Open Consent Policy and Consent Management Principles

Last updated date: 14.07.2026
Text version: 1.0
Platform: allbazaardan.com

1. Purpose and scope

This Explicit Consent Policy; It explains the principles to be applied in personal data processing activities carried out through allbazaardan.com and requiring the user's explicit consent in accordance with the relevant legislation.

This policy;

• platform visitors,

• individual customers,

• member users,

• sellers and seller candidates,

• those who create support requests. It may include individuals,

• users who consent to marketing communications,

• users who access the platform from the European Union, the European Economic Area and other countries

.

This page is not an express statement of consent by itself. For each transaction requiring explicit consent from the user, a separate and active selection mechanism is presented by explaining the purpose, scope and results of the relevant transaction.

2. Data controller

Data controller in terms of personal data processing activities determined by the platform within the scope of allbazaardan.com:

Legal operator: Aydın Kaydin Sole Proprietorship
Tax number: 5370203844
Address: Hamzabey Mahallesi, Karacabey Caddesi No:25/7, Mustafakemalpaşa / Bursa 16500, Turkey
Phone: +90 535 920 73 78
E-mail: [email protected]
KEP: [email protected]

Independent sellers selling on the platform may also be data controllers in terms of personal data processing activities they determine and carry out. Explicit consent given to the platform does not mean that independent sellers are automatically given permission for their own advertising and marketing activities.

3.Basic features of express consent

A valid express consent:

• limited to a specific subject and purpose,

• based on sufficient information,

• given with free will,

• clear and understandable,

• explained by an active user action,

• when necessary. It must be provable

.

Silence, inactivity, continuing to use the site, acceptance of the general terms of operation or previously marked boxes are not considered as explicit consent.

Multiple independent personal data processing purposes are not combined in a single general consent box.

4. Separation of information and explicit consent

The user is provided with separate information about the relevant personal data processing activity before explicit consent is requested.

The information text includes at least:

• identity of the data controller,

• data categories to be processed,

• processing purposes,

• to whom and for what purposes the personal data will be used.

• the method and legal reason for collecting personal data,

• the rights of the person concerned,

• application methods

are explained.

The process of reading the information text and the process of giving explicit consent are distinguished. Seeing or reading the information text does not mean that the user has given explicit consent.

5.Transactions not based on explicit consent

Not all personal data processing activities of the platform are based on explicit consent.

The following transactions can be carried out without explicit consent if there is another legal reason stipulated in the applicable legislation:

• creation of membership and user account,

• establishment and fulfillment of the order,

• payment, collection, return and accounting. transactions,

• preparation and delivery of the product by the seller,

• cargo and logistics processes,

• managing the seller membership and store account,

• preventing fraud, unauthorized transactions and platform abuse,

• ensuring information security,

• fulfilling legal obligations.

• managing disputes and claims,

• providing information to authorized institutions in accordance with the legislation,

• providing support services clearly requested by the user.

It is essential that these activities are not bound to an explicit consent text.

6. Transactions for which separate express consent can be obtained

When necessary, separate choices are offered for the following transactions:

6.1. Marketing via e-mail

Consent required for sending campaigns, discounts, new products, seller opportunities and similar commercial content via e-mail is obtained separately.

6.2. Marketing via SMS and telephone

Separate channel selection is offered for advertising and marketing via SMS, mobile message or telephone call.

The telephone number provided for sending a verification code, order notification or security message cannot be used as marketing consent.

6.3. Personalized offer and profiling

Creating a personalized campaign or advertisement using the products viewed by the user, search history, basket movements, favorites and platform interactions is evaluated separately according to the applicable legal reason.

In cases where explicit consent is required, the user is given the option to use the service without personalization.

6.4.Non-essential cookies

Advertising, retargeting, behavioral analysis and non-essential performance cookies are based on the user's explicit consent to the extent necessary.

Non-essential cookies are not run without user consent. The “Reject all” option is presented as accessible as the “Accept all” option.

Cookies that are strictly necessary for the operation of the session, security, protection of the shopping cart and the provision of services expressly requested by the user are evaluated separately.

6.5. Data transfer abroad

Personal data may be transferred abroad if cloud services, content distribution network, e-mail, analysis, security, support, artificial intelligence or similar international service providers are used.

Transfer abroad is primarily based on the adequacy decision, standard contract, binding company rule or other appropriate assurance methods stipulated in the applicable legislation.

Explicit consent is not used as an automatic and general basis for transfer abroad. However, in exceptional cases where there is no other valid transfer mechanism and the legislation allows explicit consent, explicit consent may also be requested by explaining the country or recipient group to which the transfer will be made, the categories of data to be transferred and possible risks.

6.6. New and different purposes

When personal data needs to be used for a new purpose that has not been disclosed before, is not compatible with the current transaction and is not based on another legal reason, the user is also informed and, if necessary, a new explicit consent is obtained.

7. Not making consent a condition of service

User:

• not accepting marketing messages,

• rejecting personalized ads,

• turning off non-essential analytical cookies,

• not accepting optional profiling

basic membership, product review, placing an order or contractual obligations

However, if a particular optional feature is technically consensual, only the relevant feature may not be offered. This situation is notified to the user in advance and clearly.

8.Withdrawal of consent

When the user requests his or her explicit consent:

• via account privacy and communication preferences,

• from the cookie preference center,

• from the rejection link in sent commercial messages,

• [email protected],

• via the KEP address

.

Withdrawing consent should be as easy as giving consent.

Withdrawal has prospective consequences. It does not eliminate the validity of transactions carried out lawfully based on consent before withdrawal.

Withdrawal of consent; It does not automatically terminate transactions based on another legal reason, such as the establishment or execution of a contract, legal obligation, establishment, use or protection of rights.

9. Commercial message preferences

For marketing communications, e-mail, SMS, telephone and other channels can be managed separately.

When withdrawing consent for a channel, the user can continue his preference for other channels.

Service messages such as order confirmation, payment notification, security warning, delivery notification, membership process and support request response are separated from marketing messages.

10. Storage of consent records

The platform may keep the following records in order to prove its legal obligations and valid consent:

• the version of the text accepted by the user,

• the date and time the consent was given,

• the platform and channel from which the consent was obtained,

• the scope of the consent and purpose,

• selected communication channels,

• transaction, session and technical records,

• time of changing or withdrawing consent,

• rejection and permission history.

These records are protected only for the necessary period and taking into account the statute of limitations, retention and proof periods in the relevant legislation.

11.Users of the European Union and other countries

If the platform offers goods or services to persons in the European Union or the European Economic Area or monitors the behavior of these persons, the provisions of the General Data Protection Regulation are taken into account, to the extent applicable.

In this context, express consent:

• freely given,

• specific,

• informed,

• explicit and It must be without any room for hesitation,

• given with an active statement,

• retractable

.

The user may object to personal data processing carried out for direct marketing purposes and associated profiling at any time.

12. Obligations of sellers

Platform sellers must use the customer data they access within the scope of the order only for the purpose of order preparation, delivery, invoicing, return and after-sales services.

Sellers:

• cannot add customer data to their own advertising lists,

• cannot use contact information on the platform for unauthorized marketing purposes,

• cannot use customer data to unauthorized third parties.

• cannot process the data obtained from the platform for scraping, bulk downloading or resale purposes.

The seller must obtain the necessary approvals for his own marketing activities separately and under his own responsibility.

13. Policy changes

This policy may be updated according to changes in legislation, platform features, service providers used or personal data processing activities.

Massive changes may be announced to the user through platform notification, account notification or appropriate communication channel. In case of changes that expand the scope of previously given consent, explicit consent is obtained from the user again.

14.Application and communication

Explicit consent preferences and applications regarding the processing of personal data can be submitted through the following channels:

E-mail: [email protected]
KEP: [email protected]
Address: Hamzabey Mahallesi, Karacabey Caddesi No:25/7, Mustafakemalpaşa / Bursa 16500, Turkey
Phone: +90 535 920 73 78

Digital support requests can be submitted at any time through online channels. Telephone and live support access is offered according to the current support schedule announced on the platform.