KVKK

PERSONAL DATA DISCLOSURE STATEMENT

As Cansu Yıldırım ve Kadir Berkay Özkan Adi Ortaklığı Şirketi (“Company”), this Disclosure Statement has been prepared to fulfill our obligation to inform you in accordance with the Personal Data Protection Law (“Law”) and the Communiqué on the Principles and Procedures to Be Followed in Fulfilling the Obligation to Inform.

Accordingly, the matters we are obliged to inform you about are listed below:

1. Data Controller Information

The data controller is Cansu Yıldırım ve Kadir Berkay Özkan Adi Ortaklığı Şirketi, located at Donanmacı Mah. 1729 Sk. No:32, Floor 4, 35580 Karşıyaka/İzmir.

2. Personal Data Processed by the Company and the Purposes of Processing

2.1. Personal Data Processed by the Company

Identity Information

  • Full name
  • Date of birth
  • Gender

Contact Information

  • Mobile phone number
  • E-mail address
  • Address

Payment Information

  • Tax office
  • Invoice details
  • Payment method information

Membership Information

  • Membership data
  • Membership number
  • Password

Customer / User Transaction Information

  • Purchased products
  • Purchase date
  • Purchase amount
  • Call center conversation records
  • Commercial electronic communication consent/refusal records
  • Campaign participation information
  • Order-related details
  • Used coupon/discount codes

Transaction Security Information

  • IP address details
  • Password information

Marketing Information

  • Marketing e-mails or calls sent based on electronic communication consent
  • Call center calls
  • Cookie records
  • Targeting information
  • Interest and preference evaluations

Legal Transaction Information

  • Data contained in lawsuit files in the event of disputes with the Company, information in consumer complaints, and information reflected in enforcement proceedings
  • Legal documents and agreements such as the Distance Sales Agreement and Preliminary Information Form

Request and Complaint Information

  • Requests, opinions, evaluations, complaints, and feedback submitted through our website, call center, or social media channels
  • Records related to the evaluation of such requests and complaints

2.2. Purposes of Processing Personal Data

Personal data of our members are processed for the following purposes:

  • Creation and verification of a website membership account;
  • Processing, tracking, and fulfillment of orders;
  • Communication regarding your order requests;
  • Payment processing and invoice issuance;
  • Application of gift vouchers and discount coupons associated with your account;
  • Delivery of goods, products, or services;
  • Establishing and maintaining effective and long-term customer relations;
  • Managing sales and post-sales support processes;
  • Handling requests and complaints, resolving potential future disputes;
  • Detecting and preventing technical issues or errors in the website’s operation;
  • Auditing and inspecting our business activities;
  • Fulfilling legal obligations under applicable consumer protection, electronic commerce, and commercial communication regulations;
  • Providing necessary information to or responding to requests from authorized institutions;
  • Retaining personal data for the legally prescribed statute of limitations;
  • Sending promotional, advertising, and campaign e-mails upon explicit consent;
  • Conducting surveys or similar methods to measure satisfaction, requests, and complaints.

Personal data of non-member users are processed for similar purposes, such as enabling access to our products and services without membership, verifying transaction information, processing and fulfilling orders, and performing related communication, invoicing, and legal obligations.

2.3. Information Regarding Personal Data Processed Through Cookies

During your visit and use of our website, small text files (“Cookies”) are transmitted to your hard drive by the web server. Through these, information such as browser type, IP address, internet connection details, and site usage patterns may be collected.
These data are processed to enable site functionality, carry information between pages, prevent repetitive data entry, enhance performance through usage analytics, remember user preferences, and tailor our site and advertisements to your interests and preferences - provided you have given your consent.

3. Recipients and Purposes of Personal Data Transfer

Authorized Persons, Institutions, and Organizations

  • Transferred Data: Identity, contact, payment, membership, customer transaction, transaction security, marketing, visual/audio, legal transaction, and request/complaint data.
  • Purpose: Compliance with requests from authorized public bodies or legal obligations requiring notification to such entities.

Cargo/Delivery Companies

  • Transferred Data: Identity, contact, and customer transaction data.
  • Purpose: Order tracking and fulfillment.

Company’s Service Providers and Partners

  • Transferred Data: Identity, contact, membership, customer transaction, marketing, and request/complaint data.
  • Purpose: Audit and reporting processes, product/service improvement, and establishing effective customer interaction in collaboration with third parties.

Suppliers, Business Partners, and Authorized Payment Institutions

  • Transferred Data: Identity, contact, payment, membership, customer transaction, transaction security, marketing, visual/audio, legal transaction, and request/complaint data.
  • Purpose: Receiving products or services from third parties (e.g., payment processing by your bank, delivery services by courier companies, satisfaction surveys).
    Such data transfers may include transfers to service providers located abroad, conducted in accordance with the Regulation on the Transfer of Personal Data Abroad.

4. Method and Legal Basis of Collecting Personal Data

Personal data collected via our website, call center, e-mail, or postal mail - either fully or partially automated - are processed on the following legal grounds:

  • Where explicitly stipulated by law (e.g., obligations of electronic commerce service providers);
  • For the establishment and performance of distance sales agreements;
  • For compliance with our legal obligations;
  • When necessary for the Company’s legitimate interests, provided that such processing does not violate your fundamental rights and freedoms.

5. Rights of Data Subjects Under the Law

Pursuant to the Law, you have the right to:
(a) Learn whether your personal data are processed;
(b) Request information regarding such processing;
(c) Learn the purpose of processing and whether it is used in accordance with such purpose;
(ç) Learn the third parties to whom data are transferred domestically or abroad;
(d) Request correction of incomplete or inaccurate data;
(e) Request deletion or destruction of your personal data when the reasons requiring processing no longer exist;
(f) Request notification of transactions made under (d) and (e) to third parties to whom data were transferred;
(g) Object to outcomes against you resulting from automated data analysis;
(ğ) Request compensation if you suffer damages due to unlawful data processing.

You may exercise these rights by sending a petition including proof of identity to the Company using the registered e-mail address in our system (info@agayarart.com).

Respectfully submitted,
Cansu Yıldırım ve Kadir Berkay Özkan Adi Ortaklığı Şirketi