1. Purpose and Scope

This policy has been prepared by Sim Atlı (“SIM and ROZ”) in order to explain the personal data processing activities carried out within the framework of the Personal Data Protection Law No. 6698 (“KVKK”) and the relevant legislation and to share with the public the basic principles adopted in the processing of personal data.
The policy covers our customers, visitors, members, job candidates, business partners and third parties.

2. Data Controller

In accordance with the KVKK, the data controller is:

Sim Atlı (SIM and ROZ)
Central Registry Number: 1388979490800001
Address: Maslak District Aos 20. Street No: 641 Sariyer / Istanbul
Phone: +90 537 452 79 97
Email: info@simandroz.com

3. Purposes of Processing Personal Data

Collected personal data is processed for the following purposes:

• Receiving orders, preparing and delivering products
• Processing of payment transactions
• Conducting membership processes
• Providing customer relations and support services
• Carrying out marketing, campaign and promotional activities (with explicit consent)
• Conducting customer satisfaction and quality measurements
• Fulfilling legal obligations and informing official authorities

4. Processed Personal Data

Personal data processed by SIM and ROZ are:

• Identity Information (name, surname, TR ID No – in special cases)
• Contact Information (address, phone, email)
• Financial Information (payment information, billing information)
• Customer Transaction Information (order, request, complaint)
• Cookie data and online usage information
• Optional information received during membership (date of birth, gender, etc.)

5. Transfer of Personal Data

Personal data collected:

• To authorized public institutions and organizations in order to fulfill legal obligations,
• To cargo companies for the purpose of carrying out logistics and cargo processes,
• To banks and payment institutions for payment processes,
• To our technology suppliers (e.g. Shopify, Amazon Web Services, etc.) within the scope of IT infrastructure services,
  can be transferred in accordance with the relevant legislation.

When data transfer abroad is necessary, standard contracts are made in accordance with the KVKK or explicit consent is obtained.

6. Method of Collection of Personal Data and Legal Reasons

Personal data is collected through our website, membership forms, contracts, e-mail, call center, social media and cookies.

Legal reasons:

• KVKK article 5/2(c): Necessity for the establishment or execution of the contract
• KVKK article 5/2(e): It is mandatory for the establishment, use or protection of a right.
• KVKK article 5/2(f): Legitimate interests of the data controller
• KVKK article 5/1: Explicit consent

7. Data Retention Periods

Personal data is stored for the period stipulated in relevant legislation or required by the purposes for which it is processed. Upon expiration of this period, personal data is deleted, destroyed, or anonymized.

8. Data Security

SIM and ROZ takes all necessary technical and administrative measures to protect the confidentiality and integrity of personal data. In this context:

• Security software and firewall systems are used against unauthorized access,
• Access rights are restricted,
• Data is encrypted and regularly backed up.

9. Rights of the Data Subject

In accordance with Article 11 of the KVKK, the relevant persons may apply to the data controller;

• To learn whether your personal data is being processed,
• Requesting information about it if it has been processed,
• To learn whether it is used for its intended purpose,
• Knowing the third parties to whom it was transferred,
• Request correction if it is processed incompletely or incorrectly,
• Request deletion or destruction within the scope of KVKK Article 7,
• They have the right to claim compensation if they suffer damage due to the processing being unlawful.

To exercise these rights, you can contact us at info@simandroz.com .

10. Entry into Force of the Policy

This policy entered into force on August 27, 2025. SIM and ROZ may make changes to this policy as it deems necessary and publish the updated version on its website.