GDPR Compliance
GDPR Compliance — Hali.net's General Data Protection Regulation Compliance
Effective Date: May 2026 — Last Reviewed: May 2026
At Hali.net, we meticulously fulfill our responsibilities under the European Union General Data Protection Regulation (Regulation (EU) 2016/679 — "GDPR"). This page for our users residing within EU borders explains our data processing principles, your rights, and our communication channels.
1. Data Controller
Hali.net
Address: Bağlarbaşı Mahallesi, Halı Sokak No: 12, Üsküdar / Istanbul, Türkiye
E-posta: gdpr@hali.net
Phone: +90 850 200 00 00
2. Legal Basis for Processing
- Contract Performance (Art. 6(1)(b)): Order processing, delivery, customer service.
- Legal Obligation (Art. 6(1)(c)): Tax, invoicing, and commercial record-keeping obligations.
- Legitimate Interest (Art. 6(1)(f)): Fraud prevention, service improvement.
- Consent (Art. 6(1)(a)): Marketing communications, optional cookies.
3. Your Rights Under GDPR
- Right to Access (Art. 15): The right to know what data we hold about you.
- Right to Rectification (Art. 16): Requesting the correction of your inaccurate data.
- Right to Erasure / "Right to be Forgotten" (Art. 17): Requesting the deletion of your data.
- Right to Restrict Processing (Art. 18): Requesting the restriction of processing.
- Right to Data Portability (Art. 20): Receiving your data in a structured format.
- Right to Object (Art. 21): Objecting to marketing and profiling.
- Right to Withdraw Consent: Withdrawing your consent at any time.
- Right to Lodge a Complaint: The right to lodge a complaint with a local data protection authority.
4. How to Exercise Your Rights
To exercise your rights mentioned above, you can contact gdpr@hali.net. Your requests will be answered within 30 days. In case of complex or numerous requests, this period may be extended by 60 days; you will be notified of this in advance.
5. International Data Transfers
Your data may be transferred from the EU to Turkey. These transfers are secured under Standard Contractual Clauses (SCC) within the scope of GDPR Article 46. The same safeguards apply to our hosting providers and technical infrastructure partners.
6. Data Retention
Your data is retained within the framework of legal retention periods (tax legislation 10 years) and contractual obligations. At the end of these periods, data is anonymized or deleted.
7. Cookies and Tracking
Explicit consent is obtained for non-functional cookies; you can change these settings at any time from your browser settings or our cookie preference panel.