Herein with this statement, Creasaur Teknoloji Ticaret Anonim Sirketi (“Creasaur”, “We”) shall inform you and explain the activities related to processing personal data as Personal Data Protection Law (“PDP Law”) no. 6698 and as applicable, General Data Protection Regulation (Reg. EU 2016/679) (“GDPR”).
1. Identity of Data Controller
Creasaur pays strict attention to the security of your personal data as the Data Controller. Having that awareness, we are extremely cautious in processing, recording, saving all kinds of personal data belonging to you for the following purposes in conformity with law and ethics as well as transferring and briefing third parties limited by the purpose of processing within the framework of the limitations permitted by the legislation with the full comprehension of our responsibility.
2. Purposes of Processing Your Personal Data
Your personal data obtained by Creasaur are kept physically or electronically for a time period befitting processing purposes in accordance with the basic principles stipulated in PDP Law and GDPR. Creasaur processes your personal data internally to increase the quality of service, deliver and improve products which the users have signed up for and to maximize customer satisfaction. Creasaur acts in conformity with the liabilities stipulated mainly in PDP Law, GDPR and other relevant legislations.
3. Processed Personal Data Sharing– To whom and for what purposes can the processed personal data be
As per the purposes mentioned above, your processed personal data can be shared to third party vendors as a response to a product order or to add you to a commercial bulletin circulation list. Certain parts of the information Creasaur collects shall be shared with other users of Creasaur for profile displaying purposes. The information that shall be displayed in your profile will be your choice.
Creasaur may release personally identifiable information to comply with court orders or laws that require us to disclose such information without your consent. In the event of a reorganization, sale or merger we may transfer personally identifiable information to the relevant third party with the user’s consent if required by PDP Law and GDPR.
4. Transfer Abroad of Personal Data
Your personal data shall be transferred abroad by obtaining your explicit consent stipulated in PDP Law and GDPR or without obtaining your explicit consent if the issues stated in PDP Law and GDPR. Whereas Creasaur may share your personal data to third parties under contract with Creasaur such as order or payment processors or other service providers, located in and outside the European Union, to access and use personally identifiable information, but only to the extent necessary to provide those services.
5. Methods and Legal Grounds of Collecting Personal Data
6. Your Rights as the Data Subject
In the event that you would submit your requests related to your rights to Creasaur as data subjects with the procedures mentioned below herein this General Disclosure, Creasaur shall conclude the requests included in the application free of charge and as soon as possible considering the nature of the request and within 30 (thirty) days at the latest. However, in case the operation necessitates a separate cost, the fee in the tariff designated by the Personal Data Protection Committee shall be collected.
The rights as the data subject pursuant to the 11th article of PDP Law are as follows:
a) Learn whether or not her/his personal data have been processed;
b) Request information as to processing if her/his data have been processed;
c) Learn the purpose of processing of the personal data and whether data are used in accordance with their purpose;
d) Know the third parties in the country or abroad to whom personal data have been transferred;
e) Request rectification in case personal data are processed incompletely or inaccurately;
f) Request deletion or destruction of personal data within the framework of the conditions set forth under article 7;
g) Request notification of the operations made as per indents (d) and (e) to third parties to whom personal data have been transferred;
h) Object to occurrence of any result that is to her/his detriment by means of analysis of personal data exclusively through automated systems;
i) Request compensation for the damages in case the person incurs damages due to unlawful processing of personal data
As per the Article 13.(1) of PDP Law, you can convey your request to Creasaur relating to the use of rights stated above in writing or by other means designated by the Personal Data Protection Committee. As the Personal Data Protection Committee did not define any certain method, you are required to submit your application to Creasaur in writing pursuant to the PDP Law. Within that framework, in order to use your rights stated above, you have to send your personal ID information and a letter of request indicating which of the rights stated in Article 11 of PDP Law you would like to use, to the following address by hand, through a notary public, Creasaur’s e-mail or other methods specified in PDP Law:
Address: Üniversiteler Mah. 1605. Cad. Bilkent Cyberpark E Blok No: 3/A Çankaya Ankara/TURKEY
E-mail: [email protected]
As applicable, the rights as the data subject pursuant to the GDPR are as follows:
a) Right of access (Article 15)
b) Right to rectification (Article 16)
c) Right to erasure (“right to be forgotten“) (Article 17)
d) Right to restriction of processing (Article 18)
e) Right to data portability (Article 20)
f) Right to object (Article 21)
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6 (1), including profiling based on those provisions.
Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data will no longer be processed for such purposes. In the context of the use of information society services,
Herein this General Disclosure was drawn up on 08.05.2019. If there would be any amendment in the General Disclosure, then the enforcement date and content of the General Disclosure shall be updated and published on platforms specified in https://creasaur.net/privacy-policy