This Privacy Policy aims to inform you about how your personal data is collected, used, and protected within the scope of the calla-breeze.com website. Your security is important to us. Therefore, the personal data you share with us is protected with care.

Processing, Storage, and Deletion of Personal Data

Your personal data is processed in accordance with the Turkish Personal Data Protection Law No. 6698 (KVKK), lawfully and in good faith, for legitimate purposes and limited to the purposes for which it is processed. Necessary measures are taken to ensure that your personal data is kept accurate and up to date.

Your personal data, which is carefully stored for the period stipulated under the relevant legislation or for the period necessary for the purposes for which it is processed, is deleted and destroyed at the end of this period. This period cannot be less than 1 year or more than 2 years for log files.

Data Controller

According to the Personal Data Protection Law, the data controller is the person or entity that determines the purposes and methods of processing personal data.

As CALLA BREEZE, acting as the data controller, we aim to inform you, our users, through this Privacy and Personal Data Protection Policy, about which personal data is processed within the scope of the website you are visiting, for what purposes it is processed, with whom and for what reasons the processed data may be shared, our data processing methods and legal grounds, and your rights regarding your processed data.

• Address: 19 Mayıs Mahallesi, Sarıkanarya Sokak, Çiğdem Apt. No:3 Apartment 12 Kozyatağı / Istanbul
• Email: info@calla-breeze.com
• Contact Person: Esra Çakır – info@calla-breeze.com

Personal Data Collected

Your personal data collected by this website includes:

• Address information
• Email address
• IP address
• Name and surname
• Payment information
• Phone number
• Usage data

Purposes of Processing Data

Your personal data is processed by this website for the purposes of providing services in accordance with their intended purpose, fulfilling legal obligations, improving service quality, communication, security, and sharing information with legal authorities when necessary. Your personal data will not be used for purposes other than those listed above.

Transfer of Data

Your personal data collected by this website will not be shared with third parties without your explicit consent, except where required by law. However, it may be shared with our service providers, business partners, and legal authorities to the extent necessary for the provision of services and fulfillment of legal obligations.

The transfer of personal data abroad is only possible if there is an adequacy decision regarding the country to which the transfer will be made, the sectors within that country, or the relevant international organizations.

Legal Basis for Data Processing

Your personal data is processed pursuant to Article 5 of the KVKK and Article 6 of the GDPR, in cases where the explicit consent of the data subject has been obtained, where processing is necessary for the establishment and performance of a service contract, where it is necessary for the data controller to fulfill its legal obligations, or where processing is mandatory for the legitimate interests of the data controller, provided that such processing does not harm the fundamental rights and freedoms of the data subject.

Your Legal Rights

Your Rights Under the KVKK

Pursuant to Article 11 of the KVKK, everyone has the right to apply to the data controller and make the following requests regarding themselves:

1. To learn whether their personal data has been processed.
2. To request information if their personal data has been processed.
3. To learn the purpose of processing personal data and whether such data is used in accordance with its purpose.
4. To know the third parties to whom personal data has been transferred domestically or abroad.
5. To request correction if personal data has been processed incompletely or incorrectly.
6. To request the deletion or destruction of personal data within the framework of the conditions set out in Article 7 of the KVKK.
7. To request notification of the transactions carried out as a result of correction, deletion, and destruction requests to third parties to whom personal data has been transferred.
8. To object to the occurrence of a result against the person themselves through the analysis of processed data exclusively by automated systems.
9. To request compensation for damages in the event of suffering damage due to the unlawful processing of personal data.

For your applications regarding the legal rights listed above, you may contact the data controller at [info@calla-breeze.com](mailto:info@calla-breeze.com). As the data controller, we are obliged to conclude the requests included in your application as soon as possible and, in any case, within thirty days at the latest, free of charge, depending on the nature of the request. If your requests are not fulfilled, your right to file a complaint with the Turkish Personal Data Protection Authority is reserved.

Your Rights Under the GDPR

Under the GDPR (EU General Data Protection Regulation), you have the following rights:

1. The right to access your personal data.
2. The right to request correction of your personal data.
3. The right to request deletion of your personal data, also known as the right to be forgotten.
4. The right to request restriction of personal data processing.
5. The right to data portability.
6. The right to object to the processing of personal data.
7. The right to withdraw your explicit consent at any time, without affecting the lawfulness of processing carried out before the withdrawal of consent.
8. Rights regarding automated decision-making and profiling.
9. The right to be informed in the event of a personal data breach.

For your applications regarding the legal rights listed above, you may contact the data controller at [info@calla-breeze.com](mailto:info@calla-breeze.com). As the data controller, we are obliged to conclude the requests included in your application as soon as possible and, in any case, within thirty days at the latest, free of charge, depending on the nature of the request. If your requests are not fulfilled, your right to file a complaint with the Data Protection Authority in your country is reserved.

Use of Cookies

This website uses cookies. Cookies are small rich-text format text files that allow certain information about users to be stored on users’ terminal devices when a website is visited. Cookies may be stored on your device through your browser during your first visit to a website, and when you visit the same website again using the same device, your browser checks whether there is a cookie registered on your device on behalf of that website. If such a record exists, it transmits the data contained in the record to the website you are visiting. In this way, the website detects your previous visit and determines the content to be delivered to you accordingly.

Services Used

Infrastructure Services

• Cloudflare: Cloudflare is used for website security and performance optimization. It provides DDoS protection, SSL certificate, and CDN services.

Analytics and Tracking

• Google Analytics: Google Analytics is used to analyze visitor behavior and website usage. This service provides detailed reports on visitor traffic, interactions, and user behavior.

Payment Systems

• Iyzico: Iyzico is a payment infrastructure used for online payment transactions.

Marketing Tools

• Mailchimp: Mailchimp is used for email marketing campaigns and communication. Email addresses and communication preferences are managed.

Advertising Services

• Facebook Pixel: Facebook Pixel tracks advertising conversions, optimizes target audiences, and measures advertising performance.

Publishing Services

• Google AdSense: Google AdSense is a tool used to display advertisements on websites. Third parties, including Google, use cookies to serve advertisements based on users’ previous visits to this or other websites. You can disable personalized ads at https://www.google.com/settings/ads.

Consent and Effectiveness

Sharing your personal data through our website is entirely your choice. This Privacy Policy entered into force on April 1, 2026 and may be updated when necessary. You can always review the latest version on this page.