Privacy Policy

1. Identity of the Data Controller

In accordance with the Personal Data Protection Law No. 6698 ("KVKK"), Ceyhun Dönmez (hereinafter referred to as "Marbb" or "Company"), as the data controller, processes, stores, and protects your personal data within the scope of the purposes described below, in compliance with the law and the principles of good faith.

2. Your Personal Data Processed

The following data is processed so that you can benefit from the services offered through the Marbb B2B Wholesale Platform (marbb.co):

• Identity Information: First name, last name.
• Contact Information: Email address, phone number.
• Company and Financial Information: Company name represented, tax office, tax number, invoice and delivery address.
• Customer Transaction Information: Order history, request and complaint information, cart information, discount and promotional codes used.
• Transaction Security Information: IP address, site login/logout information, password information (encrypted).

3. Purposes of Processing Personal Data

Your collected personal data is processed for the following purposes in accordance with the conditions specified in Articles 5 and 6 of the KVKK:

• Carrying out corporate membership transactions and managing your account on our B2B platform,
• Performing commercial verification of businesses logging into the system (Company Name and Tax No verification),
• Managing order processes, systematically calculating volume-based pricing and discounts (Welcome discount, B2B tier discounts),
• Integration and management of payment processes (Virtual POS, etc.),
• Organizing cargo, logistics, and delivery processes of purchased products,
• Issuing invoices, waybills, and conducting accounting processes in accordance with legal regulations,
• Managing after-sales support, returns, and customer service processes,
• Informing you about our corporate campaigns, new products, and B2B advantages (cold email/newsletter) if you have given commercial electronic message consent,
• Ensuring the security of the platform's technical infrastructure (cloud-based database, email sending services) and fulfilling legal obligations.

4. To Whom and for What Purpose Processed Personal Data May Be Transferred

Your personal data may be shared with the following parties in line with the realization of the aforementioned purposes and in accordance with Articles 8 and 9 of the KVKK:

• Contracted cargo and logistics companies for the delivery of your orders,
• Authorized Virtual POS and payment institution service providers for secure receipt of your payments,
• Our financial advisors and e-transformation (e-invoice) companies for conducting e-invoice and official accounting processes,
• Domestic or international server, database (e.g., Supabase), and email sending (SMTP/Resend, etc.) service providers that provide the platform's technical infrastructure,
• Authorized public institutions and judicial authorities in case of resolution of legal disputes or a legal obligation.

5. Method and Legal Basis for Collecting Personal Data

Your personal data is collected electronically through fully or partially automated methods via membership forms, order screens, contact forms, and cookies on the marbb.co website.

Your data is processed based on the following legal grounds as stated in Article 5 of the KVKK:

• The necessity of processing personal data of the parties to a contract, provided that it is directly related to the establishment or performance of a contract (Membership Agreement and Distance Sales Agreement),
• The obligation for the data controller to fulfill its legal obligations (mandatory invoice issuance under the Tax Procedure Law and Turkish Commercial Code),
• The necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

is processed based on the above legal grounds.

6. Rights of the Data Subject (KVKK Article 11)

In accordance with Article 11 of the KVKK, you have the following rights as data subjects:

• Learning whether personal data is being processed,
• Requesting information if personal data has been processed,
• Learning the purpose of processing personal data and whether they are used in accordance with their purpose,
• Knowing the third parties to whom personal data is transferred domestically or abroad,
• Requesting correction of personal data if it has been processed incompletely or inaccurately,
• Requesting deletion or destruction of personal data within the framework of conditions stipulated by the law,
• Objecting to a result arising against you through the analysis of processed data exclusively by automated systems,
• Requesting compensation for damages in case personal data is processed unlawfully.

To exercise the above-mentioned rights and submit your requests, you can contact us via the email address ceyhun@marbb.co. Your request will be resolved free of charge within 30 (thirty) days at the latest, depending on its nature.