Privacy Notice (KVKK)

As Timur Yılmaz Boya Ahşap İnşaat Sanayi ve Ticaret Limited Şirketi (“ART IST Boya”, the “Company” or the “Data Controller”), we take the security of your personal data seriously under Turkish Personal Data Protection Law No. 6698 (“KVKK”). This notice explains the purposes for which your personal data is processed in connection with the services we offer through artistboya.com, the parties to whom it may be transferred, and your rights under the KVKK.

1. Data Controller

Your personal data is processed by Timur Yılmaz Boya Ahşap İnşaat Sanayi ve Ticaret Limited Şirketi in its capacity as data controller, within the scope described below.

2. Personal Data We Process

• Identity data: first name, surname.
• Contact data: email address, telephone number, delivery and billing address.
• Customer transaction data: order and cart details, order history, invoice details, requests and complaint records.
• Transaction security data: IP address, cookie records, site navigation and log records.
• Payment data: Payments are collected through contracted payment institutions and banks; your card details are never seen or stored by us.

3. Purposes of Processing

• Receiving, preparing, invoicing and delivering your orders,
• Forming and performing the contract, and running sales and after-sales processes,
• Managing returns, exchanges, requests and complaints,
• Fulfilling our legal obligations under tax, commercial and consumer legislation,
• Informing you about campaigns, discounts and new products, where you have given explicit consent.

4. Legal Grounds for Processing

Your personal data is processed under Article 5 of the KVKK on the grounds that it is directly related to the formation or performance of a contract, that it is expressly provided for by law, that it is necessary for the fulfilment of our legal obligations, that it is necessary for the establishment or exercise of a right, and on the basis of our legitimate interests provided that your fundamental rights and freedoms are not harmed. For marketing activities, processing is based on your explicit consent.

5. Transfer of Personal Data

Limited to the purposes above, your personal data may be transferred to contracted courier and logistics companies for delivery, to payment institutions and banks for collecting payment, to suppliers providing our e-commerce infrastructure and hosting (Shopify Inc.), to business partners providing accounting and legal advice, and to legally authorised public institutions. Because the servers of our infrastructure providers may be located abroad, your data may be transferred abroad in order to perform the service and/or on the basis of your explicit consent.

6. Method of Collection

Your personal data is collected electronically through the account you create on our website, the orders you place, the forms you complete, your communications with us, and cookies.

7. Your Rights Under the KVKK

Under Article 11 of the KVKK you have the right to: learn whether your personal data is being processed; request information if it has been processed; learn the purpose of processing and whether the data is used in line with that purpose; request correction if it has been processed incompletely or inaccurately; request erasure or destruction where the conditions are met; request that such actions be notified to third parties to whom the data has been transferred; object to a result arising against you from analysis carried out exclusively by automated systems; and claim compensation if you suffer loss due to unlawful processing.

8. Applications

You may submit requests concerning your rights in writing to info@artistboya.com or to our postal address above. Depending on its nature, your request will be concluded free of charge as soon as possible and within thirty (30) days at the latest; if the process incurs a cost, the tariff set by the Board may be applied.

This is an English translation provided for your convenience. The Turkish version of this document is the legally binding text.