Amazon Data Privacy and Handling Policy
Amazon Data Privacy and Handling Policy
Company: ISTEK SERVIS EGITIM TIC. A.S. (istekle.com)
Data Collection: Amazon Information is obtained only through the Amazon Selling Partner API (SP-API) for orders placed on our company’s own Amazon.com.tr seller account. We do not obtain Amazon Information from any other source.
Processing and Use: Amazon Information is used solely for order management, warehouse operations (picking, packing, shipping), inventory synchronization, legally required e-Archive/e-Invoice issuance and financial reconciliation. It is never used for marketing, profiling or resale.
Storage and Security: Amazon Information is stored in Turkey (İHS Telekom data center). It is encrypted in transit (TLS 1.2 or higher) and at rest (AES-256), and encryption keys are held in a dedicated key management system. Access is role-based and limited to authorized personnel with unique named accounts and multi-factor authentication.
Sharing: Amazon Information is shared only with the following parties, under contracts with confidentiality and data protection terms:
- Logo Elektronik (eLogo), our GİB-licensed e-invoice provider, to issue legally required invoices
- Yurtiçi Kargo, for delivery of self-fulfilled orders
- İHS Telekom, for hosting only, with no access to the data
Retention and Deletion: Buyer personal data is automatically deleted from our systems, including backups, within 30 days after shipment. Legally required invoice archives are retained by the licensed e-invoice provider as required by Turkish tax law.
Data Classification and Records: Data is classified as Confidential-PII, Internal or Public. Records of processing activities are maintained in line with the Turkish Personal Data Protection Law (KVKK, Law No. 6698).
Security Incidents: Security incidents are handled under our documented incident response plan, which is reviewed every 6 months. Incidents involving Amazon Information are reported to Amazon at security@amazon.com within 24 hours of detection.
Contact: Serkan Can, Information Security Officer, serkan.can@istek.org.tr
