Clarification Text on Processing and Protection of Personal Data

This Clarification Text (“Clarification Text”) has been prepared by Deha Mağazacılık Ev Tekstili Ürünleri Sanayi ve Ticaret Anonim Şirketi (“Company” or “Madame Coco”), in the capacity of data controller, in line with the importance we place on your personal data. It aims to inform the relevant individuals about the collection, processing, transfer, protection of personal data, and ensuring information security in compliance with the Law No. 6698 on the Protection of Personal Data (“KVKK” or “Law”) and related regulations.

Our Company reserves the right to make changes to this Clarification Text. In case this Clarification Text is partially or fully renewed, the effective date will be updated, and it will be made accessible to the relevant individuals via our website www.madamecoco.com and other relevant channels.

1. Data Controller

Our company, registered with Istanbul Trade Registry Office under registration number 761311-0, and located at Mecidiyeköy Mahallesi Oğuz Sk. M.Köy Rönasans İş Merkezi Apt. No: 4/14 Şişli/İSTANBUL, is considered a Data Controller under Article 10 of the KVKK.

2. Collection of Personal Data

As a data controller, the Company may collect personal data in accordance with the fundamental principles outlined in the KVKK. This data collection may vary based on the Company’s commercial activities and may be gathered automatically or non-automatically via the Company’s website, mobile applications, and verbally, in writing, or electronically.

In this context, the personal data collected may be processed and transferred without obtaining explicit consent, as outlined in Article 5/2 and Article 6/3 of the KVKK, or with explicit consent, following the principles stipulated in Article 4/2 of the KVKK, which include compliance with the law and good faith, accuracy and timeliness, processing for specific, clear, and legitimate purposes, and storing the data for as long as necessary.

3. Processing of Personal Data and Purposes of Processing

As a data controller, the Company processes personal data to provide the requested products and services in line with customers' or users' needs, to plan and execute commercial activities, to maintain records related to services used by customers or users, to carry out campaigns, promotions, and communications, and to conduct necessary work for the performance of business activities. Other purposes include ensuring information security, issuing invoices as required by law, organizing various online and offline events, managing corporate social media accounts, ensuring internal compliance and motivation through activities like rewards or social events, and complying with requests from public institutions and authorities.

In line with the KVKK, personal data may be partially or fully collected, recorded, stored, updated, periodically checked, transferred to third parties, or processed through verbal, written, or electronic means with the consent and explicit approval of the data subject.

4. Recipients and Purposes for Transferring Personal Data

4.1 Domestic Transfers

To fulfill the purposes of data processing mentioned above, the Company may transfer personal data domestically to its direct/indirect subsidiaries, group companies, business partners, customers it has agreements with, third parties such as service providers, consultants, auditors, or authorities legally entitled to request such data, in line with the KVKK and subject to necessary security and confidentiality measures.

4.2 International Transfers

The Company may transfer personal data internationally, with the explicit consent of the data subject and in accordance with Article 9 of the KVKK, for the purposes mentioned in Section 3. Such transfers may occur to servers belonging to its foreign subsidiaries or third-party legal entities within the scope of the company’s business partnerships.

The Company ensures that necessary security measures are taken for the processing and storage of personal data on servers located abroad, and guarantees that the third parties comply with technical and administrative measures.

5. Rights of Personal Data Owners

In accordance with Article 11 of the KVKK, personal data owners have the following rights:

a) To learn whether the Company processes their personal data and to access information about the personal data processed, b) To inquire about the purposes of data processing activities, c) To know the third parties, either within the country or abroad, to whom personal data is transferred, d) To request the correction of personal data in case of incomplete or incorrect processing, e) To request the deletion or destruction of personal data in accordance with the law, f) To request that actions taken in line with the correction or deletion of personal data be communicated to third parties to whom the data has been transferred, g) To object to any unfavorable outcomes that may arise from the exclusive analysis of processed data through automated systems, and h) To request a copy of the processed personal data, i) To request compensation for damages in case personal data is processed unlawfully and causes harm.

Personal data owners can submit their written requests regarding the rights mentioned above by filling out the Data Subject Application Form attached to this Clarification Text and sending it to the address Mecidiyeköy Mahallesi Oğuz Sk. M.Köy Rönasans İş Merkezi Apt. No: 4/14 Şişli/ISTANBUL via notary or registered mail with return receipt or via electronic mail to kvkk@madamecoco.com.

In the application, the requested issue must be clear and understandable, the request must be related to the personal data of the applicant, and if acting on behalf of someone else, specific authorization must be provided. The application must include identity and address information, and documents verifying identity must be attached.

Legitimate requests submitted to our Company will be concluded within a maximum of 30 (thirty) days. If responding to these requests incurs an additional cost, the applicant may be charged according to the fee schedule set by the Personal Data Protection Board.

Our Company reserves the right to make changes to this clarification text in accordance with amendments to the law or methods determined by the Personal Data Protection Board.

6. Data Controller Contact Information

Data Controller: Deha Mağazacılık Ev Tekstili Ürünleri Sanayi ve Ticaret Anonim Şirketi
MERSIS No: 0273064836200012
Tax No: 2730648362
Address: Mecidiyeköy Mahallesi Oğuz Sk. M.Köy Rönasans İş Merkezi Apt. No: 4/14 Şişli/İSTANBUL
Phone: 0850 532 33 00
Fax: 2122672780
E-Mail: kvkk@madamecoco.com