Privacy notice

This notice explains how personal data is processed when you use dossha.eu, create an account, place an order, contact us, or join the newsletter. It applies to customers in the European Economic Area and to anyone else who uses this store.

Who is responsible

The controller is:

• Dohead Tekstil Ticaret Anonim Şirketi
• Şerifali Mah. Garip Sok. No: 36A, Ümraniye / İstanbul, Türkiye
• Email: hello@dossha.eu
• Phone: +90 850 308 55 33
• Hours: Monday–Friday 09:00–18:00 (Istanbul time, UTC+3)

EU representative (GDPR Article 27): [DOLDURULACAK]

What we process

• Account. Name, email address, password, and the phone number or addresses you choose to save.
• Orders. The products you buy, the amount in EUR, delivery and billing details, and the order history.
• Payment. Checkout is handled by our payment provider. We receive the payment status. We do not store your full card number.
• Shipping. Your name, delivery address, and contact details are shared with the carrier that delivers the order.
• Support. The messages you send to hello@dossha.eu and the order details needed to answer them.
• Newsletter. Your email address, and only if you give a separate consent. You can unsubscribe in every message, or by emailing hello@dossha.eu. Unsubscribing does not affect your orders.
• Cookies. Cookies that are needed to run the cart, checkout, and your language choice, and cookies used to understand how the store is used.
• Store analytics. Pages viewed and similar usage of the shop. The analytics tools in use: [DOLDURULACAK]

Why we process it

• To create your account, take your order, take payment, and deliver the goods: performance of the contract.
• To keep order and accounting records: a legal obligation. The exact retention period required by law: [DOLDURULACAK]
• To answer support requests: performance of the contract, and our interest in responding to you.
• To send the newsletter: your consent. You can withdraw that consent at any time.
• For cookies that the shop cannot run without: the contract, or our interest in operating a secure store.
• For analytics cookies: consent, where consent is required. The consent tool and the basis we record for analytics: [DOLDURULACAK]

Transfers outside the EEA

The controller is established in Türkiye. When we process personal data of people in the EEA, holding or accessing that data in Türkiye is a transfer to a third country.

Transfer mechanism for Türkiye: [DOLDURULACAK]

The store is hosted on Shopify. Payment and delivery providers may also process data outside the EEA. The list of processors and the transfer mechanism for each: [DOLDURULACAK]

How long we keep it

• Orders and accounting records. For as long as the applicable accounting and tax law requires us to keep them. We do not delete those records early, and we do not keep them longer than that duty requires.
• Marketing and the newsletter. Until you withdraw your consent. After that we delete or anonymise the marketing record, except for a short note that you withdrew consent, where we need it to honour the withdrawal.
• Support messages. For as long as needed to handle the request and any follow-up about the same order.
• Account. Until you ask us to delete it, unless we must keep order records for the legal period above.

Your rights

You can ask us for:

• access to your personal data
• correction of inaccurate data
• erasure
• restriction of processing
• objection to processing based on our interests
• portability of data you provided, where the processing is based on contract or consent and is carried out by automated means
• withdrawal of consent, including newsletter consent, at any time

Withdrawal of consent does not affect processing that took place before the withdrawal. Some requests can be refused where the law requires us to keep the data, in particular order and tax records.

Send requests to hello@dossha.eu. We may ask you to confirm that you are the person the data relates to.

You can lodge a complaint with a supervisory authority. If you are in the EEA, you can complain to the authority in the country where you live, work, or where the issue arose. The supervisory authority responsible for the controller: [DOLDURULACAK]

Children

This store is not directed at children. We do not knowingly create accounts for children.

Changes

If this notice changes, the new version will be posted on this page.