KVKK Information Text

Dear user, As Netta Company A.Ş. (“Netta Company”), as the “data controller”, we are in compliance with the Law on the Protection of Personal Data No. 6698 (“KVKK”) and within the scope of relevant legislation; we are providing you with certain information in accordance with this Information Text in order to collect and process your personal data, including your special personal data, that you have provided to us while using our website in accordance with the law. It is recommended that you read this Information Text carefully, where you can find the identity of the data controller and its representative during the collection and processing of this data, including your special personal data, the purpose for which your personal data will be processed, to whom and for what purposes your processed personal data will be transferred, the legal reasons for our collection of personal data from you and your rights as a relevant person. In order for you to understand the text better, we present the meanings of certain terms in the KVKK below for your information:

Explicit Consent Consent expressed on a specific subject, based on information and with free will.
Anonymization: Making personal data incapable of being associated with an identified or identifiable natural person, even when matched with other data.
Relevant Person: The natural person whose personal data is processed, Personal Data: Any information related to an identified or identifiable natural person, Processing of Personal Data: Any operation performed on data such as obtaining, recording, storing, preserving, changing, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data, in whole or in part, by automatic means or non-automatic means provided that it is part of any data recording system, Board: The Personal Data Protection Board, Institution: The Personal Data Protection Authority, Data Processor: The natural or legal person who processes personal data on behalf of the data controller based on the authority granted by the data controller, Data Recording System: The recording system in which personal data is structured and processed according to certain criteria, Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.

1- Method and Legal Reasons for Collecting and Processing Your Personal Data
Your personal data is collected and processed from you, our valued customers, through all kinds of verbal, written or electronic media, in line with the purposes specified above, in order to provide the products and services offered by our Company in accordance with the legislation and to fulfill our Company's obligations arising from the contract and laws in a complete and accurate manner. Your personal data will be collected, processed and shared when necessary within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK and in line with the legal reasons and purposes stipulated in this disclosure text.

2- Data Controller, Information Text and Explicit Consent of the Data Subject within the Scope of KVKK
According to the law, your personal data, including special personal data, will be collected and processed by our Company as the data controller, in accordance with the principles specified below. The KVKK has regulated the obligation of data controllers to inform the relevant persons in accordance with Article 10 of the law. The purpose of this information obligation imposed on data controllers is to concretely state for what purposes the personal data of the relevant persons will be processed, to whom and for what purposes the processed personal data may be transferred, the data controller's personal data collection management and legal reasons, the rights of the relevant person and the identity of the data controller and representative. Our aim in line with this text is to provide you with full information on how your personal data will be collected and processed and to ensure that you are reminded of your rights.

Explicit consent is consent related to a specific subject, based on information and expressed with free will. In other words, explicit consent is, in a sense, your declaration of approval, given freely, with sufficient knowledge and without any hesitation, to the processing of your personal data, including your special personal data, after reading this text.

3- Your Personal Data to be Processed by Our Company and the Purposes of Processing Them
It is necessary to clearly state the purposes for which the personal data of the natural persons whose personal data is processed, including special categories of personal data, are collected and processed, in accordance with the provisions of the legislation.

If you give your explicit consent, your personal data will be processed by our company;

To provide better service to customers, to provide various advantages, to organize sales, marketing, information, special promotional activities for customer profiles, to provide information about promotions, to provide information about campaigns and conditions, to conduct surveys and customer satisfaction research, to provide and accelerate your purchasing transactions, to plan and execute the commercial and/or business strategies of our shopping site and to ensure the legal, technical and commercial-business security of the relevant persons who have a business relationship with our shopping site, and to plan and execute the activities required for the products and services offered by us to be customized according to the tastes, usage habits and needs of the relevant persons and to recommend and introduce them to the relevant persons.

Creating campaigns for customers, making cross-selling, determining the target audience, following customer movements and carrying out activities that increase the user experience, improving the functioning of our shopping site's website and mobile application and personalizing it according to customer needs,

Carrying out personalized direct and indirect marketing and remarketing activities and carrying out segmentation, targeting, analysis and internal reporting activities,

https://www.nettacompany.com, to provide you, our valued customers, with a more special and effective shopping experience by analyzing visitor movements and preferences monitored during site use, in addition to personal data left via e-mail addresses and membership forms, and to create and monitor visitor records,

It will be processed in line with the approval of our customers and may be shared with the persons specified in this information text, within the scope of planning and execution of sales and marketing processes of products and/or services of our shopping site, including the purposes of conducting market research, planning and execution of customer satisfaction activities and planning and execution of customer relations management processes, planning and execution of processes of creating and/or increasing loyalty to products and/or services offered by our shopping site and for the purposes listed.

In addition to the above, your personal data will not be used for any commercial purpose other than the activities listed and the cases required by the relevant legislation. Netta Company, in line with the exceptions set forth in Article 5 (2) and Article 6 (3) of the KVKK; (i) it is expressly provided for by law, (ii) it is mandatory for the protection of the life or physical integrity of the person who is unable to give his/her consent due to a de facto impossibility or whose consent is not legally valid or of another person, (iii) it is necessary to process personal data of the parties to a contract, provided that it is directly related to the establishment or performance of a contract, (iv) it is mandatory for the data controller to fulfill its legal obligation, (v) it is made public by the data controller himself/herself, (vi) data processing is mandatory for the establishment, exercise or protection of a right, (vii) data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data controller, and may collect and process your personal data, including your special personal data, without the explicit consent of the data controller, as exemplified below.

• Carrying out the necessary work by the relevant business units and carrying out the related business processes in order to carry out the commercial activities carried out by our shopping site,
• Establishment of possible rights and claims of the interested parties,
• Providing information to authorized institutions based on legislation,
• Ensuring the fulfillment of obligations within the scope of the Law on Consumer Protection, the Law on Regulation of Retail Trade, the Law on Regulation of Electronic Commerce, the Regulation on Distance Contracts and other legal legislation by our company and our branches, call center, affiliated companies on behalf of our company or through our websites and social media pages or through all kinds of channels, including but not limited to these,
• Your personal data will be processed for the purposes of receiving and delivering your orders, fulfilling the e-commerce shopping you have done on our website, and executing the relevant process.

4- Our Cookie Policy
Our shopping site; has the right to associate the behavior of the user who visits the site, even if they are not a member, with a cookie in the browser for the purpose of online behavioral advertising and marketing, and to define remarketing lists based on metrics such as the number of pages viewed, the duration of the visit and the number of goal completions. This user can then be shown targeted advertising content on the site or on other sites in the Display Advertising Network, according to the interests of the users. During the redirection of Google AFS ads to our shopping site, Google may place cookies on the users' browsers, read the cookies in them or use web beacons to collect information. You can review our "PRIVACY AND COOKIE POLICY" document for more detailed information about our cookie policy.

5- Transfer of Your Personal Data Domestically or Abroad
KVKKThe transfer of personal data is addressed in Articles 8 and 9 of the Law. In light of the regulations in the Law, this notification must be made by us in order for your data to be transferred in accordance with the law. The personal data of our customers may be shared with company officials, our affiliates, business partners, suppliers, shareholders, legally authorized public institutions and organizations and private institutions within the framework of the personal data transfer conditions and purposes specified in Articles 8 and 9 of the Law, including the necessary work to benefit the relevant persons from the products and services offered by our shopping site and the execution of the relevant business processes, the necessary work to be carried out by the relevant business units for the realization of the commercial activities carried out by our company and the execution of the related business processes, the planning and execution of the commercial and/or business strategies of our company, the planning and execution of the activities required to ensure the legal, technical and commercial occupational safety of our company and the persons in business relations with our company, and the customization of the products and services offered by our shopping site according to the tastes, usage habits and needs of the relevant persons and the planning and execution of the activities required to recommend and introduce them to the relevant persons.

The name, surname and contact information of the website user may be shared with payment institutions for the purpose of identity verification in accordance with the framework agreement of the payment institution that will be approved at the payment stage and in accordance with the Regulation on Measures to Prevent Laundering Proceeds of Crime and Financing of Terrorism published in the Official Gazette dated January 9, 2008 and numbered 26751.

Our company may transfer personal data to third parties within the country, for the purposes specified above, provided that the conditions stipulated in Law No. 6698 are met. In accordance with our company policies, your personal data is not transferred abroad.

6- Protection of Your Personal Data
As a requirement of the principle of limitation of purpose, your personal data is processed for a period limited to the fulfillment of the purposes explained in this disclosure text and in any case, in accordance with the practices of our company and the customs of its commercial life; after the expiration of these periods, it is deleted, destroyed or made anonymous.

Your personal data that you have entered into the system can only be changed by you, and all necessary technical and administrative measures are taken by our Company to prevent anyone else from accessing and changing this information. However, Netta Company and its patented brands do not accept any responsibility whatsoever due to your membership address or password being known or being used by third parties.

The credit card information requested from you on the payment page is not kept on the servers of Netta Company or the companies that provide services to it in any way in order to keep the security of our valued customers who shop on the site at the highest level. All payment transactions are carried out between your bank and your computer via the nettacompany.com interface of Netta Company.

In addition to these; in cases clearly stipulated by law, your data that is mandatory for our company to fulfill its legal obligations as the data controller, that is made public by the relevant person himself/herself, and that is mandatory to be processed for the legitimate interests of our company as the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person, may only be used for the purposes listed as limited in this sentence in the event that the periods specified under this heading have elapsed. For these reasons, your stored personal data will not be allowed to be accessed for any other purpose and may only be used within the scope of mandatory situations. In the event that the listed mandatory situations end, your personal data will be deleted, destroyed or anonymized in accordance with the procedure.

7- Rights of the Personal Data Owner as the Data Subject
If you, our valued customers, as the owner of the personal data collected, processed and transferred by our Company, wish to exercise your rights referred to under this heading and/or within the scope of KVKK within the procedures and principles stipulated in this disclosure text and legislation; upon your application to our Company, your requests in your application will be finalized free of charge within thirty (30) business days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost for the Company, the fee in the tariff determined by the Personal Data Protection Board may be requested.

In accordance with Article 11 of the Personal Data Protection Law, you, our valued customers or visitors (data owner);

(i) to learn whether personal data about you has been processed, (ii) to request information if your personal data has been processed, (iii) to learn the purpose of processing your personal data and whether they are used in accordance with their purpose, (iv) to know the third parties to whom your personal data has been transferred domestically or abroad, (v) to request correction of your personal data if they are processed incompletely or incorrectly and to request notification of these changes to third parties to whom your personal data has been transferred, (vi) to request deletion or destruction of your personal data if the reasons requiring processing are eliminated despite the fact that they have been collected, processed and transferred in accordance with the provisions of the law and relevant legislation and to request notification of these changes to third parties to whom your personal data has been transferred, (vii) to object to the emergence of a result to the detriment of the person by means of analysis of your processed data exclusively through automated systems and (viii) to request compensation for the damages in case of damages incurred due to unlawful processing of your personal data.

You can exercise these rights granted to you by applying to our Company via e-mail at [email protected] or through other means stipulated in the Personal Data Protection Law No. 6698. There may be changes in line with legal and technological developments regarding the issues included in this form.