top of page

إشعار معالجة البيانات والخصوصية

 

This privacy notice has been prepared to inform users about the processing of personal data collected through www.chartsaga.com ("Site") and is compliant with relevant data protection regulations, including the Turkish Personal Data Protection Law No. 6698 (KVKK), the EU General Data Protection Regulation (GDPR), and the applicable U.S. regulations such as FTC guidance and state-level laws (e.g., CCPA).

1. Data Controller Information

Data Controller: www.chartsaga.com
Email: privacy@chartsaga.com
Website: www.chartsaga.com

2. What Data Do We Process?

  • Full name

  • Email address

  • Billing and payment details (address, country, city, postal code, tax number if required)

  • IP address, device and browser information

  • Website usage data (pages visited, clicks, interactions)

3. Purpose of Data Processing

Your personal data is processed for the following purposes in accordance with applicable data protection laws. The processing is necessary for providing services, fulfilling contracts, ensuring security, and complying with legal obligations.

a) Contract Formation and Fulfillment (KVKK Art. 5/2-c; GDPR Art. 6/1-b)

  • Processing purchase transactions

  • Delivering digital products

  • Issuing invoices and managing order details

b) Legal Obligations of the Data Controller (KVKK Art. 5/2-ç; GDPR Art. 6/1-c)

  • Compliance with tax laws

  • Storing invoice and transaction records for the statutory period

  • Providing data to public authorities when legally required

c) Legitimate Interests (KVKK Art. 5/2-f; GDPR Art. 6/1-f)

  • Ensuring website security (e.g., attack prevention, system maintenance)

  • Improving user experience through behavior analysis

  • Identifying and resolving technical issues quickly

d) Situations Requiring Explicit Consent (KVKK Art. 5/1; GDPR Art. 6/1-a)

  • Use of analytical (non-essential) cookies

  • Email subscriptions (e.g., newsletters, promotions)

  • Personalized content or advertising (only with prior consent)

Each of these purposes is grounded in a legal basis, whether contractual necessity, statutory obligations, legitimate business interests, or freely given consent.

4. Legal Basis and Regional Compliance

Turkey (KVKK)

  • Law No. 6698, Articles 5 and 6:

    • Formation and performance of a contract

    • Legal obligations of the data controller

    • Explicit consent where required

European Union (GDPR)

  • GDPR Article 6:

    • Processing necessary for contract performance (1-b)

    • Compliance with legal obligations (1-c)

    • Processing based on explicit consent (1-a)

    • Processing based on legitimate interests (1-f)

United States (FTC / CCPA)

  • Clear and accessible privacy notices as per FTC guidance

  • Transparency regarding data collection and sales (under CCPA - California)

  • User rights to delete or restrict data sharing and opt-out options

5. Who Do We Share Data With?

  • Payment infrastructure providers (e.g., iyzico, Stripe, PayPal)

  • Hosting and security service providers (including Wix infrastructure)

  • Government authorities when required by applicable law

Your personal data is never sold to third parties for marketing purposes.

6. Data Retention Periods

  • Invoice and order data: Minimum of 5 years (for tax and accounting compliance)

  • Analytical cookies: Up to 1 year

  • Technical support records: 1–3 years

  • Legal documentation: Retained for the duration required under statute of limitations

7. Your Rights

Turkey (KVKK):

  • To learn whether your data is being processed

  • To request correction of inaccurate or incomplete data

  • To request deletion or anonymization of your data

  • To object to unlawful processing and request compensation for damages

European Union (GDPR):

  • Right to access your data

  • Right to rectification or erasure (right to be forgotten)

  • Right to restrict processing

  • Right to data portability

  • Right to withdraw consent

  • Right to lodge a complaint with a supervisory authority

United States (CCPA and other state laws):

  • Right to know what personal data is collected about you

  • Right to opt-out of the sale or sharing of personal data

  • Right to request deletion of personal data

  • Right to non-discrimination for exercising your privacy rights

8. Contact

To exercise your rights or for any questions regarding privacy, you may contact us: Email: privacy@chartsaga.com

This notice is compliant with the data protection standards in Turkey, the European Union, and the United States and will be updated as necessary to reflect legal or operational changes.

bottom of page