Personal Data Protection Notice (KVKK)

This Notice is issued mainly under Turkish Personal Data Protection Law No. 6698 ("KVKK") and explains:

• what kind of data Faruk Sağın Ayakkabı ve Çanta San. Tic. İhr. İth. Ltd. ("Faruk Sağın") collects through the www.faruksaginstore.com website (the "Site"), how your data is used and with whom Faruk Sağın may share it;
• what your rights are regarding the data processed by Faruk Sağın and how you can exercise them; and
• how you can change your preferences about receiving commercial electronic messages.

Why and Which Personal Data We Process

To serve our Members better; to carry out and complete your orders and communicate with you; to inform you about products, services, campaigns and promotions; to better understand your shopping preferences, perform trend and statistical analyses and strengthen the Site's security; and to fulfil our legal obligations under Law No. 5651 on Internet Publications, Law No. 6563 on the Regulation of Electronic Commerce, Turkish Penal Code No. 5237, Law No. 6698 on the Protection of Personal Data and related secondary legislation, we process data that directly or indirectly identifies the Member, including but not limited to your name, surname, email address, phone number, gender, date of birth, Turkish ID number, tax ID number, personal interests, billing and delivery addresses, and information you approve to share if you connect via social media accounts.

In addition, we collect and process aggregate statistical data that does not contain personal information, such as Site visit frequency and times, order times and IP address at the time of order, and statistics on visited product pages and ordered products, in order to analyze and understand visitor behavior and preferences.

We process and store this personal data, taking appropriate information security measures, based on your explicit consent, where it is directly related to the establishment or performance of our contract with you, or where processing is necessary for our legitimate interests provided it does not harm your fundamental rights and freedoms, and only within the purposes and scope set out in this Notice.

We use some of the data collected in our database, in accordance with the relevant legal regulations, for periodic campaigns, designing special promotions for customer profiles and customer classification to avoid sending unwanted emails.

When you pay by credit card, you agree that your card number, expiry date, CVV2 code and similar information are shared with banks. However, credit and debit card details used when placing an order are never stored in our systems.

Faruk Sağın® may retain all records of a terminated membership account provided they are anonymized. Once anonymized, data no longer identifies a person and is not considered personal data. The Member cannot make any claim or demand compensation regarding anonymized records.

We may share your personal data with third parties we work with to provide our services (companies providing courier, shipping, call center, database and similar services) and with public authorities as required by our legal obligations. Faruk Sağın® may share personal data relating to your visit or membership and traffic data such as browsing information with public institutions legally authorized to request it, for your security and for the fulfilment of Faruk Sağın®'s legal obligations. Apart from the activities listed above and cases required by legislation, we will never use your personal data for commercial purposes or share it with third parties.

Your Rights Regarding Your Personal Data and How to Exercise Them

Faruk Sağın® is obliged to retain Member information that it is legally required to keep. However, the Member always has the right to be informed about their personal data, to access it, to request its correction or deletion, and to learn whether it is used in line with its purposes.

To the extent your personal data is processed by Faruk Sağın® as data controller, under Article 11 of KVKK you may apply in writing to Selahattin Eyyübi Mah. 1596 Sk. No:20/A Esenyurt, İstanbul, or send an email to [email protected] via registered electronic mail (KEP), secure electronic signature, mobile signature or the email address registered in our systems, in order to:

• learn whether your personal data is processed;
• request information about the processing of your personal data;
• learn the purposes of processing;
• learn the third parties in Turkey or abroad to whom your data has been transferred;
• request correction of incomplete or inaccurate data;
• request deletion or destruction of your data if the reasons for processing no longer exist or the Company has no legal basis or legitimate interest for processing it;
• request that the Company ensures third parties authorized by it and processing personal data respect your rights under this section;
• object to adverse results arising from processing by automated systems; and
• claim compensation if you suffer damage due to unlawful processing of your personal data.

You can update your membership and communication preferences at any time by signing in to the system.

How Long Is Your Personal Data Kept?

Under Law No. 6563 on the Regulation of Electronic Commerce, records of withdrawn consent are kept for 1 year from that date, and the content of commercial electronic messages and all other records relating to them are kept for 3 years to be submitted to the relevant ministry when necessary. After this period, your personal data will be deleted, destroyed or anonymized by our company or upon your request.

How Is Your Personal Data Protected?

Faruk Sağın® attaches great importance to the protection of personal data and takes the necessary measures against unauthorized access, loss, misuse, disclosure, alteration or destruction.

Faruk Sağın® undertakes to keep your personal data confidential and to take all necessary physical, technical and administrative measures and due care to ensure confidentiality and security. If, despite these measures, personal data is damaged or obtained by third parties as a result of attacks on the Site or system, Faruk Sağın® will immediately notify you and the Personal Data Protection Board and take the necessary measures.

Changes

Faruk Sağın® may change this Notice at any time. Changes take effect immediately once the amended provisions and/or policies are published on the Site, and our Members will be informed accordingly.