INFORMATION NOTICE ON THE PROTECTION OF PERSONAL DATA

Our Company attaches the greatest importance to keeping secure the personal information you provide to us, whether through our website or by other means.

Law No. 6698 on the Protection of Personal Data has entered into force. We would like to inform you about that legislation and a number of the definitions it contains:

Personal data: any information relating to an identified or identifiable natural person;

Processing of personal data: any operation performed on data, such as obtaining, recording, storing, retaining, altering, reorganising, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data, whether wholly or partly by automated means or by non-automated means forming part of a data filing system;

Data processor: the natural or legal person who processes personal data on behalf of the data controller, on the authority granted by the controller;

Data filing system: the filing system in which personal data are processed, structured according to specific criteria;

Data controller: the natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data filing system.

1. The Purpose of the Personal Data Protection and Consent Statement and Our Company's Position as Data Controller:

In respect of individuals' personal data, our website holds the status of "data controller" within the scope of Law No. 6698 on the Protection of Personal Data (the "Law"). The purpose of this Personal Data Protection and Consent Statement is to inform clients, in accordance with that Law, about the personal data processing activities carried out by our website and to obtain their explicit consent for the situations set out in Article 3.

2. Personal Data to Be Processed on the Basis of Individuals' Explicit Consent, and the Purposes of Processing:

In the following situations, where the conditions for processing personal data set out in Articles 5/2 and 6/3 of the Law are not met, our website must obtain clients' explicit consent in order to process personal data.

3. The Purpose for Which Individuals' Personal Data Are Processed:

Individuals' personal data are processed within the framework of the personal data processing conditions and purposes set out below and in Articles 5 and 6 of the Law. Individuals' personal data are processed for:

the carrying out by our business units of the work necessary to enable the relevant individuals to benefit from the services offered by our website, and the conduct of the related business processes;

the carrying out by the relevant business units of the work necessary for the commercial activities conducted by our website, and the conduct of the related business processes;

the planning of our website's commercial and/or business strategies;

the planning of the activities necessary to ensure the legal, technical and commercial security of our website and of the individuals with whom it has a business relationship, and to tailor and recommend the services we offer according to those individuals' preferences, usage habits and needs;

establishing individuals' potential rights and claims;

providing information to the competent authorities as required by legislation;

creating and maintaining visitor records;

serving individuals better, providing and offering various benefits, sales, marketing, information, providing information about promotions, campaigns and their terms, conducting surveys and client satisfaction research, and enabling and speeding up your purchases;

creating campaigns aimed at individuals;

monitoring user activity in order to carry out activities that improve the user experience, personalising it according to client needs, carrying out direct and indirect marketing, personalised marketing and remarketing activities, and carrying out personalised segmentation, targeting, analysis and internal reporting activities;

Our Website is entitled, for the purposes of online behavioural advertising and marketing, to associate the behaviour of visitors on the site with a cookie held in the browser — even where those visitors are not registered — and to define remarketing lists based on metrics such as the number of pages viewed, the length of the visit and the number of goals completed. Targeted advertising content may then be shown to that user, on the site or on other sites in the Display Network, according to their interests. When Google Ads adverts direct traffic to our Website, Google may place cookies in users' browsers, read the cookies held there, or use web beacons to collect information.

4. Transfer of Individuals' Personal Data:

Individuals' personal data may be shared with Company officers, our affiliates, our business partners, our suppliers, our shareholders, legally authorised public institutions and bodies and private institutions, within the framework of the personal data processing conditions and purposes set out in Articles 8 and 9 of the Law — including for the carrying out by our business units of the work necessary to enable the relevant individuals to benefit from the services offered by our website and the conduct of the related business processes; the carrying out by the relevant business units of the work necessary for the commercial activities conducted by our website and the conduct of the related business processes; the planning and execution of our website's commercial and/or business strategies; and the planning and execution of the activities necessary to ensure the legal, technical and commercial security of our website and of the individuals with whom it has a business relationship, and to tailor and recommend the services offered by our website according to those individuals' preferences, usage habits and needs.

5. The Method of Collecting Personal Data and the Legal Grounds:

Personal data are collected from individuals electronically. Personal data collected on the legal grounds set out above may be processed and transferred for the purposes set out in Articles 5 and 6 of the Law and in this Personal Data Protection Statement.

6. Personal Data Retention Periods

Where the relevant laws and legislation so require, our Website retains personal data for the period specified in that legislation.

Where no period is laid down in legislation as to how long personal data must be retained, Personal Data are processed for as long as customary practice requires in connection with the activity for which our Website processes that data, and are subsequently deleted, destroyed or anonymised.

Where the purpose of processing personal data has come to an end and the retention periods laid down by the relevant legislation and by our Website have expired, personal data may be retained solely for the purpose of serving as evidence in any legal dispute, of asserting a right connected with the personal data, or of establishing a defence. In setting those periods, retention periods are determined on the basis of the limitation periods for asserting the right in question and, where those limitation periods have expired, on the basis of previous examples of claims made to our Website on the same matters. In such cases the retained personal data are not accessed for any other purpose, and access is provided only when the data must be used in the relevant legal dispute. Once that period too has expired, the personal data are deleted, destroyed or anonymised.

7. Clients' Rights as Data Subjects:

Under Article 11 of the Law, data subjects have the right to:

  • learn whether their personal data are being processed;
  • request information if their personal data have been processed;
  • learn the purpose of processing their personal data and whether the data are used in accordance with that purpose;
  • request the correction of their personal data where they have been processed incompletely or inaccurately, and request that the action taken be notified to third parties to whom the personal data have been transferred;
  • request the erasure or destruction of their personal data where the reasons requiring their processing have ceased to exist, notwithstanding that they were processed in accordance with the Law and other applicable legislation, and request that the action taken be notified to third parties to whom the personal data have been transferred;
  • object to a result being reached to their detriment through the analysis of the processed data exclusively by automated systems; and request compensation for damage suffered as a result of the unlawful processing of their personal data.
  • Requests concerning the exercise of these rights may be submitted by data subjects using the methods set out under Law No. 6698 by our Website. Our website will assess such requests and conclude them within 30 days.
  • The matters set out in this form may be subject to change in line with legal and technological developments.