Personal Data Policy

A’MARILLAS Personal Data Policy

General Information about the Personal Data Law

The Law on Protection of Personal Data Numbered 6698 (hereinafter referred to as KVKK) was adopted on March 24, 2016, and published in the Official Gazette numbered 29677 dated April 7, 2016. Parts of the KVKK came into force on the publication date, while others came into effect on October 7, 2016.

Information as Data Controller

In accordance with Law No. 6698 on the Protection of Personal Data and as the Data Controller, your personal data will be processed within the framework described on this page; it will be recorded, stored, updated, disclosed/transferred to third parties when permitted by legislation, classified, and processed in the ways listed in the KVKK.

How Your Personal Data Can Be Processed

In accordance with Law No. 6698 KVKK, your personal data shared with our company may be processed by us, either in whole or in part, automatically or non-automatically by being obtained, recorded, stored, altered, rearranged, or processed in any other way permitted by legislation. Any processing of data falls under the scope of “processing of personal data” as defined by the KVKK.

Purposes and Legal Grounds for Processing Your Personal Data

The personal data you share will be processed in compliance with Law No. 6698 KVKK and related secondary regulations for the following purposes and legal grounds:

• To fulfill the requirements of the services we provide to our customers, to perform in accordance with the contracts and technological requirements, and to improve the products and services offered;
• To record identity, address, and other necessary information of the data subject for the purpose of identifying the transaction owner within the scope of the Electronic Commerce Regulation published in the Official Gazette dated August 26, 2015, and numbered 29457, the Regulation on Distance Contracts published in the Official Gazette dated November 27, 2014, and numbered 29188, and other related legislation;
• To regulate all records and documents that will form the basis of transactions in the banking and electronic payment field, either electronically or in paper format, and to comply with the obligations of information storage, reporting, and notification stipulated by legislation and other authorities;
• To provide information to prosecutors, courts, and relevant public officials upon request and in accordance with legislation regarding public security matters and legal disputes.

Your personal data will be processed in compliance with Law No. 6698 KVKK and related secondary regulations. Information about third parties or organizations to which your personal data may be transferred

For the purposes mentioned above, the individuals/organizations to whom your personal data shared with our company may be transferred include, but are not limited to, suppliers, shipping companies, and other individuals and organizations related to the services provided, especially IdeaSoft Software Industry and Trade Inc., which provides our company’s e-commerce infrastructure, as well as domestic/foreign organizations and other third parties with whom we collaborate.

Methods of Collecting Your Personal Data

Your personal data is collected through the following methods:

• Via forms on our company’s website and mobile applications, including information such as name, surname, ID number, address, phone number, work or personal email address; preferences on pages accessed by using a username and password, IP records of transactions, cookie data collected by the browser, browsing duration and details, and location data;
• Orally, in writing, or electronically through channels such as our sales and marketing department employees, our branches, our suppliers, other sales channels, paper-based forms, business cards, digital marketing, and call center channels;
• From individuals who share their personal data with our company for purposes such as establishing a commercial relationship, applying for a job, submitting a bid, through methods such as business cards, resumes (CVs), submitting bids, and other means, either physically or virtually, face-to-face or remotely, orally, in writing, or electronically;
• Additionally, data obtained indirectly through various channels such as websites, blogs, contests, surveys, games, campaigns, and similar (micro) websites, and from social media, including activities such as e-newsletter reading or clicking, data provided by public databases, and publicly available profiles and data from social media platforms, can be processed and collected.

Your Personal Data Obtained Before the Enforcement of the KVKK

Your personal data obtained before the enforcement date of the KVKK, which is April 7, 2016, through means such as membership, electronic communication consent, product/service purchases, and other lawful methods, are processed and stored in accordance with the terms and conditions specified in this document.

Transfer of Your Personal Data Abroad

Your personal data collected through any of the methods mentioned above may be transferred to service providers abroad, in compliance with the KVKK and for the purposes of contracts, provided that the personal data protection authority has accredited the country where the service providers are located and that sufficient protection for personal data is ensured.

Storage and Protection of Personal Data

Your personal data will be kept confidentially in the databases and systems within our company, in accordance with Article 12 of the KVKK; they will not be shared with any third parties except for legal obligations and regulations specified in this document. Our company is obliged to prevent the unlawful processing of your personal data, prevent unauthorized access, and take software measures such as access management, as well as physical security measures, in accordance with Article 12 of the KVKK. In case it is learned that personal data has been obtained unlawfully by others, the situation will be immediately reported to the Personal Data Protection Board in compliance with legal regulations and in writing.

Keeping Your Personal Data Up-to-Date and Accurate

In accordance with Article 4 of the KVKK, our company is obliged to keep your personal data accurate and up-to-date. In this context, in order for our company to fulfill its obligations arising from the current legislation, our customers are required to share accurate and up-to-date data or update them through the website/mobile application.

Rights of the Data Subject under Law No. 6698 KVKK

In accordance with Article 11 of Law No. 6698 KVKK, which entered into force on October 7, 2016, the rights of the Data Subject are as follows: The Data Subject may apply to our company (data controller) to exercise the following rights regarding themselves:

1. To learn whether personal data is being processed,
2. If personal data is being processed, to request information regarding this processing,
3. To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
4. To know the third parties to whom personal data is transferred, whether domestically or abroad,
5. If personal data is incomplete or incorrect, to request their correction,
6. To request the deletion or destruction of personal data within the scope of the conditions stipulated in Article 7 of the KVKK,
7. To request that transactions regarding the correction, deletion, or destruction of personal data be notified to third parties to whom the personal data has been transferred,
8. To object to a result against themselves that arises as a result of the analysis of processed data exclusively through automated systems,
9. To demand compensation for damages in case personal data is processed unlawfully.

[…………….] is registered with the [……………………..] Chamber of Commerce under registration number [………………………..], with a MERSIS number of [……………………………………………………………..], located at [Full company address], is the Data Controller within the

scope of the KVKK. The Data Protection Officer to be appointed by our company will be announced on the Data Controllers Registry and the website where this document is located once the legal infrastructure is provided. Data Subjects can direct their questions, opinions, or requests to any of the following communication channels:

Company Name: KRN GİYİM GIDA İNŞAAT SANAYİ VE TİCARET LTD. ŞTİ.
Address: Tatlısu mah. elalmış cad. no 73/3 ümraniye/istanbul
Email: info@amarillasistanbul.com
Tel: 05333128701