Personal Data Protection Law (KVKK) Explicit Consent Statement

GENERAL INFORMATION

Personal data owners, defined as data subjects in the Law No. 6698 on the Protection of Personal Data ("PDP") (hereinafter referred to as "Applicant"), are granted the right to make certain requests regarding the processing of their personal data in Article 11 of the PDP.

In accordance with the first paragraph of Article 13 of the Personal Data Protection Law; applications regarding these rights must be submitted to our Company, which is the data controller, in writing or through other methods determined by the Personal Data Protection Board ("Board").

By signing the application with a "secure electronic signature" as defined in the Electronic Signature Law No. 5070 and sending it to the email address [email protected] ,
It can be forwarded to us.

Furthermore, once other methods determined by the Board are announced, our clinic will also announce how applications will be received through these methods.

In accordance with Article 13, paragraph 2 of the Personal Data Protection Law (KVKK), your applications will be answered within thirty days of receiving your request, depending on its nature. Our responses will be delivered to you in writing or electronically, as required by Article 13 of the KVKK.

Personal Data Protection Law (KVKK) Personal Information Text

In accordance with the Law No. 6698 on the Protection of Personal Data ("KVKK"), which aims to protect the fundamental rights and freedoms of individuals, primarily the right to privacy, and to regulate the obligations of natural and legal persons processing personal data and the procedures and principles they must comply with, İnegöl Store Mobilya may process your personal data only within the scope and purposes explained below, in compliance with Law No. 6698 on the Protection of Personal Data and other relevant legislation.

1-) Data Controller
It is the legal entity that determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system.

2) Personal Data Processed: Your personal and sensitive personal data includes: name, surname, Turkish Republic Identity Number and/or passport number and/or temporary Turkish Republic Identity Number, place and/or date of birth, marital status, gender, profession, and other identifying data that may identify you; address, telephone number, email address and other contact information; voice call recordings kept by customer representatives in accordance with call center standards, and personal data obtained when you contact us via email, letter and/or other means; financial data such as bank account number, IBAN number, credit card information, billing and invoice information; and your notifications such as surveys, thank you letters, complaint letters, and satisfaction results. In accordance with the legislation, your personal data includes images obtained from continuously recording cameras in common areas, data you submit and/or enter through all our websites and online services, your IP address, cookies and other personal data, your resume and other personal data provided in case of job applications, and all personal data related to your employment contract (“Personal Data”), and may be processed by our institution in a manner that is relevant and proportionate to the purposes stated in Article IV and may be transferred to the individuals, institutions and organizations specified in Article V.

3) Collection of Personal Data
Your personal data will be processed by our clinic for the purposes of enabling you to benefit from the services provided, for our relevant departments to carry out the necessary work and processes related to the services offered, and for promotional activities related to these services, in accordance with the conditions for processing personal data specified in Articles 5 and 6 of the Law on the Protection of Personal Data.

4) Processing of Personal Data and Purposes of Processing
The personal data we collect in connection with the services you receive is processed for the following purposes:

We use your data to fulfill our legal obligations, to identify and verify your identity for your security, to process billing, to share information with and respond to requests from public institutions and organizations, to respond to your questions or complaints regarding our services, to analyze your usage to improve the services we provide, to comply with our internal policies and principles, to maintain information regarding your data that must be kept in accordance with relevant legislation, to conduct promotional and informational activities, to contact you for informational purposes regarding our services, to carry out risk management and quality improvement activities, and to comply with legal and regulatory requirements.

However, your personal data will not be used for any commercial purpose other than the activities listed above and as required by relevant legislation.

In accordance with the relevant legislation, your Personal Data obtained and processed may be transferred to our institution's physical archives and/or information systems and kept under custody in both digital and physical environments.

5) Method and Legal Basis for Personal Data Collection Your personal data is collected through any verbal, written, or electronic means, via membership forms or other methods, for the purposes stated above. Personal data collected for this legal reason may be processed and transferred within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law on the Protection of Personal Data, for the reasons stated above. When the purpose requiring the processing of your Personal Data ceases to exist, and/or when the statute of limitations/retention periods that we are obligated to use to process your data in accordance with the legislation expire, your Personal Data will be deleted, destroyed, or anonymized.

6-) Rights of the Personal Data Subject as Listed in Article 11 of the Law on the Protection of Personal Data Except for the cases foreseen under the heading "Exceptions" in Article 28 of this law, you can exercise your rights within the framework of Article 11 of the KVKK by applying to our company regarding your personal data;

• To find out whether your personal data is being processed.
• Requesting information regarding the processing of personal data.
• To learn the purpose for which personal data is processed and whether it is being used appropriately for that purpose.
• Knowing the persons to whom personal data is transferred, whether domestically or internationally.
• The right to request the correction of personal data if it has been processed incompletely or inaccurately, and to request that this correction be notified to third parties to whom the personal data has been transferred.
• The right to request the deletion or destruction of personal data if the reasons requiring its processing have ceased to exist, even if it has been processed in accordance with the KVKK (Personal Data Protection Law) and other relevant laws, and to request notification of the third parties to whom the personal data has been transferred.
• The right to object if the analysis of processed data, exclusively through automated systems, results in an outcome that is detrimental to the individual.
• You have the right to claim compensation for damages incurred as a result of the unlawful processing of your personal data. To exercise the rights mentioned above, you can submit your request to our company in writing or through other methods determined by the Personal Data Protection Board. In your written application, you can send your request regarding the right you wish to exercise, as listed in Article 11 of this law, along with your identifying information, to the email address [email protected]. Depending on the nature of the request, your request will be processed within a maximum of thirty days.

7) Cases Where Personal Data May Be Processed Without Explicit Consent According to the KVKK (Personal Data Protection Law): In accordance with Article 5 of the KVKK and Article 7 of the Regulation, your Personal Data may be processed without your explicit consent in the following cases:
In cases explicitly provided for by law,
• If you are unable to express your consent as a data subject due to factual impossibility, or if your consent is not legally valid, and the processing of your personal data is necessary for the protection of your or another person's life or physical integrity,
• If the processing of your Personal Data(s) belonging to the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract,
• It must be necessary for the fulfillment of a legal obligation.
• Your Personal Data/Your Personal Information has been made public by you,
• Data processing is necessary for the establishment, exercise or protection of a right,
• Data processing is necessary for the legitimate interests of the institution, provided that it does not prejudice your fundamental rights and freedoms.

After reading and understanding the information provided to me by İnegöl Store Mobilya İthalat İhracat San. ve Ltd. Şti. regarding online sales transactions, I consent to the processing of my personal information, telephone number, and email address by the data controller solely for the purposes of conducting sales processes for goods and services, carrying out advertising, campaigns, and promotions, and fulfilling legal obligations by the data controller; I also consent to the transfer of my personal data to Affiliates, Subsidiaries, and Group Companies for the purpose of conducting advertising, campaigns, and promotions, and to receiving commercial electronic communications in accordance with Article 6 of Law No. 6563 on the Regulation of Electronic Commerce, for the purpose of promoting and marketing goods and services, promoting the company, or for celebratory and congratulatory purposes, or for informing and warning me about my debts.