Privacy Policy
This page covers the Online Tarım mobile app and onlinetarim.com. Last updated: September 10, 2026.
Controller and contact
The data controller is Online Tarım (Ataköy, İstanbul, Türkiye). For all privacy questions and requests: info@onlinetarim.com. See the KVKK Data Protection Notice for the detailed statutory disclosure.
Information processed
The name, email, phone number, profile photo and delivery address you provide are used for account management, communication and orders. Order, payment-result and transaction records support purchases and customer service. Farm, product and cultivation information is used to provide the relevant management features.
Technical information
Service access may generate IP address, session and security records. Enabling notifications uses a device push token to deliver them. Language and appearance preferences may be stored on your device.
Cookies and local storage
The website uses no advertising or tracking cookies. Strictly necessary cookies for session security, along with your language and appearance preferences, are kept in your browser’s local storage. You can clear them in your browser settings; blocking strictly necessary cookies may prevent signing in to the management panel. Embedded YouTube or similar third-party content may set its own cookies when opened.
Device permissions
Permission is requested when selecting or taking a profile photo. You can change permissions in device settings. Optional Face ID or fingerprint sign-in uses the operating system; the app does not access biometric templates. Sign-in information is kept in secure device storage. The app requests no location permission and does not process location data. Identity verification based on national ID number, identity documents, NFC or selfie/liveness data is disabled and its server endpoints are switched off.
Sharing
Information necessary to fulfil an order may be shared with the relevant seller, delivery and payment services. Hosting, email and notification infrastructure may process data to operate the service. Payment is collected through a PCI-DSS compliant licensed payment institution; card details are not stored by us and reach us only in masked form. The payment provider’s terms also apply to its payment interface. Opening YouTube or other third-party website content may disclose technical information to that service. Personal data is not sold or rented for advertising.
Security
Data is encrypted in transit with TLS; sensitive fields are stored encrypted or hashed on the server. Access is limited by authorisation and tenant separation, and administrative actions are logged. In the event of a data breach, affected users and the competent authority are notified within the statutory period.
Retention and deletion
Account information is retained while needed for the service. Transaction records are retained for applicable obligations and dispute resolution. Data no longer needed is deleted or anonymised. A deletion request does not mean that records subject to retention obligations can be removed immediately. To delete your account entirely, follow the steps on the Account Deletion page.
Children
The service is not intended for people under 18 and children’s data is not knowingly collected. If you believe a child’s data has been processed, contact info@onlinetarim.com and the records will be deleted.
Your choices
You can update account information in the app and revoke device permissions. Write to info@onlinetarim.com to request access, correction, deletion or information about processing; requests are answered within 30 days at the latest. Appropriate identity verification may be requested. Your statutory rights and remedies remain available.
Changes
This page is updated when processing practices change, together with the update date. Uses requiring new permission or consent receive separate notice.