CUSTOMER INFORMATION NOTICE REGARDING THE PROCESSING OF PERSONAL DATA

Dear Customers;

This information notice is provided by Narin Gelinlik İç ve Dış Tic. San. Ltd. Şti., acting as the data controller, in accordance with Article 10 of the Law on the Protection of Personal Data No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles to be Followed in Fulfilment of the Obligation to Provide Information, to inform you, our individual customers, and/or the authorised representatives and employees of our corporate customers, regarding the purposes of processing your personal data, the legal grounds, the methods of collection, to whom it may be disclosed, and your rights under the KVKK.

What personal data do we process?

Data Categories Examples of the types of data processed in this category

Identity Data Your telephone number, your full address, your email address,

Legal Transaction Data Information contained in correspondence with judicial authorities, information contained in the case file,

Customer Transaction Data Your invoice, bill of exchange and cheque details, your order details, your request details,

Physical Premises Security Data  Your CCTV recordings,

Financial Data Your bank account details, credit/risk information,

Marketing Data Your shopping history and cookie data,

Other Data (Sales Contract Data) The detailed information you have provided via the Sales Agreement, including payment details, model details, veil and accessory details, information regarding whether the item is for hire or for sale, delivery date, fitting date, and wedding date,

For what purposes do we process your personal data?

Your personal data listed above;

To enable us to offer you our products and services,

To provide you with detailed specifications of our products and services,

To conduct sales processes for goods/services with you/the company you represent or work for,

To conduct communication activities with you,

To provide you with after-sales support services for goods/services,

To conduct customer relations and satisfaction management processes and activities aimed at customer satisfaction,

To follow up on your requests and/or complaints,

To conduct risk management processes,

To conduct our logistics activities,

To conduct contract processes,

To carry out the necessary work by our relevant business units for the realization of commercial activities and to manage related business processes,

To plan and implement commercial and/or business strategies, and to conduct finance and accounting operations,

To ensure the safety and physical security of our company and to provide related administrative and technical measures,

To conduct marketing analysis of our products/services Your personal data will be obtained, processed, recorded, stored, maintained, and classified for the following purposes:

To enable us to carry out our work; to verify your identity information and documents when necessary; to take necessary actions to prevent abuse, loss, and fraud;

To maintain your information that must be kept in accordance with relevant legislation; to carry out copying and backup operations to prevent data loss; to ensure the consistency of your information; to take necessary technical and administrative measures for the security of your information;

To fulfill our legal obligations to regulatory and supervisory institutions as required or mandated by legal regulations, and to conduct legal proceedings and legal processes;

and for these purposes.

3. To Whom and for What Purposes Do We Transfer Your Personal Data?

In matters relating to public security and in potential legal disputes, upon request and as required by law, to provide information to prosecutors, courts, and relevant public officials; and, when necessary, to authorized public institutions and organizations within the scope of the purposes stated above, to law firms with which we have agreements for the follow-up of legal processes, to financial advisors for the preparation of our company's financial statements, to banks for the performance of goods/services contracts, to our group companies for the management of our company and to confirm our compliance with group company rules and policies, to courier companies for the purpose of sending documents and products, to companies from which we receive IT support to implement technical measures in IT matters, to auditing firms for the auditing of our business activities, and to companies from which we receive accounting support to carry out accounting work.

4. What are the Methods of Collecting Your Personal Data and the Legal Grounds for These Methods?

Your personal data mentioned above will be processed for the legal reasons specified in Articles 5 and 6 of Law No. 6698, namely (i) being explicitly provided for in the laws, (ii) being necessary for the data controller to fulfill its legal obligations, (iii) being directly related to the establishment or performance of a contract and the processing of personal data belonging to the parties of the contract being necessary, and (iv) being necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Within the scope of the purposes stated in this Disclosure Statement and in accordance with the General Principles listed in Article 4 of the Law below;

a) To comply with the law and rules of honesty,

b) To be accurate and up-to-date when necessary,

c) For specific, clear and legitimate purposes,

d) In a manner that is relevant, limited and proportionate to the purpose for which they are processed,

e) To be kept for the period stipulated in the relevant legislation or necessary for the purpose for which they are processed, personal data may be processed, recorded, stored, maintained, classified and, when necessary, transferred to the places mentioned above, either automatically or non-automatically as part of any data recording system (e-mail, paper, forms, telephone, etc.).

5. What are your rights regarding the processing of personal data and how can you access these rights?

Article 20 of the Constitution states that everyone has the right to be informed about personal data concerning them. Article 11 of the Personal Data Protection Law lists the rights of the personal data owner within the scope of the law.

You can submit your requests regarding your rights under the KVKK (Personal Data Protection Law) to Narin Gelinlik İç ve Dış Tic. San. Ltd. Şti. in writing or via registered electronic mail (KEP) address, secure electronic signature, mobile signature, or using the electronic mail address previously notified to the data controller by the data subject and registered in the data controller's system, in accordance with Article 5 of the "Notification on the Procedures and Principles for Applications to the Data Controller".

Data Controller: Narin Gelinlik İç ve Dış Tic. San. Ltd. Şti.
Address: Kaynarca Mh. Bahattin Veled Cd. No:37/6 K:3 Pendik/İstanbul
Email: kvkk@narinmoda.com