Our Personal Data Protection Law Policy

KONFOR DURABLE CONSUMER GOODS FURNITURE LEATHER TEXTILE CONSTRUCTION TOURISM INDUSTRY and TRADE INC. ("KONFOR") has provided the basic information on the protection of personal data. KONFOR presents the following explanations to our customers and third parties who use our website and/or mobile applications to fulfill the obligation to inform arising from Article 10 of the Personal Data Protection Law No. 6698 ("PDPL"). KONFOR reserves the right to update this Personal Data Protection Statement in accordance with possible changes in the current legislation.

In accordance with the Personal Data Protection Law No. 6698 published in the Official Gazette dated 07.04.2016 and numbered 29677, all kinds of information about you ("personal data") that our company, which has the status of data controller, has obtained/will obtain or shared/will share by our company, will be processed by our company in the framework explained below and in the ways foreseen in the said Law, and we would like to inform you that all kinds of processes on your information, including obtaining, recording, storage, preservation, modification, disclosure, transfer, making it accessible, are considered as "processing of personal data." In addition, the Law on the Regulation of Electronic Commerce No. 6563 also contains provisions on the protection of personal data. In some cases, criminal sanctions have been foreseen for the protection of personal data through the provisions of the Turkish Penal Code No. 5237. On the other hand, the collection and use of data are necessary for the performance of our obligations arising from the Law on Consumer Protection No. 6502 and the Distance Sales Regulation.

PURPOSES OF PROCESSING YOUR PERSONAL DATA AND LEGAL GROUNDS

Our company processes your personal data for the following purposes and legal grounds: Our company processes your personal data for purposes and legal grounds such as fulfilling our obligations and commitments under national/international legislation and secondary regulations published by national/international authorized authorities or in connection with or in relation to contracts entered into by our company (identity verification, information retention, reporting, informing, etc.), the establishment of contracts related to any products and services you request from our company, the preparation of all records and documents (in paper or electronic format), the provision and proper continuity of such products and services, and other purposes and legal grounds.

How does KONFOR use personal data?

KONFOR may, within the limits allowed by the law, record, store, update, disclose, transfer, classify, and process personal information if it is necessary. Your personal data is used for the following purposes:

• To verify the identity of those who shop through the website/mobile applications.
• To record address and other necessary information for communication.
• To contact customers in accordance with the terms of the Distance Sales Agreement and the relevant articles of the Consumer Protection Law, to make necessary notifications, and to provide updates and information about the current status and updates of the contracts we have concluded, and to perform the obligations undertaken under the relevant contracts.
• To prepare all records and documents that form the basis for processing in electronic (internet/mobile, etc.) or paper format.
• To fulfill the obligations undertaken under the contracts entered into in accordance with the relevant articles of the Distance Sales Agreement and the Consumer Protection Law.
• To provide information to public officials upon request and in accordance with the legislation regarding public safety issues.
• To provide customers with a better shopping experience, inform customers about our products that may be of interest to them by taking into account "the areas of interest of our customers," and convey promotions.
• To increase customer satisfaction, recognize customers who shop through the website and/or mobile applications, and use in customer profiling analysis, to conduct various marketing and advertising activities and, in this context, to organize surveys electronically and/or physically through affiliated organizations.
• To offer recommendations to our contracted institutions and solution partners, inform our customers about our services, evaluate customer complaints and suggestions regarding our services.
• To fulfill our legal obligations and use our rights arising from the current legislation.
• The data provided by customers who make transactions through the website/mobile applications www.konfor.com.tr are processed by KONFOR in accordance with the consent of our customers and the provisions of the legislation.

To provide better service to visitors of www.konfor.com.tr and within the framework of the legal obligation, it will collect, process, share with third parties, and securely store your browsing information, provided that it is not used outside the purposes and scope specified in this Personal Data Protection Statement.

To create a summary of your preferences in order to provide personalized promotions and marketing offers, to improve the content of the website or mobile application according to your preferences, and to determine your preferences, www.konfor.com.tr may collect and process your browsing information on the site and/or your usage history on the site in electronic (internet/mobile, etc.) or paper form.

www.konfor.com.tr may match the information collected from you on the site collected through different methods or at different times, and use this information together with information obtained from other sources such as third-party sources.

PERSONAL DATA PROCESSING PURPOSES AND ENTITIES TO WHICH PROCESSED PERSONAL DATA CAN BE TRANSFERRED

Your personal data can be transferred to persons or organizations (judicial and administrative authorities, other official institutions and organizations, and individuals), including but not limited to, within the framework of all national/international legislation referred to above and/or the authority and right to request and process personal information under these laws or contracts in which personal information is included (identity verification, information retention, reporting, informing, etc.), and our indirect/direct domestic/international affiliates or subsidiaries, organizations, companies, and other third parties, including our company's service/support/consultancy providers, or business partners, or project/program/finance partners.

METHOD OF COLLECTING PERSONAL DATA AND LEGAL BASIS

The personal data shared with KONFOR is under the supervision and control of KONFOR. As the data controller, KONFOR has undertaken the responsibility to establish and apply the necessary organization and take and adapt technical measures to protect the confidentiality and integrity of the information in accordance with the relevant legislation provisions in force. With this awareness of our obligation, penetration tests are periodically carried out in accordance with international and national technical standards to protect data privacy, and we would like to inform you that we always update our data processing policies in this context.

In accordance with the legal reasons mentioned above, your personal data can be collected in an automatic or non-automatic way through the General Directorate Units, Branches, stores, internet branch, call center, and all other channels, verbally, in writing, or electronically.

WITH THE RESERVATION OF THE CASES FORESEEN IN ARTICLE 28 ENTITLED "EXCEPTIONS" OF THE PDPL, UNDER THE SCOPE OF ARTICLE 11 OF THE SAID LAW, WE WOULD LIKE TO REMIND YOU THAT YOU HAVE THE FOLLOWING RIGHTS REGARDING YOUR PERSONAL DATA IN ACCORDANCE WITH THE PDPL:

• To learn whether your personal data has been processed,
• To request information if your personal data has been processed,
• To learn the purpose of processing and whether your personal data has been used in accordance with that purpose,
• To know the third parties in the country or abroad to whom personal data has been transferred,
• To request correction if your personal data is incomplete or inaccurate,
• To request deletion or destruction of your personal data within the framework of the conditions stipulated in Article 7 of the PDPL,
• To request the third parties to whom your personal data has been transferred to be notified of the correction and deletion/destruction process as stipulated in paragraphs (d) and (e) above,
• To object to the occurrence of a result against you due to the analysis of your personal data exclusively by automatic systems,
• To demand compensation for the damage in case you incur damage due to unlawful processing in accordance with the law.

We would like to remind you that you have the rights mentioned in this article, and you can use these rights from 07.10.2016, which is the effective date of the regulation. To ensure the fulfillment of your requests, the fees specified in the tariff for the application to the data controller in accordance with Article 13 titled "Application to the data controller" of the PDPL may be requested from you.