We attach great importance to ensuring the security of your personal information, both while using our website and through other means you have provided. Law No. 6698 on the Protection of Personal Data has come into force. We would like to inform you about the relevant legislation and some definitions specified in this legislation:

• Personal Data: Any kind of information related to an identified or identifiable real person.
• Processing of Personal Data: Any operation performed on data, whether or not by automatic means, such as collection, recording, storage, retention, alteration, reorganization, disclosure, transfer, takeover, making it obtainable, classification, or preventing its use.
• Data Processor: Real or legal person who processes personal data on behalf of the data controller based on the authorization given by the data controller.
• Data Record System: Record system where personal data is processed based on certain criteria.
• Data Controller: Real or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.

1. Purpose of the Protection of Personal Data and Consent Text and the Position of Our Company as Data Controller:

Our website, regarding personal data related to customers, is considered a “data controller” within the scope of the Law on the Protection of Personal Data No. 6698 (“Law”). The purpose of this Personal Data Protection and Consent Text is to inform customers about the personal data processing activities carried out by our website in accordance with the Law and to obtain explicit consent for the situations specified in Article 3 below.

2. Personal Data to be Processed and Processing Purposes in Accordance with the Explicit Consent of Customers:

For the situations where the conditions for the processing of personal data specified in Articles 5/2 and 6/3 of the Law cannot be met, explicit consent of customers is required for the processing of personal data by our website.

3. Purpose of Processing Personal Data of Customers:

Personal data of customers are processed within the framework of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law. Personal data of customers are processed for the following purposes:

• Carrying out the necessary work by the relevant business units to benefit individuals from the products and services offered by our website and carrying out the relevant business processes,
• Conducting the necessary work by the relevant business units for the realization of commercial activities carried out by our website and the execution of related business processes,
• Planning and execution of our website’s commercial and/or business strategies,
• Planning and execution of activities necessary for the legal, technical, and commercial-business security of individuals in business relationship with our website and customization, promotion, and introduction of the products and services offered by us to individuals based on their preferences, usage habits, and needs,
• Establishment of possible justifys and receivable claims of the concerned parties,
• Providing information to authorized institutions due to legal regulations,
• Creation and tracking of visitor records,
• Ensuring the fulfillment of obligations within the scope of the Consumer Protection Law, the Regulation on the Regulation of Retail Trade, and other legal regulations by our company and our branches, call centers, affiliated companies, or through our websites and social media pages or through any channels, limited or not limited to them.

Our website has the justify to associate the behaviors of users on the site, even if they are not members, with a cookie (cookie) in the browser for the purpose of being able to perform online behavioral advertising and marketing, and to define re-marketing lists based on metrics such as the number of pages viewed, visit duration, and target completion number. Later, targeted advertising content may be shown to the user on the site or on other sites in the Display Advertising Network, according to the interests of the users. During the redirection of Google AFS advertisements to our website, Google may place cookies on the user’s browser, or read the cookies in them, or use web beacons to collect information.

4. Transfer of Personal Data of Customers:

Personal data of customers may be shared with Company officials, our affiliates, business partners, suppliers, shareholders, legally authorized public institutions, and private institutions within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, including the necessary work by the relevant business units to benefit individuals from the products and services offered by our website and the execution of relevant business processes, the realization of commercial activities carried out by our website, planning and execution of commercial and/or business strategies of our website, the legal, technical, and commercial-business security of individuals in business relationship with our website and customization, promotion, and introduction of the products and services offered by us to individuals based on their preferences, usage habits, and needs.

User’s Name and Contact Information may be shared with payment institutions for the purpose of verification within the framework of the framework agreement to be approved at the payment stage and the Regulation on Measures Regarding the Prevention of Laundering Proceeds of Crime and Financing of Terrorism published in the Official Gazette dated January 9, 2008, and numbered 26751.

Our website, in accordance with the conditions specified in Law No. 6698, may transfer personal data to third parties both domestically and abroad, including but not limited to Company officials, our affiliates, business partners, suppliers, shareholders, and private institutions.

5, Method of Collection and Legal Basis of Personal Data:

Personal data is collected electronically from customers. Personal data collected for the reasons stated above can be processed and transferred for the purposes specified in Articles 5 and 6 of the Law and in this Personal Data Protection Text.

6. Storage Periods of Personal Data:

Our website stores personal data for the periods specified in the relevant laws and regulations. If a period is not regulated in the legislation regarding how long personal data should be stored, personal data is processed for the time required for the activities carried out by our website in connection with the relevant data and according to the practices of our website’s applications and commercial life, then it is deleted, destroyed, or anonymized.

If the purpose of processing personal data has ended, and the end of the periods determined by the relevant legislation and our website regarding the storage of personal data has been reached, personal data may only be stored for the purpose of being used as evidence in possible legal disputes, or for the assertion of the related justify dependent on personal data, or for the establishment of the defense, and access to the relevant personal data is provided only when necessary for these purposes. After the end of the mentioned period, personal data is deleted, destroyed, or anonymized.

7. justifys of Customers as Personal Data Owners:

In accordance with Article 11 of the Law, data subjects have the justify to (I) learn whether personal data concerning them is processed, (II) request information if their personal data has been processed, (III) learn the purpose of processing personal data and whether they are used for their intended purpose, (IV) know the third parties to whom personal data is transferred, both domestically and abroad, (V) request correction of personal data if it is incomplete or incorrectly processed and request notification of the transaction made within this scope to third parties to whom personal data has been transferred, (VI) request the deletion or destruction of personal data in the event that the reasons requiring their processing disappear, despite being processed in accordance with the Law and other relevant laws, and request notification of the transaction made within this scope to third parties to whom personal data has been transferred, (VII) object to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems, and (VIII) demand the compensation of damages in case of suffering damage due to the unlawful processing of personal data.

Requests related to the exercise of these justifys may be communicated to our website by data subjects through the methods specified within the scope of Law No. 6698. Our website will evaluate such requests and conclude them within 30 days.

It should be noted that changes may occur in the matters included in this form in line with legal and technological developments.