PERSONAL DATA PROTECTION AND PROCESSING POLICY
Last updated: March 2026
1. INTRODUCTION
As GAINTART, we attach great importance to the protection of your personal data within the scope of the Law on the Protection of Personal Data No. 6698 ("KVKK"). This policy explains the purposes for which your personal data is processed, to whom and for what purposes it may be transferred, the methods of collection, and the legal reasons.
2. DATA CONTROLLER
GAINTART
E-mail: info@gaintart.com
Website: www.gaintart.com
3. DEFINITIONS
Personal Data: Any information relating to an identified or identifiable natural person.
Special Categories of Personal Data: Data concerning race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance, dress, association, foundation or trade union membership, health, sexual life, criminal convictions and security measures, biometric and genetic data.
Data Processing: Any operation performed on personal data, wholly or partly by automatic means or by non-automatic means provided that it forms part of any data recording system, such as collection, recording, storage, preservation, alteration, adaptation, disclosure, transfer, retrieval, making available for collection, categorization, or blocking the use thereof.
Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.
Explicit Consent: Consent that is related to a specific matter, based on being informed, and expressed with free will.
4. PRINCIPLES OF PERSONAL DATA PROCESSING
GAINTART acts in accordance with the following principles in the processing of personal data:
a) Compliance with the law and the principle of good faith
b) Being accurate and up to date when necessary
c) Processing for specific, explicit, and legitimate purposes
d) Being relevant, limited, and proportionate to the purpose for which they are processed
e) Being stored for the period stipulated by the relevant legislation or required for the purpose for which they are processed
5. CONDITIONS FOR PROCESSING PERSONAL DATA
Your personal data is processed based on the following legal grounds:
- Existence of your explicit consent
- Expressly provided for by law
- Directly related to the establishment or performance of a contract
- Fulfillment of a legal obligation
- Necessary for the legitimate interests of the data controller.
6. TRANSFER OF PERSONAL DATA
Your personal data may be transferred to:
- Shipping and logistics companies (for delivery of your orders)
- Payment institutions (iyzico secure payment infrastructure)
- Authorized public institutions within the scope of legal obligations
- Our legal advisors
7. DATA COLLECTION METHODS
Your personal data is collected through:
- Membership and order forms on our website
- Email communication
- Customer service channels
- Cookies and similar technologies
8. YOUR RIGHTS AS DATA SUBJECT
You have the following rights:
a) To learn whether your personal data is being processed
b) To request information if your personal data has been processed
c) To learn the purpose of processing and whether data is used in accordance with its purpose
d) To know the third parties to whom personal data is transferred domestically or abroad
e) To request correction if personal data is incomplete or incorrectly processed
f) To request deletion or destruction of personal data under the conditions stipulated by law
g) To request notification of correction, deletion, and destruction operations to third parties
h) To object to any result arising against you through the analysis of processed data exclusively by automated systems
i) To claim compensation for damages arising from unlawful processing of personal data
9. HOW TO APPLY
To exercise your rights, you may apply in writing to info@gaintart.com.
GAINTART will conclude the application free of charge within thirty (30) days at the latest.
For questions about this policy, please contact us at info@gaintart.com.