PDPL Privacy Notice

Erdoğan Kamar, trading under the Artsution brand (the “Data Controller”), provides the following information pursuant to Article 10 of the Turkish Personal Data Protection Law No. 6698 (“PDPL”) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform.

1. Identity of the Data Controller

Erdoğan Kamar – Artsution, Beylikdüzü / Istanbul, Türkiye · Email: info@artsution.com.tr · Phone: +90 544 800 30 22

2. Purposes of Processing

Your identity, contact, request/client transaction, transaction security, financial and (with your consent) usage data are processed to evaluate project and quote requests, carry out contract processes, provide our services and support, perform finance and accounting operations, ensure information security, measure the use of the Site statistically, protect our rights in legal disputes and comply with legal obligations.

3. Recipients and Purposes of Transfer

Your personal data may be transferred, limited to and proportionate with the purposes above, to hosting, email and maintenance providers (to provide the service), to our accountants and legal advisors (legal obligations and protection of rights) and to competent public authorities (statutory requests).

With your explicit consent, your Site usage data may be transferred under Article 9 of the PDPL to Google Ireland Ltd. / Google LLC and their servers abroad as part of the Google Analytics service.

4. Method of Collection and Legal Basis

Your personal data is collected, partly or fully by automated means, through the forms on the Site, email, phone, WhatsApp, online and face-to-face meetings, cookies and server logs. It is processed on the legal bases set out in Article 5(2) of the PDPL — (c) conclusion or performance of a contract, (ç) compliance with a legal obligation, (e) establishment, exercise or protection of a right and (f) legitimate interest — and, for analytics cookies and transfers abroad, on your explicit consent under Articles 5(1) and 9.

5. Your Rights under Article 11 of the PDPL

By applying to the Data Controller, you have the right to:

• learn whether your personal data is processed;
• request information if it has been processed;
• learn the purpose of processing and whether data is used in line with that purpose;
• know the third parties in Türkiye or abroad to whom your data is transferred;
• request rectification if your data is incomplete or inaccurate;
• request erasure or destruction under Article 7 of the PDPL;
• request that rectification, erasure or destruction be notified to third parties to whom your data was transferred;
• object to a result against you arising from analysis exclusively through automated systems;
• claim compensation for damages arising from unlawful processing.

6. How to Apply

In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit your request in writing to the address above together with information identifying you, with a secure electronic or mobile signature, or by email to info@artsution.com.tr from the email address registered in our records. Your request will be concluded free of charge within 30 days at the latest; if the process requires an additional cost, the fee schedule set by the Personal Data Protection Board may apply. If your request is rejected, the response is insufficient or no response is given in time, you may file a complaint with the Personal Data Protection Board.

For cookies and further details, please see our Privacy and Cookie Policy. This notice is also available in Turkish; in case of any discrepancy, the Turkish version shall prevail.