Customer Privacy Notice

1. Data Controller Information

Data Controller Name :	Figg Brand Mağazacılık Anonim Şirketi (“Company”, “Us”)
Address :	Kemankeş Karamustafapaşa Mah. Kemankeş Cad. D Blok Paket Postanesi No 40 İç Kapı No. 126 Beyoğlu İstanbul
E-mail :	hello@figgbrand.com
KEP Address :	figgbrand@hs01.kep.tr
Website :	https://figgbrand.com

This privacy notice has been prepared by Figg Brand Mağazacılık Anonim Şirketi (“Data Controller”, “Company”) acting in the capacity of data controller, within the scope of Article 10 of the Law No. 6698 on the Protection of Personal Data (“KVKK”, “Law”) and the Communiqué on Principles and Procedures to be Followed in Fulfillment of the Obligation to Inform. Pursuant to the KVKK and relevant personal data protection legislation, your personal data as our customer shall be processed by the Data Controller within the scope of our goods sales processes; solely within the framework explained below; in compliance with the law and rules of fairness; accurately and, where necessary, kept up to date; for specific, clear, and legitimate purposes; and in a manner that is connected, limited, and proportionate to these purposes, while being retained for the period of time provided for in the relevant legislation or required for the purpose for which they are processed.

2. Personal Data We Process, Our Collection Methods and Legal Grounds for Processing

Your personal data shall be collected verbally, in writing, or electronically by the department concerned with sales and by natural or legal persons authorized by the Company as data processors; through automated methods via e-mail, telephone, website, online applications, and various contracts; or through non-automated methods via documents and minutes kept in paper form; and shall be processed based on the legal grounds specified below.

Personal Data Categories	Data Types	Legal Ground(s)
Identity, Contact	Name surname, E-mail, Contact Address, Phone Number	KVKK art.5/2(a) KVKK art.5/2(c) KVKK art.5/2(ç) KVKK art.5/2(e) KVKK art.5/2(f) KVKK art.5/1*
Customer Transaction	Invoice Information, Request and Complaint Information	KVKK art.5/2(a) KVKK art.5/2(c) KVKK art.5/2(ç) KVKK art.5/2(e) KVKK art.5/2(f)
Physical Space Security, Visual and Audio Recordings	Security Camera Recordings (Visual Recording)	KVKK art.5/2(ç) KVKK art.5/2(f)
Finance	Payment Information	KVKK art.5/2(a) KVKK art.5/2(c) KVKK art.5/2(ç) KVKK art.5/2(e) KVKK art.5/2(f)
Marketing	Product and Service Purchase History Information	KVKK art.5/2(f)
Legal Action	Contracts and Appendices, Notices and Legal Warnings Information, Lawsuit/Enforcement/Mediation/Conciliation File Information, Information Shared with Judicial/Administrative/Regulatory and Supervisory Authorities.	KVKK art.5/2(e) KVKK art.5/2(f)

The legal grounds expressed by the KVKK law articles in the table above refer to the following legal grounds:

· KVKK art. 5/1 : Existence of the explicit consent of the person concerned.

· KVKK art. 5/2(a) : It is expressly provided for by the laws (Tax Procedure Law No. 213).

· KVKK art. 5/2(c) : Processing of personal data belonging to the parties to a contract is necessary, provided that it is directly related to the establishment or performance of the contract.

· KVKK art. 5/2(ç) : It is mandatory for the data controller to be able to fulfill its legal obligations (pursuant to Tax Procedure Law No. 213, Occupational Health and Safety Law No. 6331).

· KVKK art. 5/2(e) : Data processing is mandatory for the establishment, exercise, or protection of a right.

· KVKK art. 5/2(f) : Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned.

* Your personal data, consisting of Identity and Contact data, shall be processed solely based on your explicit consent pursuant to Article 5/1 of the KVKK, for the purposes of conducting communication activities within the scope of commercial electronic communication processes and conducting advertising/campaign/promotion processes.

3. Our Purposes for Processing Your Personal Data

Your personal data shall be processed for the fulfillment of the following purposes.

· Conducting Activities in Compliance with Legislation

· Conducting Finance and Accounting Transactions

· Follow-up and Conduct of Legal Affairs

· Conducting Communication Activities

Conducting / Auditing Business Activities

· Conducting Activities for Ensuring Business Continuity

· Conducting After-Sales Support Services for Goods / Services

· Conducting Goods / Services Sales Processes

· Conducting Customer Relationship Management Processes

· Conducting Activities Directed Toward Customer Satisfaction

· Conducting Marketing Analysis Studies

· Conducting Advertising / Campaign / Promotion Processes

· Conducting Storage and Archive Activities

· Conducting Contract Processes

· Follow-up of Requests / Complaints

· Providing Information to Authorized Persons, Institutions, and Organizations

4. Transfer of Your Personal Data

Your personal data may be transferred based on the legal ground that “personal data may be transferred without seeking the explicit consent of the person concerned if one of the conditions specified in the second paragraph of Article 5 exists (KVKK Art. 8/2-a)” in the event that the conditions regarding transfer regulated in Article 8 of the KVKK exist; whereas your Identity and Contact data, which will be processed for the purposes of conducting communication activities within the scope of commercial electronic communication processes and conducting advertising/campaign/promotion processes, shall be transferred domestically solely in the presence of your explicit consent pursuant to the provision that “Personal data cannot be transferred without the explicit consent of the person concerned (KVKK Art. 8/1)”; and your personal data may be transferred abroad in the event that the conditions regarding transfer regulated in Article 9 of the Law exist:

Transfer Recipient Groups	Data Categories	Purpose of Transfer
Natural Persons or Private Legal Entities	· Identity, Contact · Customer Transaction	The purposes specified above, primarily for conducting business and contract processes and ensuring the continuity of processes.
Suppliers	· Identity, Contact · Customer Transaction · Physical Space Security, Visual and Audio Recordings · Finance · Marketing · Legal Actions
Business Partners
Authorized Persons, Institutions, and Organizations	· Identity, Contact · Customer Transaction · Physical Space Security, Visual and Audio Recordings · Finance · Marketing · Legal Actions	For the purposes specified above, primarily for the fulfillment of our legal obligations and for the establishment, exercise, and protection of our rights in the event of a dispute.

5. Your Rights Regarding Your Personal Data

You may submit your requests regarding your rights under Article 11 of the Law and the implementation of the Law to the Company at any time by filling out the application form obtainable from our workplace and our website and sending it, bearing your wet-ink signature, to our address via a notary public, via registered mail with return receipt or by personal delivery; or, after signing the application form filled out electronically with your mobile signature or secure electronic signature, by sending it to our KEP address using your KEP address, or to our e-mail address using your e-mail address already registered in our data recording system. If the response to the requests within this scope is to be provided in writing, the Company shall respond without charging a fee up to ten pages; and by charging the fee in the tariff determined by the Personal Data Protection Board for each page exceeding ten pages. In the event that the response to the application is provided in a recording medium such as a CD or flash memory, the fee that may be requested shall not exceed the cost of the recording medium.

Figg Brand Mağazacılık Anonim Şirketi