GDPR
Personal Data Protection Notice
canfoto.com attaches great importance to the protection of your personal data and hereby informs you within the scope of the Turkish Personal Data Protection Law (Law No. 6698) and the EU General Data Protection Regulation (GDPR).
1. Data Controller
Your personal data are processed by Canfoto as the data controller, within the purposes explained below.
2. Purposes of Processing Personal Data
Collected personal data may be processed for the following purposes:
-
Receiving and processing orders, payments, and delivery of products,
-
Carrying out customer service processes,
-
Conducting and improving e-commerce activities,
-
Running campaigns, promotions, and marketing activities,
-
Fulfilling legal obligations.
3. Categories of Processed Personal Data
-
Identity information (name, surname),
-
Contact details (phone, e-mail, address),
-
Payment and billing information,
-
Website usage data (IP address, cookies, transaction history).
4. Transfer of Personal Data
Your personal data may be transferred to:
-
Public authorities when legally required,
-
Logistics companies and payment service providers,
-
Service providers we cooperate with for infrastructure and IT support.
5. Method and Legal Basis of Collecting Personal Data
Your personal data are collected via our website, mobile applications, social media accounts, e-mail, call center, and similar channels, based on the legal grounds of contract performance, legal obligations, legitimate interests, and explicit consent.
6. Your Rights Under Data Protection Law
You have the right to:
-
Learn whether your data are processed,
-
Request information if processed,
-
Learn the purpose of processing,
-
Request correction if incomplete or inaccurate,
-
Request deletion or destruction,
-
Request compensation if you suffer damages due to unlawful processing.
7. Contact & Application
You may send your requests regarding your rights to info@canfoto.com. Applications will be concluded within the legal periods specified under Turkish Personal Data Protection Law and GDPR.