Information Notice on the Protection and Processing of Personal Data

Meterial Fabric takes the highest possible security measures to ensure that your personal data is collected, stored, and shared in accordance with the law and to protect your privacy. Our goal is to inform you in the most transparent manner possible about the methods of collection, purposes of processing, recipients of your personal data, legal grounds, and your rights, in accordance with Article 10 of the Personal Data Protection Law No. 6698 and in line with your satisfaction.

a) Data Controller

In accordance with the Personal Data Protection Law No. 6698 (“Law No. 6698”), your personal data is collected and processed by DEĞİŞİM E-TİCARET ANONİM ŞİRKETİ (“COMPANY”) as the data controller within the scope described below.

b) Purpose of Processing Personal Data

The COMPANY collects personal data from its customers, employees, potential customers, job applicants, representatives and employees of official institutions, business partners, and suppliers, including: identity information, contact information, customer information, customer transaction information, health information, performance information, transaction security information, legal transaction and compliance information, and marketing and sales information. The personal data you provide is collected for the following purposes:

- To provide you with the Company's products and services, fulfill our obligations to you, maintain records and documents, comply with local and international legal regulations regarding data retention, reporting, notification, tax, and other obligations,

- To improve the quality of services and products through sales and marketing activities, and to offer you personalized advertisements, campaigns, advantages, and benefits within the scope of “Change Club” membership,

- To communicate with you for the purposes of information processing requirements, system structure, necessity of information processing support services, and to provide you with necessary information regarding these services and products,

- Conducting traffic measurement, statistical analysis, segmentation/profiling, and CRM activities through the website, social media accounts, and mobile application for sales and marketing activities,

- Measuring and improving customer satisfaction, managing complaints, receiving your opinions and suggestions regarding new services and products, receiving your problem and error reports, and providing you with information regarding our products and services, as well as your complaints and requests,

- Contacting you, taking your orders, processing your payments, providing logistics cooperation with third parties to ensure product delivery, identifying products and services that may interest you and making recommendations accordingly, sending promotions and gifts, analyzing your online behavior and showing you personalized ads, measuring and improving the quality of the services we provide to you, profiling and scoring you according to segments determined by us and managing our customer portfolio,

-Comparative product and/or service offers, modeling, existing or new product studies and/or developments, using your personal data in any products and services that will be offered to you within the scope of the laws and relevant legislation regulating the matters covered by the COMPANY's main contract, which you have disclosed to the COMPANY,

- To comply with information storage, reporting, and disclosure obligations required by official institutions, to fulfill the requirements of contracts, and to fulfill the legal obligations of the COMPANY regarding the use of these services,

- To determine and implement the commercial and business strategies of the COMPANY; to manage financial operations, communication, market research, and social responsibility activities, procurement operations (request, offer, evaluation, order, budgeting, contract), internal system and application management operations, and legal operations conducted by the COMPANY,

- To review, evaluate, and respond to requests from official authorities or from you.

c) To Whom and for What Purposes Personal Data May Be Transferred

Your personal data collected may be transferred to the following parties, limited to the purposes specified in section b) above and applicable to all of them:

- The COMPANY's business partners, shareholders, affiliates,

- Persons or organizations authorized by the Tax Procedure Law, Social Security Institution legislation, Court of Auditors, Law on the Prevention of Money Laundering, Law on the Prevention of Money Laundering, Turkish Commercial Code, Code of Obligations, Law on the Regulation of Electronic Commerce and other legislation,

- Public institutions and organizations, administrative authorities, and legal authorities authorized by law,

- Foreign companies and subsidiaries,

- Real or legal persons, program partner institutions and organizations with whom we collaborate or receive services for product/service comparison, analysis, evaluation, advertising, and the purposes specified above, institutions with whom we have agreements regarding the transmission of messages sent to our customers, and shipping companies responsible for delivering orders placed by you.

c) Method and Legal Basis for Collecting Personal Data

Your personal data is collected both fully or partially automatically and through non-automated methods that are part of a data recording system; directly from you or from persons authorized to act on your behalf; through applications made via contracted websites, store and COMPANY head office personnel, institutions we provide/receive support services from, and real and/or legal persons with whom transactions are conducted within the scope of any legislation or contract, and through direct automated systems (our website and mobile application, call centers, social media accounts) in verbal, written, or electronic environments; As specified in Articles 5 and 6 of the Law;

It is explicitly provided for by law,

It is necessary for the Company to fulfill its legal obligations,

It is necessary for the establishment or performance of a contract,

It is necessary for the legitimate interests of the Company, provided that it does not harm your fundamental rights and freedoms,

It has been made public by you,

Processing is necessary for the establishment, exercise, or protection of a right,

Your explicit consent

Based on the above legal grounds.

d) Rights of the Data Subject as Listed in Article 11 of Law No. 6698

As personal data subjects, if you submit your requests regarding your rights using the methods outlined below, the COMPANY will process your request as soon as possible and no later than thirty days, depending on the nature of the request. In this context, personal data subjects have the right to request the rights listed in Article 11 of the KVKK from the data controller, the COMPANY. To exercise the rights specified in Article 11, you may submit your request in accordance with the provisions of paragraph 1 of Article 13 of Law No. 6698 and the provisions of the “Procedures and Principles for Applications to the Data Controller” dated March 10, 2018, and numbered 30356, in Turkish and in writing or by and the Communication on the Procedures and Principles for Applications to the Data Controller dated March 10, 2018, and numbered 30356, in Turkish and in writing, or via registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the electronic mail address previously notified to the COMPANY and registered in our system. Only information about the applicant will be provided in the applications, and it will not be possible to obtain information about other family members or third parties. The COMPANY reserves the right to verify your identity before responding. In your application, please include:

- Your first name, last name, and signature if the application is in writing,

- Your Turkish Republic ID number if you are a Turkish citizen, or your nationality, passport number, or ID number if you are a foreign national,

- Your permanent residence or business address for notification purposes,

- Your email address, phone number, and fax number for notification purposes, if available,

- The subject of your request,

The above information is mandatory, and any relevant information or documents related to the subject matter must also be attached to the application. If you wish to submit your application in writing, you may do so by submitting the necessary documents to the Company's change of address as the data controller.

If you wish to submit your application by e-mail, you can do so by sending an e-mail to [email protected] or by calling the call center at the change number. If you wish to submit your application via KEP, you can do so by sending it to our change KEP address.

Depending on the nature of your request, you must provide us with complete and accurate information and documents that will enable us to identify you. If the required information and documents are not provided as requested, the COMPANY reserves the right to conduct investigations related to your request, and any delays or inaccuracies in the process may occur. In such cases, the COMPANY reserves all its legal rights. Therefore, it is essential that your application is submitted with all the required information and documents in accordance with the nature of your request.