Privacy Notice (GDPR and KVKK)
This notice explains who processes your personal data when you use this store, why, on what legal basis, how long it is kept and what rights you have.
1. Data controller
ORTEVA operates under our parent companies:
FORI d.o.o.
Presernova cesta 1A 3320, Velenje, SAVINJSKA, Slovenia · VAT no. SI57248729 · Phone: +386-38984700
KonstrukTel DOO
KRALjA PETRA PRVOG 94 Erdevik, Sremski, PAK 327785, Serbia · VAT no. RS110042927 · Phone: +381-113470354
Turkey Operations: Bahariye Caddesi Yahya Kahya Mahallesi Yağhanesi Sokak No: 6 Beyoğlu / İstanbul, Türkiye
Customer Service: 0850 480 66 51
E-mail: info@ortevayastik.com
Because we are established in the European Union and Serbia, the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Serbian Law on Personal Data Protection apply to our processing. Where we offer goods to people located in Türkiye, Turkish Law no. 6698 on the Protection of Personal Data (KVKK) also applies, and we treat these sets of rights as cumulative — you may rely on whichever is more favourable to you.
2. What we collect
Identity: Name and surname
Contact: E-mail address, telephone number, delivery address
Order: Products ordered, quantity, amount, order number, delivery status, returns
Payment: Payment method and the transaction result. We never see or store your full card number.
Technical: IP address, browser and device type, pages visited, cookie identifiers
Correspondence: The content of messages you send us through the contact form or by e-mail
Why we process it, and on what basis
To conclude and perform your purchase — taking the order, shipping, invoicing, returns and after-sales support. Basis: performance of a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
To meet legal obligations — tax, accounting and consumer-law record keeping. Basis: legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)).
To keep the site working and secure — fraud prevention, error diagnosis, strictly necessary cookies. Basis: legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
To measure use of the site and, where you ask for it, to send marketing — optional analytics cookies and commercial e-mail. Basis: your consent (GDPR Art. 6(1)(a); KVKK Art. 5(1)), which you may withdraw at any time.
3. Who we share it with
We do not sell your data. We share the minimum necessary with: our e-commerce platform (Shopify), the carrier delivering your order, our payment service provider, our accountant, and public authorities where the law requires it. Each of them processes the data only for the purpose we gave it to them for.
4. International transfers
Our service providers may store data outside your country, including in the European Economic Area and in countries whose data-protection rules differ from your own. Where that happens we rely on the transfer safeguards recognised under the GDPR (adequacy decisions or standard contractual clauses) and, for KVKK purposes, on the conditions set out in Article 9 of that law.
5. How long we keep it
Order, invoice and accounting records: 10 years, as required by tax and commercial law.
Contact-form correspondence: 2 years after the matter is closed.
Optional analytics cookie data: up to 24 months, or until you withdraw consent.
When a retention period ends, the data is deleted or irreversibly anonymised.
6. Your rights
You may ask us to confirm whether we hold data about you; to give you a copy; to correct it; to erase it; to restrict or object to processing; to receive it in a portable format; and to withdraw a consent you gave. You may also object to decisions produced solely by automated analysis. To exercise any of these rights, write to info@ortevayastik.com from the address you used for your order. We answer within 30 days at the latest, free of charge.
7. Complaints
If you are not satisfied with our answer, you may complain to the Slovenian Information Commissioner (Informacijski pooblaščenec), the Serbian Commissioner for Information of Public Importance and Personal Data Protection (Poverenik za informacije od javnog
