KVKK Illumination Text
by CarbonArt (“Data Controller”, “CarbonArt”); This KVKK Enlightenment Text ("Lighting Text"), prepared within the framework of the relevant legislation, primarily the Constitution of the Republic of Turkey and international conventions on human rights to which our country is a party, and the Law on Protection of Personal Data No. 6698 ("KVKK", "Law") It aims to enlighten you about its applications and your rights as a data owner.
By processing your personal data, obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, or making your personal data fully or partially automatic or non-automatic, provided that it is a part of any data recording system. All kinds of operations performed on data, such as classification or classification, are meant.
In accordance with KVKK, your Personal Data; can only be processed by the Data Controller within the scope described in this text. CarbonArt is responsible for the establishment and management of the data recording system by determining the processing purposes and means of the personal data registered in the database.
In this context, the Data Controller, by taking all necessary technical and administrative measures; Within the limits stipulated by all legislation regarding the protection of personal data, in Article 4 of the KVKK;
- Compliance with the law and honesty rules,
- Being accurate and up-to-date when necessary,
- Processing for specific, explicit and legitimate purposes,
- Being connected, limited and restrained with the purposes of processing,
- To be kept for the period required by the relevant legislation or for the purpose for which they are processed.
will operate in accordance with its principles.
Personal Data Collected
As the Data Controller, we process the personal data of our members and service recipients, which will be specified in this Clarification Text, for our disclosure obligation. Personal data processed in this context; It is limited to identity data, communication data and financial data received to be transmitted to the bank in order to perform the necessary transactions, digital trace data and data on order history.
Personal Data Collection Method and Legal Reason
Personal data is collected electronically. Personal data collected for legal reasons specified in this Clarification Text can be processed and transferred for the purposes specified in Articles 5 and 6 of the Law and in this Clarification Text.
Purposes
To understand your needs by getting to know you better in order to carry out the necessary operational activities to ensure that your personal data, the products and services offered by the Data Controller can be offered to you, to recommend products and services that are suitable for your consumption and purchasing motivation, to inform you about products and services, to measure your satisfaction with our products and services, In order to develop and diversify our products and services in line with your requests and needs, to carry out the necessary quality and standard audits, to take the necessary steps by the Data Controller to make and implement commercial decisions, to perform the necessary quality and standard audits or to fulfill our reporting and other obligations stipulated by the legislation. are processed for similar purposes, including but not limited to, ensuring the legal safety of real persons with whom we have business relations and arising from these relations.
Legal reasons
Your personal data;
a) It is clearly stipulated in the laws,
b) It is compulsory for the protection of the life or physical integrity of the person or another person, who is unable to express his consent due to actual impossibility or whose consent is not given legal validity,
c) It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the performance of the contract,
ç) It is mandatory in order to fulfill our legal obligations as a Data Controller,
d) The person concerned has been made public by himself,
e) Data processing is mandatory for the establishment, exercise or protection of a right,
f) Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
It may be processed by the Data Controller for the purposes specified in this Clarification Text, without seeking your explicit consent, based on any of the terms and conditions.
Storage of Personal Data
The said data are stored for the purposes of especially the execution of service procurement processes, contract management, customer satisfaction, fulfillment of accounting transactions and security, and the personal data processed within this scope are deleted or destroyed after the end of the contract on the basis of the commercial relationship, if there is no legitimate purpose in their storage. However, the data that may be required to be kept by the Data Controller as a means of proof within the scope of possible commercial disputes are stored with CarbonArt during the legal litigation statute of limitations.
Transfer of Personal Data
Your personal data; Ensuring the legal and commercial security of CarbonArt and those who have a business relationship with CarbonArt; Carrying out the necessary studies to make you benefit from the products and services offered; fulfillment of our service; customizing the offered products and services according to tastes, usage habits and needs; It can be transferred to our business partners, banks, legally authorized public institutions and private individuals for the purposes of determining and implementing commercial and business strategies and fulfilling legal requirements, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK.
Your Rights as a Personal Data Owner
As personal data owners, if you submit your requests regarding your rights to the Data Controller through the methods specified in this Clarification Text, the request will be concluded free of charge within thirty days at the latest, depending on the nature of the request. In this context, personal data owners;
Learning whether personal data is processed or not,
If personal data has been processed, requesting information about it,
Learning the purpose of processing personal data and whether they are used in accordance with its purpose,
Knowing the third parties to whom personal data is transferred at home or abroad,
Requesting correction of personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,
Requesting the deletion or destruction of personal data in the event that the reasons requiring it to be processed disappear despite the fact that it has been processed in accordance with the provisions of the Law and other relevant laws, and requesting that the transaction carried out within this scope be notified to the third parties to whom the personal data has been transferred,
Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
In the event that personal data is damaged due to unlawful processing, it has the right to demand the compensation of the damage.
Pursuant to paragraph 1 of Article 13 of the KVKK, you can forward your request to the Data Controller in writing or by other methods determined by the Personal Data Protection Board.
Your request, including the necessary information identifying your identity, address information, contact information, and explanations about your right that you request to exercise from the rights specified in Article 11 of the Law in order to exercise your stated rights; Barbaros Mah. Mor Sümbül Sok. No:1 I Block Flat:59 Floor:3 Ataşehir | You can personally send it to İSTANBUL address with documents identifying your identity, via a notary public or by other methods specified in the KVKK.
You can find the procedural rules to be followed during the application and more detailed information in the Communiqué of the Personal Data Protection Authority on the Procedures and Principles of Application to the Data Controller.
In case of any change in personal data practices, the Clarification Text is updated by CarbonArt. The Current Clarification Text becomes effective on the date it is published on the Web Site.
CarbonArt CONTACT INFORMATION
https://www.crbnart.com
Title: CarbonArt
Address : Inkilap Mh. 29 May Cd. No : 3 A / B Umraniye / Istanbul
MERSIS:
Email : www.crbnart.com">info@www.crbnart.com