CUSTOMER INFORMATION NOTICE

Under the Personal Data Protection Law

Address:
Tomtom Mah. İstiklal Cad. No: 187 İç Kapı No: 147
Beyoğlu / İstanbul / Türkiye

2. DEFINITIONS RELATED TO KVKK

KVKK: Personal Data Protection Law No. 6698

Explicit Consent: Consent given freely, based on information and related to a specific subject.

Anonymization: Rendering personal data incapable of being associated with an identified or identifiable natural person under any circumstances, even when matched with other data.

Data Subject: The natural person whose personal data is processed.

Personal Data: Any information relating to an identified or identifiable natural person.

Processing of Personal Data: Any operation performed on personal data such as collection, recording, storage, preservation, alteration, reorganization, disclosure, transfer, acquisition, classification, or prevention of use, whether by automatic means or as part of a data recording system.

Board: Personal Data Protection Board.

Authority: Personal Data Protection Authority.

Data Processor: A natural or legal person who processes personal data on behalf of the data controller based on the authority granted by the data controller.

Data Recording System: A recording system in which personal data is processed according to specific criteria.

Data Controller: The natural or legal person responsible for determining the purposes and means of processing personal data and managing the data recording system.

Sensitive Personal Data: Data relating to a person's race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership in associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data.

When users visit e-commerce websites, certain information may also be collected through cookies, such as pages viewed, duration of visit, browsing habits, location, IP address, and time data.

3. LEGAL BASIS FOR COLLECTING PERSONAL DATA

Various legal regulations govern the use of customers' personal data. The primary regulation is the Personal Data Protection Law (KVKK), which establishes the fundamental principles of personal data protection.

Additionally, personal data may be collected and processed to fulfill obligations arising from:

Law No. 6563 on the Regulation of Electronic Commerce
Turkish Penal Code No. 5237
Consumer Protection Law No. 6502
Regulation on Distance Contracts

4. PURPOSES OF PROCESSING PERSONAL DATA

Personal data provided by customers or third parties through www.salsalin.com and/or our mobile applications may be recorded, stored, updated, disclosed to third parties, transferred, classified, and processed by the Company where permitted by law.

Detailed information regarding the processing of personal data can be found in the Personal Data Protection and Processing Policy available on our website.

Your personal data may be processed for the following purposes:

Providing products and services and delivering after-sales support
Ensuring information security and managing contractual processes
Verifying the identity of the person performing transactions
Ensuring operational security of the data controller
Managing membership registration and user accounts if you choose to register
Conducting marketing activities, campaigns, and customer-specific promotions
Personalizing products and services according to customer preferences, habits, and needs
Managing customer requests and complaints and improving customer satisfaction
Ensuring communication and coordination between affiliated companies and business partners
Determining and implementing business strategies
Creating statistical data when our website is visited and recording visitor information
Processing customer orders and managing sales and archiving processes
Handling customer complaints, suggestions, and feedback
Preparing legally required commercial books, invoices, and financial documents
Managing logistics, shipping, and delivery processes
Informing customers about contractual obligations under the Distance Contracts Regulation
Managing operational security of the e-commerce platform
Conducting legal processes and providing information to authorized authorities
Analyzing customer behavior and conducting surveys

Personal data will be processed within the scope of the conditions and purposes specified in Article 5 of the KVKK.

With your explicit consent, your name, surname, contact information, customer transaction data, and financial data may also be processed for purposes such as marketing campaigns, promotions, brand awareness measurement, market research, surveys, and sending promotional communications through your preferred communication channels.

5. TRANSFER OF PERSONAL DATA

Your personal data may be transferred, in accordance with Articles 8 and 9 of the KVKK, to:

Authorized dealers and distributors
Business partners and suppliers
Affiliated companies of Salsalin
Domestic and international business partners
Public authorities and financial institutions where legally required
Courts and authorized legal authorities
Domestic and international software and technology companies
Cloud service providers and IT service providers

Such transfers are made solely for the purposes described above and in compliance with legal regulations.

6. METHODS AND LEGAL GROUNDS FOR COLLECTING PERSONAL DATA

Personal data may be collected through various channels including:

Website
Mobile applications
Call centers
Telephone
Email
Social media platforms
Authorized dealers or service providers

Personal data is collected and processed based on the following legal grounds:

Performance of a contract
Fulfillment of legal obligations
Protection or exercise of legal rights
Legitimate interests of the company
Explicit consent of the data subject

If explicit consent is provided, personal data may also be processed for marketing activities, customer relationship management, campaigns, events, surveys, and personalization of services based on customer preferences.

7. RIGHTS OF THE DATA SUBJECT (ARTICLE 11 OF KVKK)

As a data subject, you have the following rights under Article 11 of the KVKK:

To learn whether your personal data is processed
To request information if your personal data has been processed
To learn the purpose of processing and whether it is used accordingly
To know the third parties to whom personal data is transferred domestically or abroad
To request correction of incomplete or inaccurate data
To request deletion or destruction of personal data when the reasons for processing no longer exist
To object to results arising from automated processing that are detrimental to you
To request compensation if you suffer damage due to unlawful processing of your personal data

Requests regarding your personal data may be submitted in accordance with the Communiqué on the Principles and Procedures for Application to the Data Controller.

You may send your requests:

By written notice via notary
By personal application with identification