Personal Data Protection Law Disclosure Statement

Data Controller:Yıldırım Antilop Deri Tekstil ve Tarım Ürünleri Sanayi ve Ticaret LTD. ŞTİ.

Address: Kurtuluş Mahallesi, Şüheda Cad. Atakent A. No:169/A, Salihli/MANİSA, TURKEY

As Yıldırım Antilop Deri Tekstil ve Tarım Ürünleri Sanayi ve Ticaret LTD. ŞTİ. (“Company”), we place great importance on the security of your personal data. As a company established in accordance with the Constitution and laws of the Republic of Turkey, we would like to inform you, in our capacity as the “Data Controller” as defined in the Law on the Protection of Personal Data No. 6698 ("KVKK"), regarding how your personal data is collected, processed, and the purposes for processing.

The personal data that you, our valued customers, have shared with us with your explicit consent may be processed, stored, transferred, and classified in accordance with the purposes and principles set forth under the KVKK, and may be transferred to persons or entities within Turkey or abroad who are affiliated with our Company, to be used within the scope of the Company’s activities and services.

1. Collection, Processing, and Purpose of Processing of Personal Data

Your personal data will be processed in accordance with Articles 5 and 6 of the KVKK, based on lawful and legitimate grounds, in compliance with ethical principles, and in a manner that does not harm your rights, with accuracy and, when necessary, kept up to date.

Your personal data may be collected through automatic or non-automatic means via the Company’s departments, branches, stores, offices, website, call center, social media platforms, mobile applications, and similar channels, either verbally, in writing, or electronically, and will be processed for purposes ("Purposes") including but not limited to the following, in accordance with the nature of the data and within legally prescribed time limits, and may be recorded, stored, retained, preserved, processed, made accessible, used, updated, modified, merged, reorganized, classified, disclosed, shared, transferred, and subjected to other processes under personal data legislation, either domestically or internationally:

·         To conduct the commercial activities of the Company, and to perform the necessary operations related to products and services offered by the Company,

·         To establish and implement the Company’s business strategies,

·         To customize, recommend, and promote the Company’s products and services according to customer preferences, usage habits, and needs,

·         To carry out operations related to membership, sales, advertising, communication, promotion, marketing, and store card services,

·         To plan and carry out special sales and marketing activities for customers,

·         To manage customer services and relations,

·         To ensure legal and commercial security of our Company and third parties involved with our Company (e.g., administrative operations for communication, physical security and auditing at Company locations, customer evaluation/complaint management processes, reputation management, event organization, legal compliance, audits, and financial matters),

·         To follow up on legal procedures and to establish, use, and protect legal rights,

·         To provide post-sale support services, ensure customer satisfaction, conduct corporate communication, and manage customer requests and complaints,

·         To ensure that company operations are carried out in compliance with procedures and relevant legislation,

·         To plan and/or implement business continuity processes,

·         To plan, supervise, and execute processes related to corporate sustainability, corporate governance, strategic planning, and information security,

·         To manage and maintain relations with business partners, dealers, and suppliers.

2. Recipients of Processed Personal Data and Purpose of Transfer

Your personal data may be transferred, within the scope of the above-mentioned Purposes and in accordance with the fundamental principles set forth in the KVKK, and under the conditions specified in Articles 8 and 9 of the KVKK, to our business partners, affiliates, subcontractors, service providers, and any official regulatory or supervisory institutions where legally required, either within Turkey or abroad.

3. Method and Legal Basis of Personal Data Collection

Your personal data is collected in line with the Purposes stated above and in order to provide products and services within a legal framework and fulfill our contractual and legal obligations correctly. It may be collected verbally, in writing, or electronically through the Company’s headquarters, call centers, websites, business partners, online transactions, sales points, dealer networks, and other distribution channels either directly from you or through public institutions, subsidiaries, group companies, controlling shareholders, or third-party individuals or organizations that provide or receive services.

Personal data may also be collected through forms you have filled out with explicit consent in our stores or online platforms, and will continue to be collected through such means.

4. Rights of the Data Subject under Article 11 of the KVKK

As a personal data subject, you have the following rights under Article 11 of the KVKK:

·         To learn whether your personal data is being processed,

·         If processed, to request information regarding such processing,

·         To learn the purpose of processing and whether your data is used in accordance with that purpose,

·         To know the third parties to whom personal data is transferred domestically or abroad,

·         To request correction of personal data if it is incomplete or inaccurate, and to request notification of such correction to third parties to whom the data was transferred,

·         To request deletion or destruction of personal data if the reasons for processing no longer exist, even if processed in accordance with the KVKK and other relevant laws, and to request notification of such actions to third parties to whom the data was transferred,

·         To object to the outcome of a decision made solely by automated systems if it results in a negative outcome for the data subject,

·         To demand compensation if you suffer damage due to unlawful processing of personal data.

In accordance with Article 13(1) of the KVKK, you may submit your requests related to your rights listed above in writing or through other methods determined by the Personal Data Protection Board (e.g., registered email (KEP), secure electronic signature, mobile signature, or by using the email address previously registered in our system, or via a dedicated software or application developed for such purposes).

To exercise your rights under Article 11 of the KVKK, you may complete the form available at dericlub.com.tr/iletisim, and submit a signed copy of the form, along with identification documents, either in person or via notary to the following address:

Kurtuluş Mahallesi, Şüheda Cad. Atakent A. No:169/A, Salihli/MANİSA, TURKEY

You may also send your request via other methods specified in the KVKK.