Privacy information notice on the processing of personal data

Language

This is a courtesy translation. In case of any difference, the Turkish text prevails.

1. Data controller

Under Law No. 6698 on the Protection of Personal Data (“KVKK”), your personal data is processed by ASD TASARIM LTD. ŞTİ. (“Ahşapix”, the “Company”), as data controller, to the extent described below.

Address: Osmangazi Mah. Basın Şehitleri Cad. No:174/1 Odunpazarı/ESKİŞEHİR. E-mail: satis@ahsapix.com.

2. Personal data processed

Identity data: first name, surname.

Contact data: e-mail address, telephone number, delivery address, city.

Customer transaction data: content of orders and requests, the piece and options chosen, correspondence, invoicing details.

Visual data: a photo or image you choose to upload when requesting a custom design.

Transaction security data: technical records such as the IP address and browser information logged by the hosting service when you access the site.

3. Purposes of processing

Receiving and answering your requests, questions and suggestions; preparing orders and custom design quotes; entering into and performing the contract; making the piece, sending you its photos and video, packing and delivering it; invoicing and accounting; handling damage claims and complaints; fulfilling legal obligations and providing information to competent authorities; keeping the site secure.

4. Legal grounds

Under Article 5(2) of the KVKK, your personal data is processed on the following legal grounds: processing is directly related to entering into or performing a contract (c); it is necessary for the data controller to fulfil its legal obligation (ç); it is necessary for establishing, exercising or protecting a right (e); and it is necessary for our legitimate interests, provided that it does not harm your fundamental rights and freedoms (f).

The image you upload for a custom design, and transfers to service providers located abroad, are based on your explicit consent. You may withdraw your explicit consent at any time; withdrawal does not affect processing carried out before it.

5. Method of collection

Your personal data is collected electronically, partly by automated means, through the contact, order request and custom design forms on our website, and through our correspondence by e-mail, telephone and Instagram.

6. Transfers

Limited to the purposes above, your personal data may be transferred to: the payment service provider Shopier, to take your payment (your card details are entered directly with Shopier and never reach us); carriers, for delivery; our certified public accountant and our e-invoice/e-archive service provider, for accounting and invoicing; and competent public authorities and institutions, upon request.

The site is hosted on the infrastructure of Vercel Inc.; account, order and request records are kept in Neon Inc.’s database service, with passwords stored in irreversibly hashed form; e-mail correspondence is stored on the servers of our e-mail service provider. As the servers of these providers may be located abroad, these transfers are carried out on the basis of your explicit consent under Article 9 of the KVKK.

If you consent to analytics and/or marketing cookies in your cookie preferences, your site-usage information (the products you view, add to your basket and buy, and cookie identifiers) is transferred to Google Ireland Ltd. and Meta Platforms Ireland Ltd. for analytics and ad measurement; as these services’ servers are located abroad, the transfer rests only on your explicit consent, which you can withdraw at any time through the “Cookie preferences” link at the foot of the page.

Your data is never sold, and without your consent it is not shared with third parties for advertising purposes.

7. Retention period

Contract and invoice records are kept for 10 years as required by the Turkish Commercial Code and the Tax Procedure Law. Requests and correspondence that do not lead to an order are deleted 2 years after the last contact, and images uploaded for a custom design within 6 months of the order being completed or the request lapsing. Data whose retention period has expired is deleted, destroyed or anonymised.

8. Your rights (Article 11 of the KVKK)

You have the right to: learn whether your personal data is processed; request information about it if it has been processed; learn the purpose of processing and whether the data is used in line with that purpose; know the third parties in Turkey or abroad to whom it has been transferred; request correction if it has been processed incompletely or inaccurately; request its deletion or destruction within the framework of Article 7 of the KVKK; request that these actions be notified to third parties to whom the data has been transferred; object to a result to your detriment arising from analysis of the data exclusively by automated systems; and claim compensation if you suffer damage because of unlawful processing.

9. Applications

You may submit requests concerning your rights in writing, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller and together with information identifying you, to Osmangazi Mah. Basın Şehitleri Cad. No:174/1 Odunpazarı/ESKİŞEHİR, or send them by e-mail to satis@ahsapix.com.

Your application will be concluded free of charge as soon as possible according to its nature, and within 30 days at the latest. If the action requires an additional cost, the fee schedule set by the Personal Data Protection Board may be applied.