Privacy Policy and Data Protection | Arovela Shop

Data Controller

The data controller within the meaning of the EU General Data Protection Regulation (GDPR) is iO40 Finansal Teknolojiler Anonim Şirketi (brand: Arovela®), İdealtepe Mahallesi Dik Sokak No:13/2, Maltepe / Istanbul, 34841, Türkiye. You can reach us at forms@arovela.com or +90 216 606 4099.

Data We Process and Why

When you place an order, we process your name, e-mail address, phone number and delivery address. This data is used solely to fulfil your order (payment matching, shipping, invoicing), to communicate with you about your order, and to meet our legal obligations under tax and commercial law (Art. 6(1)(b) and (c) GDPR).

We do not use your data for marketing without your explicit consent, and we never sell it to third parties.

Cookies

Our store uses strictly necessary cookies to make shopping work. Analytics cookies (Google Analytics) are set only if you give consent via the cookie banner; without consent, no analytics data is collected. You can change your choice at any time.

Third-Party Recipients

Your personal data is shared only to the extent needed to provide our service: with the shipping carrier handling your delivery (name, address, phone), with our e-mail infrastructure provider for order and shipping notifications, and with public authorities where legally required.

Retention Periods

Order and invoice records are retained for the statutory bookkeeping and invoice retention periods that apply to us. Once these periods expire, your data is deleted or anonymised.

Your Rights

Under the GDPR you have the right to access, rectify or erase your data, to restrict or object to processing, and to data portability. You also have the right to lodge a complaint with a supervisory authority. To exercise your rights, contact us at forms@arovela.com.