KVKK Information Notice

PROTECTION OF PERSONAL DATA

Personal Data Protection Disclosure Text

This disclosure statement pursuant to the Law on the Protection of Personal Data No. 6698 ("KVKK") primarily explains:

1. What type of data LAVASHOPS collects through the website www.lavashops.com (“Site”), how the collected data is used, and with whom LAVASHOPS may share your data;

2. What rights you have regarding the data processed by LAVASHOPS and how you can exercise these rights;

3. How you can change your positive or negative preferences regarding receiving electronic commercial communications.

In order to serve our Members better; to manage and complete your order processes and maintain communication with you; to inform you about products, services, campaigns, and promotions; to better understand your shopping preferences; to perform trend and statistical analyses; and to strengthen the security of the Site, as well as to fulfill our legal obligations arising from the Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed Through These Publications, Law No. 6563 on the Regulation of Electronic Commerce, Turkish Penal Code No. 5237, and the Personal Data Protection Law No. 6698 and related secondary legislation, we process your personal data such as your name, surname, email address, phone number, gender, date of birth, national ID number, tax identification number, personal interests, billing and shipping addresses; including but not limited to the information shared through your social media accounts if connected via those channels.

In addition, we also collect and process non-personal statistical data such as site visit frequency and times, order times, IP addresses at the time of order, statistics of visited product pages and ordered products, in order to analyze and understand visitor behavior and preferences.

We process and store this personal data for you to benefit from the services offered on the Site, with your explicit consent, or where necessary for the establishment or performance of a contract between you and us, or if data processing is necessary for our legitimate interests provided it does not harm your fundamental rights and freedoms, strictly for the purposes defined in this KVKK Disclosure and by taking appropriate data security measures.

Some of the data we collect in our database is used for periodic campaign activities, custom promotions based on customer profiles, and customer classification efforts to prevent unwanted emails, all in compliance with applicable legal regulations.

When you use a credit card to pay for a product, you agree that your credit card number, expiration date, CVV2 code, and similar information will be shared with banks. However, credit card and/or bank card details used during the ordering process are not stored in our systems in any way.

If you request to create a customer record by providing your contact information in our stores, your personal data may be collected verbally during conversations with store staff. The personal data collected during customer registration processes may be used to verify your contact information; with your explicit consent, to create campaigns and promotions tailored to your consumer behavior, to send you direct electronic commercial messages for marketing our products and services, and to facilitate your return and exchange processes by maintaining and monitoring necessary records in our systems.

siteadi reserves the right to store any record related to a terminated membership account in an anonymized form. Once anonymized, data no longer identifies an individual and is not considered personal data. Members cannot claim any rights or compensation related to anonymized records.

We may share your personal data with third-party service providers we cooperate with (such as shipping, call center, and database services) and with public authorities when legally required. siteadi may share your personal data and browsing information (such as traffic data) related to your visit to the Site or your membership with authorized public institutions and organizations when legally obligated to do so. However, we will not use your personal data for commercial purposes or share it with third parties beyond the above-mentioned activities and the requirements of applicable law.

siteadi is obliged to retain member information that must be stored by law. However, you always have the right to be informed about your personal data, access it, request its correction or deletion, and learn whether it is used in accordance with its intended purposes.

To the extent that your personal data is processed by siteadi as a data controller, you can make a written application to the contact address provided on the contact page or send an email using your registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the email address you shared with us during membership (and is recorded in our systems) to www.siteadi.com, in order to:

1. Learn whether your personal data is being processed;

2. Request information regarding the processing of your personal data;

3. Learn the purposes of processing your personal data;

4. Learn who the data is shared with, whether domestically or abroad;

5. Request correction if your personal data is incomplete or inaccurate;

6. Request deletion or destruction of your personal data if the reasons for processing no longer exist, or if the Company no longer has a legal basis or legitimate interest in processing the data;

7. Request that the Company ensure that third parties authorized by the Company who process your personal data respect your rights under this section;

8. Object to unfavorable outcomes resulting from the automated processing of your personal data; and

9. Request compensation if you incur damages due to unlawful processing of your personal data.

You can update your membership and communication preferences at any time by logging into the system.

siteadi commits to taking all necessary physical, technical, and administrative measures to protect personal data against unauthorized access, loss, misuse, disclosure, alteration, or destruction. We undertake to keep your personal data confidential and take all necessary measures to ensure privacy and security. In the event that your personal data is compromised or accessed by third parties as a result of an attack on the Site or our systems, despite having taken the necessary data security measures, we will promptly notify you and the Personal Data Protection Board and take all necessary actions.

LAVASHOPS reserves the right to make changes to this KVKK Disclosure Text at any time. Such changes shall become effective immediately upon the publication of the amended provisions and/or policies on the Site. In case of such changes, our members will be duly informed.