This notice is provided under the Turkish Personal Data Protection Law No. 6698 (“KVKK”). It explains how we process the personal data of people who visit our website, create an online repair request, or use our services in store, by phone or via WhatsApp.
1. Data controller
Your personal data is processed by Işıltı İletişim as the data controller. Our store address and phone numbers are listed in the “Data controller” section on this page.
2. Personal data we process
We only process the data we need to provide our services:
Identity and contact details: your full name and mobile phone number; your email address if you choose to give it.
Repair request details: device type, brand and model; the repairs and part quality you choose; your description of the fault; tracking number; repair status and progress notes; price quote and charges. When a device is dropped off in store, its IMEI/serial number and a note on its physical condition may also be recorded.
Appointment and courier details: the date and time of your store appointment; if you choose the courier, your district, neighbourhood, full address, preferred day and time slot.
Photos: optional photos showing the damage (up to 3). Photos are re-processed on upload, which removes location (GPS) and other EXIF data. Only our authorised staff can see them.
Consent record: the date and time you confirmed this notice on the repair request form.
Security data: the IP address you connect from and the technical information your browser sends with each request (such as browser type, requested page and time). For the attempt limits on form submissions, photo uploads and repair tracking, your IP address is not stored in plain form but as a keyed, irreversible hash.
Calls and messages: the information you share when you call us or message us on WhatsApp (such as your name, phone number, message content, order or information request).
We never ask for or store your device's screen lock passcode or account details such as iCloud or Google. The tracking number and the last 4 digits of your phone number entered on the repair tracking page are only used to verify the request and are not stored.
3. Why we process your data
We process your personal data to:
create your repair request and schedule your store appointment or courier pick-up and delivery,
diagnose your device, give you a price quote, carry out the repair with your approval and return your device,
contact you by phone or WhatsApp and keep you updated on your repair,
verify the request on the tracking page so that only you can see your repair,
answer the product, order and information requests you send by WhatsApp or phone,
handle warranty, complaint and return requests, meet our legal obligations and protect our rights in case of a dispute,
keep the website and data secure and prevent spam and abuse (such as automated form submissions or guessing tracking numbers).
4. How we collect data and our legal grounds
We collect your personal data through the repair request form and tracking page on our website, the information you give us verbally or in writing in store, phone calls and WhatsApp messages, by partly automated and partly non-automated means. IP addresses and technical information are processed automatically when you use the website.
We rely on the following legal grounds under Article 5(2) of the KVKK:
Performance of a contract (Art. 5/2-c): your repair request, diagnosis, repair and return, and your sales and information requests.
Compliance with a legal obligation (Art. 5/2-ç): records we must keep by law and requests from authorities.
Establishing, exercising or defending a right (Art. 5/2-e): warranty, complaints and possible disputes.
Legitimate interest (Art. 5/2-f): website security and preventing spam and abuse, provided this does not harm your fundamental rights and freedoms.
5. Who we share data with
We do not sell your personal data or share it with anyone for advertising or marketing. Your data may only be shared with the following recipients, limited to the stated purpose:
Our hosting (server) provider: provides the infrastructure of the server where the website and data are stored.
Cloudflare, Inc. (USA): our website is delivered through Cloudflare's network for security and speed. Every request you make, including your IP address and the technical information your browser sends, passes through Cloudflare servers, some of which are located outside Türkiye. When Cloudflare Turnstile security checks are used on our forms, the check is also performed by Cloudflare. Details: Cloudflare Privacy Policy.
Courier: if you choose courier pick-up or delivery, only the details needed for that job (name, phone, address and time slot) are shared with the courier.
Authorised public bodies and judicial authorities: where they are legally entitled to request it, and only to the extent required by law.
When you choose to message us on WhatsApp or load the map on our website, the related information is processed by those service providers (WhatsApp/Meta for WhatsApp, Google for the map) under their own privacy policies, including outside Türkiye: WhatsApp Privacy Policy, Google Privacy Policy.
6. How long we keep data
We keep your personal data for as long as needed for the purpose it was collected for and for the periods set by law:
Repair records and photos: 2 years after the request is closed (delivered or cancelled).
Photos not attached to a request (uploaded but the form was not completed): deleted automatically once they are older than 24 hours.
IP hashes kept for attempt limits: deleted automatically once they are older than 24 hours.
Records the law requires us to keep longer: for the period set by the relevant legislation.
When the period ends, your data is deleted, destroyed or anonymised.
7. Your rights (KVKK Art. 11)
By applying to the data controller, you have the right to:
learn whether your personal data is processed,
request information if it has been processed,
learn the purpose of processing and whether your data is used in line with that purpose,
know the third parties in Türkiye or abroad to whom your data is transferred,
request correction if your data is incomplete or inaccurate,
request deletion or destruction of your data under the conditions set out in Article 7 of the KVKK,
request that third parties to whom your data has been transferred be notified of any correction, deletion or destruction,
object to a result against you arising from the analysis of your data exclusively by automated systems,
claim compensation if you suffer damage because your data was processed unlawfully.
8. How to apply
You can send your request in Turkish and in writing, in line with the Communiqué on the Procedures and Principles of Application to the Data Controller. Your application should include your full name, signature, Turkish ID number (for foreign nationals, nationality and passport or ID number), your residential or business address for notifications, your email address if any, your phone number and the subject of your request. You can hand in your signed application at our store, or send it to the address on this page through a notary public or by registered mail with return receipt. You may also use the other methods set out in the Communiqué.
We will resolve your application free of charge as soon as possible and within 30 days at the latest, depending on the nature of the request. If the process involves an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board. If your application is rejected, you find our response insufficient or we do not respond in time, you may file a complaint with the Personal Data Protection Board within 30 days of learning our response and, in any case, within 60 days of your application.
If you have questions before applying, feel free to call us or message us on WhatsApp.
9. Cookies
For information about the cookies and browser storage used on our website, see our Cookie Policy.
10. Updates
We update this notice as our data processing changes. The current version is always published on this page, and the date of the last update is shown at the end of the page.
This English version is provided for information; in case of any discrepancy, the Turkish version prevails.
Last updated: