Data Subject Application Form
Last Updated: 4 September 2026
This Data Subject Application Form has been prepared for individuals who wish to exercise their personal data rights regarding the processing of personal data by The Goatz through the website thegoatz.co, online orders, customer communication, payment processes, shipping and delivery processes, returns, refunds, customs procedures, marketing communications and related services.
This Form may be used by users, visitors, customers, prospective customers and other natural persons whose personal data is processed by The Goatz.
This Form has been prepared in accordance with the Turkish Personal Data Protection Law No. 6698, also known as KVKK, and, where applicable, with international privacy rules such as the European Union General Data Protection Regulation, the United Kingdom General Data Protection Regulation and other mandatory privacy laws that may apply depending on the applicant’s country of residence.
Nothing in this Form limits any mandatory privacy rights that cannot legally be waived under applicable law.
1. Data Controller Information
Data Controller: Seçil TÜREDİ
Brand / Website: The Goatz / thegoatz.co
Tax Office: Çanakkale Tax Office
Tax Identification Number: 53659508922
MERSIS Number: Not applicable / not available
Address: Medrese Sokak, No: 1, Office: 2, Fevzipaşa Mahallesi, 17100 Çanakkale, Turkey
Email: [email protected]
Phone: +90 544 569 89 85
Registered Electronic Mail Address: [email protected]
2. Purpose of This Form
The purpose of this Form is to help the applicant submit a clear, complete and verifiable request regarding their personal data.
The applicant may use this Form to request information about whether personal data is processed, to request access to personal data, to request correction of inaccurate or incomplete data, to request deletion, destruction or anonymization where legally possible, to object to certain processing activities, to withdraw consent where processing is based on consent, to request information about recipients of personal data, to request restriction of processing where applicable, to request data portability where applicable, or to submit another legally recognized privacy request.
The applicant is not required to use this exact Form. However, using this Form may help ensure that the request contains the information required to identify the applicant, verify the request and respond properly.
3. Application Methods
The applicant may submit this Form or an equivalent written request to the Data Controller through one of the methods permitted by applicable law.
Written application by post or hand delivery may be sent to the following address: Seçil TÜREDİ, Medrese Sokak, No: 1, Office: 2, Fevzipaşa Mahallesi, 17100 Çanakkale, Turkey.
Applications through registered electronic mail may be sent to: [email protected].
Applications by email may be sent to: [email protected]. If the request is submitted by email under Turkish law, the applicant should preferably use the email address previously provided to and registered with The Goatz, where applicable.
Applications may also be submitted through secure electronic signature, mobile signature or a software/application developed for application purposes, if such methods are available and legally recognized.
The subject line of the application may be written as: Data Subject Application Request.
4. Applicant Identity Information
Full Name:
Nationality:
Turkish Identification Number, for Turkish citizens:
Passport Number or Foreign Identification Number, for non-Turkish citizens:
Date of Birth, if needed for identity verification:
Country of Residence:
Signature, required only for written paper applications:
5. Applicant Contact Information
Email Address:
Phone Number:
Postal Address for Notification:
Preferred Response Method:
Please select one preferred response method: email, registered electronic mail, postal mail, or another legally accepted method.
6. Relationship With The Goatz
Please indicate your relationship with The Goatz so that your request can be identified and evaluated correctly.
I am a customer who placed an order through thegoatz.co.
I am a visitor of the website thegoatz.co.
I subscribed to marketing communications or newsletters.
I contacted The Goatz through email, contact form, social media or customer support channels.
I submitted a return, refund, complaint or defective product request.
I am a recipient or delivery contact for an order.
I am a supplier, business contact or other third party.
Other relationship:
7. Order or Transaction Information
If your request relates to an order, delivery, return, refund, payment, invoice or customs process, please provide the relevant information below.
Order Number:
Order Date:
Email Address Used for the Order:
Delivery Country:
Invoice Number, if available:
Tracking Number, if available:
Brief Description of the Transaction:
8. Personal Data Rights Request
Please specify the right or rights you wish to exercise. You may select one or more requests, depending on applicable law.
I want to learn whether my personal data is being processed.
I want to request information about the processing of my personal data.
I want to learn the purpose of processing and whether my personal data is used in accordance with that purpose.
I want to know the third parties to whom my personal data has been transferred domestically or internationally.
I want to request correction of incomplete or inaccurate personal data.
I want to request deletion, destruction or anonymization of my personal data where legally possible.
I want third parties to whom my personal data has been transferred to be notified of correction, deletion, destruction or anonymization, where applicable.
I want to object to a result against me arising from analysis of my personal data exclusively by automated systems, where applicable.
I want to request compensation if I have suffered damage due to unlawful processing of my personal data.
I want to withdraw my consent for processing activities based on consent.
I want to object to direct marketing communications.
I want to request restriction of processing, where applicable.
I want to request portability of my personal data, where applicable.
I want to opt out of sale, sharing or targeted advertising, where such rights apply under local law.
Other request:
9. Details of the Request
Please explain your request clearly and in sufficient detail.
Request Details:
Please include which personal data, processing activity, order, communication, account, delivery, invoice, marketing activity, cookie activity or other matter your request relates to.
If you request correction, please specify the inaccurate or incomplete information and provide the correct information.
If you request deletion, destruction or anonymization, please specify the personal data or processing activity your request relates to.
If you object to marketing communications, please specify the communication channel, such as email, SMS, phone or online advertising, where applicable.
10. Identity Verification
The Data Controller may request additional information or documents to verify the identity of the applicant and to prevent unauthorized access to personal data.
The applicant should not send unnecessary identity documents, payment card details, passwords, sensitive personal data or excessive information unless specifically requested and necessary for verification.
If the request is submitted by an authorized representative, the representative must provide valid proof of authorization, such as a notarized power of attorney or another legally accepted authorization document.
Requests that cannot be verified may be rejected or additional verification may be requested, in order to protect personal data security.
11. Special Categories of Personal Data
The applicant should not include special categories of personal data in this Form unless strictly necessary for the request.
Special categories of personal data may include data relating to health, biometric data, genetic data, religious belief, political opinion, union membership, criminal conviction or similar sensitive information under applicable law.
If special categories of personal data are voluntarily included in the request, such data will be processed only to the extent necessary to evaluate and respond to the request, comply with legal obligations, establish, exercise or defend legal rights, or where explicit consent is required and obtained under applicable law.
12. Response Period
The Data Controller will evaluate the request and respond within the period required by applicable law.
For requests subject to Turkish personal data protection law, the Data Controller will respond as soon as possible and no later than thirty days from receipt of the request, depending on the nature of the request.
For requests subject to GDPR, UK GDPR or other applicable privacy laws, the response period may be determined according to the relevant law.
If the request is incomplete, unclear or requires identity verification, the response period may begin or continue after the necessary information is provided, to the extent permitted by applicable law.
13. Fees
Applications are generally processed free of charge.
If responding to the request requires an additional cost, the Data Controller may request a fee in accordance with the tariff determined by the competent authority or applicable law.
If a fee is required, the applicant may be informed before the request is processed further, where required by applicable law.
14. Possible Outcomes of the Application
The Data Controller may accept the request and perform the requested action.
The Data Controller may partially accept the request and explain which parts have been fulfilled.
The Data Controller may reject the request by explaining the legal or factual reason for rejection.
The Data Controller may request additional information to verify the applicant’s identity or clarify the request.
The Data Controller may inform the applicant that the request cannot be fulfilled due to legal retention obligations, contractual necessity, tax and accounting requirements, customs obligations, consumer law obligations, legal claims, fraud prevention, security reasons or other lawful grounds.
15. Important Information About Deletion Requests
A deletion, destruction or anonymization request does not always require immediate deletion of all personal data.
The Data Controller may be required or permitted to retain certain personal data for legal reasons, including tax, accounting, invoice, commercial recordkeeping, customs, consumer law, delivery, return, refund, dispute resolution, fraud prevention, security or legal claim purposes.
Where complete deletion is not legally possible, the Data Controller may restrict processing, delete unnecessary data, anonymize data, or continue retaining only the data that must be retained under applicable law.
16. Important Information About Consent Withdrawal
If the applicant withdraws consent, the withdrawal will not affect the lawfulness of processing carried out based on consent before the withdrawal.
Withdrawal of consent does not prevent the Data Controller from processing personal data where another legal basis applies, such as contract performance, legal obligation, legitimate interests, establishment, exercise or defense of legal rights, or another lawful basis under applicable law.
17. Complaints
If the applicant is not satisfied with the response or believes that the request has not been handled in accordance with applicable law, the applicant may have the right to submit a complaint to the competent data protection authority, depending on applicable law.
For requests subject to Turkish personal data protection law, the applicant may have the right to lodge a complaint with the Turkish Personal Data Protection Authority after the data controller application process, subject to the procedures and periods set out under applicable law.
Users located in the European Economic Area, the United Kingdom or other countries may have the right to lodge a complaint with the competent supervisory authority in their country, where applicable.
18. Applicant Declaration
I declare that the information provided in this Data Subject Application Form is accurate, complete and up to date.
I understand that The Goatz may request additional information to verify my identity and protect personal data security.
I understand that submitting false, misleading, incomplete or unauthorized requests may cause legal responsibility.
I understand that my personal data provided through this Form will be processed for the purpose of receiving, verifying, evaluating and responding to my data subject request, fulfilling legal obligations and establishing, exercising or defending legal rights.
19. Applicant Signature
Full Name:
Date:
Signature: Required only for written paper applications.
20. Contact
For questions about this Form or personal data rights, applicants may contact the Data Controller through the following channels.
Email: [email protected]
Phone: +90 544 569 89 85
Registered Electronic Mail Address: [email protected]
Address: Medrese Sokak, No: 1, Office: 2, Fevzipaşa Mahallesi, 17100 Çanakkale, Turkey