LPPD POLICY

Dear user, we provide you with some notifications in our capacity of "data officer" as Deha Mağazacılık Ev Tekstil Ürünleri San. ve Tic. A.Ş. in the scope of the provisions of the Law No.6698 on the Protection of Personal Data ("LPPD") and relevant legislation, in line with the Clarification Text with regard to the collection and procession of your personal data that you have provided to us while using your site, including your special-quality personal data, in accordance with the law. It is recommended that you carefully read this Clarification Text, in which you will be able to find the identity of the data officer and representative at the stage of the collection and processing of these data, including your special-quality personal data, for what purposes your personal data will be processed, to whom and for what purposes your processed personal data will be transferred, the legal reasons for collecting your personal data, and the rights you have as the relevant individual. We present the following meanings corresponding to some terms found in the LPPD for your information so you may better understand the text: Express Consent: Expresses the consent dependent on notification and expressed with free will, regarding a specific subject, 

Anonymization: Expresses the making of personal data unable to be correlated with a real individual whose identification is certain or ascertainable by any means, even by matching with other data, 

Relevant Person: Expresses the real person whose personal data are being processed, Personal Data: Expresses any and all information related to a real person whose identity is certain or ascertainable, 

The Processing of Personal Data: Expresses any and all process carried out on data such as the acquisition, recording, storage, preservation, changing, rearrangement, annunciation, transfer, take over, made to be attainable, classification, or prevention of use of personal data, by means that are entirely or partially automatic or by non-automatic means, on the condition that it is part of any kind of record system. 

Council: Expresses the Personal Data Protection Council. Institution: Expresses the Personal Data Protection Institution. 

Data Processer: Expresses the real person or legal entity that processes the personal data on behalf of the data officer, based on the authority that the data officer has provided. Data Record System: Expresses the record system in which the personal data is processed, structured based on certain criteria, 

Data Officer: Expresses the real person or legal entity responsible for the preservation and administration of the data record system that specifies the objectives and means for processing personal data. 

1. Methods and Legal Reasons for the Collection and Processing of Your Personal Data Your personal data is collected from you, our valued customers, and processed for the purposes of being able to present products and services in accordance with the law and to completely and accurately fulfil the obligations emerging pursuant to the agreement and laws in this scope, in line with the objectives laid out above, verbally, in writing, or electronically. Your personal data will be collected, processed, and shared in line with the legal reasons and purposes envisaged in the scope of the personal data processing terms and purposes specified in Articles 5 and 6 of the LPPD and in the scope of this clarification text. 

2. The Data Officer, Clarification Text, and Relevant Person Express Consent in the Scope of the LPPD Personal data will be collected and processed within the provisions specified below by our Company, in its capacity as data officer, including special-quality personal data that belongs to you, pursuant to the law. The LPPD has arranged the obligation for the clarification of the relevant individuals pursuant to article 10 of the law. The desired purpose with this clarification obligation attributed to the data officers is the concrete revelation of for which purposes the relevant personal data is processed, to whom and for which purposes the processed personal data can be transferred, the personal data collection management and legal reasons for the data officer, the rights of the relevant individual, and the identity of the data officer and their representatives. Our purpose in line with this text is to provide knowledge on matters of how your personal data will be collected and processed and to remind you of your rights. Express consent, is consent dependent on notification and expressed with free will, regarding a specific subject. In other words, express consent is the declaration of approval that you provide freely, with sufficient knowledge, explicitly, and with no room for doubt, for the processing of personal data, including your special-quality data, with regard to yourself after having read this text. In this context, we ask that you indicate the boxes next to the matters on which you provide your consent for the processing of your personal data, in line with the purposes for the processing of personal data listed below. 

3. Your Personal Data That Our Company Will Process and the Reasons for Processing These It is necessary to expressly specify for which reasons the personal data of real persons whose personal data is being processed, including special-quality personal data, is being collected and processed, pursuant to the provisions of the law. Should you provide your express consent, your personal data will be able to be processed and shared with the people specified in this clarification text by our company for the purposes of: 

· Being able to provide customers with better service, ensuring various advantages, establishing special promotional operations for sales, marketing, notification, and customer profiles, providing information about promotions, providing information about campaigns and conditions, conducting surveys and customer-satisfaction research, providing and accelerating sales transactions, planning and executing e-commerce website commerce and/or business strategies, the procurement of the legal, technical, and commercial business security of our company and persons within a relationship with our company, and the planning and execution of activities necessary for the recommendation and promotion of the products and services offered on our website by tailoring them to the liking, habits of use, and needs of the relevant persons, 

· Creating campaigns for customers, cross-selling, specifying the target group, conducting user-experience improving operations by monitoring customer actions, the development of the process of the website and mobile application for our website, and the personalization for customer needs, 

· Conducting direct and indirect marketing operations and conduct marketing operations again that are unique to the individual and conducting segmentation, targeting, analysis, and in-house reporting operations, 

· Letting you, our valued customers, have a more unique and effective shopping experience, and creating and tracking visitor records by means of analysing the movements and preferences of visitors during the use of the site, excluding the personal data left with madamecoco.com, email addresses, and membership forms, 

· And conducting market research, planning and execution of customer satisfaction activities, and executing of the planning of customer relations management processes; in the scope of the planning and execution of the sales and marketing processes for products and/or services for our e-commerce website and the planning and execution of creation and/or research processes for loyalty to products and or services that our website offers; in line with the approval that you, our customers, provide for the listed purposes. 

· In addition to what is listed above, your personal data will not be used for any commercial purpose other than the conditions that the listed operations and the relevant legislation necessitate. Deha Mağazacılık Ev Tekstil Ürünleri San. ve Tic. A.Ş. can gather and process your personal data, including your special quality personal data, without your express consent, as examples are provided below, in line with the exceptions laid out in Article 5 (2) and Article 6 (3) of the LPPD, for the purposes of (i) it being explicitly envisaged in the laws; (ii) it being imperative for the preservation of the vital or bodily integrity of persons or others in a state of inability to express their consent for whom the legal validity for their consent is not granted because of actual impossibilities; (iii) the processing of personal data being necessary for the parties to an agreement, provided that it is directly related to the establishment or execution of an agreement; (iv) it being imperative for the ability to fulfil the legal obligations of the data officer; (v) it having been declared by the relevant persons themselves; (vi) the processing of the data being imperative for the facilitation, use, or preservation of a right; and (vii) the processing of personal data being imperative for the legitimate interests of the data officer, providing that no harm befalls the fundamental rights and freedoms of the relevant individuals.

 □ Your personal data will be processed for the purposes of the conduct of the necessary work and, in relation to this, the execution of business processes by the relevant company departments for the realization of commercial operations carried out by our e-commerce site; 

 □ The facilitation of the potential rights and receivable requests of the relevant parties, 

 □ The provision of information originating from the legislation to official institutions, 

 □The provision of the obligations within the scope of the Consumer Protection Law, Retail Commerce Regulation law, Electronic Commerce Regulation Law, Remote Agreements Regulation, and other legislation, by means of any and all channels, including, but not limited to, our company, our branches acting on behalf of our company, our call centres, and our social media pages by our affiliate companies or websites, 

 □ And the reception and delivery of your orders and the ability to fulfil the e-commerce shopping as needed that you carry out on our website and execution of the relevant processes. 

 4. Our Cookie Policy Our e-commerce website has the right to redefine marketing lists based on the on-site behaviours of users, even if they aren’t members, who come to the site and on metrics such as number of relationships and viewed pages, duration of visit, and number of target completions with cookies in a browser, for the purpose of being able to conduct online behavioural advertising and marketing. Targeted advertising content may be later shown to this user on other sites in the Visual Advertisement Network based on the areas of interest of the users. Google may place cookies in the trackers of users while Google AFS advertisements guide them to our e-commerce website, may read existing cookies, or may use web indicators to gather information. 

 5. The Domestic or International Transfer of Your Personal Data The matter of the transfer of personal data was discussed in Articles 8 and 9 of the LPPD. In light of the regulations found in the law, it is necessary for us to provide this notification in order for your data to be able to be transferred lawfully. The personal data belonging to you, our customers, may be shared with company officials, affiliates, business partners, suppliers, shareholders, legally authorized public agencies and organizations, and private institutions; in order for the work necessary for the relevant people to benefit from the products and services offered on our e-commerce site to be conducted by units of the company, in order for the relevant business processes to be conducted, and in order for commercial operations executed by our company to be carried out; within the framework of the personal data transfer conditions and purposes specified in Articles 8 and 9 of the Law, including the conduct of the necessary work by the relevant company departments and the execution of business processes based on this, the planning and execution of our company's commercial and/or business strategies, the procurement of the legal, technical, and commercial business security of our company and persons within a relationship with our company, and the planning and execution of activities necessary for the recommendation and promotion of the products and services offered on our website by tailoring them to the liking, habits of use, and needs of the relevant persons. Pursuant to the payment agency framework agreement, which the website user will approve at the payment stage, and pursuant to the Regulation on Measures About the Prevention of the Laundering of Criminal Revenues and the Financing of Terror, published in the January 9, 2008 dated issue No. 26751 of the Official Gazette, the first name, last name, and contact information for the website user may be shared with the payment agency for the purpose of identification verification. Our company may transfer personal data internationally, just as it may transfer to third parties domestically, on the condition that the terms laid out in Law No. 6698 are ensured, within the objectives specified below.

 6. The Storage of Your Personal Data Your personal data are processed within limits of the duration of time required and then deleted, destroyed, or anonymized upon the end of this duration, pursuant to the fulfilment of the objectives explained in this clarification text, the applications of our company in any case, and the practices of commercial life, as a necessity for the principle of purposeful limitation. The personal data you enter into the system can be changed only by you, and all necessary technical and administrative measures are taken by our Company so that others do not access or change this information. However, Deha Mağazacılık Ev Tekstil Ürünleri San. Ve Tic. A.Ş. and its patented brands do not accept liability in any capacity if a third party knows the membership address and password of the Customer or uses his/her membership. Your credit card information requested on the payment page is not held in the servers of Deha Mağazacılık Ev Tekstil Ürünleri San. Ve Tic. A.Ş. or the companies that serve it in any capacity in order to prioritize the security of you, our valued customers, who shop on our website. All transactions for payment in this manner are carried out between your bank and computer through the interface of madamecoco.com, belonging to Deha Mağazacılık Ev Tekstil Ürünleri San. Ve Tic. A.Ş. In addition to these, your data, for which our company must be able to fulfil its legal obligations in its capacity as data officer, which has been disclosed by the relevant person, and for which processing is imperative for the legitimate interests of our company having the title of data officer provided that no harm come to the fundamental rights and obligations of the relevant person, in situations expressly envisaged in the law but should the time periods specified under this heading have passed, can be used to realize the purposes that have been conclusively listed in this sentence. Access will not be allowed to your personal data stored for these purposes for any other reason, and your personal data may only be used in the imperative circumstances. Should the listed imperative circumstances conclude, your personal data will be duly deleted, destroyed, or anonymized. 

 7. The Rights of the Data Owner in the Capacity of Relevant Person Should you, our valued customer, wish to use your rights referred to under this heading and/or in the scope of the LPPD, within this clarification text and the procedures and principles envisaged in the law, as the owner of the personal data collected, processed, and transferred by our Company, your requests in your application will conclude free of charge within no later than thirty (30) days based on the quality of the request, as a result of your application to our Company. However, should the transaction require an additional fee for the Company, the request for a fee at the rate specified by the Personal Data Protection Committee will be relevant. Pursuant to Article 11 of the Law on the Protection of Personal Data, you, our valued customers or visitors (data-owner), have the rights: (i) To learn yourself whether your personal data have been processed; (ii) To request information regarding this, should your personal data have been processed; (iii) To learn the purpose for the processing of your personal data and whether they were used in accordance with this purpose; (iv) To know the third parties to whom your personal data were transferred, domestically or internationally; (v) To request, should your personal data have been processed incompletely or inaccurately, the correction of these and the notification of this process conducted in this scope and of these changes to the third parties to whom your personal data was transferred; (vi) To request, despite your personal data having been gathered, processed, and transferred in accordance with the relevant laws and legislation, should the reasons that require their processing disappear, the deletion or destruction of your personal data and the notification of this process conducted in this scope to the third parties to whom the personal data were transferred; (vii) To object to the emergence of any result to your detriment by means of the analysis of your processed personal data through exclusively automatic systems; and (viii) To request the elimination of damage, should damage be suffered because of the unlawful processing of your personal data. You can use these rights granted to you by referring to our Company through the email address {}info@madamecoco.com{} or by the other means laid out in Law No. 6698 on the Protection of Personal Data. With regard to the matters included in this form, changes in line with legal and technological developments will be relevant.