PRIVACY AND PERSONAL DATA PROTECTION POLICY
El Crea Designs Yaratıcı Endüstriler ve Cam Tasarım Ürünler Ltd. Şti.
1. PURPOSE AND SCOPE
This Privacy and Personal Data Protection Policy (“Policy”) sets out the principles regarding the processing, protection, storage, and sharing of personal data obtained by El Crea Designs Yaratıcı Endüstriler ve Cam Tasarım Ürünler Ltd. Şti. (“Company”) through the services provided on www.elcreadesigns.com.
This Policy applies to website visitors, users, members, customers, and individuals who contact the Company through www.elcreadesigns.com.
2. LEGAL BASIS
This Policy has been prepared in accordance with the Personal Data Protection Law No. 6698 of the Republic of Türkiye, relevant secondary legislation, and other applicable laws and regulations.
3. PERSONAL DATA COLLECTED
The Company may process personal data for the purpose of providing services, managing order processes, and fulfilling legal obligations.
The personal data that may be processed includes name, surname, phone number, e-mail address, billing address, delivery address, order details, payment and transaction information, customer request and complaint records, website usage data, IP address, cookie data, browser information, session information, and communication records.
Card information used during payment transactions is processed securely by payment infrastructure providers. The Company does not directly store credit card information.
4. PURPOSES OF PROCESSING PERSONAL DATA
Collected personal data may be processed for the following purposes.
Personal data may be processed for receiving, preparing, and delivering orders; providing products and services; responding to customer requests; managing after-sales support processes; handling return, exchange, and damage claim processes; carrying out invoicing and accounting transactions; fulfilling legal obligations; improving user experience; ensuring website security; conducting communication activities; and, where user consent has been obtained, sending campaign, information, and marketing communications.
5. SHARING OF PERSONAL DATA
The Company may share personal data with third parties only to the extent required for the provision of services and in accordance with applicable legislation.
Personal data may be shared with shipping and logistics companies, payment infrastructure providers, accounting and finance service providers, technical infrastructure and hosting service providers, business partners, suppliers, legal and consultancy service providers.
Where legally required, personal data may be shared with authorized public institutions and organizations, courts, enforcement offices, and relevant official authorities.
Personal data is not shared with third parties for advertising or marketing purposes without the user’s explicit consent.
6. RETENTION PERIOD OF PERSONAL DATA
Personal data is retained for the period required for the purpose for which it is processed and for the legal retention periods prescribed under applicable legislation.
When the retention period expires or the purpose of processing no longer exists, personal data is deleted, destroyed, or anonymized in accordance with applicable legislation.
7. PROTECTION OF PERSONAL DATA
The Company takes necessary technical and administrative measures to ensure the security of personal data.
In this context, security measures are applied to prevent unauthorized access, access controls are implemented in digital systems, and data encryption and secure connection methods are used where necessary.
Personal data may only be accessed by authorized persons and is used only to the extent required for the relevant processing purpose.
8. COOKIES
The Company may use cookies to ensure the proper functioning of the website, improve user experience, analyze website performance, and, where necessary, conduct marketing activities.
Users may reject, delete, or restrict cookies through their browser settings.
If cookies are disabled, some features of the website may not function properly.
9. USER RIGHTS
Users have the right to apply to the Company regarding their personal data under the Personal Data Protection Law No. 6698.
Within this scope, users have the right to learn whether their personal data is being processed, request information if it has been processed, learn the purpose of processing and whether it is used in accordance with that purpose, know the third parties to whom it has been transferred, request correction of incomplete or inaccurate data, request deletion or destruction within the framework of the conditions set out under applicable legislation, request notification of correction or deletion procedures to third parties to whom the data has been transferred, and claim compensation if they suffer damage due to unlawful processing.
10. MARKETING AND COMMERCIAL ELECTRONIC COMMUNICATIONS
The Company obtains the user’s consent before sending campaign, announcement, promotional, or marketing-related electronic communications.
The user may refuse to receive commercial electronic communications or change communication preferences at any time.
11. THIRD-PARTY LINKS
The website may contain links to third-party websites or services.
The Company is not responsible for the privacy practices, content, or data processing activities of third-party websites.
Users are advised to review the privacy policies of any third-party websites they visit.
12. CHANGES TO THE POLICY
The Company reserves the right to amend this Policy, provided that such amendments do not violate applicable legislation.
Policy changes become effective on the date they are published on www.elcreadesigns.com.
13. APPLICATION AND CONTACT
For any questions, requests, or applications regarding your personal data, you may contact the Company through the following channels.
E-mail: [email protected]
Phone: +90 536 201 71 48
Address: Gazi Osman Paşa Mahallesi 2209. Sokak No: 5/A Gölbaşı / Ankara, Türkiye
14. ACCEPTANCE
By using www.elcreadesigns.com and/or placing an order through the website, the user acknowledges that they have read this Policy and have been informed that their personal data may be processed within the scope of this Policy.