie preferences through the cookie settings panel on the website or through your browser settings.
-
RETENTION PERIOD FOR PERSONAL DATA
Your personal data shall be retained for as long as necessary for the purposes for which it is processed and in accordance with the statutory retention periods prescribed by applicable legislation. When the retention period expires or the legal basis for processing no longer applies, your data shall be deleted, destroyed, or anonymised in accordance with applicable legislation.
-
DATA SECURITY
Our Company implements appropriate technical and administrative measures to prevent the unlawful processing of or access to personal data and to ensure that such data is stored securely.
Nevertheless, it should be noted that no transmission of data over the internet is entirely risk-free.
Your Rights Under the Personal Data Protection Law (KVKK)
Under Article 11 of the Turkish Personal Data Protection Law (KVKK), you have the right to:
• Learn whether your personal data is being processed,
• Request information if your personal data has been processed,
• Learn the purpose of processing and whether your personal data is being used in accordance with that purpose,
• Know the third parties to whom your personal data has been transferred,
• Request the correction of incomplete or inaccurate personal data,
• Request the deletion or destruction of your personal data where the statutory conditions are met,
• Request that any correction, deletion, or destruction of your personal data be communicated to the third parties to whom it has been transferred,
• Object to any adverse outcome resulting from the analysis of your personal data exclusively through automated systems,
• Claim compensation for damages suffered as a result of the unlawful processing of your personal data.
Applications, Communications and Policy Changes
APPLICATIONS AND CONTACT INFORMATION
You may submit your requests under the Turkish Personal Data Protection Law (KVKK) to our Company by filing an application that states your identity and clearly describes your request, in accordance with the methods specified in the Communiqué on the Procedures and Principles of Application to the Data Controller.
Data Controller: ALTIN KAPPAK İTHALAT İHRACAT SANAYİ VE TİCARET LİMİTED ŞİRKETİ
Email: info@fitbites.com.tr
Address: Akşemsettin Mahallesi, Sangüzel Caddesi No:105, 34080 Fatih/İstanbul, Türkiye
Your application shall be processed free of charge as soon as reasonably possible, depending on the nature of the request, and no later than 30 days. However, if processing the application requires an additional cost, a fee may be charged in accordance with the tariff determined by the Turkish Personal Data Protection Board.
AMENDMENTS TO THIS POLICY
Our Company may update this document in response to changes in applicable legislation, its personal data processing activities, or the services it provides. The current version and the date of the latest update shall be published at www.fitbites.com.tr.
