Personal Data Protection Law

Hatun Istanbul İç ve Dış Ticaret Limited Şirketi (Tax ID: 4590336974), operating under the brand name "Hatun Istanbul" and acting as the data controller, hereby presents the following information to the attention and review of customers and visitors, in accordance with the Personal Data Protection Law ("Law"), to fulfill its obligation to inform.

Unless explicitly stated otherwise, the terms "Website" and "Brand" in this illumination text refer to Hatun Istanbul İç ve Dış Ticaret Limited Şirketi, which acts as the data controller. The brand's website (www.hatunistanbul.com) will be referred to as the "Website."

1. Identity of the Data Controller

Hatun Istanbul İç ve Dış Ticaret Limited Şirketi (Tax ID: 4590336974), acting as the data controller under the brand name "Hatun Istanbul," operates at "Merkez Efendi Cad. Mevlana Cad. No:112/1 Zeytinburnu/İstanbul."

2. Collection, Processing, and Purposes of Processing Personal Data

Your personal data may vary depending on the service, product, or commercial activity provided by "Hatun Istanbul." Data related to website usage, such as IP address shared during your website visit, login date and time of the member and/or user, browser information, device information (mobile/desktop), approximate location information of the user and/or member, and cookie records, as well as personal data such as name, surname, mobile phone number, email address, address, payment and invoice information, and bank account details, may be collected, recorded, stored, and preserved by us at various times through automatic or non-automatic methods, via offices, call centers, websites, social media channels, mobile applications, and similar tools, orally, in writing, or electronically, in the ways stipulated by the Law.

Our company attaches utmost importance to the privacy and protection of your personal data while providing its services. Your personal data will be processed by the data controller only for the purposes stated below and within the scope of the personal data processing conditions specified in Articles 5 and 6 of the KVKK Law.

As "Hatun Istanbul," in our capacity as data controller, and within the framework of our legal obligations arising from legislation; your personal data is processed for purposes including, but not limited to, carrying out necessary work by our business units to enable you to benefit from the services offered, personalizing and recommending offered products and services according to your preferences and needs, ensuring the legal and commercial security of persons with whom we have a business relationship (administrative operations for communication conducted by our Brand, ensuring the physical security and control of our locations, business partner/customer/supplier (authorized persons or employees) evaluation processes, legal compliance process, financial affairs, etc.), determining and implementing commercial and business strategies, ensuring the execution of human resources policies, conducting research, invoicing for our services, verifying your identity, confirming your relationship with institutions we have agreements with, responding to all your questions and complaints regarding our services, taking all necessary technical and administrative measures within the scope of data security for system and applications, analyzing your usage to develop and improve our services, planning and/or executing after-sales support service activities, planning and/or executing member/user relationship management processes, tracking and resolving member/user requests and/or complaints, tracking contract processes and/or legal requests, ensuring financial reconciliation with institutions we have agreements with regarding services provided to you, informing you about our campaigns if you give your consent, recording your suggestions and complaints, establishing better service standards, and measuring your satisfaction. These processing activities are carried out within the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK Law and in accordance with other applicable legal regulations.

Your personal data is processed by our company based on the legal reason of "expressly stipulated in the laws" in accordance with Law No. 6502 on Consumer Protection, the Regulation on Distance Contracts, and the Regulation on Subscription Contracts for the execution of user and membership agreements and distance sales transactions; and in accordance with Tax Procedure Law No. 213 and the Turkish Commercial Code and other relevant legal legislation for the execution of invoice processes and accounting transactions within the framework of the consumer relationship between the parties, and is stored until you notify us or until the legal period or reasons expire.

Furthermore, your personal data is processed by our Brand in its capacity as Data Controller based on the legal reason of "processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of the contract" in accordance with Article 5/2.c of the Law, due to its direct relation to the establishment and performance of the membership and distance sales contract, collection processes to be carried out within this scope, and to ensure the continuous maintenance and efficiency of the membership relationship, to inform about changes, renewals, and similar matters that may occur in membership conditions, and/or to create, arrange, and manage member personal accounts through the website, or, if consent has been given within the scope of Law No. 6563 on the Regulation of Electronic Commerce, for purposes such as informing members and customers about campaigns and opportunities under this law, or providing information on prices, marketing, other opportunities, offers and services, carrying out advertising, promotion and promotional activities, establishing effective communication with members and customers, or for the purpose of ensuring control of the systems where services are provided and developing these systems, preventing illegal use of services, including the purpose of enabling the member to benefit from the rights, benefits, and advantages provided to the member, based on the reason of "processing of personal data is mandatory for the establishment, exercise or protection of a right" in accordance with Article 5/2.e of the Law, and is stored until you notify us or until the legal period or reasons expire.

3. To Whom and For What Purpose Processed Personal Data Can Be Transferred

As the data controller, your personal data obtained with your consent through our call centers, written communication channels, social media pages, mobile communication channels, in-store communication channels, and/or any other channels including but not limited to these, may be wholly or partially obtained, recorded, stored, preserved, modified, updated, periodically checked, re-arranged, categorized, retained for the period required for the purpose for which they are processed or stipulated in the relevant law, and may be shared/transferred with private-legal entities we work with or public institutions and organizations that are legally obliged to do so, and/or relevant third party natural/legal persons residing in Turkey, in cases of legal or service-related actual necessities, and may be transferred abroad in cases of legal or service-related actual necessities.

Your personal data may be transferred for the above-mentioned purposes to administrative and official authorities that are legally required to be transferred, to relevant individuals and institutions for legal obligations and compliance with legislation, to individuals and organizations that are our software program-service partners with whom we receive services/collaborate to carry out our activities, to banks for collection purposes and/or institutions authorized for collection, to independent audit companies, tax consultants and other external professional consultants, lawyers, insurance companies, third parties from whom services are received or will be received, our shareholders, legally authorized public institutions and private persons, health institutions, Social Security Institution, Ministry of Health and its affiliated sub-units, law enforcement agencies, Consumer Arbitration Committees, courts, your authorized representatives, our suppliers with whom we cooperate, courier companies, our support service providers, professional organizations with the status of public institutions and public economic enterprises, and our business partners, within the framework of personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK and other relevant legislation. In case of purchase, some of your personal information, such as name, phone number, and address, is shared with national and international cargo companies for the delivery of your packages to you. In distance sales transactions, your personal information is shared with national and international banks, financial and payment institutions for the realization of your payments. It is not shared with third parties other than the stated cases.

4. Method and Legal Basis of Personal Data Collection

Your personal data is obtained through verbal, written, and digital applications made to our employees, our website, calls to our phone numbers, social media, SMS channels, and other verbal, written, or electronic means, through automatic or non-automatic methods, and through other channels through which our Brand communicates or may communicate with you in the future, for the purposes of carrying out our activities and fulfilling our contractual and legal obligations between us, and the obtained personal data is stored within legal periods in accordance with relevant legislation.

5. Rights of the Personal Data Owner Listed in Article 11 of the KVKK Law

As personal data owners, if you submit your requests regarding your rights to us using the methods specified below in this illumination text, we will finalize the request free of charge within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the fee specified in the tariff determined by the Board may be charged. In this context, personal data owners, in accordance with Article 11 of the KVKK Law; have the right to learn whether personal data is processed, to request information if personal data has been processed, to learn the purpose of processing personal data and whether they are used in accordance with their purpose, to know the third parties to whom personal data is transferred domestically or abroad, to request the correction of personal data if it is incomplete or incorrectly processed, to request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7, to request notification of the transactions made pursuant to paragraphs (d) and (e) to third parties to whom personal data has been transferred, to object to the emergence of a result against the person himself by analyzing the processed data exclusively through automatic systems, and to demand compensation for damages if personal data is processed unlawfully.

In accordance with Article 13, paragraph 1 of the KVKK Law, you can submit your request to exercise the rights mentioned above in writing or by other methods determined by the Personal Data Protection Board. In accordance with the KVKK Law and the Communiqué on the Procedures and Principles for Application to the Data Controller, you must make an application that meets the conditions in the Communiqué. In this framework, the channels and procedures through which you can submit your application in writing for applications you will make within the scope of Article 11 of the KVKK Law are explained below:

To exercise your rights mentioned above, you can personally deliver your application, which includes the necessary information to identify you and your explanations regarding the right you wish to exercise among the rights specified in Article 11 of the KVKK Law, to the address "Merkez Efendi Cad. Mevlana Cad. No:112/1 Zeytinburnu/İstanbul", send it via notary public or by other methods specified in the KVKK Law, or send it with a secure electronic signature to the email address info@hatunistanbul.com.