Website visitor and customer information text

KIGILI AZERBAIJAN LIMITED LIABILITY COMPANY

CONSENT TO THE PROCESSING OF PERSONAL DATA FOR WEBSITE USERS

This document is addressed to the users and customers (hereinafter – “Subject” or “User”) of the website (abdullahkigili.az) managed by “Kigili Azerbaijan” Limited Liability Company (TIN: 1309788751, registration address: Baku city, Zahid Khalilov street, house 18A, apartment 39; hereinafter – “Operator” or “Company”). The document has been prepared in accordance with the requirements of the Law of the Republic of Azerbaijan dated May 11, 2010, No. 998-IIIQ "On Personal Data" (hereinafter – "the Law").

When visiting the website, registering, joining as a member, shopping as a guest, using the “Whatsapp assistant” service, or contacting the Company through contact forms or other electronic communication means, the User becomes familiar with the following terms and expresses their consent by electronically ticking the relevant boxes (☐). Each consent is given independently and separately; the User has the right to tick only one, several, or all three boxes.

I. GENERAL PROVISIONS AND CONCEPTS

1.1. The main concepts used in this document express the meanings provided for in the Law, including:

  • Personal data – any information that allows direct or indirect identification of the Subject (name, surname, patronymic, date of birth, gender, phone number, email address, delivery address, IP address, browser and device information, order and payment information, account/membership information, etc.);

  • Processing of personal data – any operation or set of operations performed on personal data, including collection, recording, systematization, storage, clarification, updating, modification, extraction, use, transfer (including cross-border transfer), anonymization, blocking, and destruction;

  • Operator – the person who collects, processes, and protects personal data, i.e., "Kigili Azerbaijan" LLC;

  • Subject – a natural person whose personal data is collected, processed, and protected (website visitor, registered member, customer, guest buyer, or person contacting through contact forms);

  • Cross-border transfer – transfer of personal data to legal or natural persons, databases, or cloud infrastructure located outside the state borders of the Republic of Azerbaijan. Such cross-border transfer includes the Republic of Turkey, and countries located in Europe, Asia, and America.

1.2. Consents are given by the Subject on the basis of free will, purposefully, and knowingly. Consent is confirmed by electronically ticking (clicking) the relevant box and is equated to written consent in terms of the requirements of Article 8 of the Law.

1.3. The User may withdraw their consent at any time, without requiring any justification, by submitting a written application in free form to the email address info@abdullahkigili.az for consent withdrawal and requests. Withdrawal of consent and refusal of electronic communication can also be done via this link (https://abdullahkigili.az/pages/unsiyy%C9%99t).

II. PERSONAL DATA COLLECTED VIA THE WEBSITE

2.1. The Operator may collect and process the following categories of personal data provided by the User via the website or arising from the use of the site:

  • identity information: name, surname, patronymic, gender, date of birth;

  • contact information: mobile/landline phone number, email address, delivery and/or billing address, country, and city;

  • account/membership information: username, password (hashed), membership date, membership status, shopping history, cart, and wish list information;

  • guest shopping information: name, surname, delivery address, phone number, and email address necessary for order creation, invoicing, and delivery;

  • operational security information: IP address, browser and operating system information, device identifiers, log records, site visit history, data obtained through cookies and similar technologies. The Subject also familiarizes himself with and accepts the cookie policy located on the Operator's Cookie Policy page;

  • customer service information: correspondence and information provided via "Whatsapp assistant", contact form, feedback and suggestion form, name, surname, phone number, email address, content of the request, and attached information provided through order and delivery inquiry services;

  • marketing information: preferences regarding campaigns, discounts and bonuses, subscription status, choices for electronic communication channels (e-mail, SMS, WhatsApp, push notifications, etc.);

  • payment-related information, but not directly stored by the Operator: the payment operation is carried out through certified payment providers; the Operator only receives information at the level of the transaction result and order identifier.

2.2. The Operator collects personal data only to the extent necessary to achieve the stated purposes. However, the Operator does not purposefully collect special categories of personal data (information related to a natural person's racial or ethnic origin, family life, religious beliefs and convictions, health, or criminal record).

III. PURPOSES AND OPERATIONS OF PROCESSING

3.1. Personal data is processed for the following purposes:

  • ensuring the operation of the website, managing user sessions, taking security and anti-fraud measures;

  • creating and managing membership accounts, including guest purchases, accepting, invoicing, delivering, and returning orders;

  • providing customer services, receiving and responding to questions, requests and complaints, providing "Whatsapp assistant" service, communication via contact form and email;

  • improving service quality, statistical analyses (in anonymized form), functional development of the site, and improving user experience;

  • fulfillment of obligations arising from legislation, maintenance of accounting and tax records, responding to legitimate requests from authorized state bodies;

  • if separate consent is given - the Subject may be used by the Operator for marketing and promotional communications, sending notifications via email, WhatsApp messenger and SMS, including advertising information, marketing and promotional campaigns, exclusive offers, discounts and bonuses, invitations to Operator events and other advertising and informational messages. This information may also be used to confirm the Subject's identity when participating in Operator's events;

  • if separate consent is given - cross-border transfer of personal data to group companies, databases and service providers located in the Republic of Türkiye, as well as in countries located in Europe, Asia and America.

3.2. Operations carried out on personal data include collection, registration, systematization, storage, clarification, updating, modification, use, transfer, anonymization, blocking and destruction. Processing is carried out both by automated means and by non-automated methods, in accordance with the Operator's internal rules and the current legislation of the Republic of Azerbaijan.

IV. SECURITY AND CONFIDENTIALITY OBLIGATION

4.1. The Operator takes or ensures that necessary legal, organizational and technical measures are taken to prevent illegal or accidental access, destruction, alteration, blocking, copying, disclosure or other illegal actions of personal data by third parties.

4.2. The Operator and its authorized employees, as well as processors engaged on a contractual basis (data processors), protect the confidentiality of the Subject's personal data both during the period of activity and after the termination of relevant legal relations.

4.3. The transfer of personal data to third parties is carried out only (i) with the consent of the Subject, (ii) in cases directly provided by law, or (iii) for the purpose of protecting the life and health of the Subject.

V. TERM OF CONSENT, STORAGE AND DESTRUCTION

5.1. This consent comes into force from the moment the relevant box is electronically marked by the Subject and remains valid for a period of 5 (five) years, provided that if the retention periods determined by tax, accounting and other legislation are longer, the relevant data is stored only for the purpose of fulfilling those obligations.

5.2. Upon expiration of the consent period, early withdrawal of consent by the Subject, or death of the Subject, or when the purpose of processing ceases to exist, the Operator undertakes to delete and destroy (except in cases where mandatory retention is required by law) personal data stored on the basis of that consent from all Operator databases and written/electronic carriers within 10 (ten) working days.

5.3. Withdrawal of a specific consent block (e.g., marketing or cross-border transfer) does not affect the validity of consents and relevant processing for other blocks.

VI. RIGHTS OF THE SUBJECT

6.1. The Subject has the following rights in accordance with Article 7 of the Law:

  • to receive information about the existence of personal data concerning him/her, its owner and operator;

  • to learn the legal basis, purpose, term, methods of processing and the circle of persons obtaining the data;

  • to get acquainted with the content of personal data collected about him/her;

  • to demand the clarification, destruction or archiving of personal data, except in cases provided by law;

  • to demand the prohibition of the collection and processing of personal data, as well as to withdraw consent;

  • to receive information about the sources of acquisition of personal data and proof of its legality;

  • to demand the protection of personal data and information about the conformity certificate of the relevant information system;

  • to complain to the relevant executive authority or court in cases where his/her rights have been violated, to demand compensation for damages.

6.2. The Subject exercises the above rights by sending a written application to the e-mail address info@abdullahkigili.az or by submitting an electronic document with an enhanced electronic signature. The Operator responds to the request within 7 (seven) working days.

VII. INDEPENDENT CONSENT BLOCKS

The following two consent blocks are technically independent of each other. The user has the option to check a separate box for each block on the website. Failure to give consent to marketing communication does not affect the use of the website or the fulfillment of the order. However, failure to give consent to the processing and cross-border transfer of personal data in the Republic of Azerbaijan makes the technical implementation of the service impossible (for example, due to the location of the relevant system infrastructure in the Republic of Turkey and other foreign countries).

Consent Block № 1 – Processing of personal data in Azerbaijan (collection, use, storage, protection and processing) and cross-border transfer of personal data to foreign countries

I, by my free will and in my own interests, give consent to the collection, registration, systematization, storage, clarification, updating, use, protection, anonymization, blocking and destruction of my personal data – provided by me within the scope of my activity on the website and automatically generated – within the categories and purposes specified in sections II and III above, by "Kigili Azerbaycan" LLC within the territory of the Republic of Azerbaijan. This consent covers processing necessary for order fulfillment, membership account management, customer service, fulfillment of legal obligations and ensuring website security.

I also freely and voluntarily, in accordance with Article 14 of the Law, give my consent to the cross-border transfer of my personal data by "Kigili Azerbaycan" LLC to group companies, databases (including cloud infrastructure), authorized processors and service providers located in the Republic of Turkey, Europe, Asia and America. The purposes of such transfer are: processing and storage, system management and technical support, CRM and customer relationship management, customer service, order and membership information processing, website hosting and infrastructure support. The Operator ensures the security and confidentiality of personal data at a level consistent with the Law during cross-border transfer, and applies appropriate contractual guarantees with recipient parties.

I have been informed that I can withdraw this consent at any time by clicking on the "unsubscribe" link ([link]) at the end of electronic communications or by sending a free-form written application to the e-mail address info@abdullahkigili.az with the provided information.

a) I consent to the collection, use, storage, protection and processing of my personal data within the Republic of Azerbaijan, and b) I consent to the cross-border transfer of my personal data to entities located in the Republic of Turkey, Europe, Asia and America for the purposes indicated above.

Consent Block № 2 – Marketing-purpose processing and e-commerce communication

I hereby freely and voluntarily consent to the processing of my personal data by "Kigili Azerbaijan" LLC for marketing purposes and to receiving commercial notifications, including advertisements, campaigns, discounts, bonuses, exclusive offers, product recommendations, surveys, and similar content, via email, SMS, WhatsApp, phone calls, push notifications, and other electronic communication channels. Failure to give or withdrawal of this consent does not affect the fulfillment of orders or the use of the website. I have been informed that I can withdraw this consent at any time by sending a written application in free form to the email address info@abdullahkigili.az located at the end of electronic communications.

I consent to processing for marketing purposes and receiving electronic commercial communications (email, SMS, WhatsApp, calls, push notifications, etc.).

VIII. CONFIRMATION OF ELECTRONIC CONSENT

By electronically marking the relevant box in this document, the Subject confirms that: (i) they have familiarized themselves with and understood the conditions stated above; (ii) they have given the relevant consent block/blocks of their own free will; (iii) the information provided by the Operator has been delivered to them; (iv) the consent given is equivalent to written consent. Failure to mark the box for any consent block means that consent has not been given for that block.