KVKK Privacy Notice

1. Identity of the Data Controller

Pursuant to the Turkish Personal Data Protection Law No. 6698 ("KVKK"), your personal data is processed by the data controller whose details are provided below.

2. Purposes of Personal Data Processing

Your personal data is processed for the following purposes:

• —Performing membership and account verification processes
• —Managing wholesale orders, invoicing, and accounting processes
• —Communicating product, collection, and price list information
• —Tracking shipping and delivery processes
• —Customer service, complaint, and return management
• —Fulfilling legal obligations arising from tax, trade, and customs regulations
• —Sending marketing and campaign notifications (only based on explicit consent)
• —Website analysis and improvement of service quality
• —Prevention of fraud and security breaches
• —Managing business partner and dealer relationships

3. Categories of Personal Data Processed

4. Third Parties to Whom Personal Data is Transferred and Purposes

International Transfer: Your personal data is transferred abroad only to countries with adequate protection under Article 9 of KVKK or upon obtaining your explicit consent.

5. Methods of Personal Data Collection and Legal Grounds

Your personal data is collected through the following channels:

• —Website membership and contact forms
• —Email, phone, and WhatsApp communications
• —Cookies and website analytics tools
• —Trade fairs, showroom visits, and business meetings

This data is processed based on the following legal grounds:

6. Rights of the Data Subject under KVKK

Pursuant to Article 11 of KVKK, you have the following rights:

• —To learn whether your personal data is being processed
• —If processed, to request information about it
• —To learn the purpose of processing and whether it is used in accordance with that purpose
• —To learn the third parties to whom data is transferred domestically or abroad
• —To request correction of incomplete or inaccurate data
• —To request deletion or destruction of personal data under Article 7 of KVKK
• —To request notification of correction and deletion to third parties to whom data was transferred
• —To object to results arising from automated analysis of processed data
• —To claim compensation for damages arising from unlawful processing

You may submit your applications to info@sophisticwoman.com by email or in writing to our company address. Applications must be accompanied by identity-verifying documents and will be responded to within 30 days at the latest.

7. Use of Cookies

Our website uses the following types of cookies:

You can change your cookie preferences at any time from your browser settings or our website's cookie management panel.

8. Security of Personal Data

Pursuant to Article 12 of KVKK, the following technical and administrative measures are taken to ensure the security of your personal data:

• —Securing data transmission with SSL/TLS encryption
• —Role-based access authorization and permission control
• —Regular security tests and vulnerability scans
• —Data privacy training for employees
• —Signing data processing agreements with third-party service providers
• —Notification of relevant persons and the KVKK Board in case of a security breach

9. Retention Periods for Personal Data

Personal data whose retention period has expired is deleted, destroyed, or anonymized.

10. Contact and Application

To exercise your rights under KVKK or for your questions, you may contact us through the following channels with identity-verifying documents. Applications will be responded to within 30 days at the latest.