- **Information Text on Protection and Processing of Personal Data**
- **Introduction**
1.1. In order to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, and to determine the obligations of real and legal persons processing personal data, we, as THE GAIA CLOTHES, provide information in accordance with Article 10 of the Personal Data Protection Law No. 6698 published in the Official Gazette dated April 7, 2016, as the Data Controller.
1.2. This information is prepared to ensure that the personal data of our citizens are processed in compliance with the relevant legislation, primarily the Constitution of the Republic of Turkey and international agreements related to human rights to which our country is a party, including Law No. 6698 on the Protection of Personal Data (KVKK). All personal data shared with our company may be processed in compliance with the law, related to our activities and services, and in a proportionate manner.
- **Definitions**
2.1. The terms “personal data,” “sensitive personal data,” and “data processing” used in the information text are used in accordance with the definitions in the KVKK. As per the KVKK:
2.1.1. Personal Data Protection Law (“KVKK”): Law No. 6698 on the Protection of Personal Data, which entered into force by being published in the Official Gazette on April 7, 2016,
2.1.2. Personal Data: Any kind of information relating to an identified or identifiable natural person,
2.1.3. Data Processor: Natural or legal person who processes Personal Data on behalf of the data controller based on the authorization given by the data controller,
2.1.4. Data Controller: Natural or legal person who determines the purposes and means of processing Personal Data and is responsible for the establishment and management of the data recording system,
2.1.5. Processing of Personal Data: Refers to any operation performed on data such as obtaining, recording, storing, preserving, altering, reorganizing, disclosing, transferring, taking over, making data available, classifying, or preventing the use of data, either entirely or partially, by automatic means or non-automatic means, provided that they are part of any data recording system.
- **Principles of Processing Personal Data**
3.1. Personal data belonging to the data subjects specified in Article 4 of the KVKK will be processed by the Company, the data controller, within the framework of the purposes specified below, in compliance with the law and principles of honesty, accurately and, if necessary, up-to-date, for specific, clear, and legitimate purposes, relevant to the purpose for which they are processed, limited and measured, and in compliance with the rules for the retention of personal data as prescribed in the relevant legislation or as required for the purpose for which they are processed.
- **Purpose of Processing Your Personal Data**
4.1. Your personal data will be processed in accordance with Articles 4, 5, and 6 of the KVKK:
4.1.1. In the manner prescribed by law and honesty,
4.1.2. Limited and proportionate to the purposes of processing,
4.1.3. Accurately and up-to-date,
4.1.4. For specific, clear, and legitimate purposes and for the period required by the relevant legislation or for the purpose for which they are processed.
4.2. Your personal data will be processed within the scope of the purposes specified in Articles 5 and 6 of Law No. 6698, including the processing conditions and purposes of personal data, for the purposes of benefiting from the products and services provided by our company, recommending our products and services to you, planning and/or executing market research activities for the sale and marketing of products and services, planning and/or executing after-sales support services activities, ensuring the execution of contractual processes and/or legal demands, ensuring the legal, technical, and commercial security of individuals who are in a business relationship with our company, ensuring the implementation of our company’s human resources policies, evaluating your job application if you apply, fulfilling our legal and contractual obligations if you become our employee, ensuring quality control, tracking the supplied products, identifying security and your identity when visiting our business premises, contacting you when you request information from our company, performing this contract if you purchase a product, planning, auditing, and executing information security processes, establishing and managing information technology infrastructure, monitoring financial and/or accounting transactions, monitoring legal affairs, planning and executing business activities, planning and executing corporate communication activities, determining and implementing our company’s commercial and business strategies. Your data may be processed by our Company or by real or legal persons authorized or authorized by our Company for operational reasons such as increasing performance and employee satisfaction, and ensuring occupational safety and peace, in addition to the obligations stipulated by the Labor Law and the legislation in force in the field of labor and social security.
- **Transfer of Personal Data**
5.1. Your personal data may be transferred to our business partners, suppliers, shareholders, subsidiaries, legally authorized public institutions and private individuals, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698, for the purposes of benefiting from the products and services provided by our company, customizing the products and services offered by our company according to your needs and the needs of your company, ensuring the implementation of our company’s human resources policies, ensuring the legal and commercial security of our company and individuals in a business relationship with our company, and determining and implementing the commercial and business strategies of our company.
- **Method and Legal Basis of Personal Data Collection**
6.1. Personal data is collected, used, recorded, stored, and processed by our company explicitly and comprehensibly to the data subjects by verbal, written, and/or electronic notification, and if necessary, by obtaining explicit consent, in accordance with the law and principles of honesty, limited to the legitimate purposes stated above and within the framework of the principle of proportionality. In addition, personal data is collected for commercial purposes of our company through different channels and based on different legal grounds, such as contacting us, establishing a contractual relationship, visiting our business premises, and providing information for commercial activities. Personal data collected for this legal reason can be processed and transferred within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698, as stated in this Information Text.
- **Storage and Deletion of Data:**
7.1. Our company keeps the personal data it processes for the periods determined by the legislation. If no period is specified in the legislation, personal data are kept for the period required by the practices of our company’s applications and commercial life, which require the processing of that data, and for the periods required only to constitute evidence in possible legal disputes, and then they are deleted, destroyed, or anonymized after the end of the specified periods.
- **Rights of the Data Subject**
8.1. Data subjects may apply to the Company acting as the data controller to learn whether their personal data is processed, to request information if their personal data has been processed, to learn the purpose of processing their personal data and whether they are used for their intended purpose, to be informed about the third parties to whom their personal data is transferred at home or abroad, to request correction if their personal data is incomplete or incorrectly processed, to request