Legal notice

CUSTOMER PRIVACY POLICY

ARTICLE 1 - GENERAL INFORMATION & DATA CONTROLLER: 1.1. This Privacy Policy is published by Ulviye Mine Vargönen ("www.minekeskin.com") as the Data Controller, in accordance with applicable global data protection regulations, including the European Union General Data Protection Regulation (GDPR), the UK GDPR, and California Privacy Rights Act (CPRA). This notice aims to inform our online course students, prospective customers, business partners, and platform visitors regarding the purposes, legal bases, and methods of processing their personal data. 1.2. At www.minekeskin.com, we prioritize the security, confidentiality, and integrity of your personal information. We ensure that all personal data is collected, stored, and processed lawfully, fairly, and transparently.

ARTICLE 2 - DEFINITIONS: In this Privacy Policy:

  • Personal Data: Any information relating to an identified or identifiable natural person (Data Subject).

  • Data Controller: The natural or legal person who determines the purposes and means of processing personal data.

  • Data Processor: The natural or legal person who processes personal data on behalf of the Data Controller.

  • Services: Online pastry courses, educational materials, workshops, and e-commerce functionalities provided via www.minekeskin.com.

ARTICLE 3 - PERSONAL DATA WE COLLECT & COLLECTION METHODS: 3.1. Depending on your interaction with our platform, we collect personal data through direct submission (e.g., checkout forms, registration, newsletter sign-ups, customer service inquiries) and automated technologies (e.g., cookies, web beacons, site analytics). 3.2. Data categories collected include:

  • Identity & Contact Details: Full name, email address, phone number, billing address.

  • Transaction & Account Data: Order history, enrolled courses, payment confirmation receipts (payment card details are processed directly and securely by PCI-DSS compliant third-party payment gateways and are never stored on our servers).

  • Technical & Usage Data: IP address, device type, browser information, session time, referral source, and cookie preferences.

ARTICLE 4 - PURPOSES AND LEGAL BASES OF DATA PROCESSING: Your personal data is processed under valid legal grounds (Performance of Contract, Legal Obligation, Legitimate Interest, or Explicit Consent) for the following purposes:

  • Contract Fulfillment: Processing transactions, delivering online course contents, creating user accounts, and issuing invoices.

  • Customer Support: Resolving inquiries, managing feedback, and maintaining service quality.

  • Marketing & Communications: Sending newsletter updates, promotional announcements, and event invitations (only where explicit opt-in consent is granted or permitted by law; users can opt out at any time).

  • Platform Security & Compliance: Preventing fraud, ensuring technical platform safety, and fulfilling tax, legal, and accounting obligations.

Data processing adheres strictly to the principles of lawfulness, purpose limitation, data minimization, accuracy, and storage limitation.

ARTICLE 5 - THIRD-PARTY DATA SHARING & INTERNATIONAL TRANSFERS: 5.1. We do not sell or rent your personal data to third parties. 5.2. Your personal data may be shared with trusted service providers only as necessary to deliver our services, including:

  • Cloud hosting and platform infrastructures (e.g., Shopify).

  • Payment processing networks and merchant banks.

  • Logistics, mailing, and transactional email deliverability systems.

  • Legal, accounting, and technical consultants under strict confidentiality obligations.

  • Authorized legal authorities when required by law or judicial request. 5.3. International Data Transfers: If your data is transferred outside your home jurisdiction (e.g., outside the European Economic Area / UK), we implement recognized transfer mechanisms such as Standard Contractual Clauses (SCCs) to ensure an equivalent level of protection.

ARTICLE 6 - DATA RETENTION & SECURITY: 6.1. Personal data is retained only as long as required to fulfill the purposes outlined in this policy or to comply with statutory legal, tax, and reporting obligations. 6.2. Technical and organizational security measures (SSL encryption, secure server firewalls, access controls) are implemented to protect your data against loss, misuse, unauthorized access, or alteration.

ARTICLE 7 - YOUR GLOBAL PRIVACY RIGHTS: Depending on your country/state of residence (e.g., EEA, UK, Switzerland, USA, Canada), you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.

  • Right to Rectification: Request correction of inaccurate or incomplete data.

  • Right to Erasure ("Right to be Forgotten"): Request deletion of personal data when processing is no longer necessary.

  • Right to Restrict or Object: Object to data processing or request restrictions, including direct marketing opt-outs.

  • Right to Data Portability: Request transfer of your data in a structured, machine-readable format.

  • Right to Withdraw Consent: Withdraw consent at any time for consent-based processing activities without affecting prior processing legality.

ARTICLE 8 - CONTACT INFORMATION & DATA REQUESTS: To exercise your rights, submit a privacy query, or file a request regarding your personal data, please contact us at:

  • Company Name: Ulviye Mine Vargönen Butik Tatlar ve Organizasyon Ticaret

  • E-mail: info@minekeskin.com

  • Address: Kazımdirik Mah. 217 Sok. No:21/A Bornova, Izmir, Turkey

  • Phone: +90 531 458 9828

Requests are processed free of charge within 30 days upon identity verification.