Categories of Personal Data

Purposes of Processing the Personal Data

Legal Grounds of Data Processing

· Identification data

(e.g., name-surname)

· Contact information

(e.g., mobile phone number, e-mail address)

· Legal Data

(e.g. electronic trade message approval status)

· Transaction Security Information

(e.g. log records of approval processes)

- Performance of legal obligations clearly specified under the laws (e.g. obtaining approvals for sending electronic commercial messages and notifying the Message Management System) and

- Performance of retention and archiving activities,

Presence of explicit consent pursuant to article 5/2(a) of KVKK.

· Identification data

(e.g. name-surname, T.R. identification number, date of birth)

· Contact information

(e.g., mobile phone number, corporate and personal e-mail address, purchase order address)

· Professional Experience Data

(e.g. employer)

· Marketing Data

(e.g. customer segment, information on product/service of interest)

· Customer Process Data

(e.g. customer number, purchase order number, information on the service received, call centre records)

· Legal Data

(e.g., Membership agreement approval status, explicit consent status)

· Inquiry/ Complaint/ Proposal Data

(e.g., inquiry information)

· Transaction Security Information

(E.g., IP address, transaction log records)

- Creation of Membership, execution of Membership procedures and/or cancellation of Membership through our Company's websites, mobile applications, electronic application portals and physical stores,

- Making necessary/ mandatory notifications within the scope of membership and conducting other communications (e.g. password renewal procedures),

- Verification of membership information and updating information upon your request / requirement (e.g. Verification of telephone and e-mail addresses after membership, control of corporate e-mail address in corporate membership programmes),

- Subject to compliance with the conditions of the relevant loyalty / corporate membership programme, planning and execution of the necessary activities in order for you to benefit from the benefits/ advantages/ campaigns/ discounts offered within the scope of the Membership (e.g. segment determination and correction, point earning, segment and/ or corporate membership-based benefits / advantages/ campaigns/ discounts for our members (e.g. Beymen At Home, Wardrobe, Marriage List, personal care and special occasion services)),

- Planning and execution of customer satisfaction activities (e.g. sending gifts),

- Planning of organisations and events, determination of guest lists and communication with guests and hosting of organisations and events,

- Receiving, evaluating and finalising requests, complaints and/or suggestions,

- Performance and ensuring the continuity of business activities,

- Information security processes and

- Performance of retention and archiving activities,

Article 5/2(c) of KVKK "It is required to process personal data of contractual parties in case such processing is directly related with execution or performance of an agreement",

· Identification data

(e.g. name-surname, T.R. identification number)

· Contact information

(e.g., mobile phone number, e-mail address, purchase order address)

· Legal Data

(e.g., Membership agreement approval status, explicit consent status)

· Transaction Security Information

(E.g., IP address, transaction log records)

- Performance of legal obligations and

- Performance of retention and archiving activities,

Article 5/2 (ç) of KVKK “being compulsory for the performance of the legal obligation of data controller”

· Identification data

(e.g. name-surname, T.R. identification number, date of birth)

· Contact information

(e.g., mobile phone number, corporate and personal e-mail address, purchase order address)

· Professional Experience Data

(e.g. employer)

· Marketing Data

(e.g. customer segment, information on product/service of interest)

· Customer Process Data

(e.g. customer number, purchase order number, information on the service received, call centre records)

· Legal Data

(e.g. records of agreements concluded, explicit consent approval status)

· Inquiry/ Complaint/ Proposal Data

(e.g., inquiry information)

· Transaction Security Information

(E.g., IP address, transaction log records)

- Establishing and protecting the rights and interests of our Company in possible dispute transactions to which our Company is a party and/or related,

- Planning and performance of legal and consultancy works, including the execution of dispute proceedings to which our Company is a party and/or related; and

- Performance of retention and archiving activities,

Article 5/2(e) of KVKK "being compulsory for establishing, exercising or protecting a right”.

- Performance and ensuring the continuity of business activities,

- Planning and performance of audit, internal audit and reporting activities,

- Receiving, evaluating and finalising requests, complaints and/or suggestions,

- Planning of organisations and events, determination of guest lists and communication with guests and hosting of organisations and events,

- Planning and execution of activities to monitor and increase customer satisfaction and quality standards (e.g. satisfaction surveys, sending gifts, software development and data quality control and improvement),

- Performing data analyses within the scope of profitability and planning,

- Performance of retention and archiving activities and

- Carrying out information security processes,

Article 5/2(f) of KVKK "data processing being compulsory for legal interests of Data Controller provided that fundamental rights and freedoms of data subject are not violated"

· Identification data

(e.g. name-surname, T.R. identification number, date of birth)

· Contact information

(e.g., mobile phone number, personal e-mail address, purchase order address)

· Professional Experience Data

(e.g. employer)

· Marketing Data

(e.g. customer segment, information on product/service of interest)

· Customer Process Data

(e.g. customer number, purchase order number, information on the service received)

· Inquiry/ Complaint/ Proposal Data

(e.g., inquiry information)

- Carrying out activities to promote our Company and our Company's products and/or services and create and increase loyalty for them,

- Sharing your personal data within the scope of the Marriage List created with other members if you benefit from the service of creating a list for the products you prefer to be purchased by our other members/ purchasing the products on the created list ("Marriage List"),

- Carrying out activities to increase the brand recognition / awareness of our company,

- Conducting customer acquisition or value creation activities with existing customers,

- Carrying out marketing analysis studies (e.g. profiling, segmentation, data deduping, targeting, retargeting, data enrichment) beyond the scope of the drawing up and execution of the membership agreement,

- Measurement and reporting of campaign/ marketing performances,

- Planning and execution of social media communication and interaction activities,

- Carrying out advertisements, campaigns, offers, promotions, surveys, draws, launches, competitions, events, promotions and other direct and indirect personalised/ mass marketing activities outside the scope of the drawing up and execution of the membership agreement,

- Planning and execution of "clientele" processes in order to establish a long-term relationship structure and experience between our Company and the members where personal preferences are prioritised in accordance with the preferences, behaviours, inclinations, purchases and similar information of the members,

- Planning and execution of commercial electronic communication activities,

- Establishing collaborations to improve customer satisfaction and experience,

- Planning and execution of one-to-one, focus group and/or mass research and analysis studies within the scope of customer/ market research,

- Planning and performance of audit, internal audit and reporting activities for marketing processes; and

- Performance of retention and archiving activities,

Presence of explicit consent pursuant to article 5/1 of KVKK.

Disclosed Group

Purposes of Transfer

Personal Data Category

Legal Ground of Transfer

Suppliers domiciled in the country and/ or abroad including our group companies acting in the capacity of service provider (e.g. infrastructure, verification, integration, messaging, marketing analysis, enterprise resource planning, voluntary audit, information technologies and data hosting service providers)

Procurement of products and/or services within the scope of conducting, supervising and ensuring the continuity of business activities

· Identification

· Communication

· Professional Experience

· Inquiry/ Complaint/ Suggestion

· Customer Transaction

· Legal Affairs

· Process Security

Data processing being compulsory for legal interests of Data Controller provided that fundamental rights and freedoms of data subject are not jeopardized pursuant to sub-paragraph (f), paragraph 2, Article 5 of the KVKK

· Identification

· Communication

· Customer Transaction

· Marketing

Explicit consent, if any, pursuant to paragraph 1, Article 5 under the KVKK

Business partners domiciled in the country (e.g., dealers and organization owners)

Planning and execution of activities to increase customer satisfaction and experience with the necessary activities in order for you to benefit from the benefits, advantages, campaigns and/ or discounts offered within the scope of membership

· Identification

· Communication

· Professional Experience

· Inquiry/ Complaint/ Suggestion

· Customer Transaction

Data processing being compulsory for legal interests of Data Controller provided that fundamental rights and freedoms of data subject are not jeopardized pursuant to sub-paragraph (f), paragraph 2, Article 5 of the KVKK

· Identification

· Communication

· Professional Experience

· Customer Transaction

· Marketing

Explicit consent, if any, pursuant to paragraph 1, Article 5 under the KVKK

Attorneys and attorney partnerships domiciled in the country

Procuring services within the scope of carrying out legal and consultancy affairs, including the establishment and protection of our Company's rights and interests in potential dispute transactions to which our Company is a party and/or related to

· Identification

· Communication

· Inquiry/ Complaint/ Suggestion

· Customer Transaction

· Legal Affairs

· Process Security

· Marketing

being compulsory for establishing, exercising or protecting a right pursuant to sub-paragraph (e), paragraph 2, article 5 under the KVKK

Data processing being compulsory for legal interests of Data Controller provided that fundamental rights and freedoms of data subject are not jeopardized pursuant to sub-paragraph (f), paragraph 2, Article 5 of the KVKK

Certified public accountants domiciled in the country

Procuring consultancy services in the fields of verification of the accuracy of our Company's financial statements, auditing of tax returns and other finance and accounting fields

· Identification

· Communication

· Professional Experience

· Customer Transaction

· Legal Affairs

being compulsory for the performance of the legal obligations of the data controller pursuant to sub-paragraph (ç), paragraph 2, article 5 of the KVKK

Data processing being compulsory for legal interests of Data Controller provided that fundamental rights and freedoms of data subject are not jeopardized pursuant to sub-paragraph (f), paragraph 2, Article 5 of the KVKK

Real and/ or legal persons providing independent audit service domestically

Procuring services within the scope of performance of our Company's legal obligations regarding independent audit

· Identification

· Communication

· Professional Experience

· Inquiry/ Complaint/ Suggestion

· Customer Transaction

· Legal Affairs

· Process Security

being compulsory for the performance of the legal obligations of the data controller pursuant to sub-paragraph (ç), paragraph 2, article 5 of the KVKK

Competent public organizations and institutions domiciled in the country (e.g., courts, Ileti Yonetim Sistemi A.S.)

Sharing information / documents within the scope of performing the legal obligations of our company and pursuing legal affairs

· Identification

· Communication

· Customer Transaction

· Marketing

Clear provisions under sub-paragraph (a), paragraph 2, article 5 of the KVKK

· Identification

· Communication

· Professional Experience

· Inquiry/ Complaint/ Suggestion

· Customer Transaction

· Legal Affairs

· Process Security

· Marketing

being compulsory for the performance of the legal obligations of the data controller pursuant to sub-paragraph (ç), paragraph 2, article 5 of the KVKK

being compulsory for establishing, exercising or protecting a right pursuant to sub-paragraph (e), paragraph 2, article 5 under the KVKK

Categories of Personal Data

Purposes of Processing the Personal Data

Legal Grounds of Data Processing

· Identification data

(e.g., name-surname)

· Contact information

(e.g. mobile phone number)

· Customer Process Data

(e.g. Information on the product purchased subject to the inquiry, complaint, suggestion if you are our customer)

· Financial Data

(e.g., bank account details)

· Inquiry/ Complaint/ Proposal Data

(e.g., inquiry and complaint information)

· Legal Data

(e.g. records of the reading of the information notice)

· Transaction Security Information

(e.g., IP address, dialling log records)

- Establishing the necessary communications with the relevant persons who submit their inquiries, complaints and/ or suggestions within the scope of the provision of goods / service after-sales support services,

- Planning and performance of audit, internal audit and reporting activities,

- Implementing ethics, whistleblowing, investigation and misconduct processes,

- Performance and ensuring the continuity of business activities,

- Information security processes and

- Performance of retention and archiving activities,

Article 5/2(c) of KVKK "It is required to process personal data of contractual parties in case such processing is directly related with execution or performance of an agreement",

· Legal Data

(e.g. records of the reading of the information notice)

· Transaction Security Information

(e.g., IP address, dialling log records)

- Performance of legal obligations and

- Performance of retention and archiving activities,

Article 5/2 (ç) of KVKK “being compulsory for the performance of the legal obligation of data controller”

· Identification data

(e.g., name-surname)

· Contact information

(e.g.. e-mail address, mobile phone number)

· Customer Process Data

(e.g. Information on the product purchased subject to the inquiry, complaint, suggestion if you are our customer)

· Financial Data

(e.g., bank account details)

· Inquiry/ Complaint/ Proposal Data

(e.g., inquiry and complaint information)

· Visual and Auditory Data

(e.g. Voice records)

· Legal Data

(e.g. records of the reading of the information notice)

· Transaction Security Information

(e.g., IP address, approval log records)

- Establishing and protecting the rights and interests of our Company in possible dispute transactions to which our Company is a party and/or related,

- Planning and performance of legal and consultancy works, including the execution of dispute proceedings to which our Company is a party and/or related; and

- Performance of retention and archiving activities,

Article 5/2(e) of KVKK "being compulsory for establishing, exercising or protecting a right”.

- Receiving, evaluating and finalising requests, complaints and/or suggestions,

- Establishing communications with the relevant persons who submit their inquiries, complaints and/or suggestions, and in this context, ensuring their satisfaction and improving their experiences,

- Managing our company's quality standards including product / service/ process improvement,

- Addressing you correctly within the framework of call centre management and provision of services by our company in this context,

- Taking your voice records during your calls via the call centre line in accordance with the quality standards of our company,

- Planning and performance of audit, internal audit and reporting activities,

- Implementing ethics, whistleblowing, investigation and misconduct processes,

- Performance and ensuring the continuity of business activities,

- Information security processes and

- Performance of retention and archiving activities,

Article 5/2(f) of KVKK "data processing being compulsory for legal interests of Data Controller provided that fundamental rights and freedoms of data subject are not violated"

Disclosed Group

Purposes of Transfer

Personal Data Category

Legal Ground of Transfer

Suppliers domiciled in the country and/ or abroad including our group companies acting in the capacity of service provider (e.g. call centre, information technologies and data hosting service providers)

Procurement of products and/or services within the scope of conducting, supervising and ensuring the continuity of business activities

· Identification

· Communication

· Visual and Audio

· Customer Transaction

· Inquiry/ Complaint/ Suggestion

· Finance

· Process Security

· Legal Affairs

Data processing being compulsory for legal interests of Data Controller provided that fundamental rights and freedoms of data subject are not jeopardized pursuant to sub-paragraph (f), paragraph 2, Article 5 of the KVKK

Business partners domiciled in the country (e.g., marketplace sellers)

Provision of services within the scope of carrying out company activities, ensuring business continuity and establishing business partnerships

· Identification

· Communication

· Visual and Audio

· Customer Transaction

· Inquiry/ Complaint/ Suggestion

· Finance

· Legal Affairs

Data processing being compulsory for legal interests of Data Controller provided that fundamental rights and freedoms of data subject are not jeopardized pursuant to sub-paragraph (f), paragraph 2, Article 5 of the KVKK

Sharing information with marketplace vendors in order to carry out the inquiry/ complaint / suggestion processes of our company

Attorneys and attorney partnerships domiciled in the country

Procuring services within the scope of carrying out legal and consultancy affairs, including the establishment and protection of our Company's rights and interests in potential dispute transactions to which our Company is a party and/or related to

· Identification

· Communication

· Visual and Audio

· Customer Transaction

· Inquiry/ Complaint/ Suggestion

· Finance

· Process Security

· Legal Affairs

being compulsory for establishing, exercising or protecting a right pursuant to sub-paragraph (e), paragraph 2, article 5 under the KVKK

Data processing being compulsory for legal interests of Data Controller provided that fundamental rights and freedoms of data subject are not jeopardized pursuant to sub-paragraph (f), paragraph 2, Article 5 of the KVKK

Real and/ or legal persons providing independent audit service domestically

Procuring services within the scope of performance of our Company's legal obligations regarding independent audit

· Identification

· Communication

· Visual and Audio

· Customer Transaction

· Inquiry/ Complaint/ Suggestion

· Finance

· Legal Affairs

being compulsory for the performance of the legal obligations of the data controller pursuant to sub-paragraph (ç), paragraph 2, article 5 of the KVKK

Competent public organizations and institutions domiciled in the country (e.g., courts)

Sharing information / documents within the scope of performing the legal obligations of our company and pursuing legal affairs

· Identification

· Communication

· Visual and Audio

· Customer Transaction

· Inquiry/ Complaint/ Suggestion

· Finance

· Process Security

· Legal Affairs

being compulsory for the performance of the legal obligations of the data controller pursuant to sub-paragraph (ç), paragraph 2, article 5 of the KVKK

being compulsory for establishing, exercising or protecting a right pursuant to sub-paragraph (e), paragraph 2, article 5 under the KVKK

Categories of Personal Data

Purposes of Processing the Personal Data

Legal Grounds of Data Processing

· Identification data

(e.g., name-surname)

· Contact information

(e.g.. e-mail address, mobile phone number)

· Inquiry/ Complaint/ Proposal Data

(e.g., inquiry and complaint information)

· Legal Data

(e.g. records of the reading of the information notice)

- Performance of legal obligations clearly specified under the law (e.g. receiving and processing applications from data subjects); and

- Performance of retention and archiving activities,

Presence of explicit consent pursuant to article 5/2(a) of KVKK.

· Identification data

(e.g., name-surname)

· Contact information

(e.g.. e-mail address, mobile phone number)

· Customer Process Data

(e.g. Information on the product purchased subject to the inquiry/complaint/suggestion if you are our customer)

· Financial Data

(e.g., bank account details)

· Inquiry/ Complaint/ Proposal Data

(e.g., inquiry and complaint information)

· Legal Data

(e.g. records of the reading of the information notice)

· Transaction Security Information

(E.g., IP address, transaction log records)

- Establishing the necessary communications with the relevant persons who submit their inquiries, complaints and/ or suggestions within the scope of the provision of goods / service after-sales support services,

- Planning and performance of audit, internal audit and reporting activities,

- Implementing ethics, whistleblowing, investigation and misconduct processes,

- Performance and ensuring the continuity of business activities,

- Information security processes and

- Performance of retention and archiving activities,

Article 5/2(c) of KVKK "It is required to process personal data of contractual parties in case such processing is directly related with execution or performance of an agreement",

· Identification data

(e.g., name-surname)

· Contact information

(e.g.. e-mail address, mobile phone number)

· Inquiry/ Complaint/ Proposal Data

(e.g., inquiry and complaint information)

· Legal Data

(e.g. records of the reading of the information notice)

· Transaction Security Information

(e.g., IP address, approval log records)

- Performance of legal obligations and

- Performance of retention and archiving activities,

Article 5/2 (ç) of KVKK “being compulsory for the performance of the legal obligation of data controller”

· Identification data

(e.g., name-surname)

· Contact information

(e.g.. e-mail address, mobile phone number)

· Customer Process Data

(e.g. Information on the product purchased subject to the inquiry/complaint/suggestion if you are our customer)

· Financial Data

(e.g., IBAN information)

· Inquiry/ Complaint/ Proposal Data

(e.g., inquiry and complaint information)

· Visual and Auditory Data

(e.g. Voice records)

· Legal Data

(e.g. records of the reading of the information notice)

· Transaction Security Information

(E.g., IP address, transaction log records)

- Establishing and protecting the rights and interests of our Company in possible dispute transactions to which our Company is a party and/or related,

- Planning and performance of legal and consultancy works, including the execution of dispute proceedings to which our Company is a party and/or related; and

- Performance of retention and archiving activities,

Article 5/2(e) of KVKK "being compulsory for establishing, exercising or protecting a right”.

· Identification data

(e.g., name-surname)

· Contact information

(e.g.. e-mail address, mobile phone number)

· Inquiry/ Complaint/ Proposal Data

(e.g., inquiry and complaint information)

· Visual and Auditory Data

(e.g. Voice records)

· Legal Data

(e.g. records of the reading of the information notice)

· Transaction Security Information

(e.g., IP address, approval log records)

- Receiving, evaluating and finalising requests, complaints and/or suggestions,

- Establishing communications with the relevant persons who submit their inquiries, complaints and/or suggestions, and in this context, ensuring their satisfaction and improving their experiences,

- Managing our company's quality standards including product / service/ process improvement,

- Planning and performance of audit, internal audit and reporting activities,

- Implementing ethics, whistleblowing, investigation and misconduct processes,

- Performance and ensuring the continuity of business activities,

- Information security processes and

- Performance of retention and archiving activities,

Article 5/2(f) of KVKK "data processing being compulsory for legal interests of Data Controller provided that fundamental rights and freedoms of data subject are not violated"

Disclosed Group

Purposes of Transfer

Personal Data Category

Legal Ground of Transfer

Suppliers domiciled in the country and/ or abroad including our group companies acting in the capacity of service provider (e.g. IT and data hosting service providers)

Procurement of products and/or services within the scope of conducting, supervising and ensuring the continuity of business activities

· Identification

· Communication

· Visual and Audio

· Customer Transaction

· Inquiry/ Complaint/ Suggestion

· Process Security

· Legal Affairs

Data processing being compulsory for legal interests of Data Controller provided that fundamental rights and freedoms of data subject are not jeopardized pursuant to sub-paragraph (f), paragraph 2, Article 5 of the KVKK

Business partners domiciled in the country (e.g., marketplace sellers)

Provision of services within the scope of carrying out company activities, ensuring business continuity and establishing business partnerships

· Identification

· Communication

· Customer Transaction

· Inquiry/ Complaint/ Suggestion

· Legal Affairs

· Visual and Audio

Data processing being compulsory for legal interests of Data Controller provided that fundamental rights and freedoms of data subject are not jeopardized pursuant to sub-paragraph (f), paragraph 2, Article 5 of the KVKK

Sharing information with marketplace vendors in order to carry out the inquiry/ complaint / suggestion processes of our company

Attorneys and attorney partnerships domiciled in the country

Procuring services within the scope of carrying out legal and consultancy affairs, including the establishment and protection of our Company's rights and interests in potential dispute transactions to which our Company is a party and/or related to

· Identification

· Communication

· Visual and Audio

· Customer Transaction

· Inquiry/ Complaint/ Suggestion

· Process Security

· Legal Affairs

being compulsory for establishing, exercising or protecting a right pursuant to sub-paragraph (e), paragraph 2, article 5 under the KVKK

Data processing being compulsory for legal interests of Data Controller provided that fundamental rights and freedoms of data subject are not jeopardized pursuant to sub-paragraph (f), paragraph 2, Article 5 of the KVKK

Real and/ or legal persons providing independent audit service domestically

Procuring services within the scope of performance of our Company's legal obligations regarding independent audit

· Identification

· Communication

· Visual and Audio

· Customer Transaction

· Inquiry/ Complaint/ Suggestion

· Legal Affairs

being compulsory for the performance of the legal obligations of the data controller pursuant to sub-paragraph (ç), paragraph 2, article 5 of the KVKK

Competent public organizations and institutions domiciled in the country (e.g., courts)

Sharing information / documents within the scope of performing the legal obligations of our company and pursuing legal affairs

· Identification

· Communication

· Visual and Audio

· Customer Transaction

· Inquiry/ Complaint/ Suggestion

· Process Security

· Legal Affairs

being compulsory for the performance of the legal obligations of the data controller pursuant to sub-paragraph (ç), paragraph 2, article 5 of the KVKK

being compulsory for establishing, exercising or protecting a right pursuant to sub-paragraph (e), paragraph 2, article 5 under the KVKK