KVKK Privacy Notice

Privacy Notice Under the Personal Data Protection Law No. 6698 (“KVKK”)

1. IDENTITY OF THE DATA CONTROLLER

Legal Name: CHEBLI GROUP MUTFAK EŞYALARI PAZARLAMA İTHALAT İHRACAT SANAYİ VE TİCARET LİMİTED ŞİRKETİ
Address: ORHAN GAZİ MAH. 1730. SK. NO: 42 ESENYURT / İSTANBUL
Tax No: 2091259884
Trade Registry No: 196063
Email: info@rova.tr
Web: rova.tr

2. PURPOSES AND LEGAL GROUNDS FOR PROCESSING PERSONAL DATA

Processing Activity	Data Processed	Legal Ground (KVKK Art. 5)
Order creation and management	Name, surname, delivery address, billing address, email, order content	Establishment and performance of a contract (Art. 5/2-c)
Payment transactions	Payment method information (card information is processed through iyzico infrastructure and is not stored by our company)	Performance of a contract (Art. 5/2-c)
Delivery / shipping	Name, surname, delivery address, phone number	Performance of a contract (Art. 5/2-c)
Customer service	Name, email, communication content	Legitimate interest (Art. 5/2-f) [LEGAL GROUND TO BE VERIFIED]
Collecting product reviews (Judge.me)	Name, email, purchased product information	Legitimate interest (Art. 5/2-f) [LEGAL GROUND TO BE VERIFIED]
Communication via WhatsApp / Chaty	Message content, contact information	Legitimate interest (Art. 5/2-f) [LEGAL GROUND TO BE VERIFIED]
Abandoned checkout email	Email address, cart content	Explicit consent (Art. 5/1) [LEGAL GROUND TO BE VERIFIED — marketing consent mechanism must be verified at checkout]
Newsletter / email subscription	Email address	Explicit consent (Art. 5/1)

3. PARTIES TO WHOM PERSONAL DATA IS TRANSFERRED AND PURPOSES OF TRANSFER

Recipient	Purpose of Transfer	Data Transferred
Shopify Inc.	Store infrastructure, order management, checkout processing	Name, address, email, order information, payment confirmation information
iyzico	Payment processing	Payment transaction information (card data is not stored by our company)
Contracted shipping carrier	Product delivery	Name, surname, delivery address, phone number
Judge.me	Sending and managing product reviews	Name, email, order and product information
Chaty / WhatsApp service	Customer communication infrastructure	Message content, contact information

Your personal data is not shared with third parties outside the purposes and recipient groups specified above.

4. METHOD OF COLLECTING PERSONAL DATA

Your personal data is collected through the following methods:

Electronic forms: Order form, registration form, contact form (via rova.tr)
Cookies and session technologies: Automatically through Shopify infrastructure during website visits
Email communication: Through customer support requests and subscription forms
Third-party applications: Judge.me (review request), Chaty (instant messaging)

5. DATA SUBJECT RIGHTS UNDER ARTICLE 11 OF KVKK

Under Article 11 of KVKK, you have the following rights:

To learn whether your personal data is being processed
To request information if your personal data has been processed
To learn the purpose of processing personal data and whether it is used in accordance with that purpose
To know the third parties to whom personal data is transferred in Türkiye or abroad
To request correction of personal data if it has been processed incompletely or inaccurately
To request deletion or destruction of personal data within the framework of Article 7 of KVKK
To request notification of the actions taken under items (5) and (6) to third parties to whom personal data has been transferred
To object to a result arising against the person as a result of analysis of processed data exclusively through automated systems
To request compensation for damages arising from unlawful processing of personal data

To exercise your rights:
Email: info@rova.tr
Address: ORHAN GAZİ MAH. 1730. SK. NO: 42 ESENYURT / İSTANBUL

Applications must be submitted together with documents verifying your identity and will be answered within a maximum of 30 days.

6. DATA SECURITY

Your personal data is processed with the necessary technical and administrative measures in place to protect it against unauthorized access, alteration, disclosure, or destruction in accordance with Article 12 of KVKK. Payment information is processed through iyzico's secure payment infrastructure and is not stored by our company.

This privacy notice has been prepared pursuant to Article 10 of Law No. 6698 and the relevant legislation and is a working draft. It must undergo legal review before publication. Changes will be announced via rova.tr.