1. INTRODUCTION

The security and/or protection of your personal data is among our priorities as ORHAN ERDEM - TADO TADINDA SODELICIOUS.SHOP (“Company/Our Company”). With this awareness, as a Company, we attach great importance to the processing and storage of all personal data belonging to all individuals associated with the Company, including those who benefit from our products and services, in accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”). In this regard, as the “Data Controller” as defined in the KVKK, and in accordance with Article 10 of the KVKK and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform published in the Official Gazette No. 30356 on March 10, 2018 by the Personal Data Protection Board (“Communiqué”), we fulfill our duty to inform personal data owners during the collection of personal data; Our company provides data subjects with this information regarding the identity of our company during the collection of their personal data, the purpose for which the personal data will be processed, to whom and for what purpose the processed personal data may be transferred, the method and legal basis for collecting personal data, and the rights of the personal data subject under Article 11 of the Personal Data Protection Law.

Unless explicitly stated otherwise, the terms "we" and "our" used in this Privacy Notice refer to ORHAN ERDEM - TADO TADINDA SODELICIOUS.SHOP.

2. PERSONAL DATA

Definition of Personal Data

According to Article 3/I(d) of the Personal Data Protection Law (KVK Law), "personal data" refers to any information relating to an identified or identifiable natural person. In this context, personal data means any information relating to an identified or identifiable natural person. For example, your name, surname, Turkish Republic identity number, address, telephone number, email address, date of birth, IP address you accessed, information about your transactions, etc., are your personal data. Furthermore, according to the KVK Law, data relating to a person's race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and clothing, membership in associations, foundations, trade unions, etc., health, sexual life, criminal convictions and security measures, as well as biometric and genetic data, etc., are considered special categories of personal data. In this context, anonymous information, information that has been anonymized, and other data that cannot be linked to a specific person are not considered personal data according to our Company's Policy on this matter.

The Concept of Personal Data Processing

Within the framework of Article 3/I(e) of the Personal Data Protection Law, the processing of personal data refers to any operation performed on data, such as obtaining, recording, storing, preserving, modifying, reorganizing, disclosing, transferring, acquiring, making available, classifying, or preventing the use of personal data, whether wholly or partly automated or non-automated, provided that it is part of any data recording system.

3. LIGHTING COVERAGE

Identity of the Data Controller

According to the Personal Data Protection Law (KVK Law), "Data Controller" refers to the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system. Therefore, the Corporate Identity Information of ORHAN ERDEM - TADO TADINDA SODELICIOUS.SHOP, which is the "Data Controller" under the KVK Law, is as follows:

Trade Registry Number:	422615-5, Istanbul
Mersis No: Tax Office:	2071783219000001 Beykoz Tax Office
Tax Number:	3450066339
Headquarters Address:	HACI MUHİTTİN CAD. NO 47 / A KANLICA ​​BEYKOZ ISTANBUL
Telephone:	+90 0540 591 4004
Fax:
Website:	sodelicious.shop
Email Address:	hello@sodelicious.shop

Collection, Processing, and Purposes of Processing Personal Data

Your personal data may vary depending on the service, product, or commercial activity provided by our company; it is collected/may be collected verbally, in writing, or electronically through automated or non-automated methods, offices, branches, dealers, call centers, websites, social media platforms, mobile applications, and similar means.

In accordance with Articles 5.2 and 6.3 of the Personal Data Protection Law (KVKK), your personal data may be processed without your explicit consent for the purposes of fulfilling our legal obligations, establishing or performing a contract, fulfilling our legal responsibilities, establishing, exercising or protecting a right, and protecting our legitimate interests without harming your fundamental rights and freedoms. Furthermore, your personal data may also be processed with your explicit consent, in accordance with Articles 5.1 and 6.2 of the KVKK, for the purposes stated in this Disclosure Statement. You can obtain all our products through our Sodelicious.shop membership/loyalty program and other membership/loyalty programs, even without membership. However, since our Sodelicious.shop membership/loyalty program and other loyalty programs and memberships offer special advantages to their members, by joining/becoming a member of these programs to benefit from these advantages, you explicitly consent to the processing of your Personal Data, except in exceptional circumstances.

Your collected personal data is processed/will be processed by our Company in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the Personal Data Protection Law and other applicable legislation, for the purposes of enabling our business units to carry out the necessary work to allow you to benefit from the products and services offered by our Company, customizing and recommending the products and services offered by our Company to you according to your preferences, usage habits and needs, ensuring the legal and commercial security of our Company and those with whom our Company has a business relationship (administrative operations related to communication carried out by our Company, ensuring the physical security and control of the Company's locations, business partner/customer/supplier (authorized persons or employees) evaluation processes, legal compliance process, financial affairs, etc.), determining and implementing our Company's commercial and business strategies, and ensuring the implementation of our Company's human resources policies.

To Whom and for What Purpose the Processed Personal Data May Be Transferred Domestically and/or Internationally

Your personal data collected by our company will be used for the following purposes: to enable our business units to carry out the necessary work to allow you to benefit from the products and services offered by our company; to customize and recommend the products and services offered by our company to you according to your preferences, usage habits and needs; to ensure the legal and commercial security of our company and those with whom our company has a business relationship (administrative operations related to communication carried out by our company, ensuring the physical security and control of company locations, business partner/customer/supplier (authorized persons or employees) evaluation processes, legal compliance process, financial affairs, etc.); to determine and implement our company's commercial and business strategies; and to ensure the implementation of our company's human resources policies.

Personal data is/may be transferred to administrative and official authorities as required by law, to relevant individuals and institutions to fulfill legal obligations, to independent auditing firms, tax consultants and other external professional consultants, lawyers, insurance companies, partners, domestic and foreign third parties from whom services are received or will be received, our shareholders, business partners, suppliers, legally authorized public institutions and private individuals, both within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Personal Data Protection Law and within the scope of other legal regulations.

Your collected personal data is/may be transferred to foreign countries declared by the Personal Data Protection Board to have adequate protection ("Foreign Country with Adequate Protection") or, in cases where adequate protection is not available, to foreign countries where data controllers in Türkiye and the relevant foreign country have provided a written commitment to adequate protection and have the permission of the Personal Data Protection Board ("Foreign Country with a Data Controller Committing to Adequate Protection"). Our company acts/will act in accordance with the regulations stipulated in Article 9 of the Personal Data Protection Law and other relevant legal legislation.

Method and Legal Basis for Personal Data Collection

Your personal data is obtained through various means, including audit and consulting services, written/digital applications to our employees, our website, phone calls, social media, SMS channels, and other verbal, written, or electronic means, through automated or non-automated methods, and through other channels through which our company communicates with you or may communicate with you in the future. This data is collected for the purposes of conducting our activities and fulfilling our contractual and legal obligations with you, and the collected personal data is stored for legal periods in accordance with relevant legislation.

The Rights of the Personal Data Subject as Listed in Article 11 of the Personal Data Protection Law

As data subjects, if you submit your requests regarding your rights to our Company using the methods set out below in this Privacy Notice, our Company will process your request free of charge within a maximum of thirty days, depending on the nature of the request. However, if a fee is prescribed by the Personal Data Protection Board, the fee will be charged according to the tariff determined by our Company. In this context, data subjects, in accordance with Article 11 of the Personal Data Protection Law;

Individuals have the right to: learn whether their personal data is being processed; request information regarding this processing, if so; learn the purpose of the processing of their personal data and whether it is being used appropriately for that purpose; know the third parties to whom their personal data has been transferred, domestically or internationally; request the correction of their personal data if it is incomplete or inaccurate; request the deletion or destruction of their personal data if the reasons requiring its processing cease to exist, subject to evaluation within the principles of purpose, duration, and legitimacy; request that third parties to whom their personal data has been transferred be notified of any correction, deletion, or destruction of their personal data; object to any adverse outcome resulting from the analysis of their processed personal data exclusively through automated systems; and demand compensation for damages if their personal data is processed unlawfully and they suffer harm as a result.

In accordance with Article 13, paragraph 1 of the Personal Data Protection Law, you can submit your request regarding the exercise of your rights mentioned above to our Company in writing or through other methods determined by the Personal Data Protection Board. Since the Personal Data Protection Board has not yet determined any other method, you must submit your application to our Company in writing, as required by the Personal Data Protection Law. Within this framework, the channels and procedures for submitting your written application to our Company under Article 11 of the Personal Data Protection Law are explained below:

To exercise your rights mentioned above, you can submit your request, including the necessary information to identify you and your explanations regarding the right you wish to exercise as specified in Article 11 of the Personal Data Protection Law, by filling out the form at sodelicious.shop and personally delivering a signed copy of the form along with your identification documents to HACI MUHİTTİN CAD. NO 47 / A KANLICA ​​BEYKOZ ISTANBUL, sending it via notary public or other methods specified in the Personal Data Protection Law, or sending the relevant form with a secure electronic signature to orhan.erdem@hes01.kep.tr.

Please note that if you withdraw your explicit consent for the processing of your personal data, you will be removed from the membership/loyalty program for which such processing is necessary, and you will no longer be able to benefit from the advantages you enjoyed through such processing as of that date.