With this Clarification Text on the Processing of Personal Data, in accordance with Article 10 of the Law on the Protection of Personal Data No. 6698 ("LPPD"), we, Artopol Sanat Eserleri A.Ş., located at Maslak Mah. Ahi Evran Cad. B Block No:6 Interior Door No: 163, Sarıyer, Istanbul/Turkey, Mersis No: 0781070528900001 ("Company"), would like to inform and enlighten you about our personal data processing activities.
1. Data Controller and Representative
1.1. Your personal data may be processed, recorded, stored, classified, updated, and, in cases permitted by legislation or limited to the purposes for which they are processed, disclosed/transferred to third parties by the Company, in its capacity as the data controller, in accordance with the law and principles of honesty, for the purposes explained below and limited thereto.
2. Purpose of Processing Your Personal Data
Your personal data may be processed, even without your explicit consent, in accordance with the basic principles set out in the LPPD, for the following purposes:
Fulfilling obligations arising from legislation and legal notifications, conducting legal follow-up processes,
Collecting information for purchases and preparing/sending the sold product for delivery,
Risk analysis and management related to the said commercial activity on the website,
Managing audit processes and suspicious transaction investigations,
For non-marketing purposes: measuring service quality and customer satisfaction, evaluating assistance services, complaint
management, segmenting customers based on relevant data, conducting surveys,
Recording incoming calls and using those records to improve service quality,
Obtaining all kinds of support services from external service providers for the provision of the service,
Preparing responses to requests from natural and legal third parties,
If you provide your explicit consent:
The Personal Data you share may be used for sales-marketing communication and general notifications, by combining them with information collected from other companies as stated in our cookie policy, for the development and personalization of our services and promotions, offering new services, and sending all kinds of communication messages.
If the data subject does not wish to receive such marketing promotions or to be included in advertising-personalization and retargeting practices, they can always submit their requests through the contact information provided on our website.
3. Transfer of Your Personal Data
Your Personal Data will be shared only when necessary and to the required extent, with third parties located in Turkey or abroad with whom we have a contractual relationship, who share our sensitivity about data security and comply with the relevant legal regulations, for the purposes of providing better services to the data subject, storing and protecting data more securely, ensuring the proper delivery of your possible shipments, and timely delivery of our notifications via phone, SMS, and/or email.
4. Transfer of Data Abroad
Your personal data, lawfully processed by the Company, may be transferred to persons or organizations residing in foreign countries that have been determined and announced by the Personal Data Protection Board ("Board") to have adequate protection, or, in cases where data controllers in the destination country commit to adequate protection in writing and the Board grants permission, to countries other than those announced by the Board, without obtaining your explicit consent, provided that one of the conditions set out in Article 5/2 or Article 6/3 of the LPPD exists.
5. Method and Legal Grounds for Collecting Your Personal Data
Your personal data is collected by the Company through forms, email, telephone, SMS, our website, mobile application, cargo, correspondence, fieldwork, social media, third parties, postal services, web interfaces, camera recordings, assistance companies, and other channels, based on the above-mentioned legal grounds, in order to carry out our activities. In this context, your personal data may be processed and transferred without obtaining explicit consent, in line with the principles set out in Article 4/2 of the LPPD, or in cases where the conditions specified in Article 5/2 and Article 6/3 of the LPPD are met.
6. Your Rights Under Article 11 of the LPPD
To ensure that your applications under Article 11 of the LPPD are evaluated and resolved quickly, effectively, and comprehensively, you can send your request by registered mail with return receipt to the address provided on our website's "Contact" page, with a wet signature. The Company will finalize your request as soon as possible, and in any case, within thirty (30) days free of charge. However, if the requested action requires additional costs, the fees determined by the Board will be charged.
Under the above-mentioned article, your rights are as follows:
To learn whether your personal data is processed by the Company,
To request information if your personal data has been processed,
To learn the purpose of processing your personal data and whether it is used in accordance with its purpose,
To know the third parties to whom personal data is transferred domestically or abroad,
If personal data is incomplete or incorrectly processed, to request correction,
To request deletion or destruction of personal data within the framework of the conditions set out in Article 7 of the LPPD,
To request that the operations carried out under subparagraphs (d) and (e) be notified to third parties to whom personal data has been transferred,
To object to the occurrence of a result against you by analyzing your processed data exclusively through automated systems,
To request compensation for the damage arising from the unlawful processing of your personal data.
7. Personal Data Retention Period
Our Company retains Personal Data processed in accordance with the LPPD only for the period stipulated in the relevant legislation or, if not specified in the legislation, for the duration required by the purpose of processing. Data is deleted, destroyed, or anonymized after the reasons requiring processing cease to exist. For example, in cases where the consent of the data subject for the use of Personal Data for marketing or promotional purposes is withdrawn, the records of the Personal Data are retained for 1 year from that date pursuant to the Law No. 6563 on the Regulation of Electronic Commerce and its associated regulations. Records of the content of commercial electronic messages and all other records regarding the transmission are retained for 3 years to be submitted to the relevant Ministry if requested. Under Law No. 5651 on Regulating Broadcasts on the Internet and Combating Crimes Committed Through Such Broadcasts, traffic data we process is retained for 2 years and anonymized after the expiration of this period. In any case, if Personal Data is processed for more than one purpose, the data will be deleted, destroyed, or anonymized once all reasons requiring processing are eliminated.
8. Request to Update Your Information
The personal data processed by the Company must be accurate and up to date. Therefore, if there is any change in your information that qualifies as personal data, you can notify us via email, using the email address you used during membership registration, to the email address provided on the "Contact" page of our website.