Personal Data Notice

This is an English translation provided for information only. The Turkish version is legally binding.

1. Introduction
This notice and consent text has been prepared by Dark Dekoratif Taş (“our Company”), acting as data controller, together with its group companies, in accordance with Law No. 6698 on the Protection of Personal Data (“the Law”). Its purpose is to obtain the explicit consent of data subjects for the personal data and special categories of personal data we process, and to inform data subjects, when their data is collected, of the matters set out in Article 10 of the Law and of their rights under Article 11.

2. Definitions
The terms personal data, special categories of personal data and data processing used in this text follow the definitions in the Law. Under the Law:

“Personal data” means any information relating to an identified or identifiable natural person;
“Processing of personal data” means any operation performed on personal data, whether wholly or partly by automated means or by non-automated means as part of a filing system, such as collection, recording, storage, retention, alteration, reorganisation, disclosure, transfer, takeover, making available, classification or restriction of use.

3. Principles of Processing
Pursuant to Article 4 of the Law, personal data will be processed by our Company for the purposes set out below: lawfully and fairly; accurately and, where necessary, kept up to date; for specified, explicit and legitimate purposes; in a manner that is relevant, limited and proportionate to those purposes; and retained only for the period required by legislation or by the purpose of processing.

5. Purposes of Processing
Your personal data will be processed within the conditions and purposes set out in Articles 5 and 6 of the Law in order to: carry out the work needed for you to benefit from the products and services offered by our Company and group companies; tailor and recommend those products and services to your preferences, usage habits and needs; ensure the legal and commercial security of our Company, our group companies and those we do business with; run communication-related administrative operations; ensure the physical security and supervision of our premises; carry out evaluation, reputation research, legal compliance and financial processes regarding business partners, customers, suppliers and their representatives or employees; determine and implement our commercial strategies; and carry out our human-resources policies.

5. Transfer of Personal Data
For the same purposes listed above, your personal data may be transferred to our group companies and to natural and legal persons with whom our Company has a business relationship, in accordance with the conditions set out in Articles 8 and 9 of the Law.

6. Method and Legal Basis of Collection
Depending on the services we provide and our commercial activities, your personal data may be collected in writing or electronically, by automated or non-automated means, through our business units and offices, group companies, website, social media channels, mobile applications and similar channels. As long as you use the products and services of our Company and group companies, your personal data may be processed for the periods prescribed by law.

7. Rights of the Data Subject under Article 11
By applying to our Company as data controller, data subjects have the right to: learn whether their personal data is processed; request information if it has been processed; learn the purpose of processing and whether data is used in line with that purpose; know the third parties in Türkiye or abroad to whom data is transferred; request correction of incomplete or inaccurate data; request erasure or destruction of personal data under the conditions of Article 7 of Law No. 6698; request that third parties to whom data has been transferred be notified of operations carried out under sub-paragraphs (d) and (e) of Article 11; object to a result against them arising from analysis exclusively by automated systems; and claim compensation for damage caused by unlawful processing of personal data.