DATA CONTROLLER

Your personal data may be processed by İntervo Dış Ticaret ve Müm. Ltd. Şti. (“Company”), as data controller, within the scope described below pursuant to Law No. 6698 on the Protection of Personal Data (“Law”).

The privacy and security of your personal data are important to us, and we take care to protect it. As İntervo Dış Ticaret ve Müm. Ltd. Şti., we process and store your personal data in compliance with the Law.

PURPOSES AND LEGAL GROUNDS FOR PROCESSING

Your personal data collected in relation to the use of the Company’s website www.themelioracollective.com (“Website”) will be processed by the Company for the purposes set out below (“Purposes”) and on the legal grounds specified in Article 5 of the Law.

PERSONAL DATA PROCESSED
Explanations regarding the personal data that may be processed if you contact our Company through one of the Methods of Collection described below are provided here.

CATEGORIES OF PERSONAL DATA

• Identity Information
• Contact Information
• Location Information
• Customer Transaction Information
• Request and Complaint Information
• Financial Information
• Transaction Security Information

If your bank information, bank card or credit card number, expiry date and CVV code are processed during a sale, these data are not stored by our Company. Limited financial information (e.g., last 4 digits of your card number) may be processed solely to comply with legal retention of sales records and to fulfill requests such as returns/exchanges, strictly for the Purposes below.

Based on the legal ground that processing is necessary for the conclusion or performance of a contract:

• Offering our products and services to you via the Website and carrying out sales transactions,
• Establishing sales contracts for our products/services and conducting invoicing,
• Managing processes and requests related to tracking financial and sales records,
• Managing orders, order and delivery processes via online services and maintaining customer communication,
• Providing after-sales support services,
• If you create a membership: creating and managing membership accounts via our site or mobile application,
• Verifying and updating the accuracy of contact and other membership information,
• Managing order processes, sending updates on delivery status and service changes, and—upon request—communicating current product stock information.

Also based on necessity for conclusion/performance of a contract (sales & marketing enablement):

• Enabling the relevant work by our business units to allow you to benefit from our products and services, including sales and marketing activities, and carrying out related business processes,
• Registering you for our newsletter when you complete the newsletter form during your Website visit and carrying out the necessary operational processes,
• Managing customer relationships and ensuring the accuracy and currency of customer contact details.

Based on compliance with a legal obligation and/or when expressly required by law:

• Fulfilling our legal obligations under, in particular, the Law on Consumer Protection, the Law on the Regulation of Retail Trade, and the Law on the Regulation of Electronic Commerce,
• Providing information to competent authorities as required by legislation and fulfilling official requests,
• Ensuring the legal, technical, commercial and operational security of our Company and the persons with whom we have business relations,
• Evaluating and concluding your applications regarding your rights under Article 11 of the Law and taking necessary actions,
• Complying with statutory data-retention obligations,
• Fulfilling official authority requests, and providing information to competent bodies as required by law.

Based on the establishment, exercise, or protection of a right:

• Receiving, evaluating and resolving your requests/complaints and managing customer relations,
• Following and conducting legal affairs and retaining personal data for the general statute-of-limitations period as evidence for potential future disputes.

Based on the Company’s legitimate interests, provided that your fundamental rights and freedoms are not harmed:

• Conducting accounting and finance processes,
• Receiving, evaluating and finalizing applications relating to returns, inspections, exchanges, withdrawal and/or other transactions (where applicable),
• Carrying out customer acquisition activities,
• Planning and executing customer satisfaction and corporate communication activities,
• Running sweepstakes, campaigns, contests, promotions or advertising activities and checking eligibility for participation,
• Ensuring outcomes arising from legal transactions in case of division of the Company or transfer of all/part of it to another entity,
• Conducting information security processes,
• Determining and implementing our Company’s commercial and business strategies,
• Performing all necessary research, development, corrective and preventive actions to resolve your requests/complaints and avoid recurrence, and carrying out related business processes by our units,
• Registering you to our newsletter via the Website form and managing the required operational processes.

Based on your explicit consent:

• Processing your identity, contact and user data to communicate with you and to carry out marketing processes for our products and services; profiling and analysis activities to customize and recommend our products/services according to your preferences, usage habits and needs,
• Processing your identity and contact data to send commercial electronic messages (advertising, promotions, etc.) to your provided contact details.
  
  

Transfers of Personal Data

Your personal data may be transferred, in line with the Purposes and within our legitimate interests, to our suppliers, competent public authorities, and legally authorized private persons, in accordance with Article 8 of the Law.

Methods of Collection

Your personal data are collected electronically through forms you complete on the Website (including during membership application and registration processes) and via email.

Your Rights Under Article 11 of the Law

As a data subject, you have the right to:

• Learn whether your personal data are processed,
• Request information if your data have been processed,
• Learn the purpose of processing and whether it is used in line with that purpose,
• Know the third parties to whom your data are transferred at home or abroad,
• Request correction if your data is incomplete or inaccurate, and request notification of such to third parties to whom the data were transferred,
• Request deletion or destruction of your data if the reasons requiring processing cease to exist, and request notification of such to third parties to whom the data were transferred,
• Object to any result arising to your detriment from the analysis of data exclusively by automated systems,
• Request compensation if you suffer damage due to the unlawful processing of your personal data.
  
  

You may submit applications regarding your rights to our Company. For email applications, you may write to info@themelioracollective.com. Your request will be concluded as soon as possible and within thirty (30) days at the latest, free of charge; however, if processing requires an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Authority.