Privacy & Cookie Policy
PRIVACY AND COOKIE POLICY
Comprehensive information on how your personal data is collected, processed and protected, and how cookies are used
This Privacy and Cookie Policy explains how Buécores ("we", "us", "Seller"), operator of www.buecores.com (the "Site"), collects, processes and protects the personal data of people who visit the Site, create an account and/or shop on it ("you", "User", "Buyer"), and sets out the principles governing the use of cookies.
This Policy has been prepared in line with Turkish Personal Data Protection Law No. 6698 (KVKK), Law No. 6563 on the Regulation of Electronic Commerce, Electronic Communications Law No. 5809 and the related secondary legislation.
PART A: PRIVACY POLICY
1. DATA CONTROLLER
Seller / Business | Buécores |
Address | Halaskargazi Mah. Halaskargazi Cad. No: 38-66E İç Kapı No: 215, Şişli / İstanbul, Turkey |
Website | www.buecores.com |
As data controller, Buécores takes the utmost care to protect the privacy and security of your personal data.
2. PERSONAL DATA WE COLLECT
When you visit the Site, create an account and/or make a purchase, the following categories of personal data may be processed by automated or non automated means:
Data Category | Description |
Identity Information | Name, surname, Turkish ID number (where required for invoicing). |
Contact Information | Email address, phone number, delivery address, billing address. |
Customer Transaction Information | Order history, order details, product preferences, return and exchange information, requests and complaints. |
Financial Information | Card details processed through a secure payment infrastructure. These details are not recorded or stored by Buécores; they are processed only by a PCI DSS compliant payment service provider. |
Transaction Security Information | IP address, browser type and version, operating system, device information, session information, access date and time, page view data. |
Marketing Information | Consent status for commercial electronic messages, campaign preferences, survey responses (only with your explicit consent). |
Cookie Data | Data collected through session, preference, analytics and marketing cookies (see Part B for details). |
3. HOW WE COLLECT YOUR DATA
Your personal data is collected through:
• Account registration and order forms (non automated).
• Contact forms, email and phone correspondence.
• Cookies and similar technologies during your visit to the Site (automated).
• The secure payment infrastructure during checkout (automated).
• Your interactions with us on social media platforms.
4. PURPOSES AND LEGAL GROUNDS FOR PROCESSING
Your personal data is processed for the following purposes, in line with the conditions set out in Articles 5 and 6 of the KVKK:
Performance of a Contract (KVKK Art. 5/2(c)): Receiving, preparing, shipping and delivering orders; processing payments and invoices; handling returns and withdrawal requests; customer communication and support.
Legal Obligation (KVKK Art. 5/2(ç)): Fulfilling legal obligations under the Tax Procedure Law, the Turkish Commercial Code, Consumer Protection Law No. 6502, Law No. 6563 on the Regulation of Electronic Commerce and related legislation; audit and reporting processes.
Legitimate Interest (KVKK Art. 5/2(f)): Information security; preventing fraud and abuse; analysing and improving Site performance; improving service quality; statistical analysis.
Explicit Consent (KVKK Art. 5/1): Sending commercial electronic messages; personalised marketing and campaign notifications; using marketing cookies; profiling and targeting. You can withdraw your consent at any time, free of charge.
5. SHARING YOUR PERSONAL DATA
In line with Articles 8 and 9 of the KVKK, your personal data may only be shared with the following recipients and for the stated purposes:
Recipient | Purpose |
Shipping and Logistics Companies | Carrying out deliveries (name, surname, address, phone). |
Payment Institutions and Banks | Processing secure payments. |
Accounting and Financial Advisors | Statutory bookkeeping and tax obligations. |
Legal Advisors | Following legal processes and advisory services. |
IT Service Providers | Server hosting, email infrastructure, analytics services (as data processors, under confidentiality obligations). |
Advertising and Analytics Partners | Site analysis and targeted advertising through cookie data (subject to your explicit consent). |
Authorised Public Institutions | Where expressly required by law (court order, prosecutor request and similar). |
Your personal data is not shared with third parties beyond the purposes and recipients listed above, and is never sold, rented or traded for commercial purposes.
5.1 International Data Transfers
Some service providers used for the Site infrastructure (servers, email, analytics, advertising technologies) may have servers located outside Turkey. In such cases, data is transferred in line with Article 9 of the KVKK, to countries with adequate protection or to countries where the data controller has given a written commitment to ensure adequate protection.
6. DATA RETENTION PERIODS
Your personal data is kept for as long as required by the purpose of processing and within the following statutory minimum retention periods:
Data Category | Retention Period | Legal Basis |
Identity and Contact | 10 years | Turkish Commercial Code Art. 82, Tax Procedure Law Art. 253 |
Orders and Invoices | 10 years | Tax Procedure Law Art. 253 |
Customer Transactions | 10 years | Law No. 6502, statutory limitation periods |
Transaction Security | 2 years | Law No. 5651 Art. 5, legitimate interest |
Electronic Message Consent | Duration of the commercial relationship plus 1 year | Law No. 6563, IYS Regulation |
Cookie Data | Session up to 2 years | KVKK, ePrivacy principles |
Once the retention period ends, personal data is deleted, destroyed or anonymised, either automatically or at the request of the data subject, in line with Article 7 of the KVKK and the Regulation on the Deletion, Destruction or Anonymisation of Personal Data.
7. DATA SECURITY MEASURES
Buécores takes the following technical and administrative measures to prevent unlawful processing of and access to personal data and to ensure its safekeeping:
7.1 Technical Measures
• Secure data transmission with SSL/TLS encryption.
• A PCI DSS compliant payment infrastructure.
• Firewalls and up to date antivirus and antimalware systems.
• Access authorisation and role based access control.
• Regular backups and disaster recovery procedures.
• Periodic security tests, vulnerability scans and penetration tests.
• Data masking and encryption techniques for sensitive data.
7.2 Administrative Measures
• Confidentiality agreements with employees and business partners.
• Data processing agreements with third party data processors.
• Creating and updating a personal data processing inventory.
• A data breach response procedure.
• Personal data protection training for employees.
8. DATA BREACH NOTIFICATION
If personal data is obtained unlawfully, the Personal Data Protection Board is notified as soon as possible and within 72 hours at the latest, in line with Article 12(5) of the KVKK. Affected individuals are also informed within a reasonable time.
9. YOUR RIGHTS (KVKK ART. 11)
Under Article 11 of the KVKK, as a data subject you have the right to:
a) Learn whether your personal data is being processed.
b) Request information about the processing if your data has been processed.
c) Learn the purpose of processing and whether your data is used in line with that purpose.
d) Know the third parties in Turkey or abroad to whom your data has been transferred.
e) Request correction if your data has been processed incompletely or incorrectly.
f) Request deletion or destruction of your data under the conditions set out in Article 7 of the KVKK.
g) Request that the actions taken under (e) and (f) be notified to third parties to whom your data has been transferred.
h) Object to any outcome against you arising from analysis of your data exclusively by automated systems.
i) Claim compensation for damages arising from unlawful processing of your personal data.
9.1 How to Apply
To exercise these rights, you can apply in writing to [email protected] with information and documents verifying your identity (Turkish ID number, registered email address, signed petition or secure electronic signature).
Applications are concluded free of charge as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request. If the process requires an additional cost, the fee schedule set by the Personal Data Protection Board applies.
9.2 Right to Complain
If your application is rejected, the response is insufficient, or no response is given within 30 days, you have the right to file a complaint with the Personal Data Protection Board (www.kvkk.gov.tr).
10. THIRD PARTY LINKS
The Site may contain links to third party websites, social media platforms and applications. Buécores is not responsible for the privacy practices, data processing policies or content of these sites. We recommend reviewing their privacy policies before visiting them.
11. CHILDREN'S PRIVACY
The Buécores website does not offer services to individuals under the age of 18. We do not knowingly collect personal data from individuals under 18. If we become aware of such a case, the data is deleted immediately and permanently.
If you believe that the data of someone under 18 is being processed, please let us know right away at [email protected].
PART B: COOKIE POLICY
12. WHAT ARE COOKIES?
Cookies are small text files placed on your device (computer, tablet, smartphone) through your browser when you visit a website. They are widely used to recognise you, remember your preferences, personalise your experience and analyse site performance.
Cookies cannot collect personal data or harm your device on their own. However, some information collected through cookies (IP address, browser information, page view history and similar) may qualify as personal data and is treated within the scope of the KVKK.
13. TYPES AND PURPOSES OF COOKIES
The following types of cookies are used on the Buécores website:
13.1 By Lifespan
• Session Cookies: Temporary cookies that are deleted automatically when you close your browser. They are needed for the basic functions of the Site (cart, session management).
• Persistent Cookies: Cookies stored on your device for a set period. They are used to remember your preferences and for analytics and marketing.
13.2 By Source
• First Party Cookies: Cookies placed directly by www.buecores.com.
• Third Party Cookies: Cookies placed by analytics, advertising or social media service providers on the Site (Google, Meta and similar).
13.3 By Purpose
Cookie Type | Purpose and Description | Duration | Required? | Legal Basis |
Strictly Necessary (Technical) | Session management, cart functions, security verification, CSRF protection, saving cookie preferences. Essential for the basic functions of the Site. | Session | Yes | KVKK Art. 5/2(c),(f) |
Functional | Remembers your preferences such as language, currency, region and font size, offering a personalised experience. | 1 year | No | Explicit consent |
Analytics / Performance | Number of visitors, page views, traffic sources, site usage habits. Uses anonymous or pseudonymous data (e.g. Google Analytics). | 2 years | No | Explicit consent |
Marketing / Targeting | Personalised advertising and content based on your interests. May be shared with advertising networks (e.g. Meta Pixel, Google Ads). | 2 years | No | Explicit consent |
Social Media | Social media sharing buttons and platform integrations. Subject to the cookie policy of the relevant platform. | 2 years | No | Explicit consent |
14. MAIN THIRD PARTY COOKIES WE USE
Service Provider | Purpose | Privacy Policy |
Google Analytics | Site traffic analysis, visitor behaviour, performance measurement | policies.google.com/privacy |
Google Ads | Targeted advertising, conversion tracking | policies.google.com/privacy |
Meta (Facebook) Pixel | Ad targeting, conversion measurement, remarketing | facebook.com/privacy |
Social media integration, sharing buttons | instagram.com/legal/privacy | |
Pinterest Tag | Ad targeting, conversion measurement | policy.pinterest.com/privacy |
The list above shows the main third party cookies in use. The table will be updated if new service providers are added.
15. MANAGING COOKIE CONSENT
15.1 Consent Notice on Your First Visit
When you first visit www.buecores.com, a cookie consent notice (cookie banner) appears on your screen. Through this notice:
• You can see that strictly necessary cookies are enabled automatically (they cannot be disabled).
• You can accept or reject functional, analytics, marketing and social media cookies separately by category.
• "Accept All" and "Reject All" options are offered.
• You can manage your choices in detail with the "Manage Preferences" option.
15.2 Changing Your Consent
You can change your cookie preferences at any time:
• Through the cookie settings panel or icon on the Site.
• Through your browser settings (details below).
When you change your consent, the relevant cookies are disabled on the next page load. Data collected earlier may be deleted at the end of its retention period or cleared manually from your browser.
16. MANAGING COOKIES IN YOUR BROWSER
You can view, delete or block cookies in your browser settings. Cookie settings for popular browsers:
• Google Chrome: chrome://settings/cookies
• Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Manage Website Data
• Microsoft Edge: Settings > Cookies and site permissions
• Opera: Settings > Advanced > Privacy & security > Cookies
If you disable or delete cookies other than strictly necessary ones, some Site functions may be limited, a personalised experience may not be available or certain pages may not work properly. The Seller cannot be held responsible for this.
17. SIMILAR TECHNOLOGIES
In addition to cookies, the following similar tracking technologies may be used:
• Pixel Tags (Web Beacons): Invisible image files used in emails and web pages to track email open rates and page views.
• Local Storage: A browser storage mechanism that can hold more data than cookies. It may be used for session information and user preferences.
• SDKs and Third Party Scripts: Code from analytics and advertising service providers running on the Site. These technologies are also covered by this cookie policy.
PART C: GENERAL PROVISIONS
18. POLICY UPDATES
This Privacy and Cookie Policy may be updated in line with legal changes, decisions of the Personal Data Protection Board, business processes, changes to technical infrastructure or the use of new cookies or technologies.
The current version is always published at www.buecores.com and takes effect on the date of publication.
For significant changes (a change in processing purpose, new data transfers, changes to the cookie policy and similar), users are informed by email and/or a notice on the Site. Renewed consent is requested where necessary.
19. CONTACT
You can send any questions, requests or complaints about privacy, cookies or your personal data to [email protected]. Requests under the KVKK are concluded within 30 days at the latest.
Last updated: April 2026 | Version 1.0