KVVK Information Text

MUG TOY COMPANY
INFORMATION TEXT ON PROCESSING OF PERSONAL DATA

This Disclosure Text has been prepared by Clinara beauty services and materials limited company (“Company”) for the purpose of informing the Company’s customers regarding the processing of their personal data by the Company within the scope of the Personal Data Protection Law No. 6698 (“Law”).

You can access detailed information regarding the processing of your personal data within the scope of this Disclosure Statement in the Müge Toy Company Personal Data Protection and Processing Policy located at [www.mtoyjewels.com].

a) Methods of Obtaining Personal Data and Legal Reasons
Your personal data is collected in electronic or physical environment. Your personal data collected for the legal reasons specified in this Disclosure Text can be processed and shared within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law.

b) Purposes of Processing Personal Data
Your personal data is processed for the purposes of planning and executing the activities required to customize the products and services offered by the Company according to the tastes, usage habits and needs of the relevant persons and to recommend and promote them, within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law, carrying out the necessary work by the business units and carrying out the relevant business processes in order to enable the relevant persons to benefit from the products and services offered by the Company, carrying out the necessary work by the relevant business units and carrying out the relevant business processes in order to carry out the commercial activities carried out by the Company, planning and executing the commercial and/or business strategies of the Company and ensuring the legal, technical and commercial-occupational security of the Company and the relevant persons who have a business relationship with the Company.

c) Parties with whom Personal Data may be Shared and Sharing Purposes
Your personal data may be shared with the Company's business partners and suppliers, legally authorized institutions and organizations and legally authorized private law legal entities within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, for the purposes of planning and executing the activities required for customizing the products and services offered by the Company according to the tastes, usage habits and needs of the relevant persons and recommending and introducing them to the relevant persons, carrying out the necessary work by the business units and carrying out the relevant business processes in order for the relevant persons to benefit from the products and services offered by the Company, carrying out the necessary work by the relevant business units and carrying out the relevant business processes in order for the commercial activities carried out by the Company, planning and executing the Company's commercial and/or business strategies and ensuring the legal, technical and commercial-occupational security of the Company and the relevant persons who have a business relationship with the Company.

d) Rights of Data Owners and Exercise of These Rights
If you, as personal data owners, submit your requests regarding your rights specified below to the Company using the methods specified under the heading Exercise of Rights by Data Owners, your requests will be evaluated and finalized by our Company as soon as possible and in any case within 30 (thirty) days.

Pursuant to Article 11 of the Law, as a personal data owner, you have the following rights:

To learn whether your personal data is being processed,
Request information regarding your personal data if it has been processed,
To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
To know the third parties to whom your personal data is transferred, either domestically or abroad,
To request correction of your personal data if it is processed incompletely or incorrectly and to request notification of the action taken to third parties to whom personal data is transferred,
Requesting the deletion or destruction of your personal data in case the reasons requiring processing are eliminated, even though it has been processed in accordance with the Law and other relevant legal provisions, and requesting that the action taken within this scope be notified to third parties to whom the personal data has been transferred,
To object to the emergence of a result against the person by analyzing your processed data exclusively through automatic systems,
To request compensation in case of damages due to unlawful processing of your personal data.
The second paragraph of Article 28 of the Law lists the situations in which data owners do not have the right to request, and in this context;
Processing of personal data is necessary for the prevention of crime or criminal investigation,
Processing of personal data made public by the relevant person,
Personal data processing is necessary for the execution of supervisory or regulatory duties or disciplinary investigation or prosecution by authorized public institutions and organizations and professional organizations with the status of public institutions, based on the authority granted by law.
The processing of personal data is necessary to protect the economic and financial interests of the State in relation to budget, tax and financial matters,
In such cases, the rights specified above cannot be exercised regarding the data.
According to the first paragraph of Article 28 of the Law, in the following cases, the data will be outside the scope of the Law, and the requests of data owners will not be processed in terms of these data:
Processing of personal data by natural persons within the scope of activities related to themselves or their family members living in the same residence, provided that they are not disclosed to third parties and that obligations regarding data security are complied with.
Processing of personal data by making them anonymous with official statistics for purposes such as research, planning and statistics.
Processing of personal data for artistic, historical, literary or scientific purposes or within the scope of freedom of expression, provided that it does not violate national defense, national security, public safety, public order, economic security, privacy or personal rights or does not constitute a crime.
Processing of personal data within the scope of preventive, protective and intelligence activities carried out by public institutions and organizations authorized by law to ensure national defense, national security, public safety, public order or economic security.
Processing of personal data by judicial authorities or enforcement authorities in relation to investigation, prosecution, trial or execution proceedings.
Exercise of Rights by Data Owners

Data owners may use the “Form for Applications to be Made by the Personal Data Owner to the Data Controller” available at the link [www.mtoyjewels.com] to exercise the above-mentioned rights.
Applications will be made using one of the following methods, together with documents that identify the relevant data owner:
The form should be filled out and a signed copy should be sent to the address by hand, via a notary or by registered mail.
Following a method prescribed by the Personal Data Protection Board.
The Company responds to data owners who wish to exercise the rights in question within the limits set forth in the Law, within a maximum of thirty (30) days, as set forth in the Law. In order for third parties to make an application request on behalf of personal data owners, there must be a special power of attorney issued by the data owner through a notary public on behalf of the person who will make the application.
Although data owner applications are processed free of charge as a rule, fees may be charged according to the fee schedule[1] set forth by the Personal Data Protection Board.
The Company may request information from the relevant person in order to determine whether the applicant is the personal data owner, and may ask questions to the personal data owner regarding his/her application in order to clarify the issues specified in the application.

[1] According to the “Communiqué on the Procedures and Principles of Application to the Data Controller” published in the Official Gazette dated 10.03.2018 and numbered 30356, if the data owner’s application is to be answered in writing, no fee will be charged for up to ten pages. A processing fee of 1 Turkish Lira may be charged for each page over ten pages. If the answer to the application is given on a recording medium such as a CD or flash memory, the fee that may be requested by the Institution cannot exceed the cost of the recording medium.