Privacy Notice and Information Regarding the Processing of Personal Data

1. Introduction

1.1. In accordance with the Personal Data Protection Law (KVKK) No. 6698, published in the Official Gazette on April 7, 2016, with the aim of protecting the fundamental rights and freedoms of individuals, especially the right to privacy, and determining the obligations of real and legal persons processing personal data, HM DOMESTIC AND FOREIGN TRADE ADVERTISING ORG. TUR. Inc. (hereinafter referred to as the "Company") provides information as the Data Controller within the scope of the "Obligation to Inform the Data Subject" specified in Article 10 of the Law.

1.2. The processing of personal data by HM DOMESTIC AND FOREIGN TRADE ADVERTISING ORG. TUR. Inc. is carried out in compliance with the legislation, especially the Republic of Turkey Constitution and international agreements related to human rights, and the KVKK.

2. Definitions

2.1. The concepts of personal data, special categories of personal data, and data processing used in the information text are based on the definitions in the KVKK. The terms used in the KVKK include:

·       Personal Data Protection Law ("KVKK"): Law No. 6698 on the Protection of Personal Data, which came into force with its publication in the Official Gazette on April 7, 2016.

·       Personal Data: Any information related to an identified or identifiable natural person.

·       Data Processor: Natural or legal person who processes Personal Data on behalf of the Data Controller based on the authority given by the Data Controller.

·       Data Controller: Natural or legal person who determines the purposes and means of processing Personal Data and is responsible for the establishment and management of the data recording system.

·       Processing of Personal Data: Any operation performed on Personal Data, whether fully or partially automated or non-automated, such as collection, recording, storage, preservation, alteration, rearrangement, disclosure, transfer, takeover, making it obtainable, classification, or use.

3. Principles of Processing Personal Data

3.1. Personal data belonging to the data subject will be processed by the Company, as the data controller, in compliance with the law and principles of honesty, accurately, and, when necessary, up-to-date, for specific, clear, and legitimate purposes, relevant to the purposes for which they are processed, limited and measured, and in accordance with the rules of retention.

4. Purpose of Processing Your Personal Data

4.1. In accordance with Articles 4, 5, and 6 of the KVKK, your personal data will be processed by the Company within the scope of the purposes listed below:

·       Providing you with the products and services offered by the Company.

·       Customizing the products and services offered by the Company according to your and your company's needs.

·       Planning and/or executing activities related to market research for the sale and marketing of products and services offered by the Company.

·       Planning and/or executing post-sales support service activities.

·       Following up contract processes and/or legal claims.

·       Ensuring the legal, technical, and commercial security of individuals in business relations with the Company.

·       Implementing the human resources policies of the Company to ensure the execution of activities such as job application evaluation if you apply for a job, fulfilling our legal and statutory obligations if you become our employee.

·       Ensuring the tracking of the quality of the products supplied.

·       Tracking the supplied products.

·       Planning and executing information security processes.

·       Establishing and managing information technology infrastructure.

·       Tracking and following up financial and/or accounting affairs.

·       Tracking legal affairs.

·       Planning and executing business activities.

·       Planning and executing corporate communication activities.

·       Determining and implementing the commercial and business strategies of the Company.

5. Transfer of Personal Data

5.1. Your personal data may be transferred to third parties, including our business partners, suppliers, shareholders, affiliates, legally authorized public institutions, and private individuals, within the framework of the purposes specified in Articles 8 and 9 of Law No. 6698.

6. Method of Collecting Personal Data and Its Legal Basis

6.1. Personal data is collected by the Company through verbal, written, and/or electronic notifications, taking explicit and understandable consent when necessary. Your personal data, collected in accordance with the legal basis mentioned above, is processed within the scope of the legitimate purposes specified in this Information Note.

6.2. Furthermore, personal data collected for commercial purposes, such as contacting us, establishing a contractual relationship, visiting our business, and sharing information for commercial activities, may be processed and transferred within the scope of different channels and legal reasons in line with the commercial purpose of the Company; within the framework of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698, it can be processed and transferred in accordance with the purposes stated in this Information Notice.

7. Storage and Deletion of Data:

7.1. The Company keeps the processed personal data within the periods determined by the legislation. In cases where no specific period is specified in the legislation, personal data is stored for the period required for the purposes of processing, as well as for the periods stipulated by the practices and customs of the Company's applications and commercial life. After the expiration of the specified periods, the relevant personal data is deleted, destroyed, or anonymized.

8. Rights of the Data Subject

8.1. As data subjects, individuals have the right to apply to the Company and request:

·       To learn whether their personal data is processed or not.

·       If their personal data is processed, to request information regarding this processing.

·       To learn the purpose of processing personal data and whether they are used in accordance with this purpose.

·       To be informed about third parties to whom personal data is transferred at home or abroad.

·       To request correction of personal data if it is incomplete or incorrectly processed.

·       To request the deletion or destruction of personal data in accordance with the conditions specified in Article 7 of KVKK.

·       To request notification of third parties to whom personal data has been transferred, in accordance with Articles 11/d and 11/e of KVKK.

·       To object to the emergence of a result against the individual himself by analyzing the processed data exclusively through automated systems.

·       To request compensation for damages in case personal data is processed unlawfully and causes damage.

8.2. In order to use the rights mentioned above, you can send your written request including the necessary information to identify you, explanations about the right you want to use, to the address "www.shopigo.com" as a wet signed form, or to our registered email address "....................". In case of written response to the application, no fee is charged for up to ten pages. An additional fee may be charged for each page over ten pages. The fee that may be requested by HM DOMESTIC AND FOREIGN TRADE ADVERTISING ORG. TUR. A.Ş. for CD, flash drive, or similar recording media will not exceed the cost of the recording medium.