CLARIFICATION AND INFORMATION TEXT ON THE PROCESSING OF PERSONAL DATA

1.1. Personal data refers to any information relating to an identified or identifiable natural person. Accordingly, name, surname, address, telephone, contact information and other similar information constitute personal data. The processed personal data are collected through cookies and information shared by the relevant person while visiting the website maxxmora.com.tr belonging to MAXXMORA A.Ş., while signing up to the website or placing an order or receiving services from the website, and communication activities between the relevant person and the website.

1.2. Relevant person refers to the real person whose personal data is processed. Accordingly, those who visit, use, sign up to the website, place an order, receive the order and receive services from the website constitute the relevant persons.

2.1. The data controller is the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system and thus MAXXMORA Anonim Şirketi acts as the data controller.

2.2. It is hereby acknowledged that through the submission of this disclosure text to you, the data controller has fulfilled its obligation of disclosure as stipulated in Article 10 of the Law on the Protection of Personal Data numbered 6698.<br>

In accordance with the Law on the Protection of Personal Data numbered 6698 and secondary regulations, your visit to the website www.maxxmora.com.tr, signing up to this website and shopping through this website shall be regarded as your consent to the processing of your personal data. Personal data may be processed even without the consent of the data subject where it is explicitly stipulated by law pursuant to Article 5/a of the Law on the Protection of Personal Data numbered 6698, where data processing is mandatory for the data controller to fulfil its legal obligation pursuant to Article 5/ç, where data processing is mandatory for the establishment, exercise or protection of a right pursuant to Article 5/e, and where data processing is mandatory for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed pursuant to Article 5/f.

In this context, in the event that you visit www.maxxmora.com.tr, create a membership registration on the website and shop through this membership registration, your personal data is processed for the purposes stated below:<br>

-Creating your membership registration

-Informing you about opportunities and campaigns when you give your consent<br>

-Contacting you when necessary

-Keeping records of the transactions made and creating a website content suitable for your interests and tastes in line with the usage of the website, providing you with a better and personalised shopping experience by offering you coupons, discounts, special promotions, campaigns, shopping ideas and marketing and advertising for related goods and services

-Follow-up and execution of legal affairs (through judicial administrative institutions), risk management

-Responding to complaints and solving problems.

-Identity data (name, surname, date of birth, age and, in case of delivery to a third party, the name and surname of the third party) which enables the person to be recognised on the website and to be contacted when necessary.

-Contact data (telephone number, e-mail address, home/work address or delivery address, telephone number, e-mail address of the third party to whom the delivery will be made), location data and location information of the third party to whom the delivery will be made, which will be used to contact the person in order to make the delivery and to solve the problems that may arise, to inform the person about campaigns and discounts

– Information about customer transactions (preferences, requests, order and shopping cart information, comments, complaints, information shared with the company / website by visitors, members, customers, telephone calls in order to produce solutions and improve service quality)

-Information for security purposes (IP address, username, password information)

-Financial information (amount of products selected, services received, invoice information, bank information in case of refund, account number)

-Records obtained through the use of cookies.

Maxxmora may share your personal data, which is processed in a manner limited to the membership relationship, with cargo supplier companies for the delivery of orders, companies / banks that provide online payment services for your payment transactions and, if necessary, with its partners and affiliates (and/or third party business partners that need to be shared for the fulfilment of the work), lawyers, consultants, accountants for the above purposes, as well as with social media supplier companies, electronic marketing companies, electronic marketing companies in order to make marketing, to offer you special campaigns and to inform you about the campaigns made and to get in touch with you, and if necessary, with courts and authorised public institutions for the above purposes.

Personal data are deleted, destroyed or made anonymous by the data controller ex officio upon the request of the data subject or in the event that the reasons requiring the processing of personal data are no longer applicable by complying with the maximum retention periods stipulated in the legislation.

Deletion and disposal of personal data means that no one, including Maxxmora A.Ş. and the website, can gain access to this information ever again and that this information can never be used by anyone. On the other hand, anonymisation of personal data means that the identity of the data owners cannot be identified.

As regulated in Article 11 of the Law on the Protection of Personal Data numbered 6698, you are entitled to request the matters listed below by applying to the data controller:

•    Learn whether your personal data are processed or not,

•    Demand information regarding processing your personal data in case it is processed,

•    Learn the reason why your data are processed and whether your personal data are used according to declared purposes or not,

•    Learn the third parties to whom your data are transferred within the borders of our country or abroad pursuant to Law,

•    Ask for correction in case your data are processed deficiently or improperly and to ask to notify the third parties, to whom your personal data are transferred, regarding the transactions carried out within this scope,

•    Request your personal data to be erased or destroyed in case the reasons of processing your personal data are vanished and to ask to notify the third parties, to whom your personal data are transferred, regarding the transactions carried out within this scope,

•    Object to any negative consequence that you face due to the fact that your personal data is exclusively analysed through automated systems;

•    Request your personal data to be erased or destroyed within the framework of conditions stipulated in the article 7 of the Law, and to ask to notify the third parties, to whom your personal data are transferred, regarding such correction, deletion or destruction activities,

•    Demand to be indemnified in case you are incurred a damage since your personal data are processed illegally.

You can notify the data controller that you wish to exercise any of these rights in writing within the scope of the Communiqué on the Procedures and Principles of Application to the Data Controller, or by using your registered electronic mail (KEP) address, secure electronic signature, mobile signature or your e-mail address that you have previously notified to the data controller, Maxxmora Ticaret A.Ş., and registered in the system of the data controller, or through a software or application developed for the application purposes. In accordance with the said communiqué, your application must include name, surname and signature in case the application is made in writing, Turkish identity number for citizens of the Republic of Turkey, nationality, passport number or identification number, if any, for foreigners, and residence or workplace address for notification, e-mail address, telephone and fax number, if any, for notification, and the subject of the request. In case of receiving an application, Maxxmora Anonim Şirketi will finalise your request free of charge as soon as possible and within 30 (thirty) days at the latest, depending on its nature. However, in the event that the transaction requires an additional cost, Maxxmora Anonim Şirketi may charge the fee specified in the tariff determined by the Personal Data Protection Board. Furthermore, you can also review our Personal Data Protection Policy available at ‘‘www.maxxmora.com.tr’’ to learn the company policies applied for the protection of personal data.

I hereby acknowledge and declare that I have been informed about the method, purpose and legal reasons for the collection, processing and transfer of my personal data by Maxxmora A.Ş. and what my processed personal data are, as well as the rights I am entitled to for the processing of personal data.