Information on the Protection of Personal Data

We place great importance on the security of your personal information provided to us, either through our website or via other means. The "Personal Data Protection Law" No. 6698 has entered into force. Below is an explanation of certain terms and regulations in this legislation:

• Personal Data: Any information relating to an identified or identifiable natural person.
• Processing of Personal Data: Any operation performed on personal data such as collection, recording, storage, preservation, alteration, disclosure, transfer, retrieval, classification, or prevention of its use, whether fully or partially automated or non-automated, provided that it is part of any data recording system.
• Data Processor: A natural or legal person authorized by the data controller to process personal data on their behalf.
• Data Recording System: The system in which personal data is processed by structuring it according to certain criteria.
• Data Controller: A natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system.

1. Purpose of the Personal Data Protection and Consent Form & Our Role as Data Controller

Our shopping site is the "data controller" concerning personal data of its customers under the Personal Data Protection Law No. 6698 ("Law"). This Personal Data Protection and Consent Form aims to inform customers about the personal data processing activities carried out by our shopping site and obtain their explicit consent for situations specified in Article 3 below.

2. Purpose of Processing Personal Data

Personal data of customers is processed within the scope of the conditions and purposes set forth in Articles 5 and 6 of the Law. The purposes include:

• Conducting necessary work and processes to provide relevant individuals with the products and services offered by our shopping site.
• Performing business activities and related processes necessary for our shopping site to fulfill its commercial operations.
• Planning and executing the commercial and/or business strategies of our shopping site.
• Ensuring the legal, technical, and commercial/operational security of our shopping site and individuals who have a business relationship with us.
• Customizing products and services offered by us based on preferences, usage habits, and needs of individuals and planning and executing related promotional activities.
• Ensuring compliance with legal requirements, including consumer protection laws and other relevant legislation.

3. Explicit Consent and Processing of Personal Data

Where conditions for processing personal data specified in Articles 5/2 and 6/3 of the Law are not met, explicit consent will be required to process personal data for purposes such as:

• Conducting marketing activities, surveys, customer satisfaction research, and direct/indirect marketing.
• Planning and executing personalized marketing and re-marketing activities.
• Enhancing user experience by monitoring customer activities and developing functionality on the website and mobile application.

4. Transfer of Personal Data

Personal data may be shared with:

• Relevant business units to perform necessary work and business processes.
• Affiliates, business partners, suppliers, shareholders, legally authorized public institutions, and private organizations under Articles 8 and 9 of the Law.
• Payment institutions to perform identity verification for compliance with financial regulations.

5. Methods and Legal Basis for Collecting Personal Data

Personal data is collected electronically. The data is processed and transferred under Articles 5 and 6 of the Law and the purposes mentioned in this document.

6. Data Retention Period

Personal data is retained for the duration specified by the applicable laws. If no such period is defined, data is stored as long as necessary to fulfill the processing purpose and then deleted, destroyed, or anonymized.

7. Rights of the Data Subject

Under Article 11 of the Law, data subjects have the right to:

• Learn whether their data is processed.
• Request information about their processed data.
• Understand the purpose of processing and whether it is used in line with its purpose.
• Know third parties to whom their data has been transferred domestically or abroad.
• Request correction of inaccurate or incomplete data.
• Request deletion or destruction of their data when the processing purpose no longer exists.
• Object to unfavorable outcomes derived from automated processing.
• Claim compensation for damages incurred due to unlawful data processing.

Requests regarding these rights can be communicated to our shopping site as per the methods outlined in the Law. These requests will be evaluated and resolved within 30 days.