KVKK Information Notice (Supplier & Partner & Dealer)

Pursuant to Law No. 6698 on the Protection of Personal Data (“KVKK”), as the data controller Uğurlu Ayakkabı San. Ve Tic. Ltd. Şti. As “Momy Kids Shoes”, we inform you about personal data processed within the scope of our procurement, purchasing, dealership, and partnership processes.

Data Controller

Title: Uğurlu Ayakkabı San. Ve Tic. Ltd. Şti.
Address: Bulgurlu Mah. Söğütlüçayır Çeşmesi Sok. Besler Aprt. Sit. No:20/B Üsküdar – İstanbul
Phone: +90 216 461 11 55
Email: info@momy.com.tr
Tax Office/No.: Ümraniye – 8860494838
MERSIS: 0886049483800001

2) Categories of Personal Data

Identity & Contact: Full name, title/position, corporate e-mail and phone, company/branch information.
Accounting/Finance: Invoice details, IBAN; if a sole trader / sole proprietorship then tax ID / ID no.
Contract & Transaction: Quotation–order–delivery records, meeting/correspondence notes, letters of authority.
Transaction Security: IP/logs, access records, user permissions (if the B2B portal is used).
Visual/Audio: Call recordings or physical security recordings (if any).

3) Purposes of Processing

Contract and supply management: supplier/dealer on-boarding, ordering, production, shipment, service.
Accounting/finance & audit: invoicing, payment, reconciliation, internal/external audit.
Compliance and obligations: TCC, Tax Procedure Law, occupational health & safety, and related legislation.
Communication and performance: operational communication, performance, and supplier satisfaction.
Security and fraud prevention: dispute follow-up and establishment of rights.
Marketing/announcements (B2B): notices regarding communications to traders/artisans (right to opt out reserved).

4) Legal Grounds

Conclusion/performance of a contract: (KVKK Art. 5/2-c): procurement, ordering, shipment, payment processes.
Legal obligation (Art. 5/2-ç): tax/audit, retention, responding to official requests.
Legitimate interests (Art. 5/2-f): communication and process security, quality/performance management.
Explicit consent (where required): obtained separately if needed for non-marketing purposes.

5) Methods of Collecting Personal Data

Via contracts and annexes, quote–order systems, e-mail/correspondence, B2B portal access, accounting/ERP, logistics and call-center records—by automatic/semi-automatic/manual means.

6) Transfers (Recipient Groups)

Banks/payment institutions, accounting/audit & legal advisors,
logistics/shipping, IT/hosting/integrator (e-invoice/e-dispatch, B2B portal),
Competent public authorities (within the scope and limits of the legislation).

7) International Transfers

Due to cloud, e-mail, CRM or similar services, your personal data may be transferred abroad. In such cases, appropriate transfer mechanisms under KVKK Art. 9 (explicit consent or safeguards prescribed by the Board) are applied; details are specified in contracts/additional protocols and privacy–data processing agreements.

8) Retention Periods

TCC commercial books/correspondence: 10 years (minimum)
TPL documents/invoices: 5 years (minimum)
Dispute/complaint: for the duration of the applicable statute of limitations

Once the period expires, data are deleted, destroyed, or anonymized.

9) Your Rights (KVKK Art. 11)

Right to request information; rectification/erasure; restriction/objection to processing; notification to recipients; compensation in case of damage.

10) Application

You may submit your requests via e-mail:

kvkk@momy.com.tr.
Alternatively, via the form:
KVKK Application Form.
Applications are finalized within 30 days at the latest.

Last updated: 2025-09-10