1. Data Controller

Under the Turkish Personal Data Protection Law (KVKK No. 6698), your personal data may be processed by Çağla Cabaoğlu Gallery ("Gallery" or "Company") as the data controller within the scope described below.

Data Controller: CC GALLERY SANAT DAN. PROD. LTD. ŞTİ.
Address: Zafer Sok. Tarihi Manuel Apt. No: 11-13 D:10 Kat:4, Nişantaşı, Şişli – Istanbul, Turkey
Email: contactgallery@caglacabaoglu.com
Phone: +90 212 291 37 91
Website: caglacabaoglu.com
MERSIS No: 0203077522900001
KEP Address: [KEP Address]

2. Purposes of Processing

Your personal data (identity, contact, customer transaction, transaction security, financial, and marketing data) may be processed for the following purposes:

Managing the sale of artworks, auction processes, and after-sales services (delivery, installation consultancy, certificate of authenticity issuance)
Executing membership and order processes through caglacabaoglu.com
Fulfilling legal obligations under the Distance Sales Regulation and consumer protection laws
Issuing invoices, keeping accounting records, and ensuring financial reconciliation
Operating information security and traffic logging obligations (Law No. 5651)
Managing customer satisfaction, requests, and complaints
With your explicit consent: sending exhibition invitations, new artwork announcements, artist introductions, and newsletters

3. Recipients and Transfers

Your personal data may be shared, within the scope of KVKK Articles 8 and 9, with the following recipients for the purposes above:

Courier and logistics companies for delivery (PTT)
Banks and payment service providers for payment processing (contracted payment service providers)
Technology vendors providing hosting, email delivery, and infrastructure support (international transfers require safeguards and/or explicit consent)
Authorized public institutions for legal obligations (Ministry of Trade, tax offices, courts, enforcement offices)
Lawyers and financial advisors providing legal and accounting services

4. Collection Method and Legal Basis

Your personal data is collected via our website, email, call center, social media channels, and physical gallery visits, in electronic or physical environments, based on the legal bases below:

Performance of a contract (KVKK Art. 5/2-c): membership and distance sales processes
Legal obligation (KVKK Art. 5/2-ç): invoicing, regulatory notifications, record-keeping
Explicitly provided by law (KVKK Art. 5/2-a): Tax Procedure Law, Consumer Law, E-Commerce Law
Establishment, exercise, or protection of a right (KVKK Art. 5/2-e): evidence in disputes
Legitimate interest (KVKK Art. 5/2-f): security, process improvement, and fraud prevention
Explicit consent (KVKK Art. 5/1): marketing communications and international transfers

5. Your Rights Under KVKK

Under KVKK Article 11, you have the right to:

Learn whether your personal data is processed
Request information if it has been processed
Learn the purpose of processing and whether it is used accordingly
Know third parties to whom data is transferred domestically or abroad
Request correction of incomplete or inaccurate data
Request deletion or destruction under KVKK Article 7
Object to results arising from automated processing
Request compensation for damages due to unlawful processing

You may submit your requests in writing to our address above or via contactgallery@caglacabaoglu.com using your registered email address.

6. Explicit Consent Statements (Optional)

Consent requests are presented separately and are not bundled with the KVKK notice. Access to core services is not conditioned on marketing consent.

Marketing communications consent: I agree to receive exhibition invitations, artist talks, auctions, new artwork announcements, and greetings via email, SMS, or phone, and to have my contact details recorded in the IYS (Message Management System).
International transfer consent: I agree to my identity, contact, and customer transaction data being transferred to secure servers abroad due to our hosting, analytics, and email infrastructure being located outside Turkey (e.g., Vercel, analytics providers).

7. Updates and Contact

We may update this notice to reflect legal or operational changes. For questions, you can reach us at contactgallery@caglacabaoglu.com.

Personal Data Protection Clarification Text (KVKK)