Cookie Notice

This Cookie Notice explains how cookies and similar technologies may be used on the official Kayalar Jewellery website at kayalarkuyumculuk.com, including the purposes of these technologies, the categories of information they may collect and the choices available to website visitors.

At Kayalar Jewellery, we recognise the importance of transparency, online privacy and providing visitors with appropriate control over optional tracking technologies. Cookies may be used to support essential website functions, maintain shopping sessions, remember preferences and, where legally permitted, analyse website performance or support marketing activities.

Where cookies or similar technologies involve the processing of personal data, the relevant activities are subject to applicable data protection legislation, including Türkiye's Personal Data Protection Law No. 6698 (KVKK). Where applicable, additional requirements under European Union or United Kingdom data protection and electronic privacy legislation may also apply.

This notice should be read together with our Privacy Policy and the relevant Personal Data Protection notices. The actual cookies used, their providers, purposes and retention periods must be reflected in the website's current cookie information and preference management arrangements.

1. Data Controller

For cookie-related personal data processing activities for which Kayalar Jewellery acts as the data controller, the relevant business is responsible for determining the purposes and means of processing in accordance with applicable law.

The registered legal identity of the relevant data controller and any additional information required by applicable legislation must be provided in the corresponding Personal Data Protection notices.

For general enquiries about this Cookie Notice or the processing of personal information through our website, please use the contact details below.

2. What Are Cookies?

Cookies are small data files that websites may store on a visitor's computer, smartphone, tablet or other compatible device when the website is accessed.

They may allow a website to recognise a browser, remember certain preferences, maintain a shopping session or support other functions during and between visits.

Cookies may serve different purposes, including essential website functionality, security, language preferences, performance measurement and, where permitted, advertising or personalisation.

Other technologies, such as pixels, local storage, tracking identifiers or similar device-access technologies, may also be used in connection with website services. Where applicable law regulates these technologies, the relevant transparency and consent requirements must be considered.

Not every cookie necessarily contains information that directly identifies a person. However, cookie identifiers and related technical information may constitute personal data where they relate to an identified or identifiable individual.

3. What Information May Be Collected Through Cookies?

Depending on the cookies and technologies actually used by our website, the following categories of information may be collected or processed:

• IP addresses and related connection information.
• Device and browser characteristics.
• Operating system information.
• Session identifiers and authentication-related information.
• Pages visited and website navigation activity.
• Time spent on particular pages or website sections.
• Interactions with website features, links and buttons.
• Selected language, display and other website preferences.
• Shopping basket contents and session-related information.
• Advertising or campaign interactions, where applicable.
• Cookie identifiers and other relevant technical identifiers.

The specific information collected depends on the relevant technology and its purpose. Not all categories listed above are necessarily processed during every visit.

Where personal data is involved, processing must be based on an appropriate legal ground and limited to the purposes disclosed to visitors.

4. Why We Use Cookies

Cookies and similar technologies may support various aspects of the online shopping experience, depending on the technical configuration of the Kayalar Jewellery website.

Their purposes may include:

• Enabling essential website functions and navigation.
• Maintaining secure sessions and supporting authentication.
• Remembering products added to the shopping basket.
• Storing selected website preferences and settings.
• Supporting website security and fraud prevention.
• Measuring website performance where lawfully permitted.
• Understanding website usage and navigation patterns.
• Improving website functionality and user experience.
• Supporting advertising activities where the required permissions have been obtained.
• Measuring the effectiveness of marketing campaigns where legally permitted.

The use of cookies for a particular purpose does not automatically mean that all visitors are subject to that processing. Optional technologies must be managed according to the applicable consent and legal requirements.

5. Strictly Necessary Cookies

Strictly necessary cookies support the essential functions of a website or a service expressly requested by the visitor.

Depending on the website configuration, these cookies may be needed to maintain secure sessions, enable navigation, preserve shopping basket contents, support authentication or provide essential security functions.

Without certain strictly necessary cookies, parts of the website may not function correctly or requested services may become unavailable.

Where a cookie is genuinely essential for the transmission of a communication or the provision of a service expressly requested by the user, an applicable exemption from cookie consent requirements may be available.

Where personal data is processed through strictly necessary cookies, the processing must still have an appropriate legal basis under the relevant data protection legislation.

6. Functional Cookies

Functional cookies may allow a website to remember selected preferences and provide additional convenience or personalisation.

Examples may include remembering a visitor's chosen language, display preferences, regional settings or other optional website features.

Whether a functional cookie requires consent depends on its actual purpose, whether the relevant function was expressly requested by the user and the legislation applicable to the technology.

Where consent is legally required, optional functional cookies must not be activated before the relevant valid permission has been obtained.

Visitors should be able to manage optional functionality through the relevant cookie preference controls where such controls are required.

7. Performance & Analytics Cookies

Performance and analytics cookies may help website operators understand how visitors interact with their websites and identify opportunities to improve performance and usability.

Depending on the technologies used, analytics activities may involve information about pages visited, session duration, navigation patterns, traffic sources, interactions with website features and other usage statistics.

These activities may support the identification of technical issues, the improvement of website navigation and the assessment of how visitors interact with different sections of an online store.

Analytics cookies are not automatically classified as strictly necessary simply because the resulting information may be useful for website management.

Where consent is required by the legislation applicable to the relevant analytics technology, the cookie or similar tracking mechanism must not be activated before valid permission has been obtained.

Any applicable exemption must be assessed according to the specific technology, processing purpose and legal requirements.

8. Advertising & Marketing Cookies

Advertising and marketing cookies may be used to understand campaign interactions, measure advertising performance or support the delivery of more relevant promotional content.

Depending on the services actually implemented, these technologies may be operated by Kayalar Jewellery or by external advertising, analytics and digital marketing service providers.

Certain advertising technologies may collect information concerning website interactions or support recognition of a browser across different websites or services.

Where advertising cookies, tracking pixels or similar technologies require consent under applicable legislation, they must not be activated before the visitor has provided valid consent.

Consent for optional advertising technologies must be based on a clear and informed choice and should be distinguishable from permission for other independent processing purposes where required by law.

Refusing optional advertising cookies does not prevent visitors from using essential shopping functions that can operate without those technologies.

9. First-Party & Third-Party Cookies

Cookies may be classified according to the party responsible for setting or providing them.

First-party cookies are generally set by the website that the visitor is accessing. They may support functions such as maintaining sessions, remembering relevant settings or operating essential website features.

Third-party cookies may be set or accessed through external services integrated into a website, including certain analytics, advertising, payment, security or social media services.

Where third-party cookies or other external tracking technologies are used, the relevant purposes, provider roles, data sharing arrangements and applicable privacy requirements must be considered.

External service providers may publish their own privacy and cookie information. However, the involvement of a third party does not automatically remove any legal responsibility that Kayalar Jewellery may have for technologies implemented on its website.

10. Session & Persistent Cookies

Cookies may also be classified according to how long they remain stored on a device.

Session Cookies: These are generally temporary cookies associated with a browsing session. They are commonly removed when the session ends or the browser is closed, depending on the browser and technical configuration.

Persistent Cookies: These may remain on a device after the browsing session has ended and may be used until their specified expiry date or until they are removed.

The actual retention period depends on the relevant cookie, its purpose and the technical arrangements of the service provider.

Cookie durations should be appropriate to the relevant purpose and comply with applicable storage limitation and privacy requirements.

11. Legal Bases for Cookie-Related Processing

Where cookies or similar technologies involve the processing of personal data, the relevant activity must have an appropriate legal basis under applicable data protection legislation.

Under Türkiye's Personal Data Protection Law No. 6698, personal data processing may be based on one of the lawful conditions established by the relevant provisions of the legislation.

For cookies genuinely necessary to provide a service expressly requested by the visitor or support essential website operations, a legal basis other than explicit consent may be appropriate where the statutory requirements are satisfied.

Where optional cookies involve processing for which no other appropriate legal basis is available, valid consent must be obtained before the relevant processing begins.

Where European Union or United Kingdom electronic privacy requirements apply, the rules concerning the storage of or access to information on a visitor's device must also be satisfied. A lawful basis under general data protection legislation does not automatically replace a separate cookie consent requirement.

The legal basis for each relevant processing activity must be assessed according to its actual characteristics and the applicable legislation.

12. Managing Your Cookie Preferences

Where a cookie preference management panel is provided on the website, visitors may use it to review the available categories and make choices about optional cookies.

Where consent is required, the preference mechanism must allow visitors to accept or refuse the relevant optional cookies through an appropriate and informed choice.

Cookies and similar technologies that require prior consent must not operate before the relevant consent has been obtained.

Visitors must be able to withdraw consent where the processing is based on consent, in accordance with applicable legal requirements.

Any controls presented on the website should accurately reflect the technologies actually used and the permissions required for their operation.

13. Cookie Consent Mechanism

Where cookies or similar technologies require consent, that consent must result from a freely given, specific, informed and appropriate affirmative action.

Merely visiting the website, scrolling through pages or continuing to browse without making a relevant choice does not constitute valid consent where an affirmative action is legally required.

Optional cookie categories must not be treated as authorised through pre-selected settings where applicable law requires active consent.

Where the relevant legal requirements apply, a cookie banner or preference interface should provide clear and accessible choices, such as:

• Accept All: Agree to the optional cookie categories described in the relevant preference information.
• Reject All: Refuse cookies that require consent while allowing only those that may lawfully operate without it.
• Manage Preferences: Review and select the available optional cookie categories individually.

The design and operation of the consent mechanism must comply with the legal requirements applicable to the relevant visitors and technologies.

14. Changing or Withdrawing Cookie Preferences

Where optional cookies are based on consent, visitors must be able to change their preferences or withdraw the relevant consent in accordance with applicable law.

If the website provides a cookie preference panel, the relevant controls should allow visitors to revisit and modify their selections.

Visitors may also manage or delete certain cookies through their browser settings.

Most modern browsers provide controls for blocking cookies, clearing stored data or restricting cookies associated with particular websites.

Disabling strictly necessary cookies may affect essential website functions, including login sessions, shopping basket functionality or other services requested by the visitor.

Deleting cookies through a browser does not necessarily withdraw every permission or stop every form of tracking. Where legally required, the website must provide an appropriate mechanism for withdrawing consent from the relevant technologies.

15. Cookie Retention Periods

The duration for which a cookie remains stored depends on its purpose, technical characteristics and the settings of the relevant website or service provider.

Some cookies are intended to operate during a browsing session, while others may remain available for a specified period.

Cookie retention periods must be appropriate to their stated purposes and should comply with applicable data minimisation and storage limitation requirements.

Where required by law, visitors should be provided with information about the actual duration of the cookies used or the relevant criteria for determining that duration.

The current retention periods should be included in the website's verified cookie inventory or another appropriately accessible source of cookie information.

16. List of Cookies Used

The cookies and similar technologies used by the Kayalar Jewellery website may change over time as website features, e-commerce services and external technology integrations are introduced, modified or removed.

An accurate cookie inventory should be based on the technologies actually implemented on the website rather than on assumed cookie names or generic lists.

Where applicable, the verified cookie information should identify:

• The name of the cookie or relevant technology.
• The website or service provider responsible for it.
• Whether it is classified as first-party or third-party.
• Its specific purpose.
• The relevant category, such as essential, functional, analytics or advertising.
• Its duration or expiry period.
• The applicable consent requirement or another relevant legal condition.

The actual cookie list should be reviewed when website services change, particularly where new analytics, advertising, payment, social media or other external technologies are introduced.

17. Third-Party Service Providers

Depending on the website configuration, Kayalar Jewellery may use external services to support e-commerce functionality, payments, analytics, advertising, security, communications or other legitimate business operations.

Certain third-party services may set cookies, access information stored on a visitor's device or process information generated through interactions with website features.

The legal responsibilities of Kayalar Jewellery and the relevant provider depend on their respective roles, the purposes of processing and the applicable legislation.

Where third-party technologies require consent, appropriate permission must be obtained before they are activated.

Any necessary information concerning relevant providers, data recipients and the nature of their processing activities should be included in the appropriate cookie information and privacy notices.

18. International Transfers of Personal Data

Certain technology providers may operate infrastructure or provide services from locations outside Türkiye.

As a result, personal data generated through cookies, tracking technologies or related website interactions may, depending on the systems actually implemented, be transferred to or accessed from another country.

Where personal data is transferred internationally, the relevant transfer must comply with the applicable data protection legislation.

Under Article 9 of Türkiye's Personal Data Protection Law No. 6698, international transfers are subject to statutory requirements concerning adequacy decisions, appropriate safeguards or other legally recognised transfer mechanisms.

Where the European Union's GDPR or applicable United Kingdom data protection legislation governs a particular processing activity or transfer, the relevant international transfer rules must also be considered.

Consent to optional cookies does not automatically establish a lawful basis for every international transfer of personal data. Any transfer must independently satisfy the relevant legal conditions.

Information about actual international recipients, relevant destinations and applicable safeguards should be provided in the relevant privacy notices where legally required.

19. Security of Cookie-Related Personal Data

Kayalar Jewellery recognises the importance of protecting personal information that may be processed through cookies and similar technologies.

Appropriate technical and organisational security measures must be considered to protect personal data against unauthorised access, unlawful processing, accidental loss and inappropriate disclosure.

The nature of the measures required depends on the relevant technology, processing activity, associated risks and applicable legal obligations.

Where third-party providers process personal data in connection with website technologies, the relevant provider responsibilities and applicable safeguards must also be considered.

20. Your Personal Data Protection Rights

Individuals whose personal data is processed through cookies or similar technologies may exercise rights under the data protection legislation applicable to the relevant processing activity.

Under Article 11 of Türkiye's Personal Data Protection Law No. 6698, individuals have rights concerning their personal data, subject to the relevant legal requirements.

Depending on the circumstances, these rights include:

• Learning whether their personal data is being processed.
• Requesting information where their personal data has been processed.
• Learning the purposes of processing and whether the data is used consistently with those purposes.
• Learning which third parties have received their personal data, whether within Türkiye or internationally.
• Requesting correction of inaccurate or incomplete personal data.
• Requesting deletion or destruction where the statutory conditions are satisfied.
• Requesting notification of relevant corrections, deletions or destruction to third parties where required by law.
• Objecting to certain adverse outcomes arising from exclusively automated analysis of personal data.
• Seeking compensation for damage resulting from unlawful processing where the relevant legal conditions are satisfied.

Where the EU GDPR or applicable UK data protection legislation governs the processing, additional or differently defined rights may apply.

Depending on the applicable legal requirements, these may include rights of access, rectification, erasure, restriction, objection, data portability and withdrawal of consent.

Individuals may also have the right to lodge a complaint with the relevant data protection supervisory authority where provided by applicable law.

21. How to Submit a Data Protection Request

Individuals may submit requests concerning personal data processed through the Kayalar Jewellery website in accordance with Türkiye's Personal Data Protection Law No. 6698 and any other applicable legislation.

Requests governed by Turkish law must be submitted through a method recognised by the relevant legal requirements.

Under Article 13 of Law No. 6698, applicable data subject requests must generally be answered as soon as possible and within 30 days at the latest.

Different response periods or procedures may apply under other data protection frameworks, including the EU GDPR or applicable UK legislation.

For further information about recognised request methods and the relevant rights, please refer to our Data Subject Request Form and Personal Data Protection pages.

You may also contact Kayalar Jewellery using the official details provided below for guidance concerning the appropriate application process.

22. Updates to This Cookie Notice

Kayalar Jewellery may review and update this Cookie Notice to reflect changes in applicable legislation, website functionality, cookie technologies or third-party services.

Updated information may be published on the official Kayalar Jewellery website.

Where a material change affects the purposes of cookie-related processing or requires additional consent, the relevant information and permission requirements must be addressed before the new processing begins.

The publication of a revised Cookie Notice does not, by itself, constitute consent to newly introduced optional tracking technologies.

Visitors are encouraged to review the current Cookie Notice and available cookie information when seeking details about how website technologies are used.

23. Contact Information

If you have questions about cookies, website tracking technologies, privacy preferences, personal data processing or your data protection rights, please contact Kayalar Jewellery through the official communication channels below.