Contact information

Company Title: Samko Kafe Ticaret Limited Şirketi  
Brand Name: 3DiiD  
Address: Emek Mah. Bişkek Cad. No: 72A ÇANKAYA / ANKARA 
Mersis No: 0742105624000001
Tax Office / No: 7421056240
Email: support@3diid.com  
KEP: samkokafe@hs01.kep.tr  
Legal notice:

CLARIFICATION TEXT REGARDING PERSONAL DATA

1. Purpose and Scope

The purpose of this Privacy Policy and Clarification Text Regarding Personal Data is to explain for what purposes and on what legal grounds your personal data are processed pursuant to the Law No. 6698 on the Protection of Personal Data ("KVKK"), to whom and for what purposes they can be transferred, data collection methods, cross-border data transfer processes, retention-destruction policies, and your rights under the KVKK in the event that you visit the www.3diid.com website operated by Samko Kafe Ticaret Limited Şirketi ("3DiiD, Company"), register as a member, and/or benefit from 3D printing, manufacturing, and custom design services offered through them. This text covers all natural persons ("User/Customer") who visit the site and its subpages, contact 3DiiD for any purpose, or benefit from its services. As 3DiiD, your personal data are processed and stored in accordance with the Law on the Protection of Personal Data.


2. Processed Personal Data Categories and Collection Method

The following categories of personal data may be obtained, stored, and processed by 3DiiD through automated means (website, cookies, SDKs, log records) and/or non-automated means (forms, customer services, email and WhatsApp correspondence, uploaded 3D model files) as subject to all kinds of processing. Within the scope of the KVKK, any operation performed on data is considered "processing of personal data".


    • Identity and Contact Information: Name-surname, email, mobile phone number, delivery address, billing address, Turkish Republic ID number (for invoicing processes).
    • Membership and Profile Information: Username, preferences and likes, communication preferences, shopping habits, hobbies, and interests.
    • Customer Transaction, Manufacturing, and Purchasing Information: Purchase documents (e-invoice/e-archive), order details, Collection Product selections, Custom Design requests, production and 3D printing parameters, product/brand information, price, date, return, and defective performance process data.
    • Financial and Payment Information: Payment method preferences, IBAN information required for return/refund transactions (Credit card information is processed directly on the infrastructure of our contracted payment institution iyzico and is not stored on our Company's servers).
    • Visual, Technical, and Design Data: 3D model files (STL, OBJ, STEP, etc.), technical drawings, custom dimension/color requests, and revision history uploaded or transmitted to us by you for 3D printing and manufacturing purposes.
    • Survey and Interaction Data: Survey responses, evaluation scores, feedback, and complaint content.
    • Transaction Security and Usage Data: Session information, IP address, device and browser information, click behavior, browsing duration and details, system logs.
  • Marketing and Cookie Data: Targeting/retargeting cookies, analytical cookies, and similar technologies (subject to explicit consent).
  • Legal Transaction Information: Start and end time of the service provided, type of service used, confirmed Distance Sales Agreement, Contract for Work, and other legal texts and contracts enabling the use of services offered by 3DiiD.

3DiiD does not aim to process special categories of personal data (health data, biometric data, religious beliefs, union membership, etc.); if processing becomes mandatory, they shall not be processed unless the necessary explicit consent pursuant to Article 6 of the KVKK and additional security measures stipulated by the Board are provided.


3. Purposes and Legal Grounds for Processing Personal Data

Your personal data are processed for the following purposes based on the processing conditions stipulated in the KVKK:

Establishment and Performance of Contract (KVKK Art. 5/2-c):

    • Membership creation and management, access to services.
    • Establishment of the Distance Sales Agreement and Contract for Work, execution of 3D printing and production processes, delivery of products.
    • Preliminary review, slicing, and technical optimization processes of 3D model files sent by the BUYER.
    • Verification of purchase documents (invoices), fee refunds, cancellation, and management of re-production/exchange processes in cases of defective performance.


Fulfillment of Legal Obligations (KVKK Art. 5/2-ç):

    • Retention of traffic data pursuant to Law No. 5651 and secondary legislation.
    • Issuance, retention, and audit processes of e-invoices/e-archive invoices pursuant to the Tax Procedural Law (VUK) and the Turkish Commercial Code (TTK).
    • Making statutory notifications to relevant regulatory institutions and judicial authorities.


Legitimate Interest (KVKK Art. 5/2-f):

    • Retention of 3D model files for a period of 30 (thirty) days from delivery to serve as evidence in disputes that may arise after delivery and in defective performance claims.
    • Protection of intellectual and industrial property rights of 3D models, prevention of unauthorized copying, and conducting security and verification audits against copyright infringements.
    • Prevention of abuse and fraud, system security, and performance analysis.
    • Improvement of services, personalization of user experience (excluding non-essential cookies).
    • Conflict and dispute management, auditing, and reporting.


Explicit Consent (KVKK Art. 5/1 and Art. 9):

Sending commercial electronic messages (SMS/email) and personalized marketing activities.

  • Data processing for analysis and advertising purposes, use of advertising/targeting and analytical cookies, as well as Facebook Custom Audiences and similar technologies.
  • Use of services/technologies that may result in cross-border data transfer (e.g., Google Analytics, Facebook).

Acceptance of the Privacy Policy does not replace explicit consent. For transactions requiring explicit consent, separate and freely given approval is obtained from the user specifically for each purpose; failure to give consent does not affect the performance of core services.


4. Commercial Electronic Messages and İYS Compliance

Pursuant to Law No. 6563 on the Regulation of Electronic Commerce, approval is obtained for sending commercial electronic messages and recorded in the Commercial Electronic Message Management System (İYS). Users may withdraw their consent at any time via İYS, in-site preferences, or through the opt-out mechanism included in messages; opt-out requests are implemented within 3 business days at the latest.


5. Cookies and Similar Technologies

3DiiD uses cookies and similar technologies to increase service quality and enhance user experience. Explicit consent is obtained for non-essential cookies; they are disabled by default and can be managed via the cookie consent management platform (CMP).

    • Essential Cookies: Necessary for the operation of the site; cannot be turned off.
    • Performance and Analytical Cookies: Used to measure and improve site usage; work only with explicit consent.
    • Functional Cookies: Remember your preferences; work only with explicit consent.
    • Advertising/Targeting Cookies: Offer content/ads based on your interests; work only with explicit consent.

The name, provider, purpose, and duration of used cookies are listed in detail and updated on the cookie management panel (e.g., _ga - Google Analytics - 12 months - visit analysis; _fbp - Facebook - 90 days - retargeting). Foreign providers such as Google Analytics and Facebook Custom Audiences are activated only with your explicit consent; IP anonymization and privacy controls are applied.


6. Sharing/Transfer of Personal Data

Your personal data may be shared/transferred with the following parties in a proportionate manner:

  • Mandatory business/solution partners and data processors required for the execution of the service: Infrastructure, hosting, software, payment infrastructure (iyzico), courier/logistics companies, call center, marketing, and analytics service providers (under contractual security commitments as data processors).
  • Authorized Public Institutions, Organizations, and Judicial Authorities: Pursuant to legislation and upon request (Tax offices, Courts, Consumer Arbitration Committees, etc.).

3D model files and technical drawings uploaded by the BUYER for Custom Design purposes shall strictly not be shared with third parties, reproduced, or offered for sale by incorporating them into our own library without the explicit consent of the customer.


7. Cross-Border Data Transfer

Pursuant to Article 9 of the KVKK, personal data may be transferred to countries with adequate protection or through commitment mechanisms permitted by the Board. The use of Google Analytics, Facebook Custom Audiences, and similar technologies may result in cross-border transfers; these technologies are activated only with your explicit consent and are disabled if you do not give consent. KVKK and Board decisions are complied with during cross-border transfer processes.


8. Protection of Personal Data and Security Measures

Pursuant to Article 12 of the KVKK, 3DiiD takes the necessary technical and administrative measures to prevent unlawful processing of and access to personal data and uploaded 3D designs, and to ensure data preservation:

    • Access authorization matrix, principle of least privilege, and multi-factor authentication (MFA).
    • TLS/HTTPS during transmission; encryption and hashing during storage; backup and disaster recovery.
    • Logging, recording, and auditing; firewalls and anti-virus systems.
    • Employee KVKK and information security training; policies and procedures; SLAs and audits with data processors.
    • Additional data protection provisions with cloud providers.

In the event of a data breach, notification shall be made to the Board within 72 hours at the latest; data subjects shall be informed within a reasonable time via email or in-system notification, and necessary measures shall be taken.


9. Retention Periods and Destruction

Personal data are retained for periods connected and proportionate to the purpose; at the end of the period, they are deleted, destroyed, or anonymized. Retention periods are as follows:

  • Membership and profile information: During the membership period; maximum 10 years after membership ends.
  • 3D Model Files (STL/OBJ etc.): Retained for 30 (thirty) days from the product delivery date for the purpose of managing defective performance and dispute processes, permanently deleted at the end of the period.
  • Invoice, order, and return transaction records: Maximum 10 years pursuant to VUK and TTK.
  • Traffic data: 2 years pursuant to Law No. 5651.
  • Financial and accounting records: Maximum 10 years pursuant to VUK/TTK.
  • Survey responses: Without time limitation in statistical/anonymized form.

3DiiD carries out periodic destruction processes in line with the "Personal Data Retention and Destruction Policy".

 

10. Accurate and Up-to-Date Reporting of Personal Data

The User accepts that the information shared must be accurate and up to date, and that liability for any consequences arising otherwise belongs to them. In case of changes to your information, you can make updates through the system or via support channels.


11. Rights Under Article 11 of the KVKK and Application Procedure

Pursuant to Article 11 of the KVKK, the User may apply to 3DiiD regarding their personal data to:

    • Learn whether personal data are processed,
    • Request information if personal data have been processed,
    • Learn the purpose of processing and whether they are used in accordance with their purpose,
    • Know third parties to whom data are transferred domestically/abroad,
    • Request correction if incomplete or incorrectly processed,
    • Request deletion/destruction pursuant to Article 7 of the KVKK,
    • Request notification of transactions to third parties to whom data were transferred,
    • Object to a result against the person by analyzing data exclusively through automated systems,
    • Request compensation for damage in case of incurring damage due to unlawful processing.

You can transmit your applications:

    • In writing to our company address,
    • From your registered electronic mail (KEP) address,
    • To 3diid.service@gmail.com by providing identity verification through your registered email address in our system. Applications shall be concluded within 30 days; potential costs may be charged in accordance with the KVKK and relevant Communiqué provisions.


12. Other Sites/Third Parties and Integrations

3DiiD is not responsible for the content and data processing practices of other linked sites/applications; we recommend reviewing the privacy policies of these third parties. Integrated third parties (payment institutions, logistics, analytics providers) act within their own data controller framework; data sharing is carried out only at the minimum level necessary for service performance and under contractual safeguards.

13. Age Limit

3DiiD services are intended for persons aged 18 and over. For persons under the age of 18, membership cannot be created or orders cannot be placed unless parent/guardian permission is obtained.


14. Notifications and Revisions

Since 3DiiD services and technologies may change, this text may be updated. Updates enter into force as soon as they are published on www.3diid.com and are announced to registered users via email/notification. Separate consent is requested for new purposes requiring explicit consent; the user may refrain from giving consent or withdraw it if desired.


15. Data Controller Details

VERBIS and data controller representative information will be announced when the legal infrastructure is completed. When KEP and company address information are published, they will be updated in this text.


16. Situations Requiring Explicit Consent and Withdrawal of Consent

Separate consent is obtained for transactions requiring explicit consent (commercial electronic messages, advertising/targeting, and analytical cookies, Facebook Custom Audiences, technologies that may cause cross-border data transfer). Your consent can be withdrawn at any time via the cookie management panel, account/communication preferences screen, or support channels; withdrawal takes effect prospectively.


17. Duty of Review and Limits of Liability

It is the users' responsibility to review this text. If you do not accept this text, we recommend that you do not use the site. 3DiiD is not responsible for damages arising from users presenting unlawful, misleading, or forged information/documents and misuse of the system; such acts may result in suspension or termination of the account.


18. Order, File Verification, and Anti-Fraud Measures

To prevent fraud and abuse during order, copyright verification, and refund processes, proportionate verification methods are applied (e.g., 3D model file integrity and consistency checks, detection of recurring unfair refund requests, limited device/session audits). These operations are based on legitimate interest under Art. 5/2-f of the KVKK; principles of proportionality and connection with purpose are observed regarding scope.

19. References to Legal Regulations

References made in this text to KVKK, 5651, 6563, TCK, and other relevant regulations shall be deemed updated and applied in accordance with new regulations in the event of imperative changes.


20. Cookie List and Management

The current list, purpose, provider, and retention period of used cookies are published on the cookie management panel and updated regularly. Non-essential cookies are disabled by default; you can give consent or withdraw it at any time.


21. Deletion, Destruction, or Anonymization of Personal Data

When the purpose requiring processing ceases to exist and statutory retention periods end, personal data are deleted, destroyed, or anonymized in accordance with Art. 7 of the KVKK and Art. 138 of the TCK. Anonymized data may be used for statistical purposes without time limitation.


22. Explicit Consent and Declaration of Acceptance

The user declares that they have been informed by accepting this text. Separate consent is obtained for operations requiring explicit consent; these approvals are obtained upon users confirming the relevant clarification text and cookie policy checkboxes during membership/order creation. You may withdraw your consent at any time.

3DiiD takes necessary technical and administrative measures under Article 20 of the Constitution and the KVKK, observing the security and privacy of private life of its users. This text has been prepared according to the legislation of the Republic of Türkiye in line with 3DiiD's operation, to provide transparency to the user, and to mitigate 3DiiD's legal risks.