PRIVACY NOTICE FOR WEBSITE VISITORS

DATA CONTROLLER

In accordance with the Regulation 2016/679 of the European Parliament and Council of 27 April 2016 (European Data Protection Regulation or “GDPR”) and other applicable legislation, your personal data can be processed by data Madame Coco BV (“Company”) based in Strawinskylaan 1143, Tower C-11, in (1077 XX) Amsterdam, the Netherlands, in the scope of the details explained in this notice.

THE METHOD OF COLLECTING PERSONAL DATA

Your personal data is collected by our Company via cookies, digital forms located on our website or the other information and documents which you have disclosed to us.

In any event, we are committed to ensuring that the information we collect and use is appropriate for this purpose, and does not constitute an invasion of your privacy. We may pass your personal data on to our service providers who are contracted to Company in the course of dealing with you. Our contractors are obliged to keep your details securely, and use them only to fulfil the service they provide you on our behalf. Once your service need has been satisfied or the case has been closed, they will dispose of the details in line with Company’s procedures. If we wish to pass your sensitive personal data onto a third party we will only do so once we have obtained your consent, unless we are legally required to do so.

THE PURPOSES AND THE LEGAL REASONS OF PROSESSING PERSONAL DATA

Our Company will be able to process your personal data in order for taking the necessary actions and fulfilling legal obligations, executing the necessary business processes to benefit you from our services, planning and executing the proposal and promotion of the services customized according to their choices, usage habits and needs, executing commercial activities, planning the Company's commercial and/or business strategies, ensuring the legal, technical and commercial-business security of the Company, creating a e-bulletin membership, evaluating and follow-up your requests, suggestions and complaints, informing you regarding our products and /or services, planning and executing the customer satisfaction activities within the scope of legal reasons listed in below:

• - "compliance with a legal obligation" regulated in Article 6/1(c) of the GDPR,
• - the "legitimate interest of the data controller" regulated in Article 6/1(f) of the GDPR,
• - "explicit consent" regulated in Article 6/1(a) of the GDPR (for the purpose of sharing on the website of our Company within the scope of conducting advertising, marketing and promotional activities regarding products and / or services, measuring your satisfaction with our services by satisfaction questionnaire, taking necessary actions and making analyzes for your satisfaction)

TRANSFER OF PERSONAL DATA

We only share your Data when strictly necessary, and only to the following third parties provided that:

• our partner companies,
• our suppliers,
• to our service providers,
• to a third party when stipulated or authorised by the law, or a valid legislative provision, court order or regulation, or if such disclosure is necessary as part of an investigation or procedure, within the national territory or in another country.to our service providers,

Finally, in accordance with the legal provisions (in recital 48 of GDPR), we may share your Data with Global companies for internal administrative purposes.

If a transfer as described above takes place to a country outside the Republic of Turkey and/or the European Union and , we will put in place measures to protect your data, appropriate to the legislation in force. Similarly, if you are located outside the EU, your Data will be transfered within the EU where they will be processed in accordance with the legal provisions of the European Data Protection Regulation.

YOUR RIGHTS AS THE DATA SUBJECT

According to the Article 12 of GDPR, you also have the following rights:

• learn whether your personal data are being processed,
• if they are, request information,
• obtain information on the purpose of processing and find out whether personal data has been used as fit for the purpose,
• obtain information about the third persons in Turkey and abroad, to whom personal data are transferred,
• request rectification of personal data that may have been incompletely or inaccurately processed,
• request the deletion or destruction of personal data,
• request notification of the operations made as per indents (e) and (f) to third parties to whom personal data have been transferred,
• object to occurrence of any detrimental result by means of analysis of personal data exclusively through automated systems and
• request compensation for the damages due to unlawful processing of personal data.

You can send your requests to the Company according to Comminuque on the Principles and Procedures for the Request to Data Controller. You can also direct your applications to us by submit it to the address Strawinskylaan 1143, Tower C-11, in (1077 XX) Amsterdam, the Netherlands via registered letter or to the gdpr@madamecoco.com e-mail adress.

Our Company fulfills your requests as soon as possible and within thirty days at the latest and once for free of charge. However, requester may be charged for following requests or for the initial request if the action taken on the request requires additional cost. Our Company can accept and process the request or reject the request in writing by explaining its reason.

We would like to emphasize that your data is meticulously protected by the Company and thank you for the trust that you place in us.