CLARIFICATION TEXT ON PROCESSING OF PERSONAL DATA IN THE MEMBERSHIP FORM

As Peraluna Örme San. Ve Tic. A.Ş. (“Peraluna”) we have prepared clarification text in order to inform you regarding the processing, storage and transfer of your personal data within the framework of the Law on Protection of Personal Data No. 6698 (“KVKK”), General Data Protection Regulation (“GDPR”) and relevant legislation and legal regulations.

  1. What are the Personal Data Categories We Process and For What Purposes Do We Process Them?                                      www.com

Personal information of our visitors may be processed by Peraluna according to article 4.2 of KVKK in accordance with the principles of;

(i) to be compatible with law and rules of good faith

(ii) to be accurate and, where necessary, up-to-date,

(iii) to process for specific, explicit, and legitimate purposes,

(iv) to be relevant, limited and proportionate to the purpose for which data are processed,

(v) to store for such duration specified by the relevant legislation or is necessary for the purpose for which data are collected

Identification information (e.g. name, surname, birthdate), contact information (e.g. address, phone number, e-mail address), customer transaction information (e.g. order information, payment information, favourite product information, cart information etc.) may be processed for the following purposes;

  1. conducting activities in accordance with the legislation
  2. execution of information security processes
  3.  conducting financial and accounting operations
  4.  carrying out loyalty management programmes for company/products/services
  5. conducting communication activities
  6.  execution/audit of business activities
  7. receiving and evaluating suggestions for improvement of business processes
  8. carrying out activities to ensure business continuity
  9.  conducting logistic activities
  10. carrying out sales processes of goods/services
  11.  carrying out after sales support services of goods/services
  12. executing advertisement/campaign/promotional processes, sending commercial electronic messages
  13. execution of customer relationship management processes
  14. carrying out activities for customer satisfaction
  15. follow-up of requests / complaints
  16. execution of marketing processes of products/services
  17. carrying out storage and archiving activities.

  1. What are the Collection Methods of Your Personal Data?

Your personal data mentioned above in categories is collected partially or completely automatically through your use of our website such as membership form, filling out the membership information page, adding products to your basket or favourites, placing an order, returning the products you have purchased, and your support requests.

  1. How Long Do We Keep Your Personal Data ?

Your personal data specified in categories above, if a period is stipulated in the relevant legislation, for the specified period; If the period is not stipulated, our legitimate interests are kept by taking the following criteria into account as long as it continues.

Personal data stored at the end of these periods are deleted, destroyed, or anonymized.

  1. What Is the Legal Reason For Collecting Your Personal Data?

Your personal data is processed by Peraluna in order to achieve the objectives described above, it is processed based on the following legal reasons stated in Article 5 of KVKK;

(i) Data processing is mandatory for the data controller to fulfil their legal obligation,

(ii) Provided that it is directly related to the establishment or execution of a contract, the processing of personal data of the contract parties is necessary,

(iii) Data processing is mandatory for the legitimate interests of the data controller, provided it does not harm the fundamental rights and freedoms of the data subject.

(iv) Our Customers’ and Potential Customers’ identity and communication information may be processed for the purposes of advertising, campaigns, promotion and sending commercial electronic messages based on their explicit consent.

  1. Do We Transfer Your Personal Data to a Third Party?

    

The personal data mentioned above can be shared with the authorized public institutions and organizations in order to ensure that our operations comply with the legislation, handle and follow-up on legal affairs, to inform the authorized persons, institutions and organizations within the scope of the legal regulations; they can be transferred to the cargo company in order to deliver your order, and to perform our services properly. In addition, the personal data in question may be transferred to the law firm we work with and the judicial authorities, in order to be used as evidence in possible legal disputes in the future.

  1. How Can You Exercise Your Rights Regarding Your Personal Data?

Right of Access: You have the right to request a copy of your personal data from our company. A small amount of payment may be requested from you for this activity.

Right to Controvert: If you have any personal data that you think is wrong, you have the right to request our company to correct it. At the same time, if you have any personal data that you think is incomplete, you have the right to request our company to complete it.

The Right to be Forgotten: In some cases, you have the right to request our company to delete your personal data.

Right to Restrict Processing: In some cases, you have the right to request our company to limit the processing of your personal data.

Right to Objection to the Processing Process: In some cases, you have the right to object to the processing of your personal data from our company.

Right to Data Portability: In certain cases, you have the right to request our company to transfer your personal data we obtain to another organization or directly to you.

Withdrawal of Consent: You have the right to withdraw consent at any time, without affecting the legality of the processing activity carried out based on consent before the withdrawal of your explicit consent to our company.

Right to lodge a complaint with a Supervisory Authority: If you believe that we are processing your personal data contrary to applicable data protection directives, you can lodge a complaint with the competent regulatory authority, primarily the relevant supervisory regulatory authority in the Member State where you have your habitual residence or workplace if you live in the European Union or where you believe the data protection breach has occurred. You have the right to exist.

Your requests regarding the above-mentioned rights and your requests within the scope of Article 11 of the Law on Protection of Personal Data No 6698, which regulates the rights of the data subject, can be conveyed to Peraluna through the "Application Form to Data Controller" prepared for your convenience in accordance with the "Notification Regarding the Application Procedures and Principles of Application to Data Controller" at the address “https://www.peraluna.com/”

Data Controller: Peraluna Örme San. Ve Tic. A.Ş.

Address: Atatürk Cad. 137.Sok. No: 1 Kat 2 Ayazağa, Sarıyer İstanbul

Mail: [email protected]