DISCLOSURE AND PRIVACY POLICY ON THE PROTECTION OF PERSONAL DATA

Basic information regarding the protection of personal data transferred to rheyacose.com ("rheyacose") is provided below. In order to fulfil its disclosure obligation arising from Article 10 of Law No. 6698 on the Protection of Personal Data ("KVKK" / the Turkish data protection law), rheyacose presents the following explanations for the attention of our customers and of third parties who use our website and/or mobile applications. rheyacose reserves the right to update this Disclosure on the Protection of Personal Data at any time within the framework of possible changes in applicable legislation.

1) What Is rheyacose's Legal Basis for Collecting Personal Data?

Various laws contain provisions on the use of our customers' personal data. First and foremost, the principles for the protection of personal data are set out by the KVKK. In addition, Law No. 6563 on the Regulation of Electronic Commerce also contains provisions on the protection of personal data. Through the provisions of Turkish Penal Code No. 5237, criminal sanctions are also envisaged in certain cases for the protection of personal data. On the other hand, data must be collected and used in order to fulfil our obligations arising from Law No. 6502 on the Protection of the Consumer and the Regulation on Distance Contracts.

2) What Methods Does rheyacose Use to Collect Personal Data?

The data provided by our customers who transact through the www.rheyacose.com website or mobile applications are processed by rheyacose with the consent of our customers and in accordance with the provisions of the legislation. The rheyacose.com website belonging to rheyacose is a site that uses cookies. A cookie is a file, usually consisting of letters and numbers, stored on the internet browser or hard disk of the device in use, allowing that device to be identified. In order to provide better service to visitors of www.rheyacose.com and within the framework of legal obligations, rheyacose will collect, process, share with third parties and securely store your browsing information, on condition that it is not used outside the purposes and scope set out in this Disclosure on the Protection of Personal Data.

www.rheyacose.com stores the information it collects through log files, empty gif files and/or third-party sources in order to create a summary of your preferences. www.rheyacose.com may track your browsing information on the site and/or your usage history on the site in order to provide you with tailored promotions, offer promotions and marketing offers, improve the content of the website or mobile application for you, and/or determine your preferences. www.rheyacose.com may match information collected from you on the site by different methods or at different times — such as information collected online and offline — and may use this information together with information obtained from other sources such as third parties.

The www.rheyacose.com mobile application uses session cookies and persistent cookies. A session ID cookie expires when you close your browser. A persistent cookie remains on your hard disk for a long time. By following the instructions in your internet browser's "help" file or by visiting "www.allaboutcookies.org" or "www.youronlinechoices.eu", you can remove persistent cookies and reject both session and persistent cookies. If you reject persistent or session cookies, you can continue to use the website and mobile application, but you may not be able to access all functions of the website and mobile application, or your access may be limited.

3) How Are Website Cookies Used?

www.rheyacose.com uses cookies to remember the choices you make and to personalise your use of the website and mobile application. This use includes cookies that save your password and keep your website/mobile-application session continuously open — thereby sparing you the trouble of entering your password multiple times on each visit — and cookies that remember and recognise you on your later visits to the website/mobile application. It uses them to determine how you use the website/mobile application, including tracking where you connect to the website from, which content you view on the website/mobile application, and the duration of your visit. Cookies on the rheyacose.com website are used for advertising and promotional purposes to present content and advertisements more relevant to your interests. In this way, when you use the website and its mobile application, it presents you with more relevant content and tailored campaigns and products, and does not present again content or offers you have previously indicated you do not want.

4) How Does the Website Use Third-Party Cookies for Advertising and Retargeting?

rheyacose.com website cookies may also be used to activate "advertising technology" in order to present you with advertisements it thinks may interest you when you visit search engines, the website, its mobile application and/or websites where the site advertises. Advertising technology uses information about your previous visits to the website/mobile application and to the websites/mobile applications where the site advertises, in order to present you with tailored advertisements. When presenting these advertisements, a unique third-party cookie may be placed in your browser so that the website can recognise you. By following the instructions in your internet browser's "help" file or by visiting "www.allaboutcookies.org" or "www.youronlinechoices.eu", you can remove persistent cookies and reject both session and persistent cookies.

5) For What Purpose Does rheyacose Use My Personal Data?

rheyacose may record, store, update, disclose to third parties, transfer, classify and process your personal information in the cases and to the extent permitted by legislation.

Your personal data is used for the following purposes:

* to verify the identity of the person shopping — or having someone shop — via the website/mobile applications,

* to record the address and other necessary information for communication,

* to contact our customers regarding the terms, current status and updates of the contracts we conclude under the distance sales agreement and the relevant articles of the Law on the Protection of the Consumer, and to provide necessary information,

* to prepare all records and documents that will form the basis of processing in electronic (internet, mobile, etc.) or paper media,

* to fulfil the obligations undertaken under the contracts we conclude pursuant to the distance sales agreement and the relevant articles of the Law on the Protection of the Consumer,

* to provide information to public officials upon request and as required by legislation in matters relating to public safety,

* to provide our customers with a better shopping experience, to inform our customers about our products that may interest them "taking our customers' interests into account", and to convey campaigns,

* to increase customer satisfaction, to recognise our customers who shop via the website and/or mobile applications and use this in customer-base analysis, to use it in various marketing and advertising activities and, within this scope, to conduct surveys electronically and/or physically through contracted organisations,

* to enable our contracted organisations and solution partners to offer recommendations to our customers and to inform our customers about our services,

* to evaluate customer complaints and suggestions regarding our services,

* to fulfil our legal obligations and exercise our rights arising from applicable legislation,

6) How Does rheyacose.com Protect My Personal Data?

Personal data shared with rheyacose is under the supervision and control of rheyacose. In its capacity as data controller, rheyacose assumes responsibility for establishing the necessary organisation and taking and adapting the technical measures to protect the confidentiality and integrity of information in accordance with the provisions of applicable legislation. Aware of our obligation in this regard, penetration tests are carried out at periodic intervals in accordance with international and national standards on data privacy, and we inform our valued customers that we always keep our data-processing policies up to date within this scope.

7) Does rheyacose Share My Personal Data With Others?

The sharing of our customers' personal data with third parties takes place within the framework of the customers' consent, and as a rule personal data is not transferred to third parties without our customer's approval. Nevertheless, due to and limited by our legal obligations, personal data is shared with courts and other public institutions. In addition, personal data is transferred to contracted third parties in order to provide the services we undertake and to carry out quality control of the services provided. Necessary technical and legal measures are taken to prevent rights violations during the transfer of data to third parties. However, rheyacose is not responsible for breaches occurring due to the data protection policies of the third party receiving the personal data or within the risk area under the third party's responsibility.

Your personal data may be shared with rheyacose's direct/indirect domestic/foreign affiliates, with program-partner institutions and organisations with which we cooperate to carry out our activities, with domestic/foreign persons and institutions from which we receive cloud storage services for data, with domestic/foreign organisations with which we have agreements for sending commercial electronic messages to our customers, with the Interbank Card Centre, with the banks we have agreements with, and — within the scope of various marketing activities to provide you with better service and ensure customer satisfaction — with various agencies, advertising companies and survey companies at home and abroad, and with other domestic/foreign third parties and relevant business partners.

8) What Are My Rights Arising From the Law on the Protection of Personal Data?

Pursuant to the KVKK, we would like to remind you that you have the right to, regarding your personal data:

a) learn whether it is being processed,
b) request information if it has been processed,
c) learn the purpose of processing and whether it is used in accordance with its purpose,
d) know the third parties to whom it has been transferred domestically or abroad,
e) request its correction if it has been processed incompletely or incorrectly,
f) request its deletion or destruction within the framework of the conditions set out in Article 7 of the KVKK,
g) request that the transactions carried out pursuant to items (d) and (e) above be notified to the third parties to whom it has been transferred,
h) object to a result arising against you due to its analysis exclusively by automated systems,

i) request compensation for damage if you suffer harm due to its unlawful processing in violation of the KVKK.

9) How Can I Stay Informed of Legislative Changes Regarding Personal Data?

The rights you have under the KVKK are rheyacose's obligations. We would like to inform you that we process your personal data with this awareness and to the extent required by legislation, that in the event of legal changes we will update this information on our page in line with the new legislation, and that you can always easily follow the updates made via this page.

10) How Can I Be Sure That My Data Is Kept Up to Date and Accurate?

Pursuant to Article 4 of the KVKK, rheyacose has an obligation to keep your personal data accurate and up to date. In this context, in order for rheyacose to fulfil its obligations arising from applicable legislation, our customers must share their accurate and up-to-date data with rheyacose. If your data changes in any way, please contact us through the communication channels specified below and update your data accurately.

11) Would You Like to Ask US a Question About Your Personal Data?

For any questions and views regarding your personal data, you can reach us at any time at the e-mail address info@rheyacose.com.