KVKK Privacy Notice

Legal and contact information

Brand: GfY Hold Solutions (GfY)
Legal seller: Recep Gökhan Fındıkoğlu
Tax office: Etimesgut Vergi Dairesi Müdürlüğü
Tax identification number: 3860061220
Business and notice address: Yeni Bağlıca Mah. 1366. Sk. B Blok Ay Apt. 6B/1, Etimesgut, Ankara, Türkiye
Telephone: +90 530 418 49 38
Email: info@gfyshoulderrest.com
Business activity: Evlerde imal edilen malların internet ve benzeri elektronik ortamlar üzerinden satışı

Data controller

Recep Gökhan Fındıkoğlu, operating as GfY Hold Solutions (GfY), is the controller for order, fitting and customer-communication data.

Data categories

Identity, contact and delivery data.
Order, payment-outcome and customer-transaction data.
One fitting video, five photographs and related visual/audio records.
Physical measurement, posture and instrument-setup information required for custom production.
Support, dispute and transaction-security records.

GfY does not request health records and does not use fitting media for biometric identification.

Purposes and legal grounds

Order formation and performance: necessity for a contract under Article 5/2-c.
Payment, financial records and statutory requests: legal obligation under Article 5/2-ç.
Returns, complaints and disputes: establishment, exercise or protection of a right under Article 5/2-e.
Security, quality and abuse prevention: legitimate interest under Article 5/2-f, without harming fundamental rights.

This notice is not a consent form. If marketing is introduced later, it will use a separate and optional permission.

Collection and retention

Data is collected through the website, iyzico result, email, telephone or social-media correspondence, fitting files and technical logs. Order, support and fitting files are generally retained for five years from delivery or the last transaction, subject to longer mandatory periods or a live dispute.

EU/EEA and United Kingdom customers

Offering EUR checkout, country-specific shipping and payment to people in the EU/EEA or United Kingdom may bring the processing within the territorial scope of the GDPR or UK GDPR. Where applicable, contract performance, legal obligation and legitimate interests are used as legal bases; marketing requires a separate opt-in.

Where EU or United Kingdom law requires a local representative, the representative's details and the relevant contact route will be published in this notice.

Recipients

iyzico for payment.
Yurtiçi Kargo and destination logistics partners.
Vercel, Neon and Resend for hosting, database and transactional email.
Authorities and dispute bodies where required.

Transfers to overseas technical providers are limited to data necessary to provide the service and are subject to the applicable rules and safeguards under Article 9 of the KVKK.

Your Article 11 rights

Learn whether data is processed and request information.
Learn the purpose and whether the data is used accordingly.
Know recipients in Türkiye or abroad.
Request correction of incomplete or inaccurate data.
Request deletion/destruction and notification to recipients where legal conditions apply.
Object to adverse automated outcomes and seek compensation for unlawful processing.

How to apply

Send your name, sufficient verification information, contact details, request and preferred response method from your registered email address to info@gfyshoulderrest.com or in writing to the business address. Do not send excessive identity data or identity-document copies; additional verification is requested only where necessary.