PDPL (KVKK) Information Text

PERSONAL DATA PROTECTION DISCLOSURE TEXT

This disclosure text has been prepared pursuant to Article 10 of the Personal Data Protection Law No. 6698 and aims to inform the relevant persons. Your approval of this disclosure text does not impose any obligation on you; it only means that you have been informed about the matters below.

The Company may make changes to its personal data protection policies when deemed necessary, and such changes shall enter into force upon publication on the platform.

Atölye Fabrix (“Company”) attaches utmost importance to protecting the fundamental rights and freedoms of individuals, particularly the privacy of private life regulated under Article 20 of the Constitution, in the protection and processing of personal data. In this context, the Company takes care to protect and process personal data lawfully in accordance with the Personal Data Protection Law No. 6698 (“Law” or “KVKK”) and acts with this care in all its planning and activities. Our Company does not consider the protection and processing of personal data merely as a matter of legal compliance, but places the value it gives to people at the core of its approach.

Personal data means any information relating to an identified or identifiable natural person.

Processing of personal data means any operation performed on personal data, such as obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, classifying, or preventing the use of such data, whether wholly or partially by automatic means or by non-automatic means provided that it is part of any data recording system.

DATA CONTROLLER

This disclosure is made by Atölye Fabrix as the data controller in accordance with KVKK No. 6698 and the relevant legislation.

Address: Feneryolu Sok. Sepaş Sit. No:37-2 C Blok D.12 Feneryolu Kadıköy İstanbul

Phone: +90 850 303 28 81

Email: info@atolyefabrix.com

KEP Address: bora.alkac@hs01.kep.tr

SCOPE OF THE DISCLOSURE TEXT

This disclosure text includes information regarding personal data processed by our Company within the scope of the following activities:

Your visits to and use of our website com.tr (“Site”), website membership, shopping transactions, and delivery to you of purchases made by third parties,

Your visits to our stores (“Stores”) and purchases made from our stores,

Commercial marketing activities carried out through commercial communication channels and/or other methods,

Request, complaint management, and customer communication processes,

Corporate sales processes.

Detailed information regarding cookies used on our website is available in the Privacy and Cookie Policy.

PERSONAL DATA PROCESSED

Although it may vary depending on the relevant process, the types of personal data processed by our Company are as follows:

Personal Data Category	Personal Data
Identity Information	Name, surname, Turkish ID number, tax identification number
Contact Information	Phone number, address, email address
Customer Transaction Information	Your purchases, order information, exchange and return information, payment information, invoice information, product information, delivery information, request and complaint information, etc.
Visual and Audio Records	Your voice recording if you contact our call center
Transaction Security Information	Password, website login and logout records, device name, IP address, etc.
Physical Space Security	CCTV camera recordings
Marketing Information	Cookie records, information obtained through marketing/campaign activities
Legal Transaction Information	Information in correspondence with judicial authorities, lawsuit file information, court announcement information, dispute information

PURPOSES AND LEGAL GROUNDS FOR PROCESSING PERSONAL DATA

Website Visits, Membership, and Shopping Transactions

Personal Data Category	Purpose of Processing	Legal Ground
Identity, Contact, Customer Transaction, Transaction Security Information	Carrying out membership procedures, recording information to enable membership login, conducting and executing sales transactions made through online platforms, carrying out and tracking order processes and ensuring delivery of the order to you and/or the recipient, displaying order history, carrying out exchange and return processes, conducting processes for the establishment and performance of the membership agreement, carrying out communication activities, customer relationship management processes, and goods/services sales processes	Processing personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract
Identity, Contact, Customer Transaction, Transaction Security Information	Conducting and executing purchase transactions made through online platforms, using membership information for shopping without the need to re-enter information, identifying you as a member and enabling your access to different functions, products, and services as a registered user, ensuring the security of our operations as the data controller, and carrying out after-sales operational transactions	Processing personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract; processing is mandatory for the legitimate interests of the data controller
Identity, Contact, Customer Transaction Information	Issuing and sending the invoice related to the purchase, ensuring collection of payment, complying with information retention, reporting, notification, tax and other obligations stipulated by legal legislation, carrying out finance and accounting affairs, conducting activities in compliance with legislation, and carrying out storage and archiving activities	Stipulated by law; mandatory for the data controller to fulfill its legal obligation
Customer Transaction Information (Credit Card Information)	Receiving payment if you wish to pay by credit card (credit card information is transferred to the payment institution without being recorded by us)	Mandatory for the data controller to fulfill its legal obligation
Transaction Security Information	Monitoring the satisfaction level of our visitors and users and identifying areas where we can make improvements	Processing personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract; processing is mandatory for the legitimate interests of the data controller
Transaction Security Information (IP Address, Log Records, etc.)	Ensuring the security and efficiency of our Site and information technology systems, ensuring the security of our technical infrastructure, providing information to authorized institutions and organizations, and conducting activities in compliance with legislation	Stipulated by law; processing is mandatory for the legitimate interests of the data controller
Legal Transaction Information	Evaluating and responding to your legal requests regarding disputes, exercising the right of claim and defense within legal processes, following up and conducting legal affairs, and providing information to authorized persons, institutions, and organizations	Processing is mandatory for the establishment, exercise, or protection of a right

Marketing and Communication Processes

Identity, Contact Information	Following up and resolving your requests, suggestions, and complaints submitted to our Company, carrying out communication activities, conducting processes related to loyalty to the company/products/services, and carrying out customer satisfaction activities	Processing personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract
Marketing Information	Ensuring customer satisfaction and carrying out marketing activities for our products/services, customizing website content and collecting information about visitor browsing behavior, customizing products and services according to the preferences, usage habits, and needs of relevant persons, and monitoring and improving product and service quality	Explicit consent
Marketing Information	Sending you commercial electronic communications containing campaigns, promotions, and advertisements	Explicit consent
Visual and Audio Records	Addressing the caller correctly and confirming the call, providing information about purchases made through online platforms, and carrying out customer relationship management processes	Processing personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract

Your personal data processed based on your explicit consent shall be processed, pursuant to Law No. 6563 on the Regulation of Electronic Commerce, for the purpose of sending SMS and emails to promote and market personalized products, services, and campaigns to you until you refuse to receive commercial electronic communications. You may cancel your commercial electronic communication permission at any time through IYS. If you are not an Atölye Fabrix customer, you may log in to the Message Management System website (iys.org.tr) with your e-Government password and opt out free of charge, or you may withdraw your explicit consent through the cancellation method specified in the SMS, call, or email sent to you.

Store Visits and Shopping Processes

Personal Data Category	Purpose of Processing	Legal Ground
Identity, Contact, Customer Transaction Information	Carrying out shopping transactions and establishing and performing the sales contract, distinguishing customer records created in the system from records related to other customers, carrying out goods/services sales processes, exchange and return processes, communication, request and complaint processes	Processing personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract; stipulated by law
Identity, Contact, Customer Transaction Information	Issuing and sending the invoice related to the purchase, ensuring collection of payment, complying with information retention, reporting, notification, tax and other obligations stipulated by local and international legislation, and carrying out finance and accounting affairs	Mandatory for the data controller to fulfill its legal obligation; stipulated by law
Identity, Contact, Customer Transaction Information	Ensuring fulfillment of debts arising from the ongoing business relationship between you and our Company, carrying out current account and reconciliation transactions, and conducting goods/services production and operation processes	Processing personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract; mandatory for the data controller to fulfill its legal obligation
CCTV	Ensuring physical space security for our visitors, customers, and employees in our stores, and providing information to authorized persons, institutions, and organizations	Processing is mandatory for the legitimate interests of the data controller; mandatory for the data controller to fulfill its legal obligation; establishment, protection, or exercise of a right

Corporate Sales Activities

Personal Data Category	Purpose of Processing	Legal Ground
Identity, Contact, Customer Transaction Information	Distinguishing customer records created in the system from records related to other customers, carrying out customer relationship management processes, and carrying out communication activities	Processing personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract
Identity, Contact, Customer Transaction Information	Carrying out quotation and contract processes, ensuring fulfillment of debts arising from the ongoing business relationship between you and our Company, carrying out current account and reconciliation transactions, conducting goods/services production and operation processes, and providing after-sales support services for goods/services	Processing personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract; mandatory for the data controller to fulfill its legal obligation
Identity, Contact, Customer Transaction Information	Issuing and sending the invoice related to the purchase, ensuring collection of payment, carrying out finance and accounting affairs, and conducting financial operations for the purpose of determining and implementing the Company’s commercial and business strategies	Mandatory for the data controller to fulfill its legal obligation; stipulated by law
Identity, Contact, Customer Transaction Information	Complying with information retention, reporting, notification, tax and other obligations stipulated by local and international legislation, and carrying out storage and archiving activities	Mandatory for the data controller to fulfill its legal obligation

METHOD OF COLLECTION OF PERSONAL DATA

Your personal data is collected through automatic and non-automatic methods, including the recording in our systems of information you directly provide verbally or in writing in our stores or through various communication channels such as phone calls and email to our employees/sales consultants; the recording in our systems of information you share regarding purchases or membership transactions made through our stores or website; the recording of your requests, complaints, and related questions submitted to us during mutual communication through the Site, our email addresses, social media, and other communication channels; information and documents submitted by persons authorized to act on your behalf; information obtained by the system during your website visits; applications such as CRM used by our Company; information and documents received from marketplace platforms, our dealers, suppliers, and other third-party companies; and information/documents concerning you received from official institutions, organizations, and judicial/administrative authorities.

TRANSFER OF PERSONAL DATA

Your personal data may be transferred to the following third parties and for the purposes stated below within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK:

Third Parties	Purpose of Transfer
The person themselves	Issuing and sending the e-invoice/e-archive invoice related to the purchase, providing information about purchases made through online platforms, and carrying out order viewing and tracking processes
Cargo companies and suppliers from whom we receive logistics services	Ensuring delivery of the order to you and/or the recipient
Our suppliers, business partners, and integrator companies from whom we receive product and service support such as information technologies, finance, payment services, and infrastructure providers	Receiving product and service support in areas requiring expertise such as information technologies, payment services, infrastructure services, consultancy, etc., and ensuring the security of our operations as the data controller
Service providers abroad	Receiving product and service support in areas requiring expertise such as information technologies, marketing/advertising/analysis activities
Our suppliers providing call center services	Following up and resolving your requests, suggestions, and complaints submitted to our Company, and carrying out communication activities
Third parties from whom we receive consultancy services, such as lawyers, auditors, and tax consultants	Carrying out the audit activities of our Company, following up and conducting legal affairs, monitoring and detecting suspicious transactions, and preventing unlawful transactions
Legally authorized public institutions and organizations	Complying with information retention, reporting, notification, tax and other obligations stipulated by legal legislation, and conducting activities in compliance with legislation
Regulatory and supervisory authorities, courts, prosecutor’s offices, consumer arbitration committees, other judicial authorities, and legal advisors	Following up and conducting legal affairs, providing information to authorized persons, institutions, and organizations, and conducting activities in compliance with legislation

Your Rights as the Relevant Person

As the relevant person, meaning the natural person whose personal data is processed, your rights listed under Article 11 of the Law are as follows:

To learn whether your personal data is being processed,

To request information if your personal data has been processed,

To learn the purpose of processing your personal data and whether they are used in accordance with that purpose,

To know the third parties to whom your personal data has been transferred domestically or abroad,

To request correction if your personal data has been processed incompletely or incorrectly,

To request deletion or destruction of your personal data within the framework of the conditions stipulated under Article 7 of the Law,

To request notification of correction, deletion, and destruction procedures to third parties to whom your personal data has been transferred,

To object to the occurrence of a result against you by means of analysis of processed data exclusively through automated systems,

To claim compensation if you suffer damage due to unlawful processing of your personal data.

Data Security and Right to Apply

Your personal data is carefully protected within technical and administrative means, and the necessary technical and administrative measures are taken.

You may submit your requests regarding your personal data by:

Delivering them personally in writing to our address at Feneryolu Sok. Sepaş Sit. No:37-2 C Blok D.12 Feneryolu Kadıköy İstanbul, or sending them through a notary public,

Sending them via Registered Electronic Mail (KEP) to bora.alkac@hs01.kep.tr,

Sending an email to info@atolyefabrix.com from your email address registered in our system by writing “KVKK Application” in the subject line.

If your application requires an additional cost, you may be required to pay the fee specified in the tariff determined by the Personal Data Protection Board. Your requests included in your application shall be concluded as soon as possible and no later than 30 (thirty) days, depending on the nature of the request.

PDPL (KVKK) Information Text

Login

Forgot Password

Register

Manage Your Cookie Preferences