PROTECTION AND PROCESSING OF PERSONAL DATA

CUSTOMER INFORMATION TEXT

1. Purpose

TAŞHAN JEWELRY AND MINING INDUSTRY TRADE LTD. ŞTİ. (“Taşhan” or “the Company”) aims to process the personal data of its individual customers in accordance with the provisions of the Law No. 6698 on the Protection of Personal Data (“KVKK Law”) and other relevant legislation.

As a natural person customer of our company, your personal data that you have provided/will provide to our company and/or that our company has obtained from external sources will be processed by our company as the "Data Controller",

within the scope of the purpose requiring the processing of your personal data, and in a manner that is limited and proportionate to this purpose,

while maintaining the accuracy and up-to-date nature of the personal data as you have provided or as it has been provided to our company,

will be recorded, stored, maintained, reorganized, shared with institutions legally authorized to request this personal data, and transferred, assigned, classified, and processed in other ways listed in the Personal Data Protection Law, and subjected to other processes listed in the Personal Data Protection Law, to domestic or foreign third parties under the conditions stipulated in the Personal Data Protection Law.

With this Disclosure Statement, Taşhan has adopted the principle of conducting and developing its activities in compliance with the principles set forth in the Personal Data Protection Law. 2. Collection and Procedure of Personal Data of Individual Customers

Our company will process your personal data in accordance with the purposes stated in this Disclosure Statement. If there is any change in the purpose of processing your personal data, your consent will be obtained separately.

The personal data of customers collected and used by our company includes:

Name and surname, address information, product purchased, shopping experience, bank account information, invoice information, gift card information, passport number, Turkish Republic identity number, social media account information, email address, and telephone number.

Your personal data is collected by our company both before and after the establishment of the sales contract, and throughout the duration of the contractual relationship, through all kinds of information, documents, and records that you have submitted to our company, and through physical or electronic media, and cameras placed in our stores, for reasons stipulated by law.

3. Purposes and Legal Grounds for Processing Personal Data

Your personal data is processed in accordance with the applicable legislation and the Personal Data Protection Law, using automated or non-automated methods, for the following purposes: in accordance with the provisions of Articles 5 and 6 of the Personal Data Protection Law; in cases explicitly provided for in the laws; when it is directly related to the establishment or performance of a contract; when the processing of personal data belonging to the parties of the contract is necessary; or provided that it does not harm the fundamental rights and freedoms of the data subject; and for the legitimate interests of Taşhan.

The purposes of processing personal data may be updated in line with company policies and our obligations arising from legislation, and in particular;

Your personal data is processed for the following purposes:

Execution of legal processes,

Execution of electronic payment transactions,

Execution of advertising and marketing activities,

Tracking of returned products,

Execution of shipping processes for purchased products,

Creation of campaigns within the mobile application,

Execution of research activities within the scope of customer experience,

Execution of research to provide better service to customers,

Organization of raffles within the scope of marketing activities,

Customer classification within the scope of marketing activities,

Invoice generation,

Creation of customer statements,

Creation of customer lists for the purpose of conducting marketing activities,

Follow-up of after-sales services,

Execution of website member login processes,

Tracking of purchases made through the website,

Analysis and monitoring of website cookies.

Your personal data will be retained for the periods specified in the relevant legislation, or, if the purpose of processing ceases to exist, immediately or for a reasonable period depending on the nature of the data, and in any case for the statutory limitation periods.

4. Transfer of Personal Data to Third Parties

The procedures and principles to be applied in the transfer of personal data are regulated in Articles 8 and 9 of the Personal Data Protection Law, and the personal data and special categories of personal data of the data subject may be transferred to third parties located within and outside the country.

Your personal data may be used for purposes such as magazine printing, conducting electronic payment transactions, carrying out advertising and marketing activities, managing cargo processes, creating campaigns within the scope of mobile applications, and analyzing customer experience processes.