Privacy Policy

1. Data Controller

AGACAN TARIM GIDA TURİZM SANAYİ VE TİCARET LİMİTED ŞİRKETİ acts as data controller under Turkish Personal Data Protection Law No. 6698 ("KVKK") and applicable international data protection standards. The company is the registered legal operator of the Mazima humanitarian aid and development platform at mazima.org. This privacy policy explains our practices regarding personal data collected during donation transactions on that platform.

2. Personal Data Collected

During donation transactions, the following personal data is collected:

• Identity data: Full name
• Contact data: Email address, phone number (optional)
• Address data: Street, city, country, postal code
• Payment data: All card transactions are processed by iyzico Payment Services Inc. through their PCI-DSS certified infrastructure. Sensitive card data (card number, security code) is never received or stored by Mazima.
• Transaction data: Donation amount, selected program, transaction date and iyzico reference number

3. Purpose and Legal Basis for Processing

4. Data Retention

• Donation and transaction records: 10 years (per tax and accounting legislation)
• Contact and identity data: 3 years or until consent is withdrawn
• Payment transaction records: Subject to iyzico's retention policy; Mazima retains only the transaction reference number

5. Data Sharing

Your personal data may be shared with:

• iyzico Payment Services Inc.: For payment processing
• Competent public authorities: As required by applicable law

International data transfers are only carried out within the framework of Article 9 of KVKK and with adequate safeguards in place.

6. Your Rights

You may exercise the following rights by contacting the data controller at info@agacangroup.com:

• Learn whether your personal data is being processed
• Request information about processed data
• Learn the purpose of processing and whether data is used accordingly
• Know third parties to whom data has been transferred
• Request correction of incomplete or inaccurate data
• Request deletion or destruction of data under applicable conditions
• Request notification of corrections/deletions to third parties
• Object to decisions made solely through automated processing
• Claim compensation for damages caused by unlawful processing

7. Contact

For questions about our data practices, please contact us: