Privacy Policy

  The protection of your privacy and your personal rights are therefore important to us. Therefore, we would like to ask you to carefully read the following summary about how our website works. You can rely on transparent and fair data processing and we strive to handle your data carefully and responsibly. 

  The following data protection information is intended to inform you about how we use your personal data. In doing so, we adhere to the provisions of Turkey’s the Law on the Protection of Personal Data No. 6698 dated April 7, 2016 (LPPD) as well as those of the European General Data Protection Regulation (GDPR). 

Responsible Person   
  The person responsible within the meaning applicable data protection laws is: 

Leartes Studio 
Istanbul, Turkey 
www.leartesstudios.com 
E-mail: leartesstudios@gmail.com

Scope of the processing of personal data 

  As a matter of principle, we only collect and use personal data from you insofar as this is necessary to provide a functional website and our content and services, e.g. when you register on our website or log in to an existing customer account or when you order products. The collection and use of your personal data regularly only takes place with your consent. An exception applies in cases where prior consent is not possible for actual reasons and the processing of the data is permitted by legal regulations. 

  The security of your personal data is a high priority for us. We, therefore, protect your data stored with us by technical and organizational measures in order to effectively prevent loss or misuse by third parties. In particular, our employees who process personal data are bound to data secrecy and must comply with it. To protect your personal data, it is transmitted in encrypted form; for example, we use SSL=Secure Socket Layer for communication via your Internet browser. You can recognize this by the lock symbol that your browser displays when an SSL connection is established. In order to ensure the permanent protection of your data, the technical security measures are regularly checked and, if necessary, adapted to the state of the art. These principles also apply to companies that process and use data on our behalf and in accordance with our instructions. 

Purposes of processing and legal basis    
  We collect, process, and use your personal data for the following purposes: 

• Establishment and performance of contractual relationships; 
• Sending newsletters; 
• Marketing measures; 
• Customer satisfaction surveys and analyses; 

• Product evaluations; 
• Customer service and customer support; 
• To process orders for our online range of goods. 

The processing of your personal data may be based on the following legal grounds: 

Consent – This is where we have asked you to provide explicit permission to process your data for a particular purpose.  

Contract – This is where we process your information to fulfill a contractual arrangement we have made with you.  

Answering your business inquiries – This is where we process your information to reply to your messages, e-mails, posts, calls, etc.  

Legitimate Interests – This is where we rely on our interests as a reason for processing, generally this is to provide you with the best products and service in the most secure and appropriate way. Of course, before relying on any of those legitimate interests we balance them against your interests and make sure they are compelling enough and will not cause any unwarranted harm. 

Legal Obligation – This is where we have a statutory or other legal obligation to process the information, such as for the investigation of crime.  

Vital interests – This is where we process your information for communications about security, privacy, and performance improvements of our services. Or for establishing, exercising, or defending our legal rights.  

Duration of storage and routine deletion of personal data 

We process and store your personal data only for the period of time required to fulfill the purpose of storage or if this has been provided for, in-laws or regulations. After the purpose has ceased to exist or has been fulfilled, your personal data will be deleted or blocked.  

In the case of blocking, deletion will take place as soon as legal, statutory, or contractual retention periods do not conflict with this, there is no reason to assume that deletion would impair your interests worthy of protection and deletion would not cause a disproportionately high expense due to the special nature of the storage. 

Collection of general data and information, so-called log files 

If you visit our website for information purposes only, without providing personal data via registration or in any other way, only the Internet connection data that your browser transmits to our server will be processed. Our website collects a series of general data and information with each call, which is temporarily stored in log files of a server. A log file is created in the course of an automatic protocol of the processing computer system. The following can be recorded: 

• Access to the website (date, time, and frequency) 
• How you arrived at the website (previous page, hyperlink, etc.) 
• Amount of data sent 
• Which browser and browser version you are using 
• The operating system you are using 

• Which internet service provider you use 
• Your IP address, which your Internet access provider assigns to your computer when you connect to the Internet 

The legal basis for this data processing is our legitimate interest, as the collection and storage of this data are necessary for the operation of the website in order to ensure the functionality of the website and to deliver the content of our website correctly.  

In addition, the data serve us to optimize our website and to ensure the security of our IT systems, and the processing is in this respect also based on our legitimate interest. For this reason, the data is stored for a maximum of 7 days as a technical precaution. 

We also use this data for the purposes of advertising, market research, and to design our services to meet your needs by creating and evaluating user profiles under pseudonyms, but only if you have not exercised your right to object to this use of your data. 

Sending information 
We use your data for sending information ordered by you about our offer and other promotions from us to the e-mail address provided by you.  

Newsletter registration on our website 

On our website, there is the possibility to subscribe to a free newsletter. When you register for the newsletter, the data from the input mask is transmitted to us, i.e. at least your e-mail address. The registration is carried out by means of the so-called double opt-in procedure.  

After registration, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no one can register with other people’s e-mail addresses. For the processing of the data, your consent is obtained during the registration process and reference is made to this data protection notice. If you register for our newsletter, which informs you about our latest products and services, the personal data you provide in this context (such as name, address, and e-mail address) will be processed by us for the purpose of sending you the newsletter. 

Dispatch due to the sale of Digital Assets  

If you purchase digital assets on our website, we may send you information on our own similar digital assets to your specified e-mail address even without your consent. The legal basis for this data processing is our legitimate interest because advertising-related products by way of direct advertising represent a legitimate interest for us as the provider of this website. You may object to the processing of your personal data for the purpose of direct advertising at any time. We will then refrain from further processing for such purposes. You can send us your objection as described below. In addition, you can object to the sending of such newsletters at any time in the future without giving reasons by unsubscribing via the unsubscribe link at the end of each newsletter or by contacting us in any other way. 

We would like you to enjoy reading our e-mails. Therefore, we try to only include content that you are likely to be interested in. We, therefore, measure and store opening and click-through rates in your user profile, i.e. whether and when you open our emails, which content of the emails you click on, and when, as well as whether and why our emails could possibly not be delivered. We also use this data for statistical purposes. In particular, this serves our legitimate interest to evaluate the performance of the individual newsletter campaigns and to define optimization measures in order to make the newsletter as attractive and suitable as possible for you. The legal basis for the processing is our legitimate interest. 

Of course, you can unsubscribe from receiving our information at any time, i.e. revoke your consent with effect for the future or object to data processing. For this purpose, you will find a corresponding unsubscribe link in every mail or newsletter and can confirm the unsubscription on our website. You can also contact us for cancellation at any time. 

Contacting us, registration and Subscription 

1. a) Contacting us

When you contact us by telephone, e-mail, via a contact form, the data you provide will be stored by us based on the performance of a contractual or contractual measure, insofar as it is necessary to answer your questions. The contact is logged in order to be able to prove the contact in accordance with the legal requirements. We delete the data accruing in this context when the respective conversation with you has ended and the facts concerned have been conclusively clarified.  

1. b) Registration

On our website, we offer you the opportunity to register by providing personal data. The data is entered in an input mask and transmitted to us and stored. Registration is necessary in order to set up your customer account, which you can use to place orders and services. The processing of the data for this registration thus serves the fulfillment of the contract of use or the implementation of pre-contractual measures. You can delete your customer account at any time on our website. 

1. c) Subscription

For the conclusion and processing of contracts, we require contact details, such as name, billing address, and e-mail address, as well as information on the type of payment method you have chosen, depending on the individual case. You can store this data in your user account. In addition, we use your data to maintain our customer database so that only accurate data is stored there. In order to avoid typing errors and to ensure that the items you have ordered reach you, we check the completeness and accuracy of your address when you enter it. 

Following your order, you will receive a corresponding order confirmation as well as further documents, which we are obliged to provide in order to fulfill our legal information obligations for an effective conclusion of a contract with you. The processing of your data is therefore necessary for the conclusion of the contract with you. 

1. d) Order confirmation

In order to process the contract and provide you with our services, for example, the webshop, we use your contact details to send you registration confirmations, customer service information, order confirmations, contract documents, or payment processing information. We are obliged to send you these documents in order to comply with our legal information obligations for an effective conclusion of a contract with you. The processing of your data is therefore necessary for the conclusion of the contract with you. 

1. e) Other

Based on our legitimate interest, we use and store your personal data and technical information to the extent necessary to prevent or prosecute misuse or other illegal behavior on our website, e.g. to maintain data security in the event of attacks on our IT systems. This also takes place insofar as we are legally obliged to do so, for example, due to official or court orders, and for the exercise of our rights and claims as well as for legal defense. 

Disclosure of personal data to third parties
Your personal data will only be passed on if there is a legal obligation to do so or to service providers and partner companies that have been carefully selected in advance and are contractually obliged to comply with the requirements of data protection law. 

1. a) Disclosure within affiliated companies

We pass on your personal data for the conclusion and processing of contracts for offers on our website to affiliated companies. This is particularly necessary so that you can use all our offers. If you contact a store or our customer hotline with questions, complaints, or returns as well as other complaints, they will also receive access to your order data in order to be able to process your request. 

b)Disclosure to service providers 

For the operation and optimization of our website and our services and for the processing of contracts, various service companies work for us, e.g. for central IT services or the hosting of our website, for the payment and delivery of products, or for the dispatch of newsletters, to whom we pass on the data required for the fulfillment of the task (e.g. name, address). 

Some of these companies act for us by way of commissioned processing and may therefore use the data provided exclusively in accordance with our instructions. In this case, we are legally responsible for appropriate data protection precautions at the companies we commission. We, therefore, agree on specific data security measures with these companies and monitor them regularly. 

In contrast to order processing, in the following cases we transmit data to third parties for their own use in order to process the contract: 

•    In the case of payment for goods to the payment service provider specified when the order was placed.  

We do not collect or store any payment transaction information such as credit card numbers or bank details during the payment process. You only provide this information directly to the respective payment service provider.  

1. c) Disclosure to other third parties 

We will disclose your data to third parties or government agencies within the framework of existing data protection laws if we are legally obliged to do so, e.g. due to official or court orders, or if we are entitled to do so, e.g. because this is necessary for the prosecution of criminal offenses or for the exercise and enforcement of our rights and claims. 

Data transfer to third countries 

If we use service providers in third countries, we take additional measures to ensure an adequate level of data protection for the transfer of personal data and thus ensure that the transfer is generally permissible and that the special requirements for a transfer to a third country are met (e.g. by concluding standard contracts and additional guarantees, supplementary technical and organizational measures such as encryption or anonymization). 

Data Subject Rights 
Your Rights 

You have a number of ‘Data Subject Rights’ below is some information on what they are and how you can exercise them.  

Right to information: You can request information from us as to whether and to what extent we process your data. 

Right to rectification: If we process your data that is incomplete or incorrect, you can request that we correct or complete it at any time. 

Right to erasure: You may request that we erase your data if we are processing it unlawfully or if the processing disproportionately interferes with your legitimate interests in protection. Please note that there may be reasons that prevent immediate deletion, e.g. in the case of legally regulated retention obligations. Irrespective of the exercise of your right to deletion, we will delete your data immediately and completely, insofar as there is no legal or statutory obligation to retain data in this respect. 

Right to restriction of processing: You may request us to restrict the processing of your data if you dispute the accuracy of the data for a period of time that allows us to verify the accuracy of the data, the processing of the data is unlawful, but you object to erasure and request restriction of data use instead, we no longer need the data for the intended purpose, but you still need this data to assert or defend legal claims, or 

you have objected to the processing of the data. 

Right to data portability: You may request that we provide you with the data you have provided to us in a structured, commonly used, and machine-readable format and that you may transfer this data to another controller without hindrance from us, provided that we process this data on the basis of a revocable consent given by you or for the performance of a contract between us, and this processing is carried out with the aid of automated procedures. If technically feasible, you may request us to transfer your data directly to another controller. 

Right to object: If we process your data for legitimate interest, you may object to this data processing at any time; this would also apply to profiling based on these provisions. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing is for the assertion, exercise, or defense of legal claims. You may object to the processing of your data for the purpose of direct marketing at any time without giving reasons. 

Right of complaint: If you are of the opinion that we violate data protection law when processing your data, please contact us so that we can clarify any questions. Of course, you also have the right to contact the supervisory authority responsible for you, the respective state office for data protection supervision. If you wish to assert any of the aforementioned rights against us, please contact us using leartesstudios@gmail.com. In case of doubt, we may request additional information to confirm your identity. 

Where the processing of your personal information is based on consent, you have the right to withdraw that consent without detriment at any time. 

The above rights may be limited in some circumstances, for example, if fulfilling your request would reveal personal information about another person, if you ask us to delete information which we are required to have by law, or if we have compelling legitimate interests to keep it. We will let you know if that is the case and will then only use your information for these purposes. You may also be unable to continue using our services if you want us to stop processing your personal information. 

We encourage you to get in touch if you have any concerns with how we collect or use your personal information. 

Online Payment, Secure data transmission, and Credit card information 

The transmission of your personal information during an order transaction is encrypted using industry-standard Secure Socket Layer (“SSL”) technology, (SSL encryption version 3). Any credit card information you provide will not be stored by us but will be encrypted and collected directly from our payment service provider PayPal hypertext transfer protocol secure (“https”).  

We may share information with PayPal and Xsolla, you may need to provide credit or debit card information directly to the provider in order to process payment details and authorize payment following a secure link. The information which you supply in such cases is not within our control and is subject to PayPal’s own Privacy Notice and Terms and Conditions. 

Hosting and Content Delivery Networks (CDN) 

This website is hosted by our external service providers (Cloudflare and WordPress). The personal data collected on this website is stored on Cloudflare and WordPress servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contractual data, contact data, names, website accesses, and other data generated via a website. 

Cloudflare and WordPress are used for the purpose of fulfilling the contract with our potential and existing visitors and users and in the interest of a secure, fast, and efficient provision of our online offer by a professional provider. 

Cloudflare and WordPress will only process your data to the extent necessary to fulfill its service obligations and follow our instructions regarding this data. 

Online presences in social media  

We maintain online presences in social networks and platforms on the basis of our legitimate interests and in order to communicate with customers, interested parties, and users who are active there. Unless otherwise stated in this policy, we process the data of users if they communicate with us within the social networks and platforms, e.g. write articles on our online presences or send us messages. 

Integration Of Services And Contents Of Third Parties 

We use within our online offer on the basis of our legitimate interests, content, or services offered by third-party providers in order to integrate their content and services.  

This always requires that the third-party providers of this content are aware of your IP address since the content or service could not send to your browser without the IP address. The IP address is thus required for the display of this content and we endeavor to use providers that only use your IP address for the delivery of the content or services. However, Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may contain, among other things, technical information about the browser and operating system, referring websites, time of the visit, and other information about the use of our online offer, as well as be linked to such information from other sources. 

Market Research 

All your data collected on the Leartes Studio website for the purpose of the market research will be used exclusively for Leartes Studios internal purposes and will not be passed on to third parties. They will be deleted when their knowledge is no longer necessary for market research. 

Remarketing and Behavioural TargetingThese types of services allow Leartes Studio and its partners to analyze how www.leartesstudios.com has been used in a user’s previous sessions in order to target, optimize and deploy advertising. 

This activity is facilitated by tracking usage data and the use of trackers that collect information which is then transmitted to the partners who manage the remarketing and behavioural targeting activities. Some services offer a remarketing option based on email address lists.  

In addition to any opt-out options offered by each of the services listed below, users may opt-out via the Network Advertising Initiative opt-out page. Users may also opt-out of certain advertising features through appropriate device settings, such as device advertising settings for mobile phones or advertising settings in general. 

Remarketing with Google Analytics (Google Inc.) 

Remarketing with Google Analytics is a remarketing and behavioural targeting service provided by Google LLC or by Google Ireland Limited, depending on the location from which www.leartesstudios.com is accessed, which combines the tracking activities of Google Analytics and its cookies with the Google Ads advertising network and the “DoubleClick” cookie. 

Personal data processed: Cookie; Usage data. 

Privacy policy – Opt Out. 

Facebook Remarketing (Facebook, Inc.) 

Facebook Remarketing is a remarketing and behavioral targeting service provided by Facebook, Inc. that connects activity taking place through www.leartesstudios.com to the Facebook ad network. 

Personal data processed: Cookie; Usage data. 

Privacy policy – Opt Out. 

Facebook Custom Audience (Facebook, Inc.). 

Facebook Custom Audience is a remarketing and behavioural targeting service provided by Facebook, Inc. that connects activity taking place through www.leartesstudios.com to the Facebook ad network. 

Personal data processed: Cookie; Email. 

Privacy policy – Opt Out. 

Google Ads Remarketing (Google LLC) 

Google Ads Remarketing is a remarketing and behavioural targeting service provided by Google LLC that links www.leartesstudios.com activity to the Google Ads advertising network and the DoubleClick cookie. Users can opt out of Google’s use of cookies by accessing Google’s ad settings. 

Personal data processed: Cookie; Usage data. 

Privacy Policy – Opt Out. 

Changes  

In order to ensure that our data protection information always complies with the current legal requirements, we reserve the right to make changes at any time. This also applies in the event that the data protection information has to be adapted due to new or revised offers or services. 

Queries and Complaints  

Any comments or queries on this policy should be directed to us. If you believe that we have not complied with this policy or acted otherwise than in accordance with data protection law, then you should notify us.