PERSONAL DATA PROTECTION LAW

ANATOLINE LUXURY PERFUME HOUSE is the "Company" or "Data Controller" protects your personal data by determining the purposes, legal grounds and rights of data owners regarding the processing of personal data, within the scope of the Law on Protection of Personal Data No. 6698 ("KVKK"). The Company is a "Data Controller" in accordance with KVKK. is the institution that decides, determines and manages the processing of personal data.

Purposes of Processing Personal Data

As a company, we only process your personal data for certain purposes. These purposes are:

• Providing the services we offer you,
• To inform you about special offers and discounts,
• Contacting you,
• Fulfilling our legal obligations.

The purposes of processing your personal data are limited in line with the above-mentioned purposes. It is not used for other than these purposes.

Personal Data Collection Methods

Our company may collect personal data necessary for the conduct of business relations, within legal limitations and during various activities carried out verbally, in writing or electronically. Collected personal data is processed in order to effectively carry out the products and services offered by our Company, to offer products and services that meet the needs of customers, to respond to customer demands, to fulfill legal obligations, to perform internal reporting and other activities.

Purposes of Processing Collected Personal Data

As a company, we process your personal data for the following purposes:

• Create and manage customer and supplier records
• To meet and communicate your requests regarding our services
• Fulfilling our obligations stipulated by the relevant legislation
• To enable you to take advantage of our campaigns
• Do customer satisfaction research and improve customer experience
• Managing and updating our legal and technical business processes
• Providing the requested products and services and performing sales transactions.

Your personal data processed as a company will not be used for purposes other than the above-mentioned purposes, and will not be transferred or sold to third parties except for legal obligations.

Parties to which Processed Personal Data are Transferred and Purposes of Transfer

Your personal data may be transferred to the relevant parties in cases permitted by the legal legislation and for the purposes specified in this KVKK clarification text. These parties; There may be people or organizations that we cooperate with to offer our products/services, program partnerships, provide financial services, receive consultancy services, and receive legal support. In addition, your personal data may also be transferred to public institutions and organizations in certain cases.

Your personal data may also be transferred to domestic and foreign cloud computing service providers in cases where legal regulations allow and for the purposes specified in this KVKK clarification text.

Legal Reason for Collecting Personal Data

The collection, processing and storage of your personal data by the Company is carried out based on the legal reasons specified in Articles 5 and 6 of the Law. Your personal data is collected by the Company for the purposes of fulfilling certain legal obligations, concluding, executing and performing contracts, and protecting our legitimate interests.

Data Owner's Rights

With regard to the processing of personal data, the Data Owner has the following rights:

• Learning whether personal data is processed,
• Request information about personal data if it has been processed,
• Learning the purpose of processing personal data and whether they are used in accordance with its purpose,
• Knowing the third parties to whom personal data is transferred in the country or abroad,
• Requesting the correction of personal data in case of incomplete or incorrect processing and requesting notification of the transactions made within this scope to the third parties to whom the personal data has been transferred,
• To request the deletion or destruction of personal data within the framework of the conditions stipulated in the law and other relevant legislation and to request the notification of the transactions made in this context to the third parties to whom the personal data has been transferred,
• Objecting to the emergence of a result against the person by analyzing the processed data exclusively through automated systems and requesting the notification of the transactions made in this context to the third parties to whom the personal data has been transferred,
• Demanding the removal of the damage in case of loss due to unlawful processing of personal data.

The Data Owner can use the above-mentioned rights by applying to the "Data Controller in accordance with the KVK Law". Related applications are concluded free of charge by the Data Controller as soon as possible and within 30 days at the latest. However, if the transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged by the Data Controller.

Data Security

The Company undertakes to take the necessary technical and administrative measures to ensure the security of personal data. In this context, our company takes the necessary measures in line with national and international standards regarding data security and takes all necessary measures to protect the confidentiality, integrity and accessibility of data.

For this purpose, our company uses databases that only authorized persons can access, uses up-to-date security software, makes data backups, and regularly tests to detect and close vulnerabilities in systems. In addition, our company provides regular training to its employees on the privacy and security of personal data.

However, despite all these precautions, it is not possible to completely eliminate the risks that may arise due to technological developments. Therefore, in the event of a possible data breach, our business will make every effort to take all necessary steps to inform data owners as soon as possible and to fulfill other legal obligations in this regard.

Complaints and Contact Information Regarding the Processing of Personal Data

Data owners can submit any requests regarding the processing of their personal data to the Data Controller. Data owners can also submit their complaints directly to the Data Controller regarding the processing of their personal data.

You can share your requests regarding the protection of personal data with us via email: info@anatoline.com