PRIVACY POLICY AND DISCLOSURE STATEMENT UNDER THE PROTECTION OF PERSONAL DATA
Craft Yapı Malzemeleri ve Kimyasal Ürünler Tic. Ltd Şti. (www.craftyapi.com) prioritizes the protection of our users' personal data.
In this context, as www.craftyapi.com, we would like to inform you as the data controller within the scope of Law No. 6698 on the Protection of Personal Data (KVKK).
The personal data you share with www.craftyapi.com will be processed in accordance with KVKK, for the purposes stated in this text, in line with the collection method, legal basis, and collection activity, for our service purposes, legal obligations, and in connection with them. Your data may be processed, transferred to third parties in Turkey and abroad, stored, used for profiling, and classified. This disclosure statement also aims to inform you about your rights under KVKK.
www.craftyapi.com requests some personal information from you (name, address, phone, email, etc.) to allow you to shop through our website. These personal data may be collected directly through membership registration, phone calls to our call center, or by logging into our website through your social media account. If you log in via a social media account, the relevant social media provider (e.g., www.facebook.com) transfers the disclosed personal data to www.craftyapi.com. In addition to the membership information on the website, the social media provider may also share data such as date of birth, gender, and friend lists with www.craftyapi.com.
1- PURPOSES OF PROCESSING PERSONAL DATA:
The personal data collected by www.craftyapi.com may be processed under the conditions and purposes set out in Articles 5 and 6 of the Law. Specifically, under Article 5(1), based on "explicit consent"; Article 5(2)(a), "where explicitly stipulated by law"; Article 5(2)(b), "where processing is necessary to protect the life or physical integrity of a person who is unable to express consent"; Article 5(2)(c), "where processing is necessary for the performance of a contract"; Article 5(2)(ç), "where processing is required for compliance with legal obligations"; Article 5(2)(d), "where data has been made public by the data subject"; Article 5(2)(e), "where processing is required for the establishment, exercise, or protection of a legal claim"; Article 5(2)(f), "where processing is necessary for legitimate interests of the data controller provided that it does not violate the fundamental rights and freedoms of the data subject"; and Article 6(2) and 6(3) concerning the processing of special categories of personal data.
For the planning and execution of necessary activities to recommend and promote our products and services customized according to users' preferences and needs; for planning and executing customer satisfaction activities; for planning and executing product and service marketing processes; for ensuring the highest benefit from our products and services;
For carrying out the necessary work by our business units to benefit users from our products and services; for planning and executing sales processes, after-sales support services, user/customer relationship management, handling and resolving complaints, contract processes, and legal requests;
For ensuring the legal, technical, and commercial security of www.craftyapi.com and its affiliates; for planning and executing audit activities, ensuring that our operations comply with relevant legislation, securing operations, maintaining data accuracy and updating, providing necessary information to authorized institutions;
For planning and executing information security processes, IT infrastructure management, finance and accounting tracking, legal processes, tax tracking, business activity efficiency analysis, logistics and storage activities, production, procurement, and operational processes.
2- RECIPIENTS AND PURPOSES OF PERSONAL DATA TRANSFER:
To offer a better and more personalized shopping experience, for advertising and promotion activities, www.craftyapi.com may share data with email service providers, social media companies (e.g., facebook.com, twitter.com, youtube.com, instagram.com), search engine companies (e.g., google.com, yandex.com), SMS providers, third parties offering cloud computing, security, and IT support services.
In case of a purchase, personal data such as name, phone number, and address may be shared with national and international shipping companies.
Credit card information is not stored on our servers and transactions take place directly between your device and the bank.
3- METHOD AND LEGAL BASIS OF PERSONAL DATA COLLECTION:
Personal data is collected when you register as a member, access the website, use social media login, or contact our call center. Data may also be collected automatically when visiting our website, including technical details such as IP address, accessed pages, and login time.
4- RETENTION PERIOD OF PERSONAL DATA:
Personal data is stored as long as necessary for legal obligations, contractual relationships, and optimization of services. If the purpose of data processing no longer exists, personal data will be deleted, anonymized, or destroyed as required by law.
5- RIGHTS OF DATA SUBJECTS:
Under KVKK, data subjects have the right to request information on whether their personal data is processed, request details, learn the purpose, request corrections, request deletion, and object to automated processing. Requests can be made following the regulations set by the Personal Data Protection Authority.
Company Information:
Data Controller: Craft Yapı Malzemeleri ve Kimyasal Ürünler Tic. Ltd Şti.
Address: Şerifali Mahallesi, Burhan Sokak, No:58, Ümraniye/Istanbul
Email: info@craftyapi.com
Phone: +90 216 349 09 90