KVKK Clarification Text — Protection of Personal Data

This Clarification Text has been prepared to inform you about the processing of your personal data by Camtablolar ("Company"), acting as the data controller, in accordance with Article 10 of the Law on Protection of Personal Data No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.

1. Data Controller

Title: Camtablolar
Address: Mall Of İstanbul The Office, Kat 17 D:136, Başakşehir / İstanbul
Email: kvkk@camtablolar.com · Phone: 0506 060 50 17

2. Categories of Personal Data Processed

Identity Information: Name, surname; tax identification/Turkish ID number for corporate invoice requests.
Contact Information: Phone number, email address, delivery and billing address.
Customer Transaction Information: Order history, cart and favorite records, return/withdrawal requests, customer service call records.
Financial Information: Payment method, invoice and refund amount information. Credit card information is not stored in Company systems; payment transactions are carried out through licensed payment institutions.
Transaction Security Information: IP address, session and log records, device/browser information.
Visual Data: Photos and visuals uploaded by you for personalized printing services.
Marketing Information: E-newsletter preference and shopping habits, if you have given explicit consent.

3. Purposes of Processing Personal Data

Establishment and execution of order and sales contracts, management of delivery and return processes,
Execution of membership transactions and ensuring account security,
Production of personalized products (use of uploaded visuals in the printing process),
Issuance of invoices and fulfillment of financial obligations,
Addressing requests and complaints, providing customer support services,
Management of information security processes and prevention of fraud,
Sending commercial electronic messages if you have given explicit consent (in accordance with Law No. 6563 on ETK and IYS regulations),
Providing information to authorized persons, institutions, and organizations.

4. Legal Grounds for Processing

Your personal data is processed based on the legal grounds stipulated in Article 5 of the KVKK, namely: (a) being directly related to the establishment or performance of a contract, (b) being mandatory for the data controller to fulfill its legal obligation (e.g., Tax Procedure Law No. 213, Law on Regulation of Electronic Commerce No. 6563, Consumer Protection Law No. 6502), (c) being mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, and (d) explicit consent, if present.

5. Method of Collection

Your personal data is collected through fully or partially automated means via membership, order, contact, and personalized printing forms on the website, email, phone, WhatsApp communication channels, and cookies.

6. Transfer of Personal Data

Your personal data may be transferred, limited to the purposes specified in this text, to contracted cargo companies for delivery purposes, to licensed payment and electronic money institutions and banks for payment processing, to financial advisors/accounting service providers for invoicing processes, to server/hosting service providers for the provision of IT infrastructure, and to authorized public institutions and organizations upon request, in accordance with KVKK Articles 8 and 9.

7. Retention Periods

Your personal data is retained for the periods stipulated in the relevant legislation (e.g., invoices and supporting documents for 5 years according to the Tax Procedure Law, electronic commerce records under Law No. 6563 for 3 years, general statute of limitations under the Turkish Code of Obligations for 10 years, etc.); in cases where no specific period is stipulated, it is retained for the period required by the processing purpose and is deleted, destroyed, or anonymized at the end of this period. Visuals uploaded for personalized printing are destroyed after being stored for a maximum of 1 (one) year for production and potential re-printing requests.

8. Your Rights Under KVKK Article 11

To learn whether your personal data is processed and to request information if it has been processed,
To learn the purpose of processing and whether it is used in accordance with its purpose,
To know the third parties to whom your personal data is transferred, domestically or abroad,
To request correction if your personal data is incomplete or incorrectly processed,
To request the deletion or destruction of your personal data within the framework of KVKK Article 7,
To request that the correction/deletion operations be notified to third parties to whom the data has been transferred,
To object to the emergence of a result against you through analysis exclusively by automated systems,
To demand compensation for damages if you suffer damage due to unlawful processing.

9. Application Method

You can submit your requests regarding your rights mentioned above, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, in writing, along with documents verifying your identity, to the email address kvkk@camtablolar.com or to the address "Mall Of İstanbul The Office, Kat 17 D:136, Başakşehir / İstanbul". Your application will be concluded free of charge as soon as possible and within 30 (thirty) days at the latest, depending on its nature; if the process requires an additional cost, a fee determined by the Personal Data Protection Board may be charged. In case your application is rejected or you are not satisfied with the response, you reserve the right to file a complaint with the Personal Data Protection Board.