PERSONAL DATA PROTECTION INFORMATION TEXT

Our Valued Customers, Members and valuable partners who benefit from our products and services as a Company;

As Ceren Kömeçoğlu Private Company and www.crocosa.com on behalf of CROCOSA, we attach great importance to the protection of your personal information within the framework of the Personal Data Protection Law No. 6698 ("KVKK"). With the awareness of this responsibility, we would like to inform you about your rights regulated in the specified KVKK Law.

WHAT IS THE PERSONAL DATA PROTECTION LAW?

The Personal Data Protection Law No. 6698 ("KVKK") was accepted by the Turkish Grand National Assembly on March 24, 2016 and entered into force upon publication in the Official Gazette dated April 7, 2016. Our company CROCOSA is a Ceren Kömeçoğlu Private Company and on our website www.crocosa.com, the Privacy and Security conditions, the main principles of which are specified below, apply to the confidentiality, protection, processing and use of member-customer information, commercial electronic communications and other issues.

We are considered as the Data Controller in terms of the personal information we receive from you during our activities. As the Data Controller, your personal information may be recorded, stored, updated, classified, disclosed and/or transferred to 3rd parties and/or abroad in cases permitted by the legislation, and processed in other ways listed in the KVKK within the framework explained below.

WHAT ARE THE PURPOSES AND LEGAL REASONS FOR PROCESSING PERSONAL DATA?

The purposes and legal reasons for processing personal data are; to organize all records and documents that will form the basis of the transaction in electronic or paper format; to comply with the information storage, reporting and notification obligations stipulated by the legislation and relevant authorities; to provide the requested products and services and to fulfill the products or services you will receive as required by the contract you have concluded. Our company, on behalf of CROCOSA, Ceren Kömeçoğlu Private Company and www.crocosa.com, requests some of your personal information (name, age, areas of interest, e-mail, etc.) in order to provide better service to our customers.

The purpose of processing personal data is as follows;

• To confirm the identity of the person who makes/makes purchases via the website/mobile applications,

• To record the address and other necessary information for communication,

• To communicate with our customers regarding the conditions, current status and updates of the contracts we have concluded under the relevant articles of the Distance Selling Contract and the Law on Consumer Protection, and to be able to provide the necessary information,

• To organize all records and documents that will form the basis of the transaction in electronic (internet/mobile etc.) or paper format,

• To fulfill the obligations undertaken under the contracts we have concluded under the relevant articles of the Distance Selling Contract and the Law on Consumer Protection,

• To be able to provide information to public officials upon request and as required by law on matters related to public safety,

• To provide a better shopping experience for our customers, to inform our customers about our products that may be of interest to our customers "by taking into account the areas of interest of our customers", to convey campaigns,

• To increase customer satisfaction, to be able to recognize our customers who make purchases via the website and/or mobile applications and to use them in customer circle analysis, various marketing and advertising to be able to use it in its activities and to organize surveys electronically and/or physically through contracted institutions within this scope,

• To be able to offer suggestions to our customers by our contracted institutions and solution partners, to inform our customers about our services,

• To be able to evaluate customer complaints and suggestions about our services,

• To be able to fulfill our legal obligations and to use our rights arising from the current legislation.

This personal data is under the supervision and control of Ceren Kömeçoğlu Private Company and www.crocosa.com on behalf of our Company CROCOSA.

In accordance with the provisions of the relevant legislation in force, it has assumed the responsibility as the data controller to establish the necessary organization and to take and adapt technical measures in order to protect the confidentiality and integrity of the information. Being aware of our obligation in this regard, we periodically conduct penetration tests in accordance with international and national technical standards on data confidentiality and we would like to inform you that we always update our data processing policies within this scope.

IS YOUR PERSONAL DATA SHARED?

The sharing of personal data belonging to our customers with third parties is carried out within the framework of the customers' consent and, as a rule, personal data is not transferred to third parties without the consent of our customers.

However, due to our legal obligations and limited to these, personal data is shared with courts and other public institutions. In addition, personal data is transferred to contracted third parties in order to provide the services we undertake and to perform quality control of the services provided. Necessary technical and legal measures are taken to prevent rights violations during data transfer to third parties.

Your personal data may be shared with irie's shareholders, our direct/indirect domestic/international affiliates, program partner institutions and organizations that we cooperate with to carry out our activities, domestic/international persons and organizations from which we receive cloud storage services, domestic/international organizations with which we have agreements regarding sending commercial electronic messages to our customers, the Interbank Card Center, banks with which we have agreements, and various domestic and international agencies, advertising companies and survey companies and other domestic/international third parties and relevant business partners within the scope of various marketing activities in order to provide you with better service and ensure customer satisfaction.

WHAT ARE YOUR RIGHTS ARISING FROM THE PERSONAL DATA PROTECTION LAW?

According to the KVKK, your personal data;

a) to learn whether it has been processed,

b) to request information if it has been processed,

c) to learn the purpose of processing and whether it is used in accordance with its purpose,

d) to know the third parties to whom it was transferred domestically / abroad,

e) to request correction if it was processed incompletely / incorrectly,

f) to request deletion / destruction within the framework of the conditions stipulated in Article 7 of the KVKK,

g) to request notification of the transactions made in accordance with clauses (d) and (e) listed above to the third parties to whom it was transferred,

h) to object to the emergence of a result against you due to analysis by exclusively automated systems,

i) to request compensation for the damages in case you suffer damages due to processing in violation of the KVKK.

WHAT IS THE PERIOD FOR WHICH WE STORAGE YOUR PERSONAL DATA?

Although processed in accordance with Law No. 6698 and other relevant provisions, if the reasons requiring processing are eliminated, personal data will be deleted, destroyed or anonymized by our company or upon your request. However, in accordance with Law No. 6563 on the Regulation of Electronic Commerce; records regarding the withdrawal of consent will be stored for 1 year from this date; and the content of the commercial electronic message and any other records regarding the transmission will be stored for 3 years to be submitted to the relevant Ministry when necessary. After this period, your personal data will be deleted, destroyed or anonymized by our company or upon your request.

You can reach us at any time for any questions and opinions regarding your personal data via iletisim@crocosa.com e-mail address.