SİM ATLI (“ SIM and ROZ ” or the “ Company ”) obtains various personal data about you as part of your purchases through our website https://simandroz.com/ and/or our store. In this context, SIM and ROZ is considered the “data controller” pursuant to the Personal Data Protection Law No. 6698 (“ KVKK ”), and we hereby present this Disclosure Statement to your attention in accordance with Article 10 of the KVKK.

1. Data Controller

Business Name: Sim Atlı

Address: Maslak Neighborhood AOS 20. Street No: 641 Sarıyer/Istanbul

Website: https://simandroz.com/

Central Securities Depository: 1388979490800001

1. Your Personal Data Processed and Data Categories

• Identity data: name, surname, date of birth, gender
• Contact data: email address, contact address, telephone number
• Customer transaction data: call center records, invoice, order information, request information
• Transaction security data: IP address information, website login and logout information, password and passcode information
• Marketing data: purchase history information, surveys, cookie records

1. Processing Purposes

Your personal data collected verbally during shopping through our website or through various communication channels will only be processed if you have explicit consent or if one of the legal conditions specified in Article 5/2 of the KVKK exists:

• In order to fulfill the legal obligations within the scope of the Turkish Commercial Code, the Turkish Civil Code, the Turkish Code of Obligations, the Labor Law, the Law on Regulation of Electronic Commerce, the Law on Consumer Protection, the Law on the Protection of Personal Data, the Tax Procedure Law, the Law on Intellectual and Artistic Works, the Law on Industrial Property, the Law on Regulation of Publications Made on the Internet and Combating Crimes Committed by Means of Such Publications and their secondary regulations, and to evaluate and resolve your requests and complaints, as it is clearly prescribed in the laws within the scope of Article 5/2 of the KVKK and is mandatory for the data controller to fulfill its legal obligations,

• In order to benefit from the products and services offered by our business units, including statistics, without disclosing your identity , provided that the data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person within the scope of Article 5/2 of the KVKK, copying/backing up to prevent data loss, ensuring physical space security in stores,
• Establishing the membership on our website due to the necessity of processing the personal data of the parties to the contract, provided that it is directly related to the establishment or execution of the contract within the scope of Article 5/2 of the KVKK, fulfilling the product or service you have purchased from SIM and ROZ (collecting the product fee via credit card or mail order form etc., issuing invoices/receipts, sending by courier, [performing activities such as after-sales repair] etc.), making notifications regarding SIM and ROZ website memberships (renewal, expiration etc.), notifying about any changes or innovations that may occur in the membership and/or return conditions;

• If you give your consent to commercial communication as clearly stipulated in the laws within the scope of Article 5/2 of the KVKK, we will send you commercial electronic messages regarding discounts, events, special days, new collections and various satisfaction surveys;

• In the event that an order is placed for the product to be delivered abroad, the data is transferred to cargo companies etc. abroad, incidentally , because the transfer is necessary for the performance of a contract between the data subject and the data controller or for the implementation of pre-contractual measures taken upon the request of the data subject, within the scope of Article 9/6/b of the KVKK;

In addition to all these, our website collects cookies, which are considered personal data. You can access our Cookie Policy here.

1. To Whom and For What Purposes Can Processed Personal Data Be Transferred?

Your personal data collected and listed above;

• Within the scope of Article 5/2 of the KVKK
• To fulfill the legal obligations within the scope of the relevant legislation and their secondary regulations, and to evaluate and resolve your requests and complaints, as it is clearly stipulated in the laws and is mandatory for the data controller to fulfill its legal obligations,
• In order to enable you to benefit from the products and services offered , our business units can carry out the necessary studies, including statistics, without disclosing your identity, provided that the data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person, and to perform copying/backups to prevent data loss.
• To establish the membership on our website, as it is necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or execution of the contract , to fulfill the product or service you have purchased from SIM and ROZ (collecting the product fee via credit card or mail order form, etc., issuing invoices/receipts, sending by cargo, [performing activities such as after-sales repair], etc.), to make notifications regarding SIM and ROZ website memberships (renewal, expiration, etc.), to notify about any changes or innovations that may occur in the membership and/or return conditions,

in line with its objectives,

• Contracted domestic and/or international cargo and customs companies,
• Software programs whose servers are located in Türkiye,
• Banks and electronic payment institutions, companies that provide legal and financial consultancy services,
• To the intermediary service provider companies with which SIM and ROZ have an agreement for the website named https://simandroz.com//

• If you give your consent to commercial communication as it is clearly stipulated in the laws within the scope of Article 5/2 of the KVKK, we will send you commercial electronic messages regarding discounts, events, special days, new collections and various satisfaction surveys to our business partners with whom we work for the communications and gifts we send to our customers from time to time;

• To regulatory and supervisory authorities, relevant official institutions such as courts and enforcement offices, and other public institutions or organizations authorized to request your personal data , in order to exercise our right of defense upon request or in a possible legal process, as it is clearly stipulated in the laws within the scope of Article 5/2 of the KVKK and is necessary for the data controller to fulfill its legal obligations,

is being transferred.

1. Method and Legal Reason for Collecting Personal Data

Your personal data, which we process for the purposes and reasons listed above, is collected verbally and in writing during your membership application to the website, during your membership, or if you continue shopping without becoming a member, during shopping electronically or through various communication channels.

1. Rights of the Data Subject

As the relevant person, you can contact us and get information about yourself;

● Learning whether personal data is being processed,

● Request information regarding personal data processed,

● To learn the purpose of processing personal data and whether they are used in accordance with their purpose,

● Knowing the third parties to whom personal data is transferred, either domestically or abroad,

● Request correction of personal data if it is processed incompletely or incorrectly,

● Request the deletion or destruction of personal data in case the reasons requiring the processing of personal data are eliminated within the framework of Article 7 of the KVKK,

● To request that third parties to whom personal data has been transferred be notified that personal data has been corrected if it has been processed incompletely or incorrectly, or that personal data has been deleted and destroyed within the scope of Article 7 of the KVKK,

● To object to the emergence of a result to the detriment of the person himself/herself, by analyzing the processed data exclusively through automated systems,

● We hereby inform you that you have the right to demand compensation for the damages in case of damages incurred due to the unlawful processing of personal data.

If you wish to exercise any of your rights described above within the scope of Article 11 of the KVKK regarding your personal data, you may apply to our Company in writing in the ways specified below.

• By sending an e-mail to the Company's [●] registered electronic mail (KEP) address,
• We will send it to info@simandroz.com e-mail address using a secure electronic signature, mobile signature or your e-mail address previously notified to our Company and registered in our Company's system.

SIM and ROZ will process your requests in this context free of charge, depending on the nature of the request, as soon as possible and within thirty days at the latest. The request will be delivered to you in writing or electronically. However, if the process requires additional costs, a fee determined by the Personal Data Protection Board may be charged.

However, you can always notify us of any changes and/or updates regarding your personal data by sending an e-mail to info@simandroz.com .