Privacy Policy (KVKK Information Notice)

1. Identity of the Data Controller

As Özlem Çubuk – ARTENISA ("ARTENISA" or "Company"), acting as the Data Controller (Veri Sorumlusu) within the scope of the Law on the Protection of Personal Data No. 6698 ("KVKK"), we respect your privacy and are committed to protecting your personal data.

2. What Personal Data We Process

We collect only the data necessary to execute our gallery services, process your orders, provide support, and comply with legal obligations.

• Identity Information: Name, Surname, and where required for invoicing and applicable legal obligations, T.C. Identity Number (TCKN) and/or Tax Number (VKN).
• Contact Information: Email address, phone number, delivery address, invoice address.
• Transaction Information: Order history, payment confirmation/transaction IDs, and invoice details (we do not store full credit card numbers; payments are processed securely by Akbank T.A.Ş.).
• Customer Transaction Data: Requests, complaints, reviews, and support correspondence.
• Account Data (if you create an account): Login-related information such as account identifiers and basic account activity records.
• Transaction Security: IP address and security/access logs where required or necessary for information security and fraud prevention (including logs that may be maintained via our infrastructure providers).

3. Purposes of Processing

Your personal data is processed for the following purposes:

• Execution of the Contract: To process your order, take payment, confirm the purchase, prepare the order, and deliver Atelier or Studio items.
• Legal Compliance: To issue invoices and maintain records required by applicable tax, commercial, and consumer legislation, and to meet lawful requests from competent authorities.
• Customer Support: To manage after-sales support, returns, warranty claims, and Certificate of Authenticity verification (where applicable).
• Communication: To send transaction updates (order confirmation, shipping, delivery). Marketing/advertising communications are only sent with your explicit consent (Açık Rıza) where required.
• Security & Fraud Prevention: To protect our website, customers, and transactions, prevent abuse/fraud, and ensure information security.

4. To Whom and For What Purposes Data is Transferred

To provide our services, strictly necessary data may be transferred to the following third parties (Alıcı Grupları) in compliance with KVKK Articles 8 and 9:

• Logistics Partners: Your name, address, and phone number are shared with Yurtiçi Kargo (or a relevant carrier) solely to ensure delivery.
• Payment Provider: Transaction amounts and order IDs are processed by Akbank T.A.Ş.
• Financial Advisors / Authorities: Invoicing and accounting data may be shared with our accountant/financial advisor and the Turkish Revenue Administration (GİB) to fulfill legal obligations.
• Legal / Competent Authorities: Data may be shared with courts, enforcement offices, arbitration committees, or other competent authorities upon lawful request or where required to establish, exercise, or defend legal rights.
• E-commerce infrastructure and hosting providers: Shopify and its sub-processors (for store operations, hosting, order management, and platform functionality).
• E-mail / SMS service providers: For sending transactional notifications (order/shipping updates) and, where applicable, consent-based marketing communications.
• Analytics / Marketing tools: Tools used to understand site performance and improve user experience (e.g., analytics, advertising pixels), subject to cookie preferences and consent where required.

Cross-border transfers notice: Due to the nature of e-commerce infrastructure and service providers, certain data may be processed or stored on servers located outside Türkiye. Where cross-border transfers occur, we take steps to ensure compliance with KVKK and applicable transfer requirements, and where required, we obtain explicit consent or use legally recognized mechanisms.

5. Method and Legal Basis of Collection

Your personal data is collected electronically via our website (www.artenisa.net) when you place an order, create an account, subscribe (if available), or contact us. The processing is based on the following legal grounds under KVKK Article 5:

• “It is necessary to process the personal data of parties to a contract, provided that it is directly related to the establishment or performance of the contract.” (Processing your order).
• “It is mandatory for the data controller to fulfill its legal obligation.” (Tax, invoices, accounting, consumer law obligations).
• “It is mandatory for the legitimate interests of the data controller, provided that this processing does not violate the fundamental rights and freedoms of the data subject.” (Fraud prevention, security, improving service quality).
• Where required by law, certain processing activities (especially marketing communications and non-essential cookies) are based on your explicit consent (Açık Rıza).

6. Data Retention Period

We retain your personal data for the periods stipulated by relevant legislation and our legitimate business needs:

• Commercial & Tax Records: Typically retained for up to 10 years in line with applicable commercial and tax legislation.
• Security / Access Logs: Retained for the periods required by applicable legislation or for information security purposes, then deleted, destroyed, or anonymized.
• Customer Support Records: Retained as necessary to handle requests, returns, disputes, and warranty processes, and to defend legal rights where applicable.

7. Your Rights Under KVKK (Article 11)

As a data subject (İlgili Kişi), you have the right to apply to ARTENISA to:

• Learn whether your personal data is processed.
• Request information if your personal data has been processed.
• Learn the purpose of processing and whether data is used in accordance with that purpose.
• Know the third parties to whom your data is transferred domestically or abroad.
• Request correction of incomplete or inaccurate data.
• Request deletion or destruction of data under the conditions set forth in KVKK Article 7.
• Object to negative consequences arising from the analysis of data exclusively by automated systems.
• Request compensation for damages incurred due to unlawful processing of personal data.

Right to complain: You may submit your request to us first. If your request is rejected, not adequately answered, or not answered within 30 days, you may submit a complaint to the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu) in line with applicable rules.

8. Application Method

You may submit your requests regarding these rights to us through the channels below. We may request additional information to verify your identity in order to protect your personal data.

• Via Email: Send an email to info@artenisa.net using your registered email address.
• Via Mail: Send a wet-signed petition to our registered address: Karapürçek Mah. 495. Cad. A-B Blok No:1/24 Altındağ / ANKARA, Türkiye.
• Secure Electronic Signature / Mobile Signature (if used): If you submit your request with a secure electronic signature or mobile signature, please include your identity details and contact information so we can respond appropriately.

We will respond to your request free of charge within 30 days at the latest, depending on the nature of the request. In cases permitted by law, a fee may be requested according to the tariff determined by the authority.

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies to operate properly, enhance your experience, and (if enabled) measure performance and marketing effectiveness. Where required, non-essential cookies are used based on your preferences and consent.

You can review details about cookie types, purposes, and how to manage your preferences in our Cookies Policy: Cookies Policy.