General Information about the Personal Data Law The Personal Data Protection Law No. 6698 (hereinafter referred to as the PDPL) was adopted on March 24, 2016, and published in the Official Gazette No. 29677 dated April 7, 2016. Some parts of the PDPL came into force on the publication date, while others came into force on October 7, 2016.

Information as Data Controller In accordance with Law No. 6698 on the Protection of Personal Data and as the Data Controller, your personal data will be processed within the framework described on this page; it will be recorded, stored, updated, disclosed/transferred to third parties when permitted by legislation, classified, and processed in the ways specified in the PDPL.

How your personal data may be processed In accordance with Law No. 6698 PDPL, your personal data shared with our Company may be processed entirely or partially, automatically, or non-automatically by being obtained, recorded, stored, modified, rearranged, in short, subjected to any kind of processing within the framework of the PDPL.

Purposes and legal reasons for processing your personal data The personal data you share will be processed by our Company to fulfill the requirements of the services we provide to our customers, in accordance with the contract and technological requirements; to improve the products and services we offer; to identify the information of the data subject for transactions within the scope of the Law on Regulation of Electronic Commerce No. 6563, the Law on Consumer Protection No. 6502, and the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce published in the Official Gazette No. 29457 dated 26.08.2015, and other relevant legislation.

Disclosure about third parties to which your personal data may be transferred With the purposes mentioned above, the individuals/companies to whom/which your personal data shared with our Company may be transferred include primarily IdeaSoft Software Industry and Trade Inc., which provides our e-commerce infrastructure, suppliers, cargo companies, service providers related to the services provided, cooperation partners, domestic/foreign organizations, and other third parties.

How your personal data is collected Your personal data is collected through forms on our Company's website and mobile applications containing information such as name, surname, ID number, address, phone number, business or private email address; preferences on pages accessed using a username and password, IP records of transactions performed, cookie data collected by the browser, and navigation time and details, location data; verbally, in writing, or electronically through channels such as sales and marketing department employees, our branches, suppliers, other sales channels, paper-based forms, business cards, digital marketing, and call center.

Your personal data obtained before the enactment of the PDPL Personal data obtained lawfully before the effective date of the PDPL, such as membership, electronic communication consent, product/service purchases, etc., are processed and kept in accordance with the terms and conditions set forth in this document.

Transfer of your personal data abroad Your personal data collected by any of the methods mentioned above may be transferred to service providers located abroad (in countries accredited by the Personal Data Protection Board and providing sufficient protection for the protection of personal data) for the purposes of the contract and in compliance with the PDPL.

Storage and protection of personal data Your personal data will be kept confidential in the database and systems of our Company in accordance with Article 12 of the PDPL; it will not be shared with third parties in any way other than legal obligations and regulations specified in this document. Our Company is obliged to take software measures such as access management, access management, and physical security measures to prevent the unlawful processing of personal data in accordance with Article 12 of the PDPL. If it is learned that personal data has been unlawfully obtained by others, the situation will be immediately reported to the Personal Data Protection Board in accordance with legal regulations and in writing.

Keeping your personal data up to date and accurate In accordance with Article 4 of the PDPL, our Company has the obligation to keep your personal data accurate and up-to-date. In this context, our customers are required to share or update their correct and up-to-date data through the website/mobile application to enable our Company to fulfill its obligations arising from the current legislation.

Rights of the data subject under Law No. 6698 In accordance with Article 11 of Law No. 6698, which came into force on October 7, 2016, the rights of the Data Subject are as follows: The Data Subject may apply to our Company (data controller) and request information about;

Whether personal data is processed, If personal data is processed, request information regarding this, The purpose of processing personal data and whether they are used for their intended purpose, Knowing third parties to whom personal data is transferred, whether domestically or abroad, Requesting the correction of personal data if it is incomplete or incorrect, Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the PDPL, If personal data is corrected, deleted, or destroyed, requesting that these transactions be notified to third parties to whom personal data has been transferred, Objecting to the emergence of a result against the individual by analyzing the processed data solely through automated systems, Requesting compensation for damages in case of suffering damage due to the unlawful processing of personal data, The Data Subject has the rights mentioned above. [Company Full Name], registered in [...............] Chamber of Commerce with registration number [...............], MERSIS number [...............], located at [...............] address, is the Data Controller within the scope of the PDPL. When the Data Controller Representative is appointed by our Company, it will be announced in the Data Controllers Registry and on the website where this document is located when the legal infrastructure is provided. Data Subjects can direct their questions, opinions, or requests to any of the following communication channels:

Email: [...............]

Phone: [...............]

Fax: [...............]