This is a courtesy English translation. The Turkish version is the legally binding text.
Privacy & Security
Privacy, Security & KVKK
Last updated: 1 October 2026
Under the Turkish Personal Data Protection Law No. 6698 (“KVKK”), your personal data is processed by us, as data controller, within the framework set out below.
Data Controller
- Legal name
- Fatih Elçiboğa
- Address
- Maltepe Mah. Cevizlibağ Köprüsü No:8 Kat:14 Parima Plaza 34010 Zeytinburnu/İstanbul
- Tax office / no.
- [Tax office] / [Tax/ID no.]
- MERSIS no.
- [MERSIS no.]
- Phone
- +90 850 302 7683
- fatih@nuvelle.com.tr
Data Processed
Identity, contact details, delivery/billing address, order history and information relating to the payment transaction; traffic records relating to site use and — unless you have rejected them — analytics and marketing cookie data. Your card details are never seen or stored by Fatih Elçiboğa; payment is collected through PayTR's secure infrastructure.
Purposes of Processing and Legal Bases
| Processing | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Order | Identity, contact, address, order and payment transaction information; the IP address and browser information at the time of the order; your cookie preference at the time of the order | Formation and performance of the order, delivery, support, fraud prevention | Performance of a contract (KVKK Art. 5/2-c), legal obligation (Art. 5/2-ç), legitimate interest (Art. 5/2-f) | Periods set out in the relevant legislation |
| On-site traffic count (all visitors) | Page opened, time, device class, language, domain of the referring site, ad/campaign type; unless you have rejected it, the random visitor identifier nv_sid — IP address and browser identifier are not stored | Measuring how the site performs and which channels visitors come from, in aggregate | Legitimate interest — KVKK Art. 5/2-f; GDPR Art. 6(1)(f). If you reject, the identifier cookie is deleted and your visit is counted only anonymously | 25 months |
| Analytics (enabled by default, may be rejected) | Google Analytics cookies (_ga, _ga_*), unique-visitor identifier nv_sid | Detailed usage analysis | Legitimate interest together with your right to choose (reject); processing stops once you reject | Cookie durations (Cookie Policy) |
| Marketing (enabled by default, may be rejected) | Advertising cookies (_gcl_aw, _gcl_au, _fbp, _fbc), ad-click ID | Ad measurement, remarketing | Legitimate interest together with your right to choose (reject); processing stops once you reject; transfer abroad within the framework of KVKK Art. 9 | Cookie durations / provider |
| Invitation programme | Invitation code, time and IP address of the invitation-link click, nv_ref cookie | Applying the invitation discount and the inviter's reward, invitation statistics, preventing abuse | Performance of a contract (Art. 5/2-c), legitimate interest (Art. 5/2-f) | Cookie 30 days; click record for the duration of the invitation programme |
Your sales record is kept for order management regardless of your cookie preference; it is passed to advertising providers unless you have rejected the relevant cookies. Subject to your explicit consent, campaign communications may also be sent.
Transfer
Your data is shared with the courier/logistics company, the payment institution (PayTR) and authorized public authorities, only to the extent required for the purpose. Cookie data, and the number, amount and currency of a completed order, are sent to Google (Google Analytics, Google Ads) with cookies unless you have rejected the relevant cookies; if you have, Google tags send only a cookieless, anonymous signal. The copy of the sale sent from our server to Google Analytics is sent unless you had rejected analytics cookies at the time of the order. Data is sent to Meta (Facebook/Instagram) unless you have rejected marketing cookies. Your name, address, email, phone number and card details are not sent to these providers. These providers' servers are located abroad (USA); the transfer is carried out within the framework of KVKK Art. 9 and stops once you reject. On-site traffic records stay on our own server and are not shared with third parties. Your data is not sold to third parties for marketing purposes.
Live Chat Records
Messages you write in live support chat and your connection's IP address are processed to provide you with support and to prevent misuse. Chat records are kept for 90 days from the last interaction and are then deleted automatically. Records of IP addresses blocked for misuse are retained for fraud-prevention purposes.
Payment Security
All payments are collected via the PayTR infrastructure with 3D Secure. Your card data is transmitted in encrypted form directly to the payment institution; it is not kept on our site. Connections are encrypted with SSL/TLS.
Your Rights (KVKK Art. 11 · GDPR Arts. 15–22)
You have the right to access, rectify and erase your personal data, to learn whether it is being processed, to learn the parties to whom it has been transferred, and to object to its processing; you may lodge a complaint with the Personal Data Protection Board in Türkiye or, for visits from the EU, with the competent supervisory authority. You may submit your requests to fatih@nuvelle.com.tr. To object to the on-site traffic count: Do not measure this browser.
Cookies
We use strictly necessary cookies to run the site. Measurement (analytics) and advertising (marketing) cookies are enabled by default; you may reject them. “Reject” switches all of them off, deletes the existing measurement and advertising cookies and is remembered for 12 months; once you reject, the related processing stops and the site continues to work fully. You can change your preference at any time using the “Cookie preferences” link at the bottom of the page. For details: Cookie Policy.