1. Data Controller
This Privacy Policy and Personal Data Notice explains how your personal data is processed by Melis Esinduy.
Data Controller: Melis Esinduy
Tax Office: Göztepe Tax Office
Tax Identification Number: 3800254714
Address: Caddebostan Mah. Ömerpaşa Sk. No: 2, Apartment No: 7, Kadıköy / Istanbul, Türkiye
Phone: +90 532 465 92 00
Email: melis.esinduy@performancecc.org
Website: performancecc.org
2. Scope
This policy applies to individuals who visit performancecc.org, create an account, purchase books, submit a contact form, request support, or contact us by email or telephone.
3. Personal Data We May Process
Depending on the services you use, we may process the following categories of personal data:
Identity and contact information, including full name, delivery address and billing address,
Phone number and email address,
Order, product, delivery, return and customer service information,
Payment method, payment status and transaction information,
IP address, device information, browser information, session logs and website usage data,
Support requests, complaints, suggestions and communications,
Newsletter and marketing preferences where you have provided consent.
Where payment services are provided by an external payment provider, card information may be processed through that provider’s own infrastructure. The privacy and security rules of the relevant payment provider also apply.
4. Purposes of Processing Personal Data
Your personal data may be processed for the following purposes:
Receiving, preparing, processing and delivering your orders,
Completing invoicing, accounting and legal obligations,
Managing returns, exchanges, withdrawal requests and customer support,
Ensuring website security and preventing misuse,
Improving service quality,
Evaluating requests, complaints and feedback,
Sending campaigns, newsletters and commercial electronic messages where you have given consent,
Responding to lawful requests from authorised public authorities.
5. Method and Legal Basis of Collection
Your personal data may be collected electronically through order, membership, contact and payment forms, email communications, telephone calls, delivery processes, cookies and similar technologies.
Your data may be processed where necessary for the establishment or performance of a contract, compliance with legal obligations, protection of legitimate interests, establishment, exercise or protection of legal rights, and where necessary, based on your explicit consent.
6. Transfer of Personal Data
Your personal data may be shared only to the extent necessary for providing our services, with:
Payment providers, banks and financial service providers,
Shipping, courier and logistics companies,
Accounting, financial advisory and legal service providers,
Hosting, e-commerce infrastructure, software, security and technical support providers,
Public authorities and institutions legally authorised to request information.
Your personal data is not sold, rented or transferred to third parties for commercial purposes.
7. International Data Transfers
Your personal data may be transferred abroad where the infrastructure of e-mail, hosting, payment, analytics, security or similar digital service providers is located outside Türkiye.
Any international transfer is carried out in accordance with applicable legal requirements and appropriate safeguards. For information about current international service providers, please contact us at melis.esinduy@performancecc.org.
8. Cookies and Similar Technologies
Essential cookies may be used to ensure the secure and proper operation of our website.
Where analytics, performance or marketing cookies are used, your preferences will be requested through a cookie management tool where required. You may change your cookie preferences through your browser settings or the cookie preference panel made available on our website.
9. Retention of Personal Data
Your personal data is retained for as long as necessary for the purposes for which it is processed and for the periods required by applicable legislation.
Order, invoice and payment records: For the period required by tax, accounting and commercial legislation,
Customer support records: For the period necessary after the request has been resolved,
Account information: While your account remains active or until a deletion request is reviewed,
Marketing permissions: Until you withdraw your consent,
Technical security logs: For the period necessary to maintain security and meet legal obligations.
Once retention periods expire, personal data is deleted, destroyed or anonymised in accordance with applicable law.
10. Data Security
Reasonable technical and administrative measures are implemented to prevent unlawful processing, unauthorised access, loss or alteration of personal data.
However, no method of data transmission over the internet can be guaranteed to be completely risk-free. You are also responsible for protecting the security of your account, password and device.
11. Your Rights
Under Article 11 of the Turkish Personal Data Protection Law No. 6698, you have the right to:
Learn whether your personal data is being processed,
Request information if your data has been processed,
Learn the purpose of processing and whether data is used in accordance with that purpose,
Learn the third parties to whom data is transferred,
Request correction of incomplete or inaccurate data,
Request deletion or destruction of data where legal conditions are met,
Request notification of correction, deletion or destruction to third parties,
Object to a negative result arising from automated analysis,
Request compensation for damages caused by unlawful processing.
You may submit your requests by emailing melis.esinduy@performancecc.org from an email address already registered in our systems, together with information necessary to verify your identity. You may also submit your request in writing to our address stated above.
12. Marketing Communications
Where required, your separate consent is obtained before sending campaigns, discounts, announcements, newsletters or other commercial electronic messages.
Accepting this Privacy Policy does not by itself mean that you have consented to receive marketing communications. You may withdraw your marketing consent at any time.
13. Updates to This Policy
This policy may be updated due to legal developments, technical changes or changes in our services. The updated version becomes effective once published on performancecc.org.
In the event of a conflict between the Turkish and English versions, the Turkish version shall prevail to the extent permitted by applicable law.
