As Voras Araştırma Geliştirme Limited Şirketi (Atölyeman) (the "Company"), in our capacity as data controller pursuant to Law No. 6698 on the Protection of Personal Data ("KVKK"), we have prepared this privacy notice in order to inform you about the processing of your personal data that we obtain through the www.atolyeman.com website ("Site").
1. Identity of the Data Controller
- Trade Name: Voras Araştırma Geliştirme Limited Şirketi (Atölyeman)
- Address: Dudullu OSB Mahallesi, DES-116 Sokak, No:3, 34776 Ümraniye / İstanbul
- Trade Registry No: 820827 (İstanbul Trade Registry Office)
- Tax Office / No: Sarıgazi Tax Office / 8830323095
- MERSİS Number: 0883-0323-0950-0012
- Email: info@atolyeman.com
- Phone: +90 532 177 2177
- KEP Address: vorasarge@hs01.kep.tr
2. Categories of Personal Data Processed
Within the scope of the services we provide through the Site, the following categories of personal data may be processed:
- Identity Information: Name, surname and, where necessary, Turkish ID number (for issuing an invoice),
- Contact Information: Address, phone number, email address,
- Customer Transaction Data: Order history, invoice details, request and complaint records,
- Financial Information: Invoice/payment record information (sensitive payment data such as card numbers is not stored by the Company; it is processed through a licensed payment institution),
- Transaction Security Data: IP address, cookie records, browser/device information, log records,
- Marketing Data (subject to consent): Campaign/newsletter subscription preferences.
3. Purposes of Processing Personal Data
Your personal data;
- Carrying out order and sales processes,
- Establishing and performing contractual processes (Distance Sales Agreement),
- Ensuring the delivery of the products,
- Carrying out invoicing and accounting processes,
- Carrying out customer relations and request/complaint management processes,
- Ensuring the security of the Site and of the payment infrastructure, preventing fraud,
- Fulfilment of legal obligations (Tax Procedure Law, Turkish Commercial Code, Law on Consumer Protection, etc.),
- Where your explicit consent exists, carrying out promotional, campaign and newsletter communications
are processed for these purposes.
4. Method of Collecting Personal Data and Legal Grounds
Your personal data is collected electronically through the membership, order, payment and contact forms on the Site, on the basis of the legal grounds set out in Article 5 of the KVKK;
- Being directly related to the conclusion or performance of a contract (order/delivery processes),
- Fulfilment of a legal obligation (issuing invoices, statutory retention),
- The legitimate interest of our company (fraud prevention, Site security),
- Your explicit consent (marketing communications)
are collected and processed on these legal grounds.
5. Transfer of Personal Data
Your personal data, limited to the purposes stated above;
- For the delivery of your order, to our contracted shipping companies,
- In order to process your payment, to our licensed payment institutions (iyzico and PayTR) and to banks,
- To the persons/organisations from which we receive accounting and financial advisory services,
- To the hosting/software/CRM suppliers we work with,
- To public institutions and organisations legally authorised to request it (courts, the Ministry of Trade, tax offices, etc.)
may be transferred within the framework of the personal data processing conditions set out in Articles 8 and 9 of the KVKK.
6. Retention Period for Personal Data
Your personal data is retained for the period necessary for the purposes for which it is processed and for the statutory retention periods stipulated in the relevant legislation (such as, for invoices within the scope of the Tax Procedure Law, 10 years, for commercial books and documents under the Turkish Commercial Code 10 years, for records relating to consumer transactions 3 years and the like). At the end of the period your data is deleted, destroyed or anonymised.
7. Rights of the Data Subject (KVKK Article 11)
By applying to us pursuant to Article 11 of the KVKK;
- Learning whether your personal data is being processed,
- Requesting information about it if it has been processed,
- Learning the purpose of processing and whether it is used in accordance with that purpose,
- Knowing the third parties to whom it is transferred at home or abroad,
- Requesting correction if it has been processed incompletely/incorrectly,
- To request the erasure/destruction of your personal data within the framework of the conditions set out in Article 7 of the KVKK,
- To request that rectification/erasure operations be notified to the third parties to whom the data has been transferred,
- To object to an outcome to your detriment arising from the analysis of the processed data exclusively by automated systems,
- To claim compensation for the damage suffered where you incur damage as a result of processing contrary to the Law
you have these rights.
8. Application Method
You may submit your requests concerning the rights listed above, together with documents establishing your identity;
- Email: info@atolyeman.com with a secure electronic signature,
- Written application: to the address Dudullu OSB Mahallesi, DES-116 Sokak, No:3, 34776 Ümraniye / İstanbul by registered mail with return receipt or in person,
- KEP: vorasarge@hs01.kep.tr with secure electronic mail
Your request will, depending on its nature, be concluded within a maximum of 30 (thirty) days free of charge; where the process additionally entails a cost, the fee in the tariff determined by the Personal Data Protection Board may be charged.
This text has been prepared specifically for the e-commerce activities carried out through the Site, and we recommend that its compliance with current legislation be confirmed by a legal adviser before it is put into effect.