Personal Data Protection

CLARIFICATION TEXT ON THE PROCESSING OF PERSONAL DATA (MEMBER / PROSPECTIVE CUSTOMER)

Pursuant to Article 10 of the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Principles and Procedures to Be Followed in Fulfilling the Obligation to Inform, as Thisis U (hereinafter referred to as the “Data Controller”), acting in the capacity of data controller, we would like to inform and enlighten you regarding our personal data processing activities.

1. Purpose, Method, and Legal Grounds for Processing Your Personal Data

Your personal data (name and surname, email address, phone number) are processed in accordance with the KVKK, other relevant legislation, and the Data Controller’s Personal Data Protection and Processing Policy for the purposes of carrying out and supervising business activities, conducting communication activities, managing goods/services sales processes, and managing goods/services marketing processes.

Your personal data are processed verbally, in writing, or electronically, through automatic or non-automatic means, including methods used in hard disks, servers, and electronic environments, in compliance with Articles 5 and 6 of the KVKK. The legal grounds for processing include compliance with legal obligations, being explicitly stipulated by law, the establishment, exercise, or protection of a right, and the legitimate interests of the data controller.

In the processing of personal data, the following principles are observed:

  • Compliance with the law and the principles of honesty

  • Accuracy and being up to date where necessary

  • Processing for specific, explicit, and legitimate purposes

  • Being relevant, limited, and proportionate to the purpose for which they are processed

  • Retention for the period stipulated in the relevant legislation or required for the purpose for which they are processed

For detailed information regarding the purposes of processing your personal data, you may review the Personal Data Protection and Processing Policy and the Personal Data Retention and Destruction Policy available on our website at www.thisisucollection.com.

2. Transfer of Personal Data

Your personal data may be processed, recorded, stored, classified, updated, and, where permitted by legislation or limited to the purpose for which they are processed, transferred to the domestic and international recipient groups listed below for the specified purposes, in accordance with the KVKK and relevant legislation, and within the scope of your knowledge.

Below are the domestic and international recipient groups and the purposes of transfer.

Within the country, based on contractual requirements, audit obligations, and legal obligations, personal data may be transferred to the following groups:

Domestic Recipient Groups:

  • Authorized Public Institutions and Organizations

  • Technology infrastructure service providers

No international data transfer is carried out.

In addition, in accordance with the Regulation on Commercial Communication and Commercial Electronic Messages, and subject to your consent, commercial electronic messages may be sent to you by our Company via email and SMS.

3. Security of Personal Data

As the Data Controller, pursuant to Law No. 6698 on the Protection of Personal Data, we are obliged to ensure the security of your personal data. Accordingly, we take all necessary technical and administrative measures to ensure an appropriate level of security in order to:

  • Prevent unlawful processing of personal data,

  • Prevent unlawful access to personal data,

  • Ensure the safeguarding of personal data.

Furthermore, we conduct and commission the necessary audits within our organization to ensure compliance with the provisions of the KVKK. We do not disclose, share, transfer, or use the personal data we process in violation of the KVKK and other relevant legislation or beyond the purposes for which they are processed.

4. Your Rights Under Article 11 of the KVKK

For all your requests, you may complete the “Data Subject Application Form” available on our website at www.thisisucollection.com or submit your own written application to us through the channels specified below. Applications submitted to us pursuant to Article 11 of the KVKK will be responded to and concluded within 30 days at the latest.

Under the aforementioned article, you have the following rights:

  • To learn whether your personal data are processed and to request information regarding such processing,

  • To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,

  • To request correction of personal data if they are incomplete or incorrectly processed,

  • To request the deletion or destruction of personal data within the framework of the conditions set forth in Article 7 of the KVKK,

  • To request notification of the transactions carried out pursuant to subparagraphs (d) and (e) of Article 11 of the KVKK to third parties to whom personal data have been transferred,

  • To object to the occurrence of a result against you by analyzing your personal data exclusively through automated systems,

  • To request compensation for damages in case you suffer damage due to unlawful processing of your personal data.

You may submit a signed copy of your request regarding the exercise of the above-mentioned rights in person, together with documents verifying your identity, to the address Kurtuluş OSB, Zeki Müren Cd., 16580 Gürsu/Bursa; send it via a notary public or by other methods specified in the KVKK; or send the application form via email to info@thisisucollection.com