📌 Important Distinction: This text has been prepared for store owners using the Bengal platform. If you are shopping from a store, please review that store's own KVKK clarification text.
1. Data Controller
Pursuant to the Law on Protection of Personal Data No. 6698 ("KVKK"), this text has been prepared by Bengal ("Platform Provider" / "We") to inform you about how the personal data we collect from you is processed.
Address: Bilim ve Teknoloji Yuvası Çukurova Üniversitesi, Adana/ Türkiye
Email: info@bengal.com.tr
Phone: +90 (531) 691 07 25
2. What Data Do We Collect?
We collect the following data from store owners who register on our platform:
- Identity: Name, surname, username
- Contact: Email, phone
- Store Information: Store name, domain name, tax/corporate information
- Payment: Subscription payments (via payment institution; card information is not stored by us)
- Usage: IP address, browser information, session records, transaction logs (audit log)
- Content: Product / page / media data you upload to your store
3. Purposes of Data Processing
- Account creation, identity verification, and session management
- Providing your store as a service and offering technical support
- Receiving subscription payments and billing
- Security, fraud prevention, and transaction logging
- Fulfilling legal obligations (tax, KVKK, ETBİS)
- Service improvement and anonymized usage analyses
4. Store Owner Responsibility
Every store using our platform is the "data controller" for its own customers' data. This means:
- Preparing your store's own KVKK clarification text is your responsibility.
- The content of the distance sales agreement and pre-information form is your responsibility.
- Legal compliance in the processing of customer data is the sole responsibility of each store owner.
- We provide the infrastructure; you create the content.
In this context, our role is that of a "data processor" pursuant to KVKK art. 3/1-i: we provide infrastructure in accordance with the instructions of the store owner (data controller).
5. Data Transfer
- Payment institution (Tosla): For the secure collection of subscription fees.
- Email / notification providers: For system notifications and email delivery.
- Error monitoring (technical): An error monitoring service is used to detect application errors. No personal data is sent to this service; only technical error information (error message, file/line where it occurred) is transmitted.
- Authorized public institutions and organizations: In case of legal obligation (court order, tax audit, etc.).
- Domestic hosting: Your data is hosted on servers in Turkey. No personal data is transferred abroad.
6. Retention Periods
- While the account is active: all data is stored.
- After account deletion: 10 years for commercial records (TTK obligation).
- Financial records: 5 years (VUK).
- Transaction logs (audit log): 1 year.
- Store data (product, order): 30 days temporary deletion after account deletion, then permanent deletion.
7. Your Rights (KVKK Article 11)
Regarding your personal data; you have the right to learn whether your data is processed, to request information if it has been processed, to learn the purpose of processing, to know the third parties to whom it has been transferred domestically, to request correction if it has been processed incompletely/incorrectly, to request its deletion/destruction, to object to the processing, and to request compensation for damages.
8. Use of Cookies
We may use essential, analytical, and marketing cookies on our platform site. For details, please review our Cookie Policy page.
9. Contact
To exercise your rights and for your requests, you can apply in writing to the info@bengal.com.tr address. Your applications will be concluded within 30 days at the latest.