KVKK Disclosure Statement
Information Notice on the Protection and Processing of Personal Data
Last updated: July 29, 2026
This Information Notice has been prepared in accordance with Article 10 of the Law on the Protection of Personal Data numbered 6698 (“KVKK”), to inform individuals who visit the storks.com.tr website, create memberships, purchase products or services, participate in campaigns, use our communication channels, and interact with our stores, about the processing of their personal data.
1. Data Controller
Your personal data is processed by the company specified below, acting as the data controller:
- Trade Name: On Mücevherat Sanayi ve Dış Ticaret A.Ş.
- Brand: Storks Diamond
- Address: Büyükyalı İstanbul, Kazlıçeşme Mahallesi, Kennedy Caddesi, No:52/I, Zeytinburnu, 34020 İstanbul, Turkey
- Phone: 0 (212) 526 10 10
- Email: online@storks.com.tr
- Tax ID: 6421060716
- Registration No: 435557-0
- MERSIS No: 0642106071600001
- Website: https://storks.com.tr
2. Processed Personal Data
Depending on the nature of your relationship with our company, all or some of your personal data listed below may be processed:
- Identity information: Name, surname, and identity verification information where necessary.
- Contact information: Phone number, email address, delivery, and billing address.
- Customer transaction information: Cart, order, product, return, exchange, request, complaint, support, and purchase history.
- Financial information: Payment method, payment and refund details, invoice details. Full card information is not stored by our Company; it is processed by the authorized payment institution.
- Transaction security information: IP address, date-time records, session, browser, device, and security records.
- Marketing information: Communication preferences, campaign interactions, cookie preferences, and consent records, only if the necessary legal condition is met.
- Legal process information: Information related to disputes, applications, warnings, and correspondence with authorized bodies.
3. Purposes and Legal Bases for Processing Personal Data
Your personal data may be processed for the following purposes and within the legal bases specified in Article 5 of the KVKK:
3.1. Establishment or Performance of a Contract
- Execution of cart, order, payment, delivery, return, and exchange processes.
- Preparation, personalization, certification, and delivery of products.
- Provision of customer account, after-sales support, maintenance, and repair services.
3.2. Fulfillment of Legal Obligations
- Creation and storage of invoice, accounting, tax, and commercial records.
- Fulfillment of information and record-keeping obligations under consumer legislation.
- Responding to lawful requests from authorized public institutions and organizations.
3.3. Establishment, Exercise, or Protection of a Right
- Finalization of requests and complaints.
- Resolution of disputes, preservation of evidence and records.
- Prevention of fraud, misuse, and unauthorized transactions.
3.4. Legitimate Interest
- Ensuring information security and the secure operation of the website.
- Measuring and improving service quality.
- Auditing company activities and improving operations.
For processing activities based on legitimate interest, necessary assessments and security measures are applied to ensure that your fundamental rights and freedoms are not harmed.
3.5. Explicit Consent and Commercial Electronic Communication Consent
The transmission of campaign, new collection, discount, and personalized offers via email, SMS, or phone channel is carried out only if you have a valid and verifiable consent for the respective channel. Not giving marketing consent does not prevent you from shopping or using products or services.
4. Methods of Collecting Personal Data
Your personal data may be collected through the following channels, fully or partially by automatic means or by non-automatic means as part of a data recording system:
- storks.com.tr website, customer account, cart, order, and contact forms.
- Stores, sales points, call center, phone, email, and WhatsApp communications.
- Payment institutions, cargo companies, and authorized service providers in the order process.
- Cookies and similar technologies. Details are explained in the Cookie Policy.
5. Transfer of Personal Data
Your personal data may be transferred to the following recipient groups, limited and proportionate to the purpose, provided that the transfer is necessary and the conditions in Articles 8 and 9 of the KVKK are met:
- Cargo, courier, logistics, and delivery service providers.
- Banks, payment, and electronic money institutions.
- E-commerce infrastructure, hosting, software, security, communication, email, analytics, and customer service providers.
- Financial advisors, auditors, lawyers, and other professional consultants.
- Legally authorized public institutions, courts, and enforcement authorities.
5.1. Transfer Abroad
Personal data may be transferred abroad due to some suppliers offering e-commerce infrastructure, cloud, analytics, security, or communication services having their systems located abroad. Such a transfer will not be carried out unless one of the adequacy decisions, appropriate safeguards (including standard contracts), or exceptional transfer conditions specified in Article 9 of the KVKK is met.
6. Retention Periods
Your personal data is retained for the period stipulated in the relevant legislation or for the period required by the processing purpose. The main retention periods are applied as follows:
- Commercial ledgers, invoices, and accounting records: for the periods stipulated in the relevant legislation.
- Distance sales transactions and related records: at least 3 years.
- Request, complaint, and dispute records: for statutory limitation periods.
- Commercial electronic communication consent records: 3 years from the end of the consent’s validity.
- Cookies: for the periods specified in the Cookie Policy.
Data whose retention period has expired is deleted, destroyed, or anonymized if there is no legal reason for retention.
7. Your Rights Under KVKK
Pursuant to Article 11 of the KVKK, by applying to our Company, you have the right to:
- Learn whether your personal data is processed.
- Request information if it has been processed.
- Learn the purpose of processing and whether it is used in accordance with its purpose.
- Learn the third parties to whom it has been transferred, domestically or abroad.
- Request correction of incomplete or incorrectly processed data.
- Request its deletion or destruction within the framework of the conditions specified in the KVKK.
- Request notification of the correction, deletion, or destruction operations to third parties to whom it has been transferred.
- Object to an adverse outcome resulting from analysis by automated systems.
- Demand compensation for damages if you suffer damages due to unlawful processing.
8. Application Methods
You can submit your requests under the KVKK, along with information and documents suitable for verifying your identity, using one of the following methods:
- You can send your written and signed application personally or via notary to “On Mücevherat Sanayi ve Dış Ticaret A.Ş., Büyükyalı İstanbul, Kazlıçeşme Mahallesi, Kennedy Caddesi, No:52/I, Zeytinburnu, 34020 İstanbul”.
- You can apply to online@storks.com.tr via your email address previously notified to our Company and registered in our systems.
- You can apply to online@storks.com.tr using a secure electronic signature or mobile signature.
Your application must include your name-surname, signature if the application is written, Turkish Republic ID number for Turkish citizens, nationality and passport number or ID number if any for foreigners, address for notification, email/phone information for notification if any, and the subject of the request. Identity information is processed solely for the purpose of verifying the applicant.
Applications are concluded free of charge as soon as possible and no later than 30 days, depending on the nature of the request. If the transaction requires an additional cost, the fee specified in the tariff determined by the Personal Data Protection Board may be requested.