1. Introduction

This Privacy Policy (the "Policy") establishes the rules for the collection, processing, storage, protection, and sharing of users' personal data.

This policy has been prepared taking into account the basic principles of the Law of the Republic of Azerbaijan "On Personal Data", other applicable normative legal acts, as well as the European Union General Data Protection Regulation (GDPR).

By using the site or our services, you confirm that you have read this policy and accept the terms set forth herein.

2. Data Controller

The organization responsible for the processing of personal data:

• Legal Entity: KİTABEVİM AZ MMC
• TIN (VÖEN): 3103025451
• Legal Address: Nasimi district, 32A Pushkin street
• Email: info@kitabevim.az
• Phone: +994 12 498 79 89 / +994 55 877 24 44
• Privacy Inquiries: info@kitabevim.az

3. Collected Data

The following data may be collected while using our services.

3.1 Data Provided by the User

• Name and surname
• Patronymic (if necessary)
• Email address
• Phone number
• Delivery address
• Billing information
• Company details
• Username
• Profile picture
• Messages and inquiries
• Contract and order details

3.2 Automatically Collected Data

• IP address
• Browser type
• Operating system
• Language settings
• Access date and time
• Pages visited
• Click data
• Referrer information
• Session identifiers
• Cookie identifiers

3.3 Payment Data

Payment card information, where applicable, is processed directly by licensed payment service providers. The site does not store full card numbers, CVV codes, or PIN data.

4. Purposes of Data Processing

Personal data is processed for the following purposes:

• User account creation
• Execution of contracts
• Order processing
• Acceptance of payments
• Providing technical support
• Implementation of security measures
• Fraud prevention
• Communicating with the user
• Fulfillment of legal obligations
• Development of services
• Analytics
• Marketing (only with consent)
• Defense of legal claims

5. Legal Basis for Processing (GDPR)

Personal data may be processed on the following legal bases:

• User consent
• Execution of a contract
• Fulfillment of a legal obligation
• Protection of vital interests
• Public interest
• Legitimate interests

6. Cookies

The site may use the following types of cookies:

• Strictly Necessary Cookies: Essential for the functioning of the site.
• Analytical Cookies: Used to collect usage statistics.
• Functional Cookies: Remember user preferences.
• Marketing Cookies: Used to deliver advertising and personalized content only based on user consent.

The user can manage or delete cookies through their browser settings.

7. Data Sharing

Personal data may be shared with:

• Payment systems
• Delivery companies
• Cloud services
• Hosting providers
• Analytics services
• Law enforcement agencies (when required by law)
• Other government authorities based on a court order

Under no circumstances is personal data sold.

8. International Data Transfer

Personal data may be processed on servers or by service providers located outside the Republic of Azerbaijan.

During such transfers, the following are applied:

• GDPR requirements
• Standard Contractual Clauses (SCC)
• Adequate protection mechanisms

9. Retention Period

Data is retained only for the following periods:

• For the duration of the contract
• For the period required by law
• Until legal disputes are resolved
• For as long as a legitimate basis exists after the user account is deleted

Upon expiration of this period, the data is deleted or anonymized.

10. Security Measures

The following measures are taken to protect personal data:

• SSL/TLS encryption
• Database protection
• Restriction of access rights
• Audit logs
• Security monitoring
• Creation of backups
• Confidentiality obligations of employees

However, absolute security of data transmitted over the internet cannot be guaranteed.

11. User Rights

The user has the following rights:

• To obtain information
• To receive a copy of their data
• To request correction of data
• To request deletion of data
• To request restriction of processing
• To request data portability
• To withdraw consent
• To object to automated decisions
• To opt out of marketing messages

12. Children's Data

The services are not intended for persons under the age of 18.

If a parent or legal guardian discovers that data belonging to a child has been provided, they may contact us, and such data will be deleted.

13. External Links

The site may contain links to third-party internet resources.

We bear no responsibility for the privacy policies of these resources.

14. Analytics and Third-Party Services

The site may use the following services:

• Google Analytics
• Google Tag Manager
• Meta Pixel
• Microsoft Clarity
• Stripe
• PayPal
• Other integrated services

These services operate in accordance with their own privacy policies.

15. Marketing Communication

With the user's consent, the following may be sent:

• Updates
• Campaigns
• Discounts
• Product updates

The user may unsubscribe at any time.

16. Data Breaches

In the event of a serious incident affecting the security of personal data:

• Relevant state authorities are notified where required by law.
• Affected users are notified without delay when necessary.

17. Changes to the Policy

This Privacy Policy may be updated from time to time.

The new version takes effect from the date of its publication on the site.

18. Contact

For questions regarding the privacy policy and the processing of personal data:

• Email: info@kitabevim.az
• Address: Nasimi district, 32A Pushkin street
• Phone: +994 12 498 79 89

Inquiries are reviewed within the timeframes stipulated by law.