PRIVACY POLICY

Within the scope of this QUITEOFTEN Sole Proprietorship Privacy and Protection of Personal Data Policy (hereinafter briefly referred to as the “Privacy Policy”), the term “User” refers to all natural persons who access the website/mobile website with the domain name http://www.quiteoften.store/ or the Hakkımızda Sole Proprietorship mobile application (the website and mobile application shall collectively be referred to as the “Site”) via any mobile or digital device, either by completing a membership process or by visiting the Site as a guest without creating a membership.

QUITEOFTEN Şahıs Şirketi E Ticaret A.Ş. (hereinafter briefly referred to as “Hakkımızda”); acting as the data controller in accordance with the Law on the Protection of Personal Data No. 6698 (hereinafter briefly referred to as the “Law”), shall use, process, store, and share the User's personal data with third parties strictly limited to the circumstances specified in this Privacy Policy.

Any User benefiting from the services offered on the Site is deemed to have read and accepted the terms and conditions set forth in this Privacy Policy.

Hakkımızda demonstrates the necessary care and sensitivity regarding the confidentiality and security of the User's personal information.

1. Processed Personal Data

1.1. The personal data directly shared by the User with Hakkımızda during or after the membership process are as follows:

• Name and surname

• E-mail address

• Phone number

• Address information

• Information regarding the User profile

• User messaging history

• KEP (Registered Electronic Mail) address

• Tax identification number

• MERSİS (Central Registration System) number

1.2. The personal data that are not directly provided by the User, but obtained through automatic means or produced by us, are as follows:

• Browser cookie information

• User transaction information (Date/time information of the User's login to the Site and IP address/Port Information)

• General location data

• Data regarding the advertising contents examined by the User on the Site and all kinds of other behavioral or personalized advertising data

• In-site movements - page navigation information

• User's user-agent information (Technical information and version information regarding the operating system and web browser through which the User logs into the Site)

• Information regarding the sale and/or purchase of products on the Site and all kinds of electronic commerce records

2. Purposes and Legal Grounds for Processing Personal Data

The User's personal data are processed lawfully by Hakkımızda within legal limits, solely for specific purposes, and in a measured and limited manner in accordance with these purposes.

The information provided by the User during membership or profile creation is collected for the purpose of carrying out the membership process and enabling Hakkımızda to contact the User when necessary.

Data obtained through automatic means may be used without disclosing User information to enrich the User's in-site experiences, to improve the services offered by Hakkımızda, to utilize in corporate reporting and business development activities, to make statistical evaluations, to conduct market research, to introduce new products and services to users, and to create databases for these purposes. Furthermore, this data may be used by Hakkımızda to personalize the advertisements presented on the Site. If the User uses Hakkımızda services, they are deemed to have consented to the aforementioned data processing activities.

In addition to these, Hakkımızda retains in-site transaction logs for a certain period in order to fulfill its obligations as a hosting provider in accordance with Law No. 5651.

Moreover, pursuant to the Law and/or the existence of exceptions in the relevant legislation, Hakkımızda may process personal data and share it with third parties without obtaining the User's separate consent. The exceptions listed in Article 5 of the Law are as follows:

• It is expressly provided for by the laws.

• It is necessary for the protection of life or physical integrity of the person or someone else, who is unable to express their consent due to physical impossibility or whose consent is not granted legal validity.

• Processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract between the User and Hakkımızda.

• It is mandatory for the data controller to fulfill its legal obligation.

• It has been made public by the User themselves.

• Data processing is mandatory for the establishment, exercise, or protection of any right.

• Data processing is mandatory for the legitimate interests of Hakkımızda, provided that it does not violate the fundamental rights and freedoms of the User.

3. Cookies

Cookies are small text files sent by the Site to the User's browser. These files are stored in the main memory of the User's device even if offline, and they facilitate the use of the site for the User by notifying the site of the User's preferences and settings from previous sessions when online. Cookies are automatically loaded from the moment the User logs into the Site. However, the User can prevent the loading of these text files from their browser settings if they wish. If blocked, the site may not work properly or the user's settings may not be saved.

Cookies are also used to obtain statistical information regarding how many people visited a page, how many times a person visited any internet page, and how long they stayed. Furthermore, data such as the User's behavior on the Site, which pages they visited, and for how long, can be associated with cookies and used by the Site for behavioral advertising purposes. However, apart from these stated purposes, cookies are not used for purposes such as extracting data stored in the user's main memory.

4. Retention Period of Personal Data

Hakkımızda stores the personal data it obtains for the periods required by the purposes of personal data processing and provided that it does not exceed these periods. Other than this, personal data stored in order to fulfill legal obligations are kept for the periods specified in the relevant laws. Additionally, personal data may be retained for the periods required by these interests in cases where the legitimate interests of Hakkımızda require it, provided that it does not violate the fundamental rights and freedoms of the User.

In the event that the situations requiring the retention of personal data cease to exist, personal data are appropriately deleted, destroyed, or anonymized by Hakkımızda within the framework of the procedures and principles specified in the Law and the relevant legislation.

5. Transfer of Personal Data

Personal data may be transferred to third parties domestically or abroad if one of the purposes specified in this Privacy Policy requires transfer to third parties and if one of the conditions specified in Article 5 of the Law exists.

The main situations where the User's personal data are transferred to third parties are as follows:

• Information and document requests directed to Hakkımızda by courts, the administration, or authorized public institutions in accordance with the legislation,

• It is necessary to transfer data to real or legal persons from whom Hakkımızda receives services contractually or cooperates with to carry out its commercial activities, for the execution of these relationships,

• The change of ownership of the Hakkımızda website and mobile application as a brand and service necessitating the transfer of user data,

• It is necessary to transfer user data to real or legal third parties in order to establish a partnership relationship with these persons,

• It is mandatory for Hakkımızda to be able to exercise its right of defense.

In the event that the Hakkımızda website and mobile application change ownership, the new data controller will be the real or legal person taking over the site.

6. User's Rights

As a data subject, every User has the right to send an e-mail to info@quiteoften.store regarding themselves to: a) Learn whether their personal data are processed or not, b) Request information if their personal data are processed, c) Learn the purpose of processing their personal data and whether they are used in compliance with the purpose, d) Know the third parties to whom personal data are transferred domestically or abroad, e) Request the rectification of incomplete or inaccurate data, f) Request the erasure or destruction of their personal data under the conditions stipulated in Article 7 of the Law, g) Request notification of the operations carried out in compliance with subparagraphs (e) and (f) to third parties to whom their personal data have been transferred, h) Object to the occurrence of a result against themselves by analyzing the data processed solely through automated systems, i) Claim compensation for the damages arising from the unlawful processing of their personal data.

The User's requests within this scope must necessarily include the following points:

• Name, surname, and signature if the application is in writing,

• Republic of Turkey ID number for citizens of the Republic of Turkey; nationality, passport number, or ID number (if any) for foreigners,

• Residential or workplace address based on notification,

• Electronic mail address, telephone, and fax number based on notification, if any,

• Subject of the request,

• Information and documents related to the subject of the request.

7. Provisions Regarding Data Security

Personal data are stored on Hakkımızda's servers. In accordance with the Law, Hakkımızda undertakes to take the necessary technical and administrative measures and to carry out the necessary audits to ensure an appropriate level of security in order to:

• Prevent the unlawful processing of personal data,

• Prevent unlawful access to personal data, and

• Ensure the preservation of personal data.

Despite Hakkımızda taking all necessary data security measures, Hakkımızda shall not bear any legal liability in the event that personal data are damaged or fall into the hands of third parties as a result of attacks on the Site and/or the system.

Hakkımızda cannot disclose the personal data it obtains about the User to others in violation of the provisions of this Privacy Policy and the Law on the Protection of Personal Data and cannot use it outside the purpose of processing.

If a link is provided to other applications/websites via the Site, Hakkımızda does not bear any responsibility for the privacy policies and contents of the aforementioned applications/websites.

8. Changes to the Privacy Policy

Hakkımızda may change the provisions of this Privacy Policy at any time. The updated Privacy Policy enters into force on the date it is published on the Site or on the date it is presented to the User by any method.

9. Applicable Law and Jurisdiction

Turkish Law shall be applied in the implementation, interpretation, and management of legal relations arising within the provisions of this Privacy Policy. Istanbul (Çağlayan) Courts and Execution Offices are authorized to resolve any dispute arising or that may arise from this Privacy Policy.