KVKK | IT'S SOLD

REGARDING THE PROCESSING AND PROTECTION OF PERSONAL DATA

CLARIFICATION TEXT

As IT'SOLD, we process and preserve the personal data of all real persons associated with our company, including our valued customers, members and visitors who benefit from our products and services, in accordance with the Personal Data Protection Law No. 6698 (“KVKK” or “Law”). We attach importance to

As the Data Controller, we would like to inform you about our data processing activities and your rights in this context through this Information Text in accordance with the law.

A) Which Personal Data is Processed?

Our company processes your personal data for certain purposes based on the legal reasons given below. The main mission of our company is to gain your appreciation and satisfaction in presenting and benefiting from our products and services. Your personal data and their classifications, which are processed by taking all necessary precautions to achieve this and other specific purposes, are as follows:

Personal Data of Our Member Customers

Identity: Name-Surname

Contact: E-Mail Address

Transaction Security: IP Address, Website Login-Exit Information, Password Information

Marketing: Cookie Records, Information Obtained through Campaign Work

Personal Data of Our Customers Creating Orders

Identity: Name-Surname, TR Identity Number

Contact: Phone Number, E-Mail Address, Address

Finance: Payments and Payment Method Records

Customer Transaction: Order Information

Transaction Security: IP Address, Website Login-Exit Information, Password Information

Marketing: Cookie Records, Information Obtained through Campaign Work, Shopping History Information

Personal Data of Our Visitors

Transaction Security: IP Address, Website Login-Exit Information

Marketing: Cookie Records,

Personal data collected by our company and the purposes for which it is collected may vary depending on the service offered and the contracts established. In this context, you can find detailed information about the data processing activity, including your personal data collected, purpose and legal reasons, in our Policy on Processing and Protection of Personal Data on our website.

B) For what purposes is your personal data collected and processed?

Our company processes your personal data in accordance with the Law and the rules of honesty for the following purposes:

To confirm the identity information of our customers who purchase products, services and similar transactions personally or through representatives,

To communicate with relevant persons electronically or physically,

To fulfill the obligations undertaken in accordance with the relevant legislation provisions and the contracts to which we are a party and to apply for legal rights,

Carrying out activities in accordance with the legislation,

To provide information to authorized public institutions and organizations,

To complete membership registration,

To provide information to our customers, members and visitors on the website/mobile applications about our products and campaigns that they may be interested in, in line with their expectations and requests,

To be able to recognize our customers who shop through websites/mobile applications and other means, to use them in customer environment analysis, to use them in various marketing and advertising activities, and to ensure customer satisfaction in this context, to organize surveys in electronic and/or physical environments, either personally or through contracted organizations, to conduct trend analysis and statistical analysis. to make analyses,

To ensure the security of the website/mobile applications in order to provide a safer shopping environment,

Managing, executing and finalizing the processes regarding orders created through the website/mobile applications and other means, providing our customers with up-to-date information about their orders, sending SMS and E-mails about the delivery status,

Providing after-sales support services,

Carrying out financial and accounting affairs,

Legal affairs, follow-up and finalization of requests and complaints,

C) To whom and for what purposes is your personal data shared?

Sharing of personal data with third parties is carried out with the permission of the relevant persons in accordance with Articles 8 and 9 of the Law, and as a rule, personal data is not transferred to third parties without the consent of the relevant person. However, it is envisaged that in some cases listed in the Law, personal data may be shared without the consent of the relevant person.

In this context; In accordance with our obligations arising from the legislation, your personal data is shared with judicial authorities and other public institutions and organizations upon request. Providing our products and services in the best possible way, fulfilling our obligations arising from the contract and legislation, monitoring and auditing the services provided, resolving legal disputes, carrying out financial and accounting affairs, ensuring the security of our website-mobile applications and your personal data and providing a high-level shopping experience. Personal data is transferred to our contracted suppliers, legal consultants and certified e-commerce service providers abroad for the purpose of creating

D) By what methods is your personal data collected?

Your personal data; The information you transmit to us through our call center, corporate websites, mobile site, mobile application or via e-mail, SMS or other means, or during the signing of commercial contracts and/or during the commercial relationship process, allows our servers to automatically recognize you when you visit our website. verbally, in writing or electronically through various channels such as technical communication files and physical forms called "cookies" (small files placed on your hard drive); It is collected and stored completely or partially by automatic means or by various non-automatic methods provided that it is part of the data recording system.

E) On what legal grounds is your personal data processed?

As a rule, your explicit consent is required for the processing of your personal data. Explicit consent can be defined as the person concerned being informed correctly on a specific and clear issue and allowing the transaction to be carried out on this matter. However, Article 5/2 of the Law specifies cases where data may be processed without explicit consent. If at least one of these situations exists, data processing activities may be carried out without the consent of the relevant person.

Your personal data mentioned above is processed based on the following legal reasons specified in Article 5/2 of the Law:

Explicitly provided by law (For example, keeping cookie records and IP addresses in accordance with Law No. 5651)

It is mandatory for the data controller to fulfill its legal obligation, (For example, your Name-Surname information is needed to issue an invoice for the order you created.)

It is mandatory to process data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned (For example, the information obtained as a result of the campaign work is identified and presented to your liking).

It is necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract. (For example, processing address information so that your order can be delivered to your address)

Data processing is mandatory for the establishment, exercise or protection of a right. (For example, following up on legal and financial affairs)

F) What are the Rights of Personal Data Owners Under the Law?

In accordance with Article 11 of the Law, data owners;

Learning whether personal data about them is being processed,

Requesting information if personal data has been processed,

Learning the purpose of processing personal data and whether they are used for their intended purpose,

Knowing the third parties to whom personal data is transferred at home or abroad,

Requesting correction of personal data in case personal data has been processed incompletely or incorrectly and requesting that the action taken in this context be notified to third parties to whom personal data has been transferred,

Requesting the deletion or destruction of personal data in case the reasons requiring processing no longer exist, even though it has been processed in accordance with the law and other relevant legal provisions, and requesting that the action taken in this context be notified to third parties to whom personal data has been transferred,

Objecting to the emergence of a result that is unfavorable to the individual by analyzing the processed data exclusively through automatic systems,

In case of damage due to unlawful processing of personal data, they have the right to demand compensation for the damage.

You can submit your applications for your specified rights by filling out the Application Form on our website completely and accurately and sending a signed copy of the form to Duatepe Mah. Evrenoszade St. No: 18 Daire: 8 Şişli / İSTANBUL 34379. You can personally deliver your identity documents to the address, send it through a notary public or other methods specified in the Law, or send the relevant form with a secure electronic signature to fahrettineren.dinler@hs01.kep.tr. Depending on the nature of your request, your applications will be finalized free of charge as soon as possible and within thirty days at the latest; However, if an additional cost arises, the Company reserves the right to charge you a fee according to the tariff to be determined by the Personal Data Protection Board. Additionally, you can contact our company at info@itsold.com.tr for any questions and comments regarding your personal data.

Language

KVKK | IT'S SOLD