Disclosure Text on the Processing of Personal Data Collected via Membership, Contact Forms, and Orders
In accordance with the Personal Data Protection Law No. 6698 and other related regulations, Four Architecture requests some of your personal data (such as name, surname, account password, email address, delivery address, billing address, mobile phone number) to fulfill legal obligations, facilitate collection, invoice issuance, order delivery, and/or membership registration processes. Your personal data will be processed in a manner that is not open to public access and will not be used beyond the purposes and scope specified in this PDPL Disclosure Text.
Purpose of Processing Personal Data
Personal data at Four Architecture are processed in accordance with legal and honesty principles, for purposes such as planning and executing commercial activities, providing information to authorized institutions and organizations as required by law, obtaining payment services for matters not directly provided by us, delivering orders, collecting payments, creating membership records, issuing invoices, resolving consumer complaints, sending commercial electronic messages with your explicit consent, ensuring compliance with Four Architecture company procedures and related regulations, planning and executing necessary audit activities, planning and executing corporate sustainability activities, protecting our company's reputation, managing request and complaint processes, and planning and executing corporate governance and communication activities. Your personal data may be processed through automatic or non-automatic methods such as obtaining, recording, storing, preserving, altering, reorganizing, in whole or in part. Collected information is not shared with third parties without your knowledge or instruction, is not used for commercial purposes other than operational activities, and is not sold.
Transfer of Personal Data
Personal data obtained from you may be shared with the Ministry of Commerce, domestic/foreign/international public/private institutions and organizations, companies, and our consultants or solution partners for fulfilling the above-mentioned purposes, as well as with other group companies, other authorized institutions and organizations, suppliers or subcontractors, persons or organizations permitted by the Turkish Commercial Code and other relevant legislation, and official authorities upon their request. Your personal data may be transferred to third parties without your explicit consent in accordance with Articles 5 and 8 of the Personal Data Protection Law.
Method of Collecting Personal Data
Your personal data may be collected in written, oral, or electronic form through our website.
Deletion, Destruction, or Anonymization of Personal Data
In accordance with Article 7 of the PDPL, personal data shall be deleted, destroyed, or anonymized by Four Architecture upon your request or ex officio when the reasons for processing no longer exist, despite having been processed in accordance with the relevant legislation. This will be carried out in accordance with the procedures and principles set forth in the Regulation on the Deletion, Destruction, or Anonymization of Personal Data published in the Official Gazette dated 28.10.2017 and numbered 30224. The deletion, destruction, or anonymization of personal data shall be completed within 3 months following the emergence of the obligation. When you request the deletion or destruction of your personal data from our company;
- a) If all processing conditions of personal data have disappeared, your personal data subject to the request will be deleted, destroyed, or anonymized. Your request will be finalized within 30 days at the latest, and you will be informed.
- b) If all processing conditions of personal data have disappeared and the personal data subject to the request have been transferred to third parties, this will be notified to third parties; necessary actions will be taken under the regulation.
- c) If all processing conditions of personal data have not disappeared, your request may be rejected with an explanation in accordance with the third paragraph of Article 13 of the PDPL, and the rejection response will be notified to you in writing or electronically within 30 days at the latest.
Rights Arising from the Personal Data Protection Law
As a data subject, customers have the following rights according to Article 11 of the Law;
- To learn whether their personal data are processed,
- To request information if their personal data have been processed,
- To learn the purpose of processing their personal data and whether they are used in accordance with their purpose,
- To know the third parties to whom their personal data are transferred domestically or abroad,
- To request correction of their personal data if they are incomplete or incorrectly processed,
- To request the deletion, destruction, or anonymization of their personal data,
- To request notification of the transactions made in case of correction, deletion, destruction, or anonymization of personal data to third parties to whom their personal data have been transferred,
- To object to the emergence of a result against them by analyzing the processed data exclusively through automated systems,
- To request the compensation of the damage in case of damage due to the unlawful processing of personal data.
Non-personal information is information that cannot personally identify you. This information can be used for any purpose and shared with third parties without consent.
You can use these rights by contacting us via the contact information on our website.