Information Society Service

"KIGILI AZERBAIJAN" LIMITED LIABILITY COMPANY

CONSENT TO THE PROCESSING OF PERSONAL DATA FOR THE WEBSITE USER

This document is addressed to users and customers (hereinafter – "Subject" or "User") of the website (abdullahkigili.az) managed by "Kigili Azerbaijan" Limited Liability Company (TIN: 1309788751, registration address: Baku city, Zahid Khalilov street, house 18A, apartment 39; hereinafter – "Operator" or "Company"). The document has been prepared in accordance with the requirements of the Law of the Republic of Azerbaijan "On Personal Data" dated May 11, 2010, No. 998-IIIQ (hereinafter – "the Law").

When visiting the website, registering, becoming a member, shopping as a guest, using the "Whatsapp assistant" service, contacting the Company through contact forms or other electronic communication means, the User becomes acquainted with the following terms and expresses their consent by electronically marking the relevant boxes (☐). Each consent is given independently and separately; the User has the right to mark only one, several, or all three boxes.

I. GENERAL PROVISIONS AND CONCEPTS

1.1. The main concepts used in this document express the meanings provided for in the Law, including:

  • Personal data – any information that allows direct or indirect identification of the Subject (name, surname, patronymic, date of birth, gender, phone number, email address, delivery address, IP address, browser and device information, order and payment information, account/membership information, etc.);

  • Processing of personal data – any operation or set of operations performed on personal data, including collection, recording, systematization, storage, refinement, updating, modification, extraction, use, transfer (including cross-border transfer), anonymization, blocking, and destruction;

  • Operator – the person who collects, processes, and protects personal data, i.e., "Kigili Azerbaijan" LLC;

  • Subject – a natural person whose personal data is collected, processed, and protected (a website visitor, registered member, customer, guest buyer, or a person contacting through contact forms);

  • Cross-border transfer – the transfer of personal data to legal or natural persons, databases, or cloud infrastructure located outside the state border of the Republic of Azerbaijan. Such cross-border transfer includes the Republic of Turkey, and countries located in the continents of Europe, Asia, and America.

1.2. Consents are given by the Subject on a voluntary basis, purposefully and knowingly. Consent is confirmed by electronic marking (clicking) the relevant box and is considered equivalent to written consent in terms of the requirements of Article 8 of the Law.

1.3. The User may withdraw their consent at any time, without any justification required, by sending a written application in free form to the email address info@abdullahkigili.az for consent withdrawal and requests, and stating their wish. Withdrawal of consent and refusal of electronic communication can also be done via this link (https://abdullahkigili.az/pages/unsiyy%C9%99t).

II. PERSONAL DATA COLLECTED THROUGH THE WEBSITE

2.1. The Operator may collect and process the following categories of personal data provided by the User through the website or generated as a result of using the website:

  • identity data: name, surname, patronymic, gender, date of birth;

  • contact data: mobile/landline phone number, email address, delivery and/or billing address, country and city;

  • account/membership data: username, password (in hashed format), membership date, membership status, purchase history, cart and wish list information;

  • guest shopping data: name, surname, delivery address, phone number, and email address necessary for order creation, invoicing, and delivery;

  • operational security data: IP address, browser and operating system information, device identifiers, log records, website visit history, data obtained through cookies and similar technologies. The Subject also familiarizes themselves with and accepts the cookie policy located on the Operator's Cookie Policy page;

  • customer service data: correspondence and information provided via "Whatsapp assistant", contact form, feedback and suggestion form, name, surname, phone number, email address, content of the request and attached information provided via order and delivery inquiry services;

  • marketing data: preferences regarding campaigns, discounts and bonuses, subscription status, choices regarding electronic communication channels (e-mail, SMS, WhatsApp, push notifications, etc.);

  • payment-related data, but not directly stored by the Operator: payment operations are carried out through certified payment providers; the Operator only receives information at the level of the transaction result and order identifier.

2.2. The Operator collects personal data only to the extent necessary to achieve the stated purposes. However, the Operator does not purposefully collect special category personal data (information related to a natural person's racial or ethnic origin, family life, religious beliefs and convictions, health, or criminal record).

III. PURPOSES AND OPERATIONS OF PROCESSING

3.1. Personal data is processed for the following purposes:

  • ensuring the operation of the website, managing user sessions, taking security and anti-fraud measures;

  • creating and managing membership accounts, receiving, invoicing, delivering, and returning orders, including guest purchases;

  • providing customer services, receiving and responding to questions, requests, and complaints, providing "Whatsapp assistant" service, communication via contact form and email;

  • improving service quality, statistical analysis (anonymized data), functional development of the site, and enhancing user experience;

  • fulfillment of obligations arising from legislation, maintenance of accounting and tax records, responding to legitimate requests from authorized state bodies;

  • if separate consent is given - may be used by the Operator for marketing and promotional communication with the Subject, sending notifications via email, Whatsapp messenger and SMS, including advertising information, marketing and promotional campaigns, exclusive offers, discounts and bonuses, invitations to the Operator's events and other advertising and informational messages. This information may also be used to confirm the Subject's identity when participating in the Operator's events;

  • if separate consent is given - cross-border transfer of personal data to group companies, databases and service providers located in the Republic of Turkey, as well as in countries located in Europe, Asia and America.

3.2. Operations carried out on personal data include collection, registration, systematization, storage, clarification, updating, modification, use, transfer, anonymization, blocking, and destruction. Processing is carried out both by automated means and non-automated methods, in accordance with the Operator's internal rules and the current legislation of the Republic of Azerbaijan.

IV. SECURITY AND CONFIDENTIALITY OBLIGATION

4.1. The Operator takes or ensures that necessary legal, organizational, and technical measures are taken to prevent unlawful or accidental access, destruction, alteration, blocking, copying, disclosure, or other unlawful actions by third parties with respect to personal data.

4.2. The Operator and its authorized employees, as well as processors (data processors) engaged on a contractual basis, maintain the confidentiality of the Subject's personal data both during the period of activity and after the termination of relevant legal relations.

4.3. The transfer of personal data to third parties is carried out only (i) with the consent of the Subject, (ii) in cases directly provided for by law, or (iii) for the purpose of protecting the life and health of the Subject.

V. TERM OF CONSENT, STORAGE, AND DESTRUCTION

5.1. This consent comes into effect from the moment the Subject electronically marks the relevant box and remains valid for a period of 5 (five) years, provided that if the retention periods established by tax, accounting, and other legislation are longer, the relevant data is retained only for the purpose of fulfilling those obligations.

5.2. Upon expiration of the consent period, early withdrawal of consent by the Subject, or upon the death of the Subject or cessation of the purpose of processing, the Operator undertakes to delete and destroy (except in cases where mandatory retention is required by law) the personal data stored under that consent from all Operator's databases and written/electronic carriers within 10 (ten) business days.

5.3. The withdrawal of consent for a specific block (e.g., marketing or cross-border transfer) does not affect the validity of consents for other blocks and the corresponding processing.

VI. RIGHTS OF THE SUBJECT

6.1. The Subject has the following rights in accordance with Article 7 of the Law:

  • to receive information about the existence of personal data concerning them, and about its owner and operator;

  • to learn the legal basis, purpose, duration, methods of processing, and the circle of persons who obtain the data;

  • to get acquainted with the content of personal data collected about them;

  • to demand the clarification, destruction, or archiving of personal data, except in cases provided for by law;

  • to demand a ban on the collection and processing of personal data, and to withdraw consent;

  • to receive information about the sources of personal data and proof of their legality;

  • to demand the protection of personal data and information about the compliance certificate of the relevant information system;

  • to complain to the relevant executive authority or court in cases where their rights are violated, and to demand compensation for damages.

6.2. The Subject exercises the above rights by sending a written application to the email address info@abdullahkigili.az or by submitting an electronic document with an enhanced electronic signature. The Operator responds to the inquiry within 7 (seven) business days.

VII. INDEPENDENT CONSENT BLOCKS

The following two consent blocks are technically independent of each other. The user has the option to mark a separate box for each block on the website. Not giving consent to marketing communications does not affect the use of the website or the fulfillment of an order. However, not giving consent to the processing and cross-border transfer of personal data in the Republic of Azerbaijan makes the technical execution of the service impossible (for example, due to the location of the relevant system infrastructure in the Republic of Turkey and other foreign countries).

Consent Block № 1 – Processing of personal data in Azerbaijan (collection, use, storage, protection, and processing) and cross-border transfer of personal data to foreign countries

I, of my free will and in my own interest, hereby give my consent to the collection, registration, systematization, storage, clarification, updating, use, protection, anonymization, blocking, and destruction of my personal data – provided within the framework of my activities on the website and automatically generated – within the territory of the Republic of Azerbaijan, by "Kigili Azerbaijan" LLC, within the categories and purposes specified in sections II and III above. This consent covers processing necessary for order fulfillment, membership account management, customer service provision, fulfillment of legal obligations, and ensuring website security.

I also freely and voluntarily, in accordance with Article 14 of the Law, give my consent to the cross-border transfer of my personal data by "Kigili Azerbaijan" LLC to group companies, databases (including cloud infrastructure), authorized processors, and service providers located in the Republic of Turkey, and in countries located in Europe, Asia, and America. The purposes of such transfer are: processing and storage, system management and technical support, CRM and customer relationship management, customer service, order and membership data processing, website hosting and infrastructure support. The Operator ensures the security and confidentiality of personal data during cross-border transfer at a level compliant with the Law, and applies appropriate contractual guarantees with the receiving parties.

I have been informed that I can withdraw this consent at any time by accessing the "unsubscribe" link ([ link ]) at the end of the electronic communication or by sending a free-form written application with the necessary information to the email address info@abdullahkigili.az.

a) I consent to the collection, use, storage, protection, and processing of my personal data within the territory of the Republic of Azerbaijan, and b) I consent to the cross-border transfer of my personal data to entities located in the Republic of Turkey, and in countries located in Europe, Asia, and America, for the purposes stated above.

Consent Block № 2 – Marketing-purpose processing and electronic commercial communication

I, freely and voluntarily, consent to the processing of my personal data by "Kigili Azerbaycan" LLC for marketing purposes and to receive commercial notifications – such as advertisements, campaigns, discounts, bonuses, exclusive offers, product recommendations, surveys, and similar content – via email, SMS, WhatsApp, phone call, push notifications, and other electronic communication channels. Failure to give or withdrawal of this consent does not affect the fulfillment of orders or the use of the website. I have been informed that I can withdraw this consent at any time by sending a free-form written application to the email address info@abdullahkigili.az provided at the end of electronic communications.

I consent to marketing-oriented processing and receiving electronic commercial communications (email, SMS, WhatsApp, call, push notifications, etc.).

VIII. CONFIRMATION OF ELECTRONIC CONSENT

By electronically checking the corresponding box in this document, the Subject confirms that: (i) they have read and understood the above conditions; (ii) they have given the relevant consent block(s) on a voluntary basis; (iii) the information provided by the Operator has reached them; (iv) the consent given is considered equivalent to written consent. Failure to check the box for any consent block means that consent has not been given for that block.