CUSTOMER PRIVACY NOTICE ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

This Privacy Notice on Personal Data ("Notice") has been prepared in accordance with the Law on the Protection of Personal Data No. 6698 ("KVKK" or the "Law") to inform you about the collection, processing, and transfer of your personal data and your rights under the KVKK.

As DAHLIA BIANCA TEKSTIL SANAYI VE TICARET ANONIM SIRKETI (the "Company"), registered at Merkez Mahallesi Ahenk Sokak No:8/1 Bomonti Sisli/Istanbul, acting as the data controller, we process your personal data in accordance with the KVKK and the relevant legislation within the scope described below.

1. Your Personal Data We Process

As the Company, we process your personal data listed below in accordance with the conditions and principles set forth in Article 4 of the Law, namely: (a) compliance with the law and the principles of good faith, (b) being accurate and up to date where necessary, (c) being processed for specified, explicit, and legitimate purposes, (d) being relevant, limited, and proportionate to the purposes for which they are processed, and (e) being retained for the period stipulated in the relevant legislation or required for the purpose for which they are processed.

Data Category	Details
Identity Information	Full name
Contact Information	Telephone number, e-mail address, delivery address, billing address, location information on a province/district basis
Customer Transaction Information	Order details (product name, size, color, quantity, price), order history, delivery information, return/exchange requests, customer service requests, membership information, shopping preferences
Transaction Security Information	IP address, cookie data, browser information, device information, session data
Legal Transaction Information	Correspondence with judicial and administrative authorities and authorized public institutions and organizations, examination, litigation, and enforcement file contents

2. Methods of Collecting Your Personal Data

Your personal data is processed by the Company through electronic means, via fully or partially automated methods, when you create a membership and/or make a purchase through our website www.dahliabianca.com and our mobile application, when you make a purchase from our stores, when you contact our customer services, and when you contact us through our social media accounts.

3. Purposes and Legal Grounds for Processing Your Personal Data

We process your personal data based on the legal grounds specified in Article 5 of the Law. Below are our purposes for processing your personal data and the legal grounds we rely on:

Personal Data Processed	Purposes of Processing	Legal Grounds
Contact Information (telephone number)	Establishing mechanisms to verify the accuracy of contact information by sending a verification code to the telephone number; maintaining records regarding whether commercial electronic message consent has been given; delivering our privacy notice to you	Legitimate interest of the Company (KVKK Art. 5/2-f); Legal obligation of the Company (KVKK Art. 5/2-d)
Identity Information, Contact Information, Customer Transaction Information	Execution of order processes, product delivery, invoice issuance, processing of returns and exchanges, conducting activities aimed at customer satisfaction, evaluating customer complaints and requests	Necessary for the establishment or performance of a contract (KVKK Art. 5/2-c); Legitimate interest of the Company (KVKK Art. 5/2-f)
Customer Transaction Information	Conducting product development and improvement activities by analyzing shopping preferences and purchasing behavior; performing statistical analyses	Legitimate interest of the Company (KVKK Art. 5/2-f)
Transaction Security Information	Ensuring website and information security, fraud prevention, conducting verification processes	Legitimate interest of the Company (KVKK Art. 5/2-f); Legal obligation of the Company (KVKK Art. 5/2-d)
Identity Information, Contact Information, Customer Transaction Information, Legal Transaction Information	Exercising all rights of action, response, and objection before courts, enforcement offices, arbitration panels, and similar official institutions and organizations in disputes that may arise; conducting negotiation and settlement processes related to disputes; delivering requested information to you	Processing is necessary for the establishment, exercise, or protection of a right (KVKK Art. 5/2-e)

Information Regarding the Sending of Commercial Electronic Messages (Scope of the E-Commerce Law)

Personal Data Processed	Purposes of Processing	Legal Grounds
Identity Information, Contact Information (telephone number, e-mail address)	Sending commercial electronic messages (campaigns, promotions, special offers, greetings, etc.)	Explicit consent within the scope of the Law on the Regulation of Electronic Commerce No. 6563

Pursuant to the Law on the Regulation of Electronic Commerce No. 6563, your explicit consent is required in order to send you commercial electronic messages (campaigns, promotions, special offers, greetings, etc.).

In this context, your contact information (telephone number, e-mail address) will only be used for the following purposes:

Providing information about our products and services,
Announcing new collections and seasonal products,
Delivering campaign, discount, and promotional announcements,
Communicating for customer satisfaction purposes.

The consent you provide for the sending of commercial electronic messages is recorded through the Message Management System (IYS), and you may withdraw your consent at any time through the IYS.

4. Third Parties with Whom We Share Your Personal Data

Cargo and logistics companies for the purpose of product delivery, banks and payment institutions for the processing of payment transactions, intermediary service providers for electronic messages, the Message Management System (IYS) in the event that you provide consent for the sending of commercial electronic messages, and legal advisory service providers;
Authorized public institutions and organizations and judicial authorities, for the purpose of fulfilling our obligations to provide information, documents, and other relevant obligations, and to exercise our legal rights such as the right to file lawsuits and submit responses;
A potential buyer or other successor in the event of a merger, sale, restructuring, reorganization, liquidation, or other sale or transfer of some or all of the Company's assets, whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding, in which the personal data held by the Company is among the assets to be transferred.

5. Protection, Retention, and Destruction of Your Personal Data

As the Company, we take all necessary technical and administrative measures to ensure an adequate level of security in order to prevent the unlawful processing of your personal data, to prevent unauthorized access to your personal data, and to ensure the safeguarding of your personal data. Your personal data will be deleted, destroyed, or anonymized within six (6) months following the elimination of the reasons requiring their processing or upon your request.

6. Your Rights

Pursuant to the provisions of Article 11 of the Law, you have the following rights with respect to your personal data:

To learn whether your personal data is being processed,
To request information if your personal data has been processed,
To learn the purpose of the processing of your personal data and whether they are used in accordance with their intended purpose,
To know the third parties to whom your personal data has been transferred, whether domestically or abroad,
To request the rectification of your personal data if it has been processed incompletely or inaccurately,
To request the deletion or destruction of your personal data,
To request notification of the rectification, deletion, or destruction of your personal data to third parties to whom your personal data has been transferred,
To object to the emergence of a result against you through the analysis of your processed personal data exclusively by automated systems,
To claim compensation for damages incurred due to the unlawful processing of your personal data.

7. Contact Us

You may submit your questions regarding your personal data and your rights and requests under Article 11 of the KVKK, in accordance with Article 11, Article 13(1) of the KVKK, and the Communiqué on the Procedures and Principles of Application to the Data Controller, through the following methods:

By mail to the address: Merkez Mahallesi Ahenk Sokak No:8/1 Bomonti Sisli/Istanbul,
In writing, through a notary public or by registered mail with return receipt, in order to verify your identity and to prevent the disclosure of information to unauthorized persons,
By sending an e-mail to kvkk@dahliabianca.com using a secure electronic signature, mobile signature, or (if applicable) the e-mail address previously notified to the Company and registered in our systems,

or through any other method that may be determined by the Personal Data Protection Board in the future.

Your application must include the following information: (a) name, surname, and your signature if the application is in writing; (b) T.R. identity number for Turkish citizens, or nationality, passport number, or identity number (if any) for foreign nationals; (c) residential or business address for notification purposes; (d) e-mail address, telephone number, and fax number (if any) for notification purposes; and (e) the subject matter of the request. You are also required to attach the relevant information and documents to your application.

Data Controller Identity: Dahlia Bianca Tekstil Sanayi ve Ticaret Anonim Sirketi

Tax Identification No: 2670658104 - Sisli

Address: Merkez Mahallesi Ahenk Sokak No:8/1 Bomonti Sisli/Istanbul