Personal Data Protection Information Notice

We attach great importance to ensuring the security of your personal data that you share with us, whether while using our website or through other means. Law No. 6698 on the Protection of Personal Data (“KVKK”) has entered into force. We would like to inform you about this legislation and certain definitions stated therein:

Definitions

Personal Data: Any information relating to an identified or identifiable natural person, Processing of Personal Data: Any operation performed on personal data such as obtaining, recording, storing, preserving, modifying, reorganizing, disclosing, transferring, taking over, making available, classifying, or preventing the use of personal data, wholly or partially by automatic means or by non-automatic means provided that it is part of a data recording system, Data Processor: A natural or legal person who processes personal data on behalf of the data controller based on the authority granted by the data controller, Data Recording System: A recording system in which personal data is processed by structuring according to certain criteria, Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.

1. Protection of Personal Data and Our Company’s Position as Data Controller

Our e-commerce website has the status of a “data controller” within the scope of Law No. 6698 on the Protection of Personal Data (“Law”) regarding personal data of customers. With this Personal Data Protection Notice, it is aimed to inform customers about the personal data processing activities carried out by our website in accordance with the Law and to obtain their explicit consent for the situations specified in Article 3 below.

2. Personal Data to be Processed Based on Explicit Consent and Processing Purposes

In cases where the conditions for processing personal data set out in Articles 5/2 and 6/3 of the Law are not met, it is necessary to obtain the explicit consent of customers for the processing of their personal data by our e-commerce website.

3. Purpose of Processing Personal Data of Customers

Personal data of customers are processed within the framework of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law and as listed below:

• Carrying out necessary work by business units to enable relevant persons to benefit from the products and services offered by our e-commerce website and executing related business processes,
• Carrying out necessary work by relevant business units for the realization of commercial activities conducted by our e-commerce website and executing related business processes,
• Planning and execution of commercial and/or business strategies of our e-commerce website,
• Ensuring the legal, technical, and commercial-business security of our website and the relevant persons in business relations with our website, and planning and executing activities necessary for customizing and recommending products and services according to users’ preferences, usage habits, and needs,
• Establishing possible rights and claims of the relevant persons,
• Providing information to authorized institutions as required by legislation,
• Creating and tracking visitor records,
• Ensuring compliance with obligations arising from the Consumer Protection Law, Retail Trade Regulation Law, and other legal regulations through all channels including branches, call centers, affiliated companies, websites, and social media accounts,
• Providing better service to customers, offering various advantages, informing about sales, marketing, promotions, campaigns, conducting surveys and customer satisfaction research, facilitating purchase processes, receiving and delivering orders,
• Creating campaigns for customers, cross-selling, and determining target audiences,
• Tracking customer movements to improve user experience and developing and personalizing website and mobile application operations according to customer needs, conducting direct and indirect marketing, personalized marketing and remarketing activities, segmentation, targeting, analysis, and internal reporting activities, and market research,
• Planning and execution of customer satisfaction activities and customer relationship management processes, including planning and execution of sales and marketing processes and increasing customer loyalty to our products and/or services, in line with the customer’s consent, and sharing such data with the parties specified in this Personal Data Protection Notice.

4. Transfer of Personal Data of Customers

Personal data of customers may be shared with company officials, affiliates, business partners, suppliers, shareholders, legally authorized public institutions and organizations, and private entities within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law. User’s name and contact information may be shared with payment institutions for identity verification purposes in accordance with the payment institution framework agreement approved during the payment stage and the Regulation on Measures for Prevention of Laundering Proceeds of Crime and Financing of Terrorism published in the Official Gazette dated January 9, 2008 and numbered 26751. Our e-commerce website may transfer personal data domestically and abroad, provided that the conditions set out in Law No. 6698 are met.

5. Method and Legal Basis for Collecting Personal Data

Personal data are collected electronically from customers. Personal data collected based on the legal reasons stated above may be processed and transferred for the purposes specified in Articles 5 and 6 of the Law and in this Personal Data Protection Notice.

6. Retention Periods of Personal Data

Our e-commerce website stores personal data for the duration specified in relevant laws and regulations where applicable. If no retention period is specified in the legislation, personal data are processed for the duration necessary in line with our company’s practices and commercial customs, depending on the activity for which they are processed, and are then deleted, destroyed, or anonymized. If the purpose of processing personal data has ended and the retention periods determined by legislation and our company have expired, personal data may only be stored to serve as evidence in possible legal disputes or for the establishment or defense of legal rights. After the expiration of these periods, personal data are deleted, destroyed, or anonymized.

7. Rights of Customers as Personal Data Owners

In accordance with Article 11 of the Law, data subjects have the right to: (i) learn whether their personal data are processed, (ii) request information if their personal data have been processed, (iii) learn the purpose of processing personal data and whether they are used in accordance with that purpose, (iv) know the third parties to whom personal data are transferred domestically or abroad, (v) request correction of incomplete or inaccurate personal data and request notification of such corrections to third parties, (vi) request deletion or destruction of personal data when the reasons requiring processing cease and request notification of such actions to third parties, (vii) object to the occurrence of a result against them through analysis of processed data exclusively by automated systems, (viii) request compensation for damages in case of unlawful processing of personal data.

Requests regarding the exercise of these rights may be submitted to our e-commerce website in accordance with the methods specified under Law No. 6698. Our website will evaluate and finalize such requests within 30 days.