Last Updated: 26.06.2026

This Clarification Text has been prepared by Impact Hub Ankara Yaratıcı Proje Geliştirme ve Ofis Hizmetleri Anonim Şirketi (“Impact Hub Ankara”), located at Yıldızevler Mahallesi Kişinev Caddesi No.10 Çankaya/Ankara, in its capacity as data controller, in accordance with Article 10 of the Personal Data Protection Law No. 6698 (“Law”) and the Communiqué on the Procedures and Principles to be Complied with in Fulfilling the Obligation to Inform (“Communiqué”).

As Impact Hub Ankara, we attach importance to the security and privacy of your personal data. With this Clarification Text, we aim to inform you about our personal data processing activities carried out as a data controller on our website (“Site”), our mobile application (“Mobile Application”), and our other platforms, collectively referred to as “Platform”.

1. Personal Data We Process

As Impact Hub Ankara, within the scope of Iconic Ankara, we may process your following personal data in product, order, delivery, membership, communication, marketing and after-sales processes:

Identity Information: Name, surname, company/title information for corporate orders, tax office and tax number information when an invoice needs to be issued.

Contact Information: Phone number, e-mail address, delivery address, invoice address, and shipping address.

Customer Transaction Information: Order number, order and invoice information, purchased products, shopping date, shopping amount, payment method, return and refund information, delivery and shipping process information, product reviews, rating and evaluation information.

Request and Complaint Information: Questions, requests, suggestions, and complaints you convey to us regarding our products, your orders, delivery, return, exchange, membership, events or the services we offer.

Site Usage and Transaction Security Information: IP address, log records, browser and device information, Site usage information, cart information, username and password information if logged in as a member, navigation and transaction records on the Site.

Marketing Information: Communication preferences, campaign and announcement preferences, past purchases, favorites, likes, cookie records, Site usage behavior, and product/collection preferences, provided you have given your explicit consent.

Legal Action Information: Information in correspondence with authorized persons, institutions, and organizations, legal information requests, information regarding litigation, enforcement, or dispute processes.

2. Our Personal Data Collection Sources and Methods

We collect your personal data directly from you in the following situations:

• When you visit our website,

• During your Site usage via cookies,

• When you place an order through the Site,

• When you create a membership or log into your account,

• When you contact us via our e-mail, our contact form on our website, our phone, or other channels,

• When you participate in meetings, events, programs, or community activities we organize or attend,

• When you give consent to newsletter, announcement, or campaign communications,

• When you have requests for return, refund, delivery, product review, or after-sales support,

• When you interact with us in any other way.

Your personal data may be collected automatically or non-automatically via phone, e-mail, website, cookies, Shopify and similar e-commerce infrastructures, payment systems, cargo systems, and physical forms.

Additionally, we may also collect your personal data through our customers, business partners, cargo companies, payment institutions, service providers, or third parties with whom we cooperate. In cases where we do not obtain your personal data directly from you, we will inform you within a reasonable period from the acquisition of personal data, or at the time of first contact if the personal data will be used for communication purposes with you, in accordance with Article 6 of the Communiqué.

3. Our Processing Purposes and Legal Grounds

As Impact Hub Ankara, we may process your personal data for the following purposes and legal grounds.

Order, Sales, and Delivery Processes

Processed personal data: Identity information, contact information, customer transaction information.

Processing purpose: To carry out the shopping transaction, prepare your order, package it, hand it over to cargo, update delivery information, deliver your order to you, and manage after-sales processes.

Legal grounds: Processing of data is necessary for the establishment or performance of a contract, in accordance with Article 5/2(c) of the Law.

Return, Refund, and After-Sales Support Processes

Processed personal data: Identity information, contact information, customer transaction information, request and complaint information.

Processing purpose: To manage return, refund, product review, delivery issues, damaged or incorrect product notifications, and after-sales support processes.

Legal grounds: Processing of data is necessary for the establishment or performance of a contract, in accordance with Article 5/2(c) of the Law, and processing of data is mandatory for the legitimate interests of the data controller, in accordance with Article 5/2(f) of the Law.

Invoice, Accounting, and Finance Processes

Processed personal data: Identity information, contact information, customer transaction information.

Processing purpose: To issue invoices, carry out e-invoice or e-archive processes, and perform financial and accounting transactions.

Legal grounds: Processing of data is mandatory for the data controller to fulfill its legal obligation, in accordance with Article 5/2(ç) of the Law.

Responding to Requests, Suggestions, and Complaints

Processed personal data: Identity information, contact information, request and complaint information, customer transaction information.

Processing purpose: To address questions, complaints, suggestions, and requests conveyed to us regarding our products, collections, services, orders, or events, and to provide appropriate responses to you.

Legal grounds: Processing of data is mandatory for the legitimate interests of the data controller, in accordance with Article 5/2(f) of the Law.

Site Usage, Technical Security, and Service Quality

Processed personal data: Site usage information, transaction security information, request and complaint information.

Processing purpose: To detect and resolve technical/software errors encountered during Site and Mobile Application usage, ensure security, improve user experience, and increase service quality.

Legal grounds: Processing of data is mandatory for the legitimate interests of the data controller, in accordance with Article 5/2(f) of the Law.

Personalization of Products, Collections, and Content

Processed personal data: Site usage information, marketing information, customer transaction information.

Processing purpose: To personalize Iconic Ankara products, collections, campaigns, announcements, and content according to your interests, shopping history, and preferences.

Legal grounds: Obtaining explicit consent from the data subject, in accordance with Article 5/1 of the Law.

Newsletter, Campaign, and Promotional Communications

Processed personal data: Identity information, contact information, marketing information.

Processing purpose: To inform you about our newsletters, campaigns, events, collections, and announcements; to carry out promotional activities related to Iconic Ankara or Impact Hub Ankara.

Legal grounds: Obtaining explicit consent from the data subject, in accordance with Article 5/1 of the Law.

Membership and Community Processes

Processed personal data: Identity information, contact information, customer transaction information, membership information.

Processing purpose: To carry out membership procedures, perform the membership agreement, enable member login, deliver membership notifications, and carry out community activities.

Legal grounds: Processing of data is necessary for the establishment or performance of a contract, in accordance with Article 5/2(c) of the Law.

Fulfillment of Legal Obligations

Processed personal data: Identity information, contact information, customer transaction information, legal action information.

Processing purpose: To fulfill obligations arising from Law No. 6563 on the Regulation of Electronic Commerce, Turkish Commercial Code No. 6102, Turkish Penal Code No. 5237, Law No. 6502 on Consumer Protection, Regulation on Distance Contracts, and other relevant legislation; to provide information to authorized persons, institutions, and organizations; to conduct activities in compliance with legislation; to follow up and manage legal affairs.

Legal grounds: Processing of data is mandatory for the data controller to fulfill its legal obligation, in accordance with Article 5/2(ç) of the Law.

4. Transfer of Your Personal Data

We may share your personal data with the following individuals, institutions, and organizations, in accordance with Articles 8 and 9 of the Law and by taking necessary technical and administrative measures:

• With cargo and logistics service providers for the execution of order, delivery, and return processes,

• With payment institutions, banks, and related financial service providers for the execution of payment transactions,

• With suppliers and business partners from whom we receive services for e-commerce infrastructure, website management, hosting, technical support, data security, marketing, advertising, and analysis activities,

• With e-commerce infrastructure providers such as Shopify and technology providers whose services are utilized for the operation of these infrastructures,

• With accountants, financial advisors, and relevant consultants for the execution of financial and accounting affairs,

• With authorized persons, institutions, and organizations for the fulfillment of legal obligations, including the recording of commercial electronic communication consents in the Message Management System,

• With authorized public institutions and organizations and legally authorized persons in case of any lawsuit, dispute, legal demand, or official information request concerning us, in order to exercise our legal rights and fulfill our legal obligations,

• With our business partners and consultants to provide our services, conduct our business activities, and improve our Platform by analyzing visitor traffic.

If some technology, e-commerce, hosting, analysis, advertising or infrastructure service providers, such as Shopify, are located abroad or provide services through servers located abroad, your personal data may be transferred abroad within the conditions stipulated in Article 9 of the Law.

5. Withdrawal of Your Explicit Consent

In cases where you have given your explicit consent for the collection, use, sharing or other processing of your personal data, you may withdraw your explicit consent at any time.

To withdraw your explicit consent, you can contact us through the communication channels specified in Section 7 of this text.

Withdrawing your explicit consent does not affect the legality of data processing activities carried out based on your explicit consent before the date of withdrawal.

6. Links to Other Sites

Our website may contain links to other sites that are not operated by us. If you click on another site link, you may be directed to that site.

We recommend that you review the privacy and personal data protection texts of every site you visit. We have no control over and assume no responsibility for the content, data protection and privacy policies or practices of any third-party sites or services.

7. Your Rights Regarding Your Personal Data

You have the following rights regarding your personal data within the scope of Article 11 of the Law:

• To learn whether your personal data is being processed,

• To request information if your personal data has been processed,

• To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,

• To know the third parties to whom your personal data has been transferred domestically or abroad,

• To request correction of your personal data if they are incomplete or incorrectly processed,

• To request the erasure or destruction of your personal data within the framework of the conditions stipulated in the KVKK legislation,

• To request that third parties to whom your personal data has been transferred be notified of the correction of incomplete or incorrect data and the erasure or destruction of personal data,

• To object to a result against you arising from the analysis of your processed data exclusively through automated systems,

• To request compensation for damages if you suffer damage due to unlawful processing of your personal data.

You can submit your rights and requests regarding your processed personal data physically to the address mentioned above, or if you are registered in our system, you can send them to the e-mail address ikonik.ankara@impacthub.net.

Your requests regarding your rights regulated in Article 11 of the Law will be concluded free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, you may be charged a fee according to the tariff determined by the Personal Data Protection Board.