DATA CONTROLLER

In accordance with the Regulation 2016/679 of the European Parliament and Council of 27 April 2016 (European Data Protection Regulation or GDPR) and other applicable legislation, your personal data can be processed by data controller Madame Coco BV (“Company”) based in Strawinskylaan 1143, Tower C-11, in (1077 XX) Amsterdam, the Netherlands, in the scope of the details explained in this notice.

THE METHOD OF COLLECTING PERSONAL DATA

Your personal data is collected by our Company via cookies, digital forms located on our website, or other information and documents which you have disclosed to us. We may pass your personal data on to our service providers who are contracted to Company in the course of dealing with you. Our contractors are obliged to keep your details securely and use them only to fulfill the service they provide you on our behalf. Once your service need has been satisfied or the case has been closed, they will dispose of the details in line with Company’s procedures. If we wish to pass your sensitive personal data onto a third party, we will only do so once we have obtained your consent, unless we are legally required to do so.

THE PURPOSES AND THE LEGAL REASONS OF PROCESSING PERSONAL DATA

Our Company will process your personal data in order to execute the communication processes, create an e-bulletin membership, evaluate and follow-up on your requests, suggestions and complaints, inform you about our products and/or services, plan and execute customer satisfaction activities, and conduct proposal and promotion of services customized according to your choices, usage habits, and needs within the scope of legal reasons listed below:

• "compliance with a legal obligation" regulated in Article 6/1(c) of the GDPR,
• the "legitimate interest of the data controller" regulated in Article 6/1(f) of the GDPR,
• "explicit consent" regulated in Article 6/1(a) of the GDPR (for the purpose of sharing on the website of our Company within the scope of conducting advertising, marketing and promotional activities regarding products and/or services, measuring your satisfaction with our services by satisfaction questionnaire, taking necessary actions and making analyses for your satisfaction).

TRANSFER OF PERSONAL DATA

We only share your Data when strictly necessary, and only to the following third parties provided that:

• our partner companies;
• our suppliers;
• our service providers;
• to a third party when stipulated or authorised by the law, or a valid legislative provision, court order or regulation, or if such disclosure is necessary as part of an investigation or procedure, within the national territory or in another country.

Finally, in accordance with the legal provisions (in particular Article 6(1) and recital 48 of GDPR), we may share your Data with Madame Coco companies for internal administrative purposes. If a transfer as described above takes place to a country outside the Republic of Turkey and/or the European Union, we will put in place measures to protect your data, appropriate to the legislation in force. Similarly, if you are located outside the EU, your Data will be transferred within the EU where they will be processed in accordance with the legal provisions of the European Data Protection Regulation.

YOUR RIGHTS AS THE DATA SUBJECT

According to Article 12 of GDPR, you also have the following rights:

• learn whether your personal data are being processed,
• if they are, request information,
• obtain information on the purpose of processing and find out whether personal data has been used as fit for the purpose,
• obtain information about the third persons in Turkey and abroad, to whom personal data are transferred,
• request rectification of personal data that may have been incompletely or inaccurately processed,
• request the deletion or destruction of personal data,
• request notification of the operations made as per indents (e) and (f) to third parties to whom personal data have been transferred,
• object to the occurrence of any detrimental result by means of analysis of personal data exclusively through automated systems, and
• request compensation for the damages due to unlawful processing of personal data.

You can send your requests to the Company according to the Communique on the Principles and Procedures for the Request to Data Controller. You can also direct your applications to us by submitting it to the address Strawinskylaan 1143, Tower C-11, in (1077 XX) Amsterdam, the Netherlands via registered letter or to the gdpr@madamecoco.com email address.

Our Company fulfills your requests as soon as possible and within thirty days at the latest and once for free of charge. However, the requester may be charged for following requests or for the initial request if the action taken on the request requires additional cost. Our Company can accept and process the request or reject the request in writing by explaining its reason.

We would like to emphasize that your data is meticulously protected by the Company and thank you for the trust that you place in us.