[Pergamon Marble] Personal Data Protection Policy

General Information on the Law on the Protection of Personal Data
The Law No. 6698 on the Protection of Personal Data (hereinafter referred to as “KVKK”) was adopted on March 24, 2016 and published in the Official Gazette No. 29677 on April 7, 2016. Some parts of the KVKK entered into force on the publication date, while others came into effect on October 7, 2016.

Notification as Data Controller
In accordance with KVKK No. 6698, as the Data Controller, your personal data may be recorded, stored, updated, disclosed/transferred to third parties where permitted by legislation, classified, and processed in ways outlined under the KVKK.

How Your Personal Data May Be Processed
Your personal data shared with our company may be processed by being obtained wholly or partly by automatic means or non-automatic means as part of any data recording system, stored, modified, reorganized—in short, subjected to any kind of processing. According to KVKK, any action taken on data is considered "processing of personal data."

Purposes and Legal Grounds for Processing Personal Data
Your personal data may be processed for:

• Fulfilling the requirements of services provided to our customers in line with contractual and technological necessities, and to improve our products and services;

• Recording identity, address, and other necessary information in accordance with the Law No. 6563 on Regulation of Electronic Commerce, Law No. 6502 on Consumer Protection, and related regulations;

• Preparing required records and documents for banking and electronic payment systems, electronic or paper contracts;

• Fulfilling legal obligations for data retention, reporting, and information;

• Providing information to prosecutors, courts, or public authorities upon request as per legal requirements;

All processing will comply with KVKK and related secondary regulations.

Third Parties to Whom Personal Data May Be Transferred
Your personal data may be transferred to:

• Our e-commerce infrastructure provider IdeaSoft Software,

• Suppliers, shipping companies, business partners, and other related third parties in Turkey or abroad that we cooperate with or receive services from.

How Your Personal Data is Collected
Your personal data may be collected through:

• Our website and mobile app forms (name, surname, ID number, address, phone, email, etc.), login credentials, IP logs, browser cookies, navigation data, and location info;

• Verbal, written, or electronic communication via our staff, branches, suppliers, sales channels, digital marketing, or call center;

• Physical or digital methods during business interactions, job applications, offers, and through cards, resumes, emails, etc.;

• Indirect means such as blogs, surveys, games, campaigns, and public databases or social media platforms.

Personal Data Collected Before KVKK Took Effect
Data collected before April 7, 2016, in accordance with the law—such as for membership, purchases, or communication permissions—will also be processed under the terms of this document.

Transfer of Personal Data Abroad
Your data may be transferred to service providers abroad (in countries accredited by the Personal Data Protection Authority) for processing or storage, in line with the KVKK and relevant contracts.

Storage and Protection of Personal Data
Your personal data will be stored securely and confidentially in our company systems, and will not be shared with third parties except as required by law or this policy. We take necessary technical and physical security measures to protect against unauthorized access and illegal processing. In case of data breaches, we will report to the Authority as required.

Keeping Personal Data Accurate and Up-to-Date
Under Article 4 of KVKK, we are obliged to keep your data accurate and up to date. Customers are expected to update or verify their data via our website or mobile app.

Rights of the Personal Data Owner under KVKK
As of October 7, 2016, personal data owners have the right to:

• Learn whether their data is being processed;

• Request information if their data has been processed;

• Learn the purpose of processing and whether it is being used accordingly;

• Learn third parties to whom data is transferred domestically or abroad;

• Request correction if data is incomplete or incorrect;

• Request deletion or destruction of data under Article 7 of the KVKK;

• Request notification of correction, deletion, or destruction to third parties;

• Object to outcomes from automatic data analysis;

• Request compensation if unlawful processing causes damage.

Data Controller Contact Information:
Company Name: [Full Legal Name]
Chamber of Commerce Reg. No: [....................]
MERSIS No: [....................]
Address: [.............................................................]

You may direct your questions or requests to:
Email: pergamononyx@gmail.com
Phone: +90 553 933 9191
Fax: [....................]