CLARIFICATION TEXT ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

As ASLI PARLAK (“Parlaque Studio”), we attach great importance to the processing of your personal data in accordance with the relevant legislation. In this context, we would like to inform you about our personal data processing procedures and your rights under the Law on the Protection of Personal Data No. 6698 (“KVKK”).

GENERAL DEFINITION

a) Under the Law, personal data covers any data relating to an identified or identifiable natural person.

b) Special Categories of Personal Data, a specific type of personal data, refers to data concerning race, ethnic origin, political opinion, philosophical belief, religion, sect, other beliefs, appearance and clothing, association, foundation or union membership, health, sexual life, criminal conviction and security measures, and biometric and genetic data.

c) Processing of personal data refers to any operation performed on data, such as obtaining, recording, storing, preserving, altering, reorganizing, disclosing, transferring, taking over, making available, classifying, or preventing the use of personal data, fully or partially by automatic means, or by non-automatic means as part of any data recording system.

PURPOSE AND IDENTITY OF THE DATA CONTROLLER

a) This "Clarification Text on the Protection and Processing of Personal Data" has been prepared by the data controller ASLI PARLAK, whose identity is given below, to fulfill the obligation to inform regarding the processing of your personal data, in accordance with Article 10 of the Law on the Protection of Personal Data No. 6698 ("Law") and the "Communiqué on the Procedures and Principles to be Followed in Fulfilling the Clarification Obligation".

b) Your personal data may be processed by ASLI PARLAK, residing at “Akat Mh. Orkide Sk. Park Maya Sit. Barclay No: 12 İç Kapı No: 14 Beşiktaş/ İstanbul”, as the data controller, in accordance with the Law, within the scope explained below, by maintaining the accuracy and up-to-dateness of the personal data as it reaches us, within the framework of the purposes listed below, and in a connected, limited, and proportionate manner with these purposes.

PURPOSES OF PROCESSING YOUR PERSONAL DATA

Your collected personal data will be processed by ASLI PARLAK for the purposes listed below, within the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law. Accordingly, your personal data will be processed for the following purposes, based on the legal grounds that the establishment and/or performance of a contract between the Company and you is directly related, it is explicitly stipulated in the Laws, it is mandatory to fulfill a legal obligation, the data subject has made it public, data processing is mandatory for the establishment, exercise, or protection of a right, and data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject:

a) To confirm the identity of the person making/having made purchases through the website,

b) To analyze and understand collective statistical data such as site or workshop visit frequency and times, order placement times, statistics of visited product pages and ordered products, as well as visitor movement, orders, and preferences,

c) To process and complete orders and order processes through online services and to ensure communication with our customers (e.g., name-surname, address, date of birth),

d) To send short message notifications to inform about delivery status and to communicate possible issues in the delivery of purchased products (e.g., mobile phone number),

e) To send marketing content such as newsletters, campaigns, events, collection introductions, surveys, and catalogs (e.g., email address, name-surname, and postal address),

f) To answer questions and inform about new or changed services, products, campaigns, and promotions (e.g., email address, mobile phone number),

g) To communicate with our customers regarding the terms, current status, and updates of the contracts we have concluded under the relevant articles of the Distance Sales Contract and the Law on Consumer Protection, and to provide necessary information,

h) To verify online shopping and that the person is of legal age (e.g., date of birth),

i) To strengthen site security,

j) To fulfill our legal obligations and exercise our rights arising from the applicable legislation.

PARTIES TO WHICH YOUR PERSONAL DATA IS TRANSFERRED AND PURPOSES OF TRANSFER

a) Your collected personal data will be processed by ASLI PARLAK within the scope of the services we provide, in accordance with the provisions of all relevant legislation and the fundamental principles stipulated in Law No. 6698, and within the personal data transfer conditions specified in Articles 8 and 9 of the Law, for the purpose of implementing the contract established within the scope of the "Purposes" listed above and ensuring the fulfillment of our obligations within the contractual relationship.

b) To provide better service to our customers and to fulfill ASLI PARLAK's commitments to its customers, your personal data may be shared with our business partners, suppliers, shareholders, legally authorized public institutions and private individuals, and with cargo companies, call centers, database, SMS and mail providers, personalization, etc., with whom we work both domestically and abroad. The purpose of processing personal data and the purpose of transferring data are parallel.

METHOD OF COLLECTION AND LEGAL REASON FOR YOUR PERSONAL DATA

a) Your personal data may be collected by ASLI PARLAK audibly, electronically, in writing, and verbally through e-mail, website, written documents, invoices, documents submitted by data subjects, and other communication channels.

b) Your personal data will be collected based on the legal grounds of the establishment and/or performance of the contract, the establishment, exercise and/or protection of a right, the fulfillment of a legal obligation, and legitimate interest, as specified in Articles 5 and 6 of the Law, and with your explicit consent if you provide it.

c) When the purpose requiring the processing of your personal data according to Article 7/1 of the Law ceases to exist and/or when the statute of limitations/retention periods for which we are obliged to process your data under the legislation expire, your personal data will be erased, destroyed, or anonymized.

PERIOD OF PROCESSING YOUR PERSONAL DATA

a) As ASLI PARLAK, we keep the processed personal data accurate and up-to-date using current technological methods. For this purpose, personal data is preserved for the periods necessary for the purposes of processing, in accordance with the principles set out in the relevant legislation.

b) If the reasons requiring processing cease to exist, personal data will be erased, destroyed, or anonymized ex officio or upon the request of the Data Subject.

CASES WHERE DATA MAY BE PROCESSED WITHOUT EXPLICIT CONSENT

In accordance with Article 5 of the Law, your personal data may be processed without your explicit consent in the following cases:

a) In cases explicitly provided for by law,

b) If it is mandatory for the protection of the life or physical integrity of yourself or another person, and you, as the data owner, are unable to express your consent due to actual impossibility or if your consent is not legally valid,

c) If the processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract,

d) If it is mandatory for the fulfillment of a legal obligation,

e) If your personal data has been made public by you,

f) If data processing is mandatory for the establishment, exercise or protection of a right,

g) If data processing is mandatory for the legitimate interests of the Company, provided that it does not harm your fundamental rights and freedoms.

h) Personal health data may be processed without the explicit consent of the data subject by persons under the obligation of secrecy or authorized institutions and organizations, for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and their financing.

YOUR RIGHTS AS A PERSONAL DATA SUBJECT UNDER ARTICLE 11 OF THE LAW

We inform you that, as data subjects, you have the following rights under Article 11 of the Law:

a) To learn whether your personal data is being processed,

b) To request information if your personal data has been processed,

c) To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,

d) To know the third parties to whom your personal data has been transferred domestically or abroad,

e) To request the rectification of your personal data if it is incomplete or incorrectly processed and to request that the operation carried out within this scope be notified to third parties to whom your personal data has been transferred,

f) To request the erasure or destruction of your personal data if the reasons for processing cease to exist, even though it has been processed in accordance with the Law and other relevant legal provisions, and to request that the operation carried out within this scope be notified to third parties to whom your personal data has been transferred,

g) To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems,

h) To demand compensation for damages in case you suffer damage due to unlawful processing of your personal data.

APPLICATION METHODS

a) As the data subject, you must submit your rights requests in writing to the data controller, along with the necessary documents to identify your identity.

b) In this context, to ensure the healthy and rapid management of your applications under Article 11 of the Law, you can personally deliver your request petition, containing the minimum requirements specified in the Communiqué on the Procedures and Principles of Application to the Data Controller, in writing and with a wet signature, to “Akat Mh. Orkide Sk. Park Maya Sit. Barclay No: 12 İç Kapı No: 14 Beşiktaş/ İstanbul” address, or send it via a notary public, using the “Data Subject Information Request Form” document available at www.parlaquestudio.com.

c) If your e-mail address is registered in our systems, you can also submit your application directly via the e-mail address asli@parlaquestyling.com.

d) Depending on the nature of your request, your applications will be finalized and you will be informed as soon as possible, and no later than 30 (thirty) days.