PERSONAL DATA POLICY

Information on the Protection of Personal Data

At Galata Sanat Mağazacılık A.Ş., we highly value the protection, processing, and storage of your personal data in compliance with Law No. 6698 on the Protection of Personal Data (“Law”). This document aims to inform you about the collection, processing, and transfer of your personal data, as well as your legal rights under the Law.

1. Methods of Collecting Personal Data

As Galata Sanat Mağazacılık A.Ş., in our capacity as a data controller, we collect your personal data through verbal, written, or electronic means via:

Our website,
Social media platforms,
Mobile applications,
Customer service channels,
And other relevant channels.

This data collection is done to provide you with our services, inform you about our campaigns (upon your consent), record your suggestions and complaints, improve our service standards, and develop commercial and business strategies.

2. Processing of Personal Data and Purposes

Your personal data, including special categories of personal data obtained with your consent, may be:

Collected,
Recorded,
Stored,
Updated,
Classified,
Shared with authorized third parties, including legal and business partners, within Turkey or abroad under legal obligations and for service-related necessities.

We process your personal data in strict compliance with Law No. 6698 and other applicable regulations.

3. Transfer of Personal Data

Galata Sanat Mağazacılık A.Ş. may share your personal data only under the following conditions:

With your explicit consent,
Within legal security and confidentiality standards,
Within Turkey or abroad, provided adequate security measures are taken.

The recipients of these transfers may include:

Group companies,
Business partners,
Service providers,
Auditing firms,
Public authorities when legally required.

This data sharing ensures the smooth operation of company activities, customer service enhancement, and service quality improvement.

4. Rights of the Data Subject Under Law No. 6698

According to Article 11 of the Law, individuals whose personal data is processed have the right to:

a) Request confirmation of whether their personal data is being processed,
b) Obtain information on the purpose of processing,
c) Know the third parties to whom personal data is transferred within or outside the country,
d) Request correction of incomplete or incorrect data,
e) Request deletion or destruction of personal data in accordance with the Law,
f) Demand notification of data correction or deletion to third parties who have received the data,
g) Object to any automated data processing that may lead to a negative outcome,
h) Request a copy of their personal data.

For any questions or concerns, please feel free to contact us.