This notice explains how Bluefun Apparels Tekstil Sanayi ve Dış Tic. Ltd. Şti. ("Bluefun", "we") processes personal data collected from website visitors, prospective customers, suppliers, job applicants, and anyone who submits an application through this site. It is issued under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data (KVKK).
1. Data controller
The data controller is Bluefun Apparels Tekstil Sanayi ve Dış Tic. Ltd. Şti., registered in Türkiye.
- Legal entity
- Bluefun Apparels Tekstil Sanayi ve Dış Tic. Ltd. Şti.
- Registered address
- Cumhuriyet, Dersaadet Cd No:16, 34265 Sultangazi/İstanbul, Türkiye
- Registered e-mail (KEP)
- bluefunapparels@hs01.kep.tr
- Contact e-mail
- info@bluefun.com.tr
2. Categories of personal data processed
We process the following categories, depending on how you interact with us: identity data (name, surname, national identity or passport number where legally required), contact data (e-mail, phone, KEP address, postal address), professional data (employer, role, relationship with Bluefun), form content data (the subject and body of your request), and technical data (IP address, device and browser information, basic usage of the site).
3. Purposes of processing
Personal data are processed to respond to enquiries and quotation requests, to manage customer and supplier relationships, to fulfil our legal obligations under commercial, tax, and labour law, to handle data subject applications under Article 11 KVKK, to maintain information security on this website, and to keep records required for audit and defence of legal claims.
4. Legal bases
We rely on the grounds set out in Article 5 and, where relevant, Article 6 KVKK: performance of a contract with you or taking pre-contractual steps at your request, compliance with a legal obligation, our legitimate interests in running and protecting the business, and, where none of the above applies, your explicit consent.
5. Transfers
We may share personal data with our professional advisors (legal, accounting, audit), with hosting and e-mail service providers acting under our instructions, and with public authorities (SGK, Ministry of Labour, tax authorities, courts) where required by law. Transfers take place under contracts and safeguards appropriate to the category of data and the relationship with the recipient.
Some service providers (for example cloud e-mail or hosting) may be based outside Türkiye. Cross-border transfers are carried out under Article 9 KVKK: either on the basis of an adequacy decision by the Personal Data Protection Board (none have been issued to date), on the basis of standard contractual clauses or other appropriate safeguards, or with your explicit consent given after disclosure of the relevant risks.
6. How we collect personal data
Personal data are collected directly from you through this website (forms, e-mail, phone), through direct meetings or correspondence, and, in limited cases, through publicly available sources relating to your employer. Collection takes place by automated and non-automated means.
7. Retention
We retain personal data for the periods set by applicable Turkish law (for example, commercial records under the Turkish Commercial Code; employment records under the Labour Law) and, where no specific period applies, for as long as needed to serve the purpose for which the data were collected and any applicable statute-of-limitations period. Once the retention period expires, data are deleted, destroyed, or anonymised.
8. Your rights under Article 11 KVKK
Under Article 11 of KVKK you have the right:
- To learn whether your personal data are being processed.
- To request information if your personal data have been processed.
- To learn the purpose of processing and whether your data are used in line with that purpose.
- To know the third parties, at home or abroad, to whom your personal data have been transferred.
- To request correction of incomplete or inaccurate data, and to have the correction notified to any third parties to whom the data were transferred.
- To request erasure or destruction of your personal data when the reasons requiring their processing have ceased, and to have this notified to any third parties to whom the data were transferred.
- To object to an outcome unfavourable to you that arises from processing carried out exclusively by automated means.
- To claim compensation for damages caused by unlawful processing of your personal data.
9. How to exercise your rights
You may submit an application by completing the application form available on this site, or by sending a signed written request to the registered address above, or to our KEP address with a secure electronic signature. We respond within thirty days and free of charge; where the Personal Data Protection Board's tariff requires a fee (for example for responses on physical media), it may be charged.