Last updated: 30.04.2026
This Data Protection Notice explains how Calibre Kahve A.Ş. protects personal data and how individuals may exercise their rights under applicable data protection laws, including the General Data Protection Regulation (GDPR) where applicable.
This Notice should be read together with our Privacy Policy and Cookie Policy. Our Privacy Policy provides the general framework for how we collect, use, share, and retain personal data. This Notice specifically explains our data protection approach, legal bases for processing, international transfers, and your rights as a data subject.
1. Data Controller
The data controller responsible for your personal data is:
Calibre Kahve A.Ş.
Merkez Mah. Cendere Cad. Seba Suites No:16/1F
Kağıthane / Istanbul / Türkiye
Email: info@coffeecalibre.com
Website: www.coffeecalibre.com
2. Scope of This Notice
This Notice applies to individuals who visit our website, purchase our products, create an account, contact us, subscribe to our communications, or otherwise interact with our services.
If you are located in the European Union or the European Economic Area, the processing of your personal data may be subject to the GDPR.
3. Categories of Personal Data
Depending on your interaction with us, we may process the following categories of personal data:
Identity information, such as name, surname, company name, billing details, and where necessary, tax identification information.
Contact information, such as email address, phone number, delivery address, and billing address.
Order and customer transaction information, such as products purchased, order history, payment status, delivery information, return and refund requests, customer support records, complaints, and inquiries.
Financial information, such as payment-related records and, where necessary for refunds, bank account or IBAN details. Full credit card information is processed by secure third-party payment service providers and is not directly stored by us.
Technical and security information, such as IP address, device information, browser information, session data, traffic data, website usage logs, error logs, and security records.
Marketing and communication preferences, such as newsletter subscriptions, consent records, communication preferences, and opt-out choices.
Cookie and similar technology data, as further explained in our Cookie Policy.
4. Purposes of Processing
We process personal data for purposes including:
Processing and fulfilling orders, delivering products, issuing invoices, managing payments, returns and refunds, creating and managing customer accounts, providing customer support, responding to requests and complaints, ensuring website and transaction security, preventing fraud and misuse, complying with legal obligations, maintaining accounting and business records, improving our website and services, and sending marketing communications where permitted by law or based on your consent.
5. Legal Bases for Processing
Where the GDPR applies, we process personal data based on one or more of the following legal bases:
Performance of a contract: when processing is necessary to receive your order, process payment, deliver products, manage your account, or handle returns and refunds.
Compliance with legal obligations: when processing is necessary for tax, accounting, commercial, consumer protection, or regulatory obligations.
Legitimate interests: when processing is necessary for website security, fraud prevention, customer support, business operations, service improvement, limited analytics, or protection of our legal rights, provided that your fundamental rights and freedoms do not override these interests.
Consent: when processing is based on your permission, such as for marketing communications, advertising cookies, certain analytics cookies, or personalized experiences. You may withdraw your consent at any time.
6. Sharing of Personal Data
We may share personal data only where necessary and only to the extent required for the relevant purpose. Recipients may include:
Shipping and logistics providers, payment service providers, banks, e-commerce infrastructure providers, hosting and technical service providers, email and SMS service providers, customer support and CRM providers, analytics and advertising partners, accounting and finance service providers, legal advisors, auditors, authorized public authorities, and competent legal or regulatory bodies.
We do not sell personal data to third parties.
7. International Transfers
Calibre Kahve A.Ş. is based in Türkiye. If you are located in the European Union or European Economic Area, your personal data may be transferred to Türkiye or to service providers located outside the European Economic Area.
Such transfers may occur for order processing, payment, delivery, customer support, technical infrastructure, analytics, marketing, accounting, or legal compliance purposes.
Where required by applicable data protection laws, we take appropriate safeguards to protect your personal data. These safeguards may include data processing agreements, standard contractual clauses, or other legally recognized transfer mechanisms.
8. Retention of Personal Data
We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.
Retention periods may vary depending on the nature of the data and the purpose of processing. For example, order and invoice records may be retained in accordance with applicable tax, accounting, and commercial laws. Customer support records may be retained for the period necessary to manage requests and potential disputes. Marketing consent records may be retained until consent is withdrawn or the relevant processing activity ends.
After the applicable retention period expires, personal data is deleted, destroyed, or anonymized.
9. Your Data Protection Rights
Where applicable, you may have the following rights regarding your personal data:
The right to access your personal data.
The right to request correction of inaccurate or incomplete personal data.
The right to request deletion of your personal data under certain conditions.
The right to request restriction of processing.
The right to object to processing based on legitimate interests.
The right to object to direct marketing at any time.
The right to request data portability.
The right to withdraw your consent at any time where processing is based on consent.
The right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects.
You may also have the right to lodge a complaint with a competent data protection authority if you believe that your personal data has been processed unlawfully.
10. How to Exercise Your Rights
To exercise your rights or to contact us regarding this Notice, you may reach us at:
Calibre Kahve A.Ş.
Merkez Mah. Cendere Cad. Seba Suites No:16/1F
Kağıthane / Istanbul / Türkiye
Email: info@coffeecalibre.com
Your request should clearly state the right you wish to exercise and include sufficient information to verify your identity. We will respond to your request within the time limits required by applicable law.
11. Withdrawal of Consent
Where processing is based on your consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
For marketing emails, you may use the unsubscribe link included in our emails or contact us directly.
For cookies, you may manage your preferences through the cookie settings available on our website, where applicable.
12. Changes to This Notice
We may update this Data Protection Notice from time to time. The updated version will become effective once published on our website. Where required, we may notify you of significant changes through appropriate channels.