This disclosure text is prepared under Article 10 of Turkey's Personal Data Protection Law No. 6698 ("KVKK") to inform you about the personal data KartonKutu.al ("Data Controller") processes through kartonkutu.al (the "Site"). For a general description of our privacy practices, see our Privacy Policy.
Identity of the Data Controller
For personal data processed through the Site, the data controller is KartonKutu.al. Corporate details such as our registered legal name, tax/MERSIS number, and registered address are not yet published on the Site as of this text's publication date; this page will be updated once those details are available. In the meantime, all KVKK requests can be directed to the data controller through the contact channels below.
Categories of Personal Data Processed
- Identity and contact data: full name, company name, email address, phone number
- Customer transaction data: the industry, box type, dimensions, quantity, printing/material/colour preferences, and message content you share in a quote request
- Uploaded files: any design or sample files you upload with a quote request
- Transaction security data: server-log records such as IP address, browser/device information, access date/time, and the required session/CSRF cookies
Purposes of Processing
Your personal data is processed to review and respond to your quote requests, communicate with you, manage our customer relationship, keep the Site secure, and comply with our legal obligations.
Method of Collection and Legal Basis
Your personal data is collected electronically, entirely on your own initiative, when you complete the Site's quote or contact forms, or contact us directly by email or phone. It is processed on the legal bases set out in KVKK Article 5(2): being directly related to the establishment or performance of a contract, being necessary for our legitimate interests provided your fundamental rights and freedoms are not harmed, and, where applicable, your explicit consent.
Transfer of Personal Data
Your personal data may be shared only to the extent necessary to fulfil your request (for example, with the suppliers who provide the Site's hosting/infrastructure) or where required by law, with competent public authorities. Your data is never transferred to third parties for marketing purposes.
Your Rights as a Data Subject (KVKK Art. 11)
By applying to the data controller, under KVKK Article 11 you have the right to:
- Learn whether your personal data is being processed,
- Request information about it if it has been processed,
- Learn the purpose of processing and whether it is used accordingly,
- Know the third parties to whom it is transferred, domestically or abroad,
- Request correction if it has been processed incompletely or incorrectly,
- Request its deletion or destruction once the grounds for processing no longer apply,
- Request that any correction, deletion, or destruction be notified to third parties to whom the data was transferred,
- Object to a result to your detriment arising from analysis of your data exclusively through automated systems,
- Claim compensation for damages arising from unlawful processing.
How to Apply
To exercise the rights above, send your request to info@kartonkutu.al or call 0541 016 20 28. Your request will be concluded as soon as possible and, at the latest, within the timeframes set out in KVKK.