Protection of Personal Data
In accordance with the Personal Data Protection Law No. 6698 (KVKK) and the European Union General Data Protection Regulation (GDPR), alongside other international data protection standards, Colorex shows maximum sensitivity to the security and privacy of your personal data. Your personal data obtained during your visits to our website, product/service purchases, and within the scope of our commercial relations are processed by our company in the capacity of data controller within the limits and legal grounds specified below.
Processed Personal Data
Within the scope of our activities, the following primary data is processed from our website visitors, customers, and business partners: Identity Information (Name, surname, title), Contact Information (Phone, e-mail, registered address), Financial and Transaction Information (Invoice, order, tax number, bank account details), Transaction Security and Marketing Information (IP address, cookie records, website log records, request and complaint history).
Purposes of Processing Personal Data and Legal Grounds
Your personal data is processed for the purposes of carrying out our company's commercial activities, managing goods and service sales processes, providing after sales support services, fulfilling contractual obligations, keeping financial and accounting records, and ensuring information security processes requested by legal authorities. This data is processed based on the legal grounds of being directly related to the establishment or performance of a contract, being mandatory for the data controller to fulfill its legal obligation, and data processing being mandatory for the legitimate interests of the data controller under Article 5 and Article 6 of the KVKK and Article 6 of the GDPR.
Transfer of Personal Data and International Data Transfer
Your obtained personal data is safely stored for legal retention periods. In order to continue our activities, your data may be transferred to authorized public institutions, auditing firms, customs and logistics companies, banks, and technology business partners. Cross border data transfers are carried out strictly in compliance with GDPR standards, exclusively to countries with an adequate level of protection or by providing appropriate safeguards with international validity, such as Standard Contractual Clauses (SCC).