THE MİM JEWELRY AND PRECIOUS STONE INDUSTRY TRADE LIMITED COMPANY

Information Note on the Processing of Personal Data

We value the trust you place in THE MİM JEWELRY AND PRECIOUS STONE INDUSTRY TRADE LIMITED COMPANY. We would like to inform you, as the "data controller" within the scope of our Obligation to Inform, that we process your personal data in accordance with the principles and rules stipulated by the Law No. 6698 on the Protection of Personal Data ("Law"), store them in secure environments, and handle your rights with great sensitivity. In this context, we would like to inform you about the personal data we process as a "data controller," the purposes for which we process this data, to whom and for what purposes we may transfer your data, how and for what legal reasons we collect your data, and what rights you have under the Law.

a) Method of Collecting Personal Data, Purpose of Processing, and Legal Basis

Your personal data are collected through electronic means and our website, by filling out the "contact us" form in the communication section, our customer service communication line, our email addresses, our social media channels, and our WhatsApp support line, and through communication using membership agreements, sales contracts, and other contracts, campaigns, applications, written and electronic forms via our stores or authorized institutions. They are collected automatically and non-automatically as part of any data recording system, provided that they are part of a non-automatic method.

In accordance with the general principles set forth in Article 4 of the Law, your personal data are processed in compliance with the law and fairness, accurately and, if necessary, up-to-date, for specific, clear, and legitimate purposes, relevant to the purpose for which they are processed, limited and measured, and retained for as long as necessary or legally required for the purpose for which they are processed.

In this context, your personal data are collected and processed by our Company for the purposes and legal reasons specified below in accordance with the personal data processing conditions set forth in Article 5 of the Law.

For the establishment or performance of a contract, directly related to the parties of the contract, processing of personal data of the parties is necessary based on the legal ground that it is required;

- Your identity, contact, customer transaction, transaction security, and financial data are processed for the establishment or performance of the sales contract due to your purchase of our products and services through our stores or website,

- Your identity, contact, financial, and customer transaction data are processed for the opening of sales records and the realization of invoicing activities,

- Your identity, contact, financial, and customer transaction data are processed for the fulfillment of requests related to your sales transactions, such as returns and exchanges,

- Your identity and contact data are processed for the updating of customer communication information,

- Your identity, contact, customer transaction, and transaction security data are processed for the creation, management, and execution of membership accounts and transactions if you create a website membership,

- Your identity, contact, and customer transaction data are processed for the execution of order processes and informing about the delivery status and stock information of purchased products,

Based on the legal ground that it is mandatory for compliance with a legal obligation explicitly prescribed by laws and for the data controller to fulfill its legal obligations;

- Your identity, contact, financial, and customer transaction data are processed for the issuance of invoices for the goods and services you receive within the framework of the Tax Procedure Law,

- Your identity, contact, and customer transaction data are processed for the fulfillment of official institution requests,

- Your identity, contact, and customer transaction data are processed for providing information to authorized institutions in accordance with the legislation,

- Your transaction security data is processed for compliance with the storage obligations stipulated by the legislation,

- Your identity, contact, and customer transaction data are processed for responding to relevant person applications in accordance with the legislation and performing necessary procedures,

- Your identity, contact, and financial data are processed for the conduct of financial operations and completion of invoicing transactions,

- Your identity, contact, financial, and customer transaction data are processed for compliance with legal obligations applicable to our Company, including the Consumer Protection Law, the Law on Regulation of Electronic Commerce, and the Law on Regulation of Retail Trade,

To the extent that it does not harm the fundamental rights and freedoms of the data subject, processing of personal data for the legitimate interests of the data controller based on the legal ground that it is mandatory;

- Identity, contact, and customer transaction data are processed for the necessary activities to benefit individuals from the products and services offered by our company, including sales and marketing activities,

- Identity, contact, and customer transaction data are processed for the management of customer relations,

- Identity, contact, customer transaction, and financial data are processed for the necessary activities carried out by relevant business units for the realization of commercial activities conducted by our company and the execution of related business processes,

- Identity, contact, customer transaction, financial, legal transaction, physical space security, and visual and auditory recording data are processed for ensuring legal, technical, and commercial-business security of our company and individuals in business relationship with our company,

- Identity, contact, and customer transaction data are processed for the determination and implementation of our company's commercial and business strategies,

- Identity, contact, customer transaction, legal transaction, financial, and business security data are processed for the follow-up and execution of legal affairs,

- Transaction security data is processed for the execution of information security processes,

- Identity, contact, customer transaction, financial, legal transaction data are processed for the realization of audit and ethical activities,

- Identity, contact, customer transaction, financial data are processed for the planning and execution of customer satisfaction and corporate communication activities,

- Identity, contact data are processed for the realization of raffles, campaigns, contests, promotions, or advertising activities,

- Identity, contact, customer transaction, financial, marketing data are processed for the reporting, auditing, and examination of our business processes,

- Identity, contact, customer transaction, financial, marketing, legal transaction data are processed for the protection and use of our rights and the execution of legal processes in the event of a potential legal dispute,

Identity, contact, customer transaction, financial, legal transaction, transaction security data are processed for the mandatory processing of data to establish, use, or protect a right;

- Identity, contact, customer transaction, financial, legal transaction, transaction security data are processed for the storage of personal data for the period prescribed by the legislation for evidence purposes in possible future disputes,

- Identity, contact, customer transaction, financial, legal transaction, auditory recording data are processed for the receipt, evaluation, and conclusion of your requests, questions, suggestions, and complaints,

If you provide explicit consent;

- Identity and contact data may be processed for the sending of promotional communications, newsletters, collection presentations, events, information about discounts, and communication regarding commercial electronic messages in compliance with the Regulation on Commercial Communication and Commercial Electronic Messages,

- Identity, contact, customer transaction, transaction security, and marketing data may be processed for the realization of marketing processes of our company's products and services, including contacting you, profiling, and analysis activities. This includes customizing our products and services based on your preferences, usage habits, and needs and promoting them to you,

- Identity, contact, customer transaction, and marketing data may be processed for research, surveys, and review studies aimed at customer satisfaction.

Your explicit consent will be sought independently of this information text, and even if you give consent, you have the right to withdraw it at any time. Even if you do not give explicit consent, you can continue to benefit from all our sales and after-sales services that do not have the legal basis of explicit consent.

Our website uses cookies to provide our visitors and customers with a better shopping experience. You can find detailed information about cookies by accessing the Cookie Disclosure Text link below.

b) Processed Personal Data

Within the scope of the purposes and processes mentioned above, if you share with us, we may process identity, contact, customer transaction information (e.g., requests you submit to us, order information), marketing information, transaction security information, legal transaction information, visual and auditory records, information about the security of physical locations (closed-circuit camera recordings taken for security purposes), and your financial information for payment transactions.

c) To Whom and for What Purpose Processed Personal Data Can be Transferred:

In line with the fulfillment of the purposes mentioned above, your personal data collected within the scope of the processing conditions regulated in Articles 5 and 6 of the Law may be shared, in compliance with the rules regarding the transfer of personal data specified in Articles 8 and 9 of the Law, with our business partners, sales points, and authorized services, service providers (cargo, insurance, research firms, advertising agencies, information technology, finance, legal consultancy organizations, etc.), subsidiaries, group companies, shareholders, and legally authorized public institutions and private individuals, provided that adequate and effective measures are taken in accordance with the security and confidentiality principles specified in the legislation.

d) Rights of the Personal Data Owner under Article 11 of Law No. 6698:

As the owners of personal data, you have the following rights in accordance with Article 11 of Law No. 6698:

To learn whether personal data is being processed,

To request information if personal data has been processed,

To learn the purpose of processing personal data and whether they are used in accordance with this purpose,

To know the third parties to whom personal data is transferred, whether domestically or abroad,

To request correction of personal data in case of incomplete or incorrect processing and to request that the process be notified to third parties to whom personal data has been transferred,

To request the deletion or destruction of personal data in the event that the reasons requiring their processing cease to exist, despite being processed in accordance with Law No. 6698 and other relevant laws, and to request that this process be notified to third parties to whom personal data has been transferred,

To object to the emergence of a result against the person himself by analyzing the processed data solely through automated systems,

To request the compensation of damages in case of suffering damage due to the illegal processing of personal data.

To exercise any or all of your above-mentioned rights, you can submit your application by filling out the Data Application Form via the link below. You can either bring it in person to the address "Yamanevler Mahallesi, Alemdağ Caddesi, Nevzat Bey İş Hanı No:141 Kat:1 Ofis No:12 34768, Ümraniye/İSTANBUL," send it by notary or send a copy of the form to the email address info@themimjewel.com via your registered email address in the system or via your secure electronic signature to the email address themimmucevherat@hs01.kep.tr. Your applications will be concluded by our company as soon as possible and within a maximum of 30 (thirty) business days, free of charge; however, if the process requires an additional cost, you may be charged a fee according to the tariff determined by the Personal Data Protection Board.