MEMBER INFORMATION TEXT IN ACCORDANCE WITH LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA

Data Controller: Kiğılı Giyim Ticaret Anonim Şirketi

Aeropark Yenişehir Mah. Osmanlı Bulvarı No: 11/B 34912 - Kurtköy - Pendik/İstanbul

This Privacy Notice has been prepared by Kiğılı Giyim Ticaret Anonim Şirketi (“Kiğılı”) to inform you about the processing, storage, and transfer of your personal data during the provision of services to you, in accordance with the Law No. 6698 on the Protection of Personal Data (“ KVKK ”) and related legislation. Our company's personal data protection policies can be found at https://www.kigili.com .

METHOD OF COLLECTION, LEGAL BASIS AND PURPOSES OF PROCESSING YOUR PERSONAL DATA:

Our company obtains the personal data of the relevant individuals, as specified in the table below, through its website.

Your personal data will be processed by our Company for the following purposes and legal grounds, within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK (Law on Protection of Personal Data):

Data Category

Legal reason

Purpose of Processing

Identity

Explicit consent (If consent for commercial electronic communication has been given, SMS or email messages are sent during advertising and campaign processes.) (KVKK Article 5, paragraph 1)

Processing personal data of the parties to a contract is necessary provided that it is directly related to the establishment or performance of the contract (Article 5, paragraph 2, subparagraph c of the KVKK - Turkish Personal Data Protection Law).

It is necessary for the data controller to fulfill its legal obligations (KVKK, Article 5, paragraph 2, subparagraph ç).

Data processing is necessary for the establishment, exercise, or protection of a right (KVKK, Article 5, paragraph 2, subparagraph e).

Data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (KVKK, Article 5, paragraph 2, subparagraph f).

  • Ensuring that activities are carried out in accordance with the legislation.

  • Implementing Company/Product/Service Loyalty Processes

  • Conducting Communication Activities

  • Execution of Goods/Services Procurement Processes

  • Execution of After-Sales Support Services for Goods/Services

  • Execution of Goods/Services Sales Processes

  • Execution of Goods/Services Production and Operation Processes

  • Execution of Customer Relationship Management Processes

  • Conducting activities aimed at customer satisfaction.

  • Conducting Marketing Analysis Studies

  • Execution of Advertising/Campaign/Promotion Processes

  • Execution of Storage and Archiving Activities

  • Execution of Contract Processes

  • Tracking Requests/Complaints

  • Execution of Marketing Processes for Products/Services

  • Providing Information to Authorized Persons, Institutions and Organizations

Communication

Processing personal data of the parties to a contract is necessary provided that it is directly related to the establishment or performance of the contract (Article 5, paragraph 2, subparagraph c of the KVKK - Turkish Personal Data Protection Law).

It is necessary for the data controller to fulfill its legal obligations (KVKK, Article 5, paragraph 2, subparagraph ç).

Data processing is necessary for the establishment, exercise, or protection of a right (KVKK, Article 5, paragraph 2, subparagraph e).

  • Ensuring that activities are carried out in accordance with the legislation.

  • Implementing Company/Product/Service Loyalty Processes

  • Conducting Communication Activities

  • Execution of Goods/Services Procurement Processes

  • Execution of After-Sales Support Services for Goods/Services

  • Execution of Goods/Services Sales Processes

  • Execution of Goods/Services Production and Operation Processes

  • Execution of Customer Relationship Management Processes

  • Conducting activities aimed at customer satisfaction.

  • Conducting Marketing Analysis Studies

  • Execution of Advertising/Campaign/Promotion Processes

  • Execution of Storage and Archiving Activities

  • Execution of Contract Processes

  • Tracking Requests/Complaints

  • Execution of Marketing Processes for Products/Services

Customer Transactions

Processing personal data of the parties to a contract is necessary provided that it is directly related to the establishment or performance of the contract (Article 5, paragraph 2, subparagraph c of the KVKK - Turkish Personal Data Protection Law).

It is necessary for the data controller to fulfill its legal obligations (KVKK, Article 5, paragraph 2, subparagraph ç).

Data processing is necessary for the establishment, exercise, or protection of a right (KVKK, Article 5, paragraph 2, subparagraph e).

  • Implementing Company/Product/Service Loyalty Processes

  • Execution of Goods/Services Procurement Processes

  • Execution of After-Sales Support Services for Goods/Services

  • Execution of Goods/Services Sales Processes

  • Execution of Goods/Services Production and Operation Processes

  • Execution of Customer Relationship Management Processes

  • Conducting activities aimed at customer satisfaction.

  • Conducting Marketing Analysis Studies

  • Execution of Advertising/Campaign/Promotion Processes

  • Execution of Storage and Archiving Activities

  • Tracking Requests/Complaints

  • Execution of Marketing Processes for Products/Services

Finance

Processing personal data of the parties to a contract is necessary provided that it is directly related to the establishment or performance of the contract (Article 5, paragraph 2, subparagraph c of the KVKK - Turkish Personal Data Protection Law).

It is necessary for the data controller to fulfill its legal obligations (KVKK, Article 5, paragraph 2, subparagraph ç).

Data processing is necessary for the establishment, exercise, or protection of a right (KVKK, Article 5, paragraph 2, subparagraph e).

  • Ensuring that activities are carried out in accordance with the legislation.

  • Execution of Finance and Accounting Operations

  • Execution of Goods/Services Sales Processes

Transaction Security

Processing personal data of the parties to a contract is necessary provided that it is directly related to the establishment or performance of the contract (Article 5, paragraph 2, subparagraph c of the KVKK - Turkish Personal Data Protection Law).

It is necessary for the data controller to fulfill its legal obligations (KVKK, Article 5, paragraph 2, subparagraph ç).

  • Implementation of Information Security Processes

  • Execution of Access Permissions

  • Ensuring that activities are carried out in accordance with the legislation.

Marketing

Explicit consent (If consent for commercial electronic communication has been given, SMS or email messages are sent during advertising and campaign processes.) (KVKK Article 5, paragraph 1)

Data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (KVKK, Article 5, paragraph 2, subparagraph f).

  • Implementing Company/Product/Service Loyalty Processes

  • Execution of Goods/Services Sales Processes

  • Conducting Marketing Analysis Studies

  • Execution of Advertising/Campaign/Promotion Processes

  • Execution of Storage and Archiving Activities

  • Tracking Requests/Complaints

  • Execution of Marketing Processes for Products/Services

PARTIES TO WHOM PERSONAL DATA IS TRANSFERRED AND THE PURPOSES OF TRANSFER:

Your personal data may be transferred to the third parties listed below, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK (Law on Protection of Personal Data), and for the purposes stated below:

Third Party

Data Categories

Legal Basis for Transfer

Partners, Affiliates, Subsidiaries, Group Companies and Suppliers

Identity, Communication, Customer Transactions, Finance, Transaction Security, Marketing

  • It is necessary for the data controller to fulfill its legal obligations (KVKK, Article 5, paragraph 2, subparagraph ç).

  • Data processing is necessary for the establishment, exercise, or protection of a right (KVKK, Article 5, paragraph 2, subparagraph e).

  • Data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (KVKK, Article 5, paragraph 2, subparagraph f).

Authorized Public Institutions and Organizations

Identity, Communication, Customer Transactions, Finance, Transaction Security

  • It is necessary for the data controller to fulfill its legal obligations (KVKK, Article 5, paragraph 2, subparagraph ç).

  • Data processing is necessary for the establishment, exercise, or protection of a right (KVKK, Article 5, paragraph 2, subparagraph e).

THE RIGHTS OF THE DATA SUBJECT AS LISTED IN ARTICLE 11 OF LAW NO. 6698

You may submit your applications and requests regarding your personal data through the Data Subject Application Form ;

  • By sending a signed copy of your ID along with a photocopy to Aeropark Yenişehir Mah. Osmanlı Bulvarı No: 11/B 34912 - Kurtköy - Pendik/İstanbul,

  • By applying in person to Kiğılı Giyim Ticaret Anonim Şirketi at the following address: Aeropark Yenişehir Mah. Osmanlı Bulvarı No: 11/B 34912 - Kurtköy - Pendik/İstanbul, along with a valid identification document,

  • By signing with a mobile signature or secure electronic signature and sending it to kvkk@kigili.com.tr ,

  • By sending a registered electronic mail (KEP) email to 0562003566100015@hs02.kep.tr using a secure electronic signature or mobile signature ,

  • By sending an email to kvkk@kigili.com.tr via the email address registered in the Kiğılı Giyim Ticaret Anonim Şirketi system ,

You can forward this to Kiğılı Giyim Ticaret Anonim Şirketi.

According to the Communiqué on the Procedures and Principles for Applications to the Data Controller, the Data Subject must include the following information in their application: name, surname, signature (if the application is in writing), Turkish Republic Identity Number (or passport number if the applicant is a foreigner), residential or business address for notification purposes, email address (if any), telephone number, fax number, and information regarding the subject of the request.

The relevant person must clearly and understandably state the request in their application, which should include explanations regarding the right they wish to exercise as mentioned above. All relevant information and documents must be attached to the application.

While the subject of the request must relate to the applicant personally, if acting on behalf of someone else, the applicant must be specifically authorized to do so and this authorization must be documented (power of attorney). Furthermore, the application must include identity and address information, and supporting documents verifying identity must be attached.

Requests made by unauthorized third parties on behalf of another person will not be considered.

Your requests regarding your personal data will be evaluated and answered within a maximum of 30 days from the date we receive them. If your application is rejected, the reasoned reasons for rejection will be communicated to you via email or postal service to the address you provided in your application, or, if possible, through the same method you used to submit your request.

KIĞILI CLOTHING TRADE INC.