Cookie Policy

Section 1 — Purpose and Scope

1.1 Purpose

This Cookie Policy has been prepared to inform Users about the cookies and similar technologies used on the DaDa Design Platform.

This Policy explains the purposes for which cookies are used, how the User can manage cookie preferences, and the basic principles under applicable data protection legislation.

1.2 Scope

This Policy applies to cookies and similar technologies used within the scope of:

• the Platform website,
• user accounts,
• order processes,
• digital delivery processes,
• payment processes,
• security systems

of the Platform.

1.3 Legal Basis

The use of cookies is carried out within the framework of:

• GDPR,
• ePrivacy rules,
• applicable national data protection legislation.

Cookies requiring explicit consent are used only after the necessary approvals have been obtained.

1.4 Consideration Together with the Privacy Policy

This Cookie Policy is an integral supplement to the DaDa Design Privacy Policy.

Detailed explanations regarding the processing of personal data are set out in the Privacy Policy.

Section 2 — Cookies and Similar Technologies

2.1 What Is a Cookie?

A cookie is a small data file that may be stored on the User’s device when the Platform is visited.

Cookies may be used to ensure that the Platform operates securely and efficiently, to remember User preferences, and to perform certain technical functions.

2.2 Similar Technologies

The Operator may use not only traditional cookies but also similar technologies serving the same purposes.

These technologies may include:

• session identifiers (Session ID),
• local storage (Local Storage),
• security tokens (Security Tokens),
• similar technical tools.

For the purposes of this Policy, unless otherwise stated, the term “cookie” also includes these technologies.

2.3 Purposes of Using Cookies

Cookies and similar technologies may be used for the following purposes:

• operating the Platform securely,
• managing user sessions,
• carrying out the order process,
• ensuring the security of payment transactions,
• remembering user preferences,
• detecting technical errors,
• measuring performance,
• preventing fraud and misuse.

2.4 Personal Data Character

Information obtained through certain cookies or similar technologies may constitute personal data under applicable data protection legislation.

In such case, the relevant data are processed in accordance with the principles set out in the DaDa Design Privacy Policy.

Section 3 — Types of Cookies Used

3.1 General Principle

The Platform may use only cookies and similar technologies necessary for providing the service, ensuring security, and improving the user experience.

The cookies used may be classified into the following categories according to their purposes.

3.2 Strictly Necessary Cookies

These are cookies necessary for the Platform to operate.

These cookies enable basic functions such as:

• managing the user session,
• security checks,
• login processes,
• the order process,
• payment transactions,
• the digital delivery process.

If these cookies are disabled, some parts of the Platform may not function properly.

3.3 Security Cookies

Security cookies may be used for the purposes of:

• preventing unauthorised access attempts,
• ensuring account security,
• reducing the risk of fraud,
• protecting session security.

Security cookies and similar technical mechanisms may be used for the purposes of preventing fraud, detecting unauthorised payment attempts, ensuring account security, and preventing misuse of the Platform.

3.4 Preference Cookies

These cookies may enable choices such as the following to be remembered:

• language selection,
• user preferences,
• display settings.

3.5 Analytics and Performance Cookies

Analytics cookies may be used to evaluate the performance of the Platform, detect technical errors, and improve service quality.

Analytics cookies that require explicit consent under applicable legislation are activated only after the User’s consent has been obtained.

3.6 Third-Party Cookies

Certain independent service providers used within the Platform may use cookies or similar technologies within their own technical infrastructures.

These cookies are subject to the relevant service provider’s own privacy and cookie policies.

Section 4 — Strictly Necessary Cookies and Technologies Not Requiring Explicit Consent

4.1 General Principle

Cookies and similar technologies necessary for the secure operation of the Platform and for providing services expressly requested by the User may be used.

To the extent necessary under applicable legislation, these cookies may not be subject to the User’s explicit consent.

4.2 Purposes of Use

Strictly necessary cookies may be used for the following purposes:

• managing the user session,
• carrying out authentication processes,
• ensuring account security,
• completing the order process,
• carrying out digital delivery processes,
• enabling payment transactions to be carried out securely,
• protecting system security,
• preventing technical errors.

4.3 Technologies Used for Security Purposes

For the purpose of ensuring Platform security, the following may be used:

• session identifiers,
• security tokens,
• authentication mechanisms,
• similar technical security tools.

These technologies are applied to the extent necessary for the Platform to operate securely.

4.4 User Preferences

Necessary technical records may be created in order to preserve certain choices made by the User.

These records may be used for providing services requested by the User, such as:

• language preference,
• session information,
• security preferences.

4.5 Disabling Cookies

The User may restrict or disable cookies through browser settings.

However, if strictly necessary cookies or similar technical mechanisms are disabled, some Platform services may not function fully or partially.

4.6 Data Protection

Personal data obtained through cookies and similar technologies used under this Section are processed in accordance with the DaDa Design Privacy Policy.

Section 5 — Cookies Requiring Explicit Consent

5.1 General Principle

Cookies and similar technologies that require explicit consent under applicable legislation are used only in accordance with the User’s prior explicit consent.

5.2 Purposes of Use

Cookies subject to explicit consent may be used for the following purposes:

• analysing the performance of the Platform,
• improving the user experience,
• improving service quality,
• carrying out statistical evaluations,
• other purposes permitted by applicable legislation.

5.3 Management of Cookie Preferences

The User may change or withdraw preferences relating to cookies subject to explicit consent at any time through the cookie management tool provided on the Platform.

Withdrawal of explicit consent does not affect the lawfulness of data processing activities carried out before the date of withdrawal.

The User’s withdrawal of explicit consent does not affect strictly necessary technical cookies or data processing activities that do not require explicit consent under applicable legislation.

5.4 Refusal to Give Consent

If the User does not accept cookies requiring explicit consent or subsequently disables them, the relevant services or features other than strictly necessary technical cookies may function partially or not at all.

5.5 Relationship with the Privacy Policy

Personal data obtained through cookies subject to explicit consent are processed in accordance with the principles set out in the DaDa Design Privacy Policy.

Section 6 — Third-Party Cookies and Service Providers

6.1 General Principle

Certain services used within the Platform may be provided by independent third-party service providers.

Within the scope of these services, the relevant providers may use cookies or similar technologies in accordance with their own technical infrastructures.

The Operator aims to exercise reasonable care when selecting third-party service providers. However, it does not have direct control over the independent third-party service providers’ own systems, cookie practices, or data processing activities.

6.2 Purposes of Use

Third-party technologies may be used for the following purposes:

• carrying out payment transactions,
• ensuring system security,
• operating the technical infrastructure,
• improving performance,
• providing other technical services permitted by applicable legislation.

6.3 Data Processing

Data processing activities carried out by third-party service providers are subject to the relevant service provider’s own privacy and cookie policies.

The Operator exercises reasonable care when selecting service providers and takes applicable data protection obligations into account.

6.4 User Information

Where required by applicable legislation, the Operator provides the necessary information and explicit-consent processes relating to third-party cookies through the Platform.

6.5 Scope of the Policy

This Policy relates only to the use of cookies by the DaDa Design Platform.

If the User is redirected to third-party websites or services, the relevant service provider’s own legal documents apply.

Section 7 — Management of Cookie Preferences

7.1 Cookie Preferences

The User may change, update, or withdraw preferences relating to cookies requiring explicit consent at any time through the cookie management tool provided on the Platform.

7.2 Browser Settings

The User may restrict, delete, or completely disable cookies through the settings of the internet browser used.

However, disabling strictly necessary technical cookies may cause some Platform services to function partially or not at all.

7.3 Withdrawal of Explicit Consent

The User may withdraw explicit consent at any time with effect for the future.

Withdrawal of explicit consent does not affect data processing activities lawfully carried out before the date of withdrawal.

7.4 Updating Preferences

The Operator endeavours to reflect the User’s current cookie preferences in its technical systems as soon as possible.

In order for certain changes to take effect, the User may need to restart the browser or end the current session.

Section 8 — Storage and Deletion of Cookies

8.1 Retention Period

Cookies and similar technologies are retained only for as long as necessary according to their purposes of use.

Retention periods may vary depending on the type of cookie used, technical requirements, and applicable legislation.

8.2 Session Cookies

Session cookies may be automatically deleted when the User’s session ends.

8.3 Persistent Cookies

Persistent cookies may be removed when the specified retention period expires, when the User deletes them, or when the relevant technical necessity ceases to exist.

8.4 Deletion by the User

The User may delete or manage cookies at any time through the internet browser used.

Deleting cookies may require certain preferences on the Platform to be set again.

8.5 Secure Management

The Operator aims to apply appropriate technical and organisational measures to ensure the secure management of data processed through cookies and similar technologies.

Technical records obtained through cookies and similar technologies may be retained only to the extent necessary and for the period provided for under applicable legislation for the purposes of information security, protecting system integrity, preventing fraud, and fulfilling legal obligations.

Section 9 — Updating the Policy

9.1 Right to Update

The Operator may update this Cookie Policy in line with changes in applicable legislation, technical developments, updates to Platform services, or changes in the use of cookies.

9.2 Entry into Force

The updated Cookie Policy enters into force on the date it is published on the Platform.

The effective date and version information are stated at the beginning or end of the Policy.

9.3 Material Changes

If changes are made that significantly affect the use of cookies, Users are informed by appropriate methods where required by applicable legislation and, where necessary, explicit consent is obtained again.

Section 10 — Final Provisions

10.1 Consideration Together with the Privacy Policy

This Cookie Policy is an integral supplement to the DaDa Design Privacy Policy.

Detailed explanations regarding personal data processed through cookies are set out in the Privacy Policy.

10.2 Severability

If any provision of this Policy is deemed invalid or unenforceable under applicable legislation, this does not affect the validity of the remaining provisions.

10.3 Applicable Legislation

This Policy is applied and interpreted within the framework of applicable data protection, electronic communications, and electronic commerce legislation.

10.4 Entry into Force

This Cookie Policy enters into force on the date it is published on the Platform and remains in force until a new version is published.

Actual Cookie Inventory for This Site

The sections below supplement the text of this Policy and list the cookies and browser storage actually used on this site, as verified against the source code. If a discrepancy arises between the provisions of the Policy and the inventory, the inventory is updated the same day.

Cookies Used on This Site

Cookie	Set by	Purpose	Duration	Class
__Host-dada_oturum	DaDa Design	Keeps your session open after you sign in; your basket, favourites and orders are tied to this session.	24 hours; 30 days if “remember me” is selected at sign-in	Strictly necessary
Cloudflare Turnstile technical storage	Cloudflare (challenges.cloudflare.com)	Bot protection: blocking automated and abusive requests on form submissions.	Determined by Cloudflare; DaDa Design sets no duration	Strictly necessary

Attributes of the session cookie: HttpOnly (scripts in the browser cannot read it), Secure (sent only over HTTPS), SameSite=Lax (not sent with requests originating from other sites), Path=/.

In the local development environment the same cookie is written under the name dada_oturum; the __Host- prefix is rejected by browsers on non-https addresses, so this distinction is a technical necessity.

The session cookie is written when you sign in to your account. While you browse without signing in, DaDa Design writes no cookie of its own to your browser.

The second row of the table is not a first-party cookie: it is a similar technology within the meaning of Section 2.2, it operates under Cloudflare’s own domain, and it is loaded only on the form pages where bot protection applies (see “Third-Party Services” below).

The administration panel is published on a separate domain and is accessible only to the authorised administrator; the access cookies used there never appear on this site.

Analytics and Marketing Cookies

No analytics, advertising, profiling or social media tracking cookie is used on this site. No third-party measurement script (for example visitor analytics, a pixel or a remarketing tag) is loaded.

For this reason the cookie notice at the foot of the page offers no “accept / reject” choice: there is no optional cookie that could be rejected. Displaying a consent interface for a choice that does not exist would be misleading. The notice is for information only; the site works in full even if it is not dismissed.

Non-Cookie Browser Storage

Although they are not cookies, two technical records are stored in your browser. Neither is sent to the server.

Record	Storage	Content	Duration
dada.cerez-bildirimi	localStorage	The fact that you have seen the cookie notice: version number and timestamp. Contains no personal data.	Until you delete it
dada.checkout.taslak	sessionStorage	The billing details you enter when moving to the payment step, and the discount code if any.	At most 2 hours; deleted when you close the tab

Your basket and favourites are held on the server, tied to your account, rather than in the browser; no separate cookie is used for this.

Third-Party Services

Payment. At the payment step you are redirected to the payment page of the licensed payment provider Stripe (contracting party in Europe: Stripe Payments Europe, Limited, Ireland). The cookies used on that page belong to Stripe and are subject to Stripe’s own privacy and cookie policies; DaDa Design writes no cookie on that page, does not see your card details, and no Stripe script is loaded on our site.

Bot protection. Cloudflare Turnstile is used to prevent abuse of form submissions, and this protection is active. Turnstile operates on the following five forms: sign-in, registration, password reset request, contact form and infringement notice. The protection serves security purposes; verification takes place within a frame served under Cloudflare’s own domain (challenges.cloudflare.com), and the technical storage it uses also remains within that frame. The newsletter subscription form is outside the scope of Turnstile; protection there is provided by a hidden field (honeypot) and a per-IP rate limit.

Hosting. The site is published on Cloudflare infrastructure. Information about security and traffic records at infrastructure level is set out on the Privacy Policy page.

Retention Periods

• Session cookie: 24 hours, or 30 days if “remember me” is selected. When the period expires the browser deletes the cookie automatically.
• Even if it is renewed, a session expires absolutely no later than 7 days (90 days if “remember me” is selected) after it was opened, and a new sign-in is required.
• When you sign out, the cookie is deleted immediately.