Pursuant to the Personal Data Protection Law No. 6698 (“Law”), your personal data may be processed by NOURE (Noure Design Limited Company), acting as the data controller, within the scope described below.

b) Purposes of Processing Personal Data

The Company may collect personal data in categories such as identity information, contact information, customer information, customer transaction information, transaction security information, legal transaction and compliance information, and marketing/sales information from parties including customers, employees, potential customers, job candidates, business partners, and suppliers.

Your collected personal data may be processed for the following purposes:

• To provide Company products and services, fulfill our obligations towards you, issue records and documents, and comply with local and international legal regulations regarding data retention, reporting, notification, tax, and other obligations,

• To present customized advertisements, campaigns, benefits, and other advantages for sales and marketing activities aimed at improving the quality of services and products,

• To manage infrastructure and commercial activities, including auditing, finance, accounting, billing and collections, IT systems, data and website hosting, business continuity, recordkeeping, and document/print management,

• To communicate with you for IT requirements, system structures, IT support services, and to provide necessary information regarding such services and products,

• To conduct traffic measurement, statistical analysis, segmentation/profiling, and CRM studies for sales and marketing activities,

• To measure and increase customer satisfaction, manage complaints, receive your feedback on new products and services, handle error/problem notifications, and inform you regarding your requests, complaints, and related services,

• To process your orders, complete payment transactions, collaborate with third parties for logistics, deliver products, suggest products and services of interest, conduct behavioral advertising and marketing, manage customer portfolios, measure and improve service quality, optimize communication, carry out risk management, promotion, and analysis activities,

• To perform comparative product/service offers, modeling, new product development and/or improvements, and to use your personal data in all products and services to be provided under the Company’s Articles of Association and relevant legislation,

• To comply with data retention, reporting, and notification obligations required by official authorities, fulfill contractual requirements, and meet the Company’s legal obligations,

• To determine and implement the Company’s commercial and business strategies, including financial operations, communication, market research, corporate social responsibility activities, procurement (requests, offers, evaluations, orders, budgeting, contracts), internal system and application management, and legal operations,

• To comply with applicable laws and regulatory obligations (including anti-money laundering and counter-terrorism laws, also those outside your country of residence), legal processes, and requests from governmental and regulatory authorities (including those outside your country of residence).

All processing activities shall be carried out in accordance with Articles 5 and 6 of the Law.

c) Transfer of Processed Personal Data

Your personal data may be shared, limited to the purposes stated above, with:

• The Company’s business partners, suppliers, and shareholders,

• Persons or entities permitted under relevant laws such as the Tax Procedure Law, Social Security Institution legislation, Court of Accounts, Anti-Money Laundering laws, Turkish Commercial Code, and Code of Obligations,

• Competent public authorities and legal authorities,

• Overseas affiliates and subsidiaries,

• Third parties, institutions, and organizations from which we receive services or collaborate for product/service comparison, analysis, evaluation, marketing, and delivery of communications, as well as courier companies delivering your orders.

Transfers will be carried out in compliance with Articles 8 and 9 of the Law.

c) Method and Legal Grounds for Collecting Personal Data

Your personal data may be collected verbally, in writing, or electronically through channels such as the Company headquarters, contracted websites, affiliated institutions, our website and mobile applications, call centers, social media accounts, and other potential future channels.

Processing is carried out by the Company in line with the purposes specified above, including the performance of contracts, within the framework of applicable legislation.

d) Rights of Data Subjects under Article 11 of the Law

As personal data subjects, you may submit your requests regarding your rights, and the Company shall evaluate and conclude your application as soon as possible and within 30 days at the latest, depending on the nature of the request.

Within this scope, you have the right to:

• Learn whether your personal data is processed,

• Request information if your data has been processed,

• Learn the purpose of processing and whether it is used in accordance with such purpose,

• Know the third parties to whom data is transferred domestically or abroad,

• Request correction if your personal data has been processed incompletely or inaccurately, and request that such correction be notified to third parties,

• Request deletion or destruction of your personal data within the conditions set forth in the Law, and request notification of such actions to third parties,

• Object to any result arising against you through automated analysis of processed data,

• Request compensation if you suffer damages due to unlawful processing of your data.

To exercise your rights, you may submit your application in Turkish and in writing, or via your registered electronic mail address, in accordance with Article 13(1) of the Law and the Communiqué on Principles and Procedures for Application to the Data Controller published in the Official Gazette No. 30356 on 10.03.2018.

Applications must include:

a) Your name, surname, and signature if in writing,
b) Turkish citizens must provide their T.R. ID number; foreigners must provide nationality, passport number, or identity number (if available),
c) Your residential or workplace address for notification,
ç) Your e-mail address, telephone, and fax number for notification (if any),
d) The subject of your request.

You must also attach relevant information and documents to your application, if applicable.