Personal Data Protection Law (P.D.P.L.)

INFORMATION NOTICE WITHIN THE SCOPE OF THE PERSONAL DATA PROTECTION LAW NO. 6698

Rengin Giyim San. ve Ticaret Limited Şirketi takes the highest possible level of security measures to ensure that your personal data is processed lawfully and your privacy is protected, in its capacity as the data controller.

If you visit the stores of the RENGİN brand owned by Rengin Giyim San. ve Ticaret Limited Şirketi, or visit ‘www.rengin.com.tr’ (“Website”), or use the mobile applications of the same brand, become a member, purchase products, or arrange product/gift deliveries on behalf of third parties; this information notice aims to inform you in the most transparent manner, pursuant to Article 10 of the Personal Data Protection Law No. 6698 (“Law”), about the methods of collection of your personal data, purposes of processing, recipient groups to whom data is transferred, legal grounds for processing, and your rights.

We would like to inform you about what types of data Rengin Giyim San. ve Tic. Ltd. Şti. collects through the website www.rengin.com.tr, how your collected data is used, and with whom Rengin Giyim may share your data,

What your rights are regarding the data processed by Rengin Giyim and how you can exercise these rights,

And how you can change your positive or negative preferences regarding receiving electronic commercial communications.

Can we process your personal data as Rengin Giyim?

Within the scope of the Personal Data Protection Law No. 6698 (“PDPL”), we process certain of your data in order to provide the services offered to you.

As we determine the purposes and means of processing personal data and are responsible for the establishment and management of the data recording system, we have certain responsibilities and obligations as the “data controller” under the PDPL.

Accordingly, we may process your personal data lawfully and with respect for your personal rights, provided that your explicit consent exists or one of the exceptions set out in Article 5/2 of the PDPL applies.

Which Personal Data Do We Process?

Provided that it complies with the PDPL, other relevant legislation, and international regulations, and in order to offer you better services, your personal data may be processed for the following purposes:

To manage and complete your order processes and maintain communication with you; to inform you about products, services, campaigns, and promotions; to conduct statistical analyses regarding your shopping preferences; and to fulfill our legal obligations arising from applicable legislation, including but not limited to Law No. 5651, Law No. 6563, Turkish Penal Code No. 5237, and the Personal Data Protection Law No. 6698 and their secondary legislation.

Identity: Name, Surname, Date of Birth, Gender, Nationality, Turkish ID Number,

Contact: Email Address, Phone Number, Address,

Transaction Security: Password, login-logout records to the membership page,

Location: Location data automatically obtained by the website or manually provided by you, subject to your permission via browser settings,

Customer Transaction Information: Shopping history, message type, message subject, subject title, contact phone number, order number, product name, message content, alteration, exchange, and return data,

Marketing: Cookie records; information obtained through marketing and campaign activities; favorites, likes, behaviors, preferences, search activities, segments, cookie and advertising identifier information, communication preferences, survey responses, demographic information, customer requests/complaints, location data, and data that may directly or indirectly identify the Member if membership is matched with social media accounts,

OTHER: Sole Proprietorship Information, Tax Identification Number, Related Tax Office Information, Size and Measurement Information

Transfer of Personal Data

Your personal data may be shared, in accordance with Articles 8 and 9 of the Law, with third parties we cooperate with to provide our services (such as cargo and delivery companies) and with public authorities as required by our legal obligations. Additionally, your personal data may be transferred to domestic legal and financial consultancy service providers, e-invoice / e-archive invoice service providers, and product alteration service suppliers based on legal grounds such as necessity for the establishment or performance of a contract, fulfillment of legal obligations, and legitimate interests of the data controller, and to overseas database and server service providers requiring technical expertise, based on your explicit consent.

Rengin Giyim may share your personal data related to your visit to the Website or membership, and browsing information, with public institutions and organizations authorized by law to request such information, for the purposes of ensuring security and fulfilling Rengin Giyim’s legal obligations. Except for the purposes stated above and those required by applicable legislation, your personal data will not be used for commercial purposes or shared with third parties.

If you request that any of the products you have purchased be shipped to an address abroad, due to the fact that the services we receive (cargo, logistics, etc.) are located abroad, your location, customer transaction, transaction security, and marketing data will be transferred abroad within the framework of Articles 8 and 9 of the PDPL.

However, your data is protected by Rengin Giyim in all cases, and it is ensured that all companies with whom your data is shared act with the same level of care and confidentiality. Apart from these cases, your data is not transferred abroad, not used for commercial purposes outside the scope of activities, and not sold in any way.

What Are Your Rights and Obligations Regarding Your Personal Data?

Pursuant to Article 11 of the Law No. 6698, if you submit your requests regarding your rights through the methods set out below, we will finalize your request as soon as possible and no later than thirty days, depending on the nature of the request.

As data subjects, you have the right to:

Learn whether your personal data is being processed,

Request information if your personal data has been processed,

Learn the purpose of processing your personal data and whether it is used in accordance with this purpose,

Know the third parties to whom your personal data is transferred domestically or abroad,

Request correction of incomplete or inaccurate personal data and request notification of such correction to third parties to whom the data has been transferred,

Request deletion or destruction of your personal data if the reasons requiring processing cease to exist, and request notification of such action to third parties,

Object to the occurrence of a result against you through analysis of processed data exclusively by automated systems,

Request compensation for damages arising from unlawful processing of personal data.

You may submit your requests regarding the exercise of your rights in Turkish, in writing with documents verifying your identity, to RENGİN GİYİM at Meşrutiyet Mah. Şair Nigar Sk. No:71/1-3 Şişli/İstanbul, or via email to info@rengin.com.tr, or through other methods determined by the Personal Data Protection Authority.

RENGİN GİYİM reserves the right to verify your identity before responding.

Your application must include your name, surname, signature (if written), Turkish ID Number (or nationality and passport number if foreign), address for notification, email address (if any), phone number, subject of the request, and any relevant information and documents related to the request.

For How Long Are Your Personal Data Stored?

Pursuant to the Law No. 6563 on the Regulation of Electronic Commerce, records regarding withdrawal of consent are stored for 1 year from the date of withdrawal; the content of electronic commercial communications and all other related records are stored for 3 years to be submitted to the relevant ministry if necessary. After the expiration of these periods, your personal data will be deleted, destroyed, or anonymized by our company ex officio or upon your request.

What Are Our Obligations as Rengin Giyim in Protecting Your Personal Data?

As a data controller processing your personal data, we have certain obligations under the PDPL and other relevant legislation, including:

Obligation to inform,

Obligation to provide information,

Obligation to ensure data security,

Obligation to register with the Data Controllers Registry.