KVKK Information Notice

1. Data Controller

Pursuant to the Law No. 6698 on the Protection of Personal Data (“KVKK”), your personal data are processed, as data controller, by Yiğit Kaan Kuştemir (Beyoğlu Tax Office, TIN: 5981171759), the owner and operator of the Get Society and Get SoArt brands, within the scope set out below.

2. Purposes of Processing Personal Data

For Customers:

• Execution of sales, ordering, delivery, return, and exchange transactions for products and services
• Management of payment transactions, invoicing, and accounting processes
• Fulfillment of obligations under the pre‑contract information form and the distance sales agreement
• Customer service, call center, and support processes
• Fraud prevention, payment security, and identity verification
• Campaigns, promotions, discounts, and marketing activities (with explicit consent)
• Compliance with obligations vis‑à‑vis judicial and administrative authorities

For Artists / Designers / Suppliers:

• Establishment, performance, and retention of artist collaboration agreements
• Publication of artwork images, descriptions, and artist biographies on the website, social media, catalogues, fairs, and events
• Planning and execution of product/artwork packaging, shipping, and delivery processes
• After‑sales processes (payments, issuance of expense notes/invoices, accounting records)
• Use of works in brand promotion and marketing activities
• Use as evidence in legal disputes

3. Categories of Personal Data Processed

• Identity Data: Name, surname, Turkish ID number, signature, date of birth
• Contact Data: Phone, e‑mail, address
• Financial Data: Bank IBAN, payment details, invoice/expense note information
• Customer Transaction Data: Order, delivery, return, and exchange records
• Visual/Audio Data: Artwork/product photos, artist promotional images, video content
• Transaction Security Data: IP address, log records, device information, cookie data
• Contract Data: Distance sales agreement, artist collaboration agreement, pre‑contract forms

4. Methods of Collection and Legal Grounds

Collection Methods:

• Via website, mobile application, and social media platforms
• Through written agreements, e‑mails, and telephone calls
• During shipping and logistics processes
• At fairs, events, and exhibitions
• Through payment service providers and banks

Legal Grounds:

• Establishment and performance of a contract (KVKK Art. 5/2‑c)
• Compliance with a legal obligation (KVKK Art. 5/2‑ç)
• Protection of our legitimate interests (KVKK Art. 5/2‑f)
• Explicit consent (KVKK Art. 5/1, Art. 6/2)

5. Transfer of Personal Data

• To courier and logistics companies
• To payment institutions, banks, and virtual POS providers
• To accounting and certified public accounting service providers
• To IT infrastructure providers (hosting, e‑mail, cloud storage, etc.)
• To social media and advertising platforms (with explicit consent)
• To competent public authorities where required by law

Cross‑Border Transfers: Your personal data will be transferred abroad only with your explicit consent or to countries deemed to have adequate protection within the scope of KVKK Art. 9.

6. Rights of the Data Subject (KVKK Art. 11)

• To learn whether your data are processed
• If processed, to request information
• To learn whether they are used in line with the purpose of processing
• To know domestic/overseas third parties to whom they are transferred
• To request correction if incomplete/incorrect
• To request deletion/destruction under KVKK Art. 7
• To request notification of these actions to third parties to whom data have been transferred
• To object to results arising to your detriment through exclusively automated systems
• To claim compensation in case of damage due to unlawful processing

7. Application Methods

You may submit your requests via:

• In writing to: [Company Address]
• E‑mail: [KVKK application e‑mail address]
• Via KEP (Registered Electronic Mail) address

Applications are finalized within 30 days.

Cookie Policy

Purpose

This policy explains the types and purposes of cookies used on the Get Society & Get SoArt website/mobile applications and how users can manage their cookie preferences.

Types of Cookies Used

• Strictly Necessary Cookies: Required for site functionality (sign‑in, cart operations, etc.)
• Performance Cookies: Traffic measurement and analytics
• Functional Cookies: Saving user preferences
• Targeting/Advertising Cookies: Serving interest‑based advertising

Cookie Management

You can disable or delete cookies via your browser; however, certain site features may not function properly if cookies are disabled.

Personal Data Retention and Destruction Policy

Purpose

Pursuant to KVKK Art. 7, this policy sets out retention periods for processed personal data, destruction methods, and the periodic destruction process.

Retention Periods

• Contracts, invoices, and accounting records: 10 years (pursuant to TCC and Tax Procedure Law)
• Customer service records: 3 years
• Marketing data: Until explicit consent is withdrawn
• Cookie data: Up to 2 years

Destruction Methods

• Physical destruction (secure disposal of paper documents)
• Digital deletion (rendering data inaccessible)
• Anonymization (de‑identification)

Periodic Destruction

The data inventory is reviewed every 6 months and data whose retention periods have expired are destroyed.