Personal Data Protection Notice
Within the scope of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and applicable international data protection frameworks, Ethiopia Coffee (Ethiopian Brew Co.) hereby informs you about how your personal data is processed.
1. Data Controller
The data controller under this notice is Ethiopia Coffee (Ethiopian Brew Co.), operating in Uzungöl/Trabzon, Türkiye. Legal entity registration details will be added to this notice following the business opening. Data controller contact: [email protected]
2. Categories of Personal Data Processed
Through the contact form, WhatsApp messaging and shop inquiries, the following data may be processed:
- Identity: First name, last name
- Contact: Email, phone number (including WhatsApp)
- Customer transaction: Order preferences, product notes, message content
- Marketing: Newsletter subscription, event participation (if requested)
3. Purposes of Processing
- Responding to messages submitted via the contact form
- Fulfilling order and information requests via WhatsApp
- Reservation and event organization
- Evaluating complaints, suggestions and feedback
- Fulfilling legal retention obligations
4. Data Transfer
Your personal data may only be shared with authorized public authorities under legal obligations. Third-party service providers we use for the technical infrastructure of our site:
- Netlify, Inc. (web hosting, form infrastructure) — United States
- Google LLC (Google Maps, Google Fonts) — United States
- WhatsApp Inc. (messaging) — United States
Data transfer to these service providers is limited to the technical requirements of the service and constitutes an international transfer. Transfers are made based on your explicit consent or other legal grounds permitted by KVKK and GDPR.
5. Method of Collection and Legal Basis
Your personal data is collected through the website contact form, WhatsApp messaging, email, and direct communication channels, based on the legal grounds outlined in Article 5 of KVKK: "performance of a contract", "legitimate interest", and "explicit consent".
6. Your Rights Under KVKK Article 11
Under Article 11 of KVKK, by applying to the data controller, you have the right to:
- Learn whether your personal data is being processed,
- Request information if your personal data has been processed,
- Learn the purpose of processing and whether the data is used in accordance with such purpose,
- Know the third parties to whom your data is transferred domestically or internationally,
- Request correction if your data is incomplete or incorrect,
- Request deletion or destruction under the conditions provided in Article 7 of KVKK,
- Request that the corrections, deletions or destruction be notified to third parties,
- Object to a result against you due to analysis exclusively by automated systems,
- Request compensation for damages arising from unlawful processing.
7. How to Apply
You may submit your requests regarding these rights in writing to [email protected]. Your request will be addressed within a maximum of 30 (thirty) days, in accordance with KVKK and related legislation.