Arty Studio Personal Data Notice (KVKK)

This notice is given under article 10 of Türkiye's Personal Data Protection Law No. 6698 ("KVKK") for the personal data processed on the Arty Studio pages (artydigital.com.tr/arty-studio and its sub-pages), in the pre-order form, on the checkout page, in order and license delivery and in support correspondence. For processing inside the Arty Studio app itself, see the Privacy Notice (artydigital.com.tr/arty-studio/privacy). This is a translation; the Turkish text (artydigital.com.tr/tr/arty-studio/kvkk-aydinlatma-metni) prevails.

Data controller

Artun Cingöz (ArtyDigital) (Sole proprietorship) · Yeni Bağlıca Mah. 1350 Sk. Park Ladin Evleri No: 2C İç Kapı No: 34, Etimesgut / Ankara, Türkiye · Etimesgut Tax Office 2111201431 · +90 530 230 80 40 · info@artydigital.com.tr

What we process, why and on what legal basis

1. Pre-order form. Your name, email, the plan you're interested in, your computer type, your optional note and the page language.

• Purpose: to take your pre-order, send a confirmation, tell you when sales open and send your personal discount code.
• Legal basis: your explicit consent through the form's checkbox (KVKK art. 5/1). These emails count as commercial electronic messages under Law No. 6563 and are only sent with your consent; withdraw it at any time through the link in any email or by writing to info@artydigital.com.tr.

2. Purchase and orders. Identity (name; optionally your Turkish ID number on a personal invoice), contact (email, phone, billing address), company name and tax details on a company invoice, transaction data (plan, amount, order number, date, contract acceptances) and transaction security data (IP address, iyzico transaction id, the masked first 6 and last 4 digits of your card).

• Purpose: to conclude and perform the distance sales agreement, take payment, deliver the license key, renew or cancel subscriptions, handle refunds and support, issue invoices and prevent fraud.
• Legal basis: concluding and performing a contract (KVKK art. 5/2-c), legal obligation (art. 5/2-ç; tax, commercial and consumer law), establishing, exercising or defending a right (art. 5/2-e) and legitimate interest (art. 5/2-f; transaction security).
• Card details are entered on iyzico's payment page and processed only by iyzico under its own notice; your full card number, expiry date and security code never reach us.

3. Support correspondence. Your email address, name and what you write to us.

• Purpose: to answer you. Legal basis: performing a contract (art. 5/2-c), legitimate interest (art. 5/2-f).

4. Using the site and cookies. Strictly necessary cookies (language and cookie preference) and, only if you agree, analytics cookies (Google Analytics). Details: Cookie Policy (artydigital.com.tr/arty-studio/cookie-policy).

• Legal basis: legitimate interest for necessary cookies (art. 5/2-f); explicit consent for analytics cookies (art. 5/1).

We don't build profiles or make automated decisions, and we don't sell your data.

How it's collected

Electronically, partly by automated means, through the site's forms, the checkout page, email and cookies.

Who receives it

Only for the purposes above and only as far as needed:

• iyzico (iyzi Ödeme ve Elektronik Para Hizmetleri A.Ş., Türkiye): taking payments, charging subscriptions, refunds and fraud prevention, under Law No. 6493.
• Resend, Inc. (USA): sending pre-order, order and license emails.
• Cloudflare, Inc. (USA): hosting, content delivery, security and cookieless aggregate visit statistics (Cloudflare Web Analytics) for the site.
• Google LLC (USA): measuring site traffic, only if you accept analytics cookies.
• Our email provider (support correspondence), our accountant (bookkeeping and invoices) and, where the law requires, competent public authorities and courts.

Transfers abroad: transfers to Resend and Cloudflare rely on the standard contract signed with these providers and notified to the Turkish Data Protection Authority under KVKK art. 9/4. The transfer to Google Analytics relies on the explicit consent you give in the cookie banner after being told that the USA may not ensure protection equivalent to Türkiye's (KVKK art. 9/6-a).

How long we keep it

• Pre-orders: 1 year after sales open, or until you withdraw consent.
• Agreements, pre-contractual forms and order records: at least 3 years (Distance Contracts Regulation).
• Invoices and accounting records: 10 years (Turkish Commercial Code, Tax Procedure Law).
• Support correspondence: 2 years after the request is closed.

Data past its retention period is deleted, destroyed or anonymised.

Your rights (KVKK art. 11)

You can ask whether your data is processed and, if so, for information about it; learn the purpose and whether it is used accordingly; know the third parties in Türkiye or abroad it is transferred to; ask for it to be corrected if incomplete or wrong, or deleted or destroyed under KVKK art. 7, and for those third parties to be told; object to an outcome against you that results solely from automated analysis; and claim compensation for damage caused by unlawful processing.

How to apply

Write to the postal address above, email info@artydigital.com.tr from the address you used for your order or pre-order, or use registered electronic mail (KEP), a secure electronic signature or a mobile signature. Include your name, (for written requests) your signature, your Turkish ID number (or, for foreigners, nationality and passport or ID number), your address, email and phone if any, and what you're asking for. We answer free of charge within 30 days at the latest; if handling it involves an extra cost, the fee set by the Data Protection Board may be charged. If you're not satisfied with our answer, you can complain to the Data Protection Board (kvkk.gov.tr).