BEO ATELIER PRIVACY AND DISCLOSURE NOTICE

This privacy and disclosure notice has been prepared by BEO Atelier Bilişim ve Ticaret Limited Şirketi (“Company”) in its capacity as data controller within the scope of Article 10 of the Law on the Protection of Personal Data No. 6698 (“KVK Law”) and the Communiqué on the Principles and Procedures to be Followed in Fulfilling the Obligation to Inform (“Communiqué”).

1. General Information

In the KVK Law No. 6698, personal data is defined as “any information relating to an identified or identifiable real person.” Your personal data is processed by the Company as the data controller within the procedures and principles specified in the KVK Law due to existing customer and visitor relationships between you and the Company. The customer is the real or legal person who receives goods or services under a specific contract from the Company.

2. Data Controller and Representative

Pursuant to the KVK Law, the Company processes personal data as the data controller, and the title and contact details of the Company are as follows:

    • BEO Atelier Bilişim ve Ticaret Limited Şirketi

    • Balgat Mah. Ceyhun Atuf Kansu Cad. No: 36/6 Çankaya/Ankara

    • 0164092623300001 Mersis no.

    • info@beoatelier.com

3. Categories of Personal Data and Purposes of Processing

3.1. Your personal data can be processed and transferred within the personal data processing and transfer conditions specified in Articles 5, 6, and 8 of the KVK Law for the purposes outlined below. The categories of the data processed about you and the purposes of processing are comprehensively presented in the tables below.

DATA CATEGORY PROCESSED DATA
1. Identity Name, Surname, T.C. Identity No/Identity No, Nationality Information.
2. Contact Phone No., E-Mail Address, Address (Residence/Other) Address (Contact-Correspondence).
3. Customer Transaction T.C. Identity No., Tax Office and No., Invoice Information, Order – Request Information.
4. Transaction Security Cookie (Website Internet User).
5. Finance Bank/IBAN No. (account information), Tax Office/No., Receivable Amount, Debt Amount, Invoice Information, Order Request Information.
6. Apparel Product information related to the order, body information.

PROCESSING PURPOSES

    • Execution of Emergency Management Processes

    • Execution of Information Security Processes

    • Execution of Audit/Ethics Activities

    • Conducting Activities in Compliance with Legislation

    • Execution of Finance and Accounting Works

    • Conducting Loyalty Processes to Company/Product/Services

    • Ensuring the Security of Physical Space

    • Following and Executing Legal Affairs

    • Execution of Internal Audit/Investigation/Intelligence Activities

    • Execution of Communication Activities

    • Execution/Auditing of Business Activities

    • Execution of Business Continuity Activities

    • Execution of Logistics Activities

    • Execution of After Sales Support Services for Goods/Services

    • Execution of Sales Processes for Goods/Services

    • Execution of Production and Operation Processes for Goods/Services

    • Execution of Customer Relationship Management Processes

    • Execution of Activities for Customer Satisfaction

    • Organization and Event Management

    • Execution of Storage and Archive Activities

    • Execution of Contract Processes

    • Follow-up of Requests/Complaints

    • Execution of Supply Chain Management Processes

    • Ensuring the Security of Data Controller Operations

    • Providing Information to Authorized Persons, Institutions, and Organizations

    • Execution of Management Activities

    • Creation and Tracking of Visitor Records

3.2. Some of the personal datas in the KVK Law are regulated separately as “special categories of personal data” and special provisions are brought to their processing. Special categories of personal data accepted in the KVK Law include data on race, political opinion, ethnic origin, philosophical belief, religion, sect, or other beliefs, appearance, membership in associations, foundations, or trade unions, health, sexual life, biometric and genetic data, and data on convictions and security measures. Due to our field of activity in the sale of textile/clothing products, only your appearance data is processed.

3.3. Detailed information and policy regarding the cookies processed on the website are also presented during the visit to the website.

4. To Whom and For What Purposes Your Processed Personal Data May Be Transferred

Personal data can be transferred to third parties within the scope of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law No. 6698, based on the legal reasons indicated in section “5”, for the purposes outlined in section “3”. Your personal data is not transferred abroad. Within Turkey, personal data is transferred to the following recipient groups, along with the purposes of the transfer and the relevant business and processes in the same table:

Primarily:

    • Tax and financial affairs including financial advisory, accounting, finance office, tax office, banks, and financial institutions.

    • Resolution of disputes with related individuals and institutions (legal consultancy, advocacy, mediation, etc.).

    • Fulfillment of legally required requests from judicial, administrative, and official authorities.

    • Conducting privacy standards and quality audits by authorized public institutions, audit firms, and information security companies.

    • Third parties involved in all kinds of commitments and subcontracting, contractors, sub-contractors, etc., within the company’s field of activity.

Additionally, in connection with fulfilling processing conditions:

    • Real persons or private law legal entities

    • Shareholders

    • Authorized Public Institutions and Organizations.

5. Method and Legal Basis of Collecting Personal Data

The explicit consent of the data subject is one of the most important legal bases for personal data processing. However, Article 20 of the Constitution clearly regulates that other cases specified by law can permit processing without consent. In this context, the KVK Law primarily regulates explicit consent as a legal basis for personal data processing and separately specifies the legal grounds (conditions) for processing without consent.

In this respect, personal data collected and processed physically or electronically are primarily based on:

    • Income Tax Law No. 193

    • Turkish Code of Obligations No. 6098

    • Turkish Commercial Code No. 6102

    • Turkish Civil Code No. 4721

    • Consumer Protection Law No. 6502

And other relevant primary and secondary legislation and in accordance with the processing conditions specified in the KVK Law:

    • With the explicit consent of the data subject

    • Clearly stipulated by laws

    • Necessary for the establishment or performance of a contract where the data subject is a party

    • Necessary for compliance with a legal obligation to which the data controller is subject

    • Data made public by the data subject

    • Necessary for the establishment, exercise, or protection of a right

    • Necessary for the legitimate interests of the data controller, provided it does not harm the fundamental rights and freedoms of the data subject.

6. Rights of the Data Subject under Article 11 of the KVK Law No. 6698

As a data subject, you are entitled to the following rights under Article 11 of the KVK Law:

    • To learn whether your personal data is processed, and if processed, to request related information

    • To learn the purpose of processing your personal data and whether it is used in accordance with the intended purpose

    • To know the third parties to whom your personal data is transferred domestically or abroad

    • To request the rectification of incomplete or inaccurate data

    • To request the deletion or destruction of your personal data under the conditions prescribed by relevant legislation

    • To request the notification of rectification, deletion, or destruction to the third parties to whom your personal data has been transferred

    • To object to the processing of your personal data exclusively through automated systems that lead to a result against you

    • To request compensation for the damage arising from the unlawful processing of your personal data.

You can direct your applications regarding your above-mentioned rights to our Company via application form or written petitions physically submitted to the Company’s address specified above with a registration number, through notary channels, or by sending them via email signed with a secure electronic signature or mobile signature to info@beoatelier.com.