INFORMATION TEXT ON DATA PRIVACY DECLARATION AND PERSONAL DATA PROTECTION AND PROCESSING POLICY

Data Controller

www.stilefit.com The internet site named (“Stilefit”) is operated by Burcu Aydın BRC Electronic Commerce Project Consultancy (“Company”), operating at Damlar Mah. Azak Sokak No:18 Başiskele Kocaeli. The COMPANY, as the data controller, is responsible for determining the purposes and means of processing personal data, and establishing and managing the data recording system.

We attach importance to the protection of your personal data. In accordance with the Personal Data Protection Law ("KVKK"), we would like to inform you about the processing of data obtained in connection with your use of the "Company Website", including but not limited to the collection, storage, and transfer, and the purpose of such processing.


Processing and Transfer of Personal Data

The COMPANY requests certain personal data from its customers who use the Company Website during the membership phase or while using the Company Website. Personal data is any information that makes a person specific or identifiable. Such information may include, for example, your name, address, e-mail address or telephone number. Information collected using cookies and that does not directly allow for the determination of your identity, such as information about how you use the Company Website, may also be considered personal data if it is based on an identity assigned to the user and therefore collected, stored and evaluated in an individualized manner. Non-personal data is only information that is collected, can be described as big data, summarized, collected, evaluated and cannot be associated with a real person by being made anonymous.

Your personal data is collected by our company due to the nature of the business by filling in the information in the membership form to the Relevant Person. In order to identify system-related problems and to quickly resolve any problems or disputes that may arise regarding the service provided, our company records and uses the IP address of its members. IP addresses can also be used to identify users in a general way and to collect comprehensive demographic information.

Our company may use the requested information for direct marketing purposes by itself or its collaborators, outside the purposes and scope determined by the Membership Agreement. Personal information may also be used to contact the user when necessary. Information requested by our company or information provided by the user or information regarding transactions made through the Company Website may be used by our company and its collaborators, outside the purposes and scope determined by the “Membership Agreement”, for various statistical evaluations, database creation and market research without disclosing the identity of our members.

Our company may send notifications such as campaign information, information about new packages, and promotional offers to its customers and members from time to time. Our members can make any choice regarding whether or not to receive such information while becoming a member, and can then change this choice from the administration panel after logging in, or they can make notifications via the link in the notification message they receive.


Purposes of Processing Personal Data

Our Company processes Personal Data for specific, clear and legitimate purposes.In this context, Personal Data can be processed for the following purposes:

• To be able to offer and change the services provided through the website,
• Customizing the products and services offered in line with demands; updating and developing them in line with customer needs, legal and technical developments,
• Making user definitions for the systems, specific to the products and services offered,
• Announcing new or existing products, services and campaigns, carrying out sales and marketing activities,
• Conducting market research,
• Creating statistics and analyzing usage,
• Payment and collection of product, service and service fees, selection of collection method,
• To fulfill the information obligation arising from the Law No. 6563 on the Regulation of Electronic Commerce and other relevant legislation,
• To convey the advertisements of the Company website and products and services suitable for the purpose of processing the data to the Relevant Person, and to provide information about products, services, promotions and campaigns,
• To provide solutions to problems encountered during the use of the Website,
• To improve the visit, use, transition between pages and purchasing experiences on the website and to provide better quality service,
• Providing contact/communication,
• Conducting commercial relations with cooperating companies, suppliers, resellers and service providers,
• Reporting within the framework of cooperation,
• Developing the company's commercial strategies and plans,
• Contacting the company for satisfaction measurement surveys,
• Creating participant registration in events/trainings/competitions organized by the COMPANY, issuing certificates/participation documents, determining the award/present winners and delivering the award/presents,
• Management of judicial/administrative processes, responding to requests from public institutions and organizations,
• Fulfilling legal obligations and resolving legal disputes in accordance with legal regulations,
• Conducting investor relations,
• Providing the results arising from the legal transaction in case the company merges with another company, is divided, or is transferred in whole or in part,
• Introducing Company employees, Natural Person Customers and Interested Persons in social media posts,
• Conducting job interviews, evaluating job applications,
• Establishment, execution and termination of the business relationship/contract,
• To ensure that COMPANY employees benefit from the main and side rights arising from their employment contracts and to evaluate their performance and work,
• Opening user accounts for employees,
• In case of participation in an organization on behalf of the company, creation of a participant record,
• Creating records of employee participation in training and certification,
• Ensuring the security of the Company Website and Applications,
• Analysis of the use of the Website,
• Creating a personal data inventory,
• Evaluating and responding to all questions, requests, suggestions, complaints and applications submitted in writing, verbally or electronically, including those regarding personal data.
• It is transferred to systems located in the country or in other relevant countries, especially in the European Union countries (you can contact our company in writing for more detailed information) for the performance of the contract, data security, compliance with our company policies and other purposes specified above.

Method and Legal Reason for Collecting Personal Data

Data regarding current and potential Company Website users are collected partially or fully by automatic or non-automatic means and for other reasons determined by contract or legislation as required by our business line.


Personal Data Processed Without Explicit Consent

According to KVKK;

We may process the personal information made public by you and shared with third parties without your explicit consent.

If there are provisions in the legislation that make it lawful to process your personal data without your explicit consent, we may process it without your explicit consent and share it with third parties within this scope.

We may process your personal data without explicit consent if it is necessary to fulfill our legal obligation, including information that must be disclosed pursuant to applicable laws or regulations or a court decision or administrative order.

If data processing is necessary for the establishment, exercise or protection of a right, we may process your personal data without your explicit consent.


Data Transferred to Third Parties

We may share your personal data, without prejudice to our rights under the KVKK, within the scope of commercial activities on the Company Website, with Company employees, company officers, legal, financial and tax advisors, auditors, Tekrom Teknoloji Anonim Şirketi from which the Company receives services complementary or extensions of its activities, from which the Company receives e-commerce software infrastructure service, cloud companies located abroad, primarily in the United States and European countries (we kindly ask you to contact the Company for detailed information) to perform data processing activities, Amazon Web Services, Inc. (AWS), consultants and contracted organizations it cooperates with, educational institutions, advertising and marketing agencies that the Company works with, and with real or legal persons in order to present advertisements that may be of interest to the Relevant Person by anonymizing them. You expressly consent to the Data Controller regarding this sharing.


Network Server Data Logging

When you log in to the Company Website, your web browser is technically set to automatically transfer the following data (“log data”) to our internet server, after which we record the following information in the data log records even without your consent:

Entry date
Entry time
URL of the application website
Received files
Amount of data transmitted
Browser type and version
Operating System
IP address
The domain name of your internet access provider

This information is required for technical purposes in order to deliver the content requested by you correctly, and its collection is an inevitable aspect of the use of the websites. Log data is analyzed only for statistical purposes to improve our website and the underlying technology, and is then deleted.

Log data is stored separately from other data collected as part of your use of the Company Website.


Cookies

Like many other websites, we use "cookies". Cookies are small text files that are transferred to your hard drive by a web page server. In this way, we automatically obtain certain data such as the IP address, the browser used, the operating system on your computer and your Internet connection.The technical communication file in question facilitates the use of the Internet by storing status and preferences about the site. The technical communication file is not designed to receive data or any other personal information in the main memory or from your e-mail. In addition, cookies cannot be used to run programs or send viruses to your computer.

We use cookies and similar technologies to recognize you in different Services, to learn about your interests on and outside our Services, to improve your experience, to increase security, to measure the use and effectiveness of our Services, to obtain statistical information about how many people visit the site for what purpose and how long they stay on the site, and to help dynamically generate advertising and content from user pages specially designed for users. We may offer different discounts and campaigns, advertise and promote, personalize the Company Website for you, provide a personalized Company.com experience, track your navigation on the Company Website and transactions in your membership account through cookies, and analyze your personal data collected on the Company Website or third-party sites and mobile applications through various methods.

In any case, the data we collect will not be shared with third parties without your consent. Of course, you can always view our website without cookies. Internet browsers are always set up to accept cookies. You can control cookies and stop their use at any time through browser settings and other tools. Please use the help function of your browser to learn how to change these settings. Please note that certain features of our website may not work if you stop using cookies.


Use of Social Plugins in the Context of Social Media

The COMPANY uses social plug-ins (“plugins”) from the social networks Facebook, operated by Facebook Inc., Palo Alto, CA, USA, the YouTube video platform operated by YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066 USA, the social network Twitter, operated by Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103 USA, the social network Instagram, operated by Instagram, LLC, Arbitration Opt-out 1601 Willow Rd. Menlo Park, CA 94025 USA.

If you visit a page on our website that contains such plugins, they are initially inactive. The plugins cannot become active unless you click the specified button. By activating the plugins, you establish a connection with these social networks and give them your consent to the transfer of data. If you are logged in to these social networks, the social networks can associate this visit with your account on the relevant social network. If you click the relevant button, the corresponding information is transmitted directly to the relevant social network by your browser and stored there.

For information on the scope and purpose of data collection, further processing and use of data by the relevant social networks, your rights and the settings you can make to protect your privacy, please refer to the Data Protection notices of the relevant social networks. If you do not want these social networks to collect data about you via our website, you must log out of the relevant social networks before visiting our website.


Your Rights Regarding Your Personal Data

In accordance with the legislation regarding your processed personal data; you have the right to learn whether personal data is processed, to request information about personal data if it has been processed, to learn the purpose of processing personal data and whether it is used in accordance with its purpose, to know the third parties to whom personal data is transferred domestically or abroad, to request correction of personal data if it is processed incompletely or incorrectly, to request deletion or destruction of personal data, to request notification of the third parties to whom personal data is transferred regarding the correction of personal data if it is processed incompletely or incorrectly and/or deletion or destruction of personal data, to object to the emergence of a result against the person by exclusively analyzing the processed data through automated systems, and to request compensation for the damages incurred due to the unlawful processing of personal data.


Use of Rights, Application and Contact

You may submit your requests regarding your above-mentioned rights within the scope of KVKK to the COMPANY in writing, provided that your identity is verified, in person or in accordance with the legislation (for example, through a notary public) to our address stated above.


Data Security

The COMPANY has taken technical and administrative measures to the extent possible regarding data security within the scope of the KVKK. Information on the measures taken is detailed under the title of Personal Data Protection, Storage, Processing and Destruction Policy.


Data of Minors

Personal data of minors should not be sent without the consent of their parent or guardian.


Links to Other Websites

The Company Website contains links to other websites. We have no influence on whether the operators of these websites comply with data protection provisions. The COMPANY is not responsible for the content of the sites to which it provides links (and the content of other sites to which those sites provide links) and has no authority to interfere with the content of the sites to which it provides links.

Changes to the Information Text on Data Privacy Statement and Personal Data Protection and Processing Policy

This “Data Privacy Statement and Information Text on the Protection and Processing of Personal Data Policy” will be amended when necessary to announce changes to our services related to data protection, for example, in the provision of new services and to meet applicable legal requirements.


User Access

Unless invited by you, no one will be able to access your account. Only in the event of a technical or system failure, authorized COMPANY personnel will have access to your data for support purposes upon your permission.


Data Sharing

Data transfer will not be shared with our business partners without your approval and without sufficient security. Tekrom Teknoloji A.Ş. from whom we receive e-commerce software infrastructure service is outside the scope of this article.


Data Backup

Your data is backed up daily against possible technical problems.


Response to Security Breaches

Despite our best efforts, no method of transmission over the Internet, and no method of electronic storage, is completely secure. We cannot guarantee absolute security.However, if COMPANY becomes aware of a security breach, we will notify affected users so that they can take appropriate protective steps. Our breach notification procedures are consistent with our obligations under applicable law and regulation and any industry codes or standards to which we comply. Notification procedures include providing email notifications or posting notifications on our website if a breach occurs.


Your Responsibilities

Keeping your data safe also depends on you ensuring the security of your account by using sufficiently complex passwords and storing them securely. You must ensure that the computer, tablet or phone on which you use the COMPANY service has adequate security.