INFORMATION UNDER THE LAW ON PROTECTION OF PERSONAL DATA

As Lufian Mağazacılık Hizmetleri A.Ş. (Lufian), we would like to inform our customers and visitors within the scope of the Law on Protection of Personal Data No. 6698, as the data controller.

1. Your Personal Data, Methods of Collection, and Purposes of Processing

Your personal information, including but not limited to your identity information (Name, Surname, ID number), contact information (Email address, Address, Phone numbers, IP address), data related to the products you purchase within the scope of Lufian's activities, audio recordings of your conversations with customer services, and other personal data obtained directly from you through our website, membership relations, e-newsletter subscriptions, telephone or email correspondences, or your commercial or legal relationship with Lufian, will be processed in electronic media. These data will be processed within the framework of the legitimate interests of Lufian, provided that they do not harm your personal rights, in addition to the legal bases specified in Article 5(2) of the Law, such as the establishment and performance of contracts, fulfillment of legal obligations, and management of requests and complaints.

Furthermore, if you establish a membership relationship with Lufian E-Store without making any product or service purchases, and if you share your personal data through our membership page to be informed about our products and services and to benefit from possible discounts, the additional personal data such as Gender, Date of Birth, Education Status, and Occupation may be processed with your explicit consent.

In addition to the above, your personal data expressing your usage habits, preferences, tastes, and preferences related to any products and services provided by Lufian may be processed through cookies within the scope of protecting your fundamental rights and freedoms, ensuring the smooth use of our products and services, and enhancing the variety of our products and services based on your browsing and shopping activities on our website.

2. Legal Grounds for Processing Personal Data

For your personal data that does not fall within one of the legal bases stated in Article 5/2 of the Law, we will request your explicit consent and permission to send you commercial electronic messages (SMS, email, mobile push, instant notification). By accepting the membership agreement and this information text on our website, you will be able to give your consent by ticking the relevant checkboxes and clicking the "Sign Up" button.

Your Name, Surname, and Contact (Phone, mobile phone, email address) information will be processed for the purpose of sending you advertisements, campaigns, and other commercial messages related to our products and services within the scope of your commercial electronic communication permission. You will be able to give your consent for commercial electronic communication by ticking the relevant checkboxes on our website and clicking the "Sign Up" button.

3. Sharing and Transfer of Data

Your personal data mentioned above may be shared, limited to the purposes stated above and in accordance with the security and confidentiality principles determined by legislation, with public institutions or organizations authorized to request such data, institutions within the country with which we have agreements due to our activities, our suppliers, business partners, and third parties we receive services from and cooperate with, as well as our group companies NE-SAÇ TEKSTİL SAN. VE TİC. LTD. ŞTİ. and LUFIAN PAZARLAMA HİZMETLERİ A.Ş., which use the same database, within the framework of the personal data processing conditions specified in Articles 8 and 9 of Law No. 6698.

4. Your Rights Under the Law

As data subjects, you have the following rights regarding your personal data. If you wish to exercise your rights, you can fill out the personal data application form available at www.lufian.com or submit a written request including the mandatory information stated in the application form through registered electronic mail (KEP) address, secure electronic signature, mobile signature, or using the electronic mail address previously notified by you and registered in Lufian's system, in order to confirm your identity. You can send your request to Lufian via kvkk@lufian.com.tr email address or in writing to the postal address provided below. Lufian will process your request free of charge as soon as possible and at the latest within thirty days, depending on the nature of the request. However, if the process requires an additional cost, Lufian will charge the fee specified in the tariff determined by the Personal Data Protection Board. Within this scope, data subjects have the right to:

• Learn whether their personal data is being processed,
• Request information if their personal data has been processed,
• Learn the purpose of the processing of personal data and whether they are used in accordance with their purpose,
• Know the third parties to whom personal data is transferred, whether domestically or internationally,
• Request the correction of personal data if it is incomplete or incorrect and request that the processed data be notified to third parties to whom the personal data has been transferred within this scope,
• Request the deletion or destruction of personal data in case the reasons requiring the processing of personal data cease to exist, even if they have been processed in accordance with the Law No. 6698 and other relevant laws, and request that the processed data be notified to third parties to whom the personal data has been transferred within this scope,
• Object to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems,
• Demand compensation if they suffer damages due to the unlawful processing of personal data.

For comprehensive information about your personal data, you can review the Lufian Personal Data Protection and Processing Policy available on the www.lufian.com website.

Lufian has published its Personal Data Processing Policy regarding Employees, Employee Candidates, Business Partners/Suppliers, and other third parties.

Privacy and Security

LUFIAN Online Shop requests some personal information (such as name, age, interests, email, etc.) from its customers in order to provide better service. The information collected on LUFIAN Online Shop servers is used only within LUFIAN Online Shop for periodic campaign activities, creating special promotional activities for customer profiles, and preventing unwanted emails. LUFIAN Online Shop does not share the information collected from membership forms with any third parties under any circumstances, does not use it for commercial purposes unrelated to its activities, and does not sell it.

Customer information may be disclosed to official authorities only when requested by the authorities and in cases where LUFIAN Online Shop is obliged to make disclosures to official authorities in accordance with the applicable mandatory legislation.

Only the customer can access all the information entered into the system and only the customer can change this information. It is not possible for anyone else to access this information and make changes to it. Your credit card information requested on the payment page is not stored on LUFIAN Online Shop servers or the servers of the companies serving it, in order to ensure the highest level of security for valued customers shopping on the website. In this way, all transactions related to payment are carried out between the bank and your computer through the LUFIAN Online Shop interface.

Cookie Usage

Cookies are small text files or pieces of information that are stored on your computer or mobile device (such as a smartphone or tablet) when you visit our website.

We use cookies to make our websites easier to use and personalize them according to your interests and needs. Internet websites can read and write these cookie files, allowing them to recognize you and remember important information about you in order to provide you with a more suitable website (such as remembering your preference settings).

Cookies also help to speed up your future actions on our websites. In addition, we may use cookies to gather statistical information about how visitors use our websites in order to understand how visitors use our sites and improve their design and usability.

LUFIAN RETAILING INC. (DATA CONTROLLER)

ADDRESS: Gökevler Mah. 2312 Sok. No:26/5 Esenyurt/ İstanbul Turkey

PHONE: 0212 853 88 88

MERSIS: 0609057021800019

WEBSITE: www.lufian.com