Information Notice Regarding the Data Privacy Statement and the Policy on the Protection and Processing of Personal Data

Data Controller

The website with the domain name www.akar.store (“Website”) is operated by Akar Rulman Tic. ve Paz. Ltd. Şti. (“Company”).

As the Data Controller, the Company is responsible for determining the purposes and means of processing personal data, and for establishing and managing the data recording system.

We attach great importance to the protection of your personal data. In accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”), we would like to inform you about the processing of the data obtained in connection with your use of the Company Website, including but not limited to the collection, storage, and transfer of such data, and the purposes of such processing.

Processing and Transfer of Personal Data

The Company requests certain personal data from users during the membership process or while using the Website.

Personal data refers to any information that identifies or makes an individual identifiable. Such information may include, for example, your name, address, e-mail address, or telephone number.

Information collected through cookies that does not directly identify you—such as how you use the Website—may also qualify as personal data if it is collected, stored, and evaluated on the basis of an assigned user identity.

Non-personal data refers to aggregated, summarized, anonymized information that cannot be associated with a real person.

Personal data is collected through information entered by the Data Subject in membership forms. In order to identify system-related issues and resolve potential service disputes, the Company records and uses users’ IP addresses.

The Company may use the requested information for direct marketing purposes, either independently or in cooperation with business partners, beyond the scope defined in the Membership Agreement. Personal information may also be used to contact users when necessary.

Information obtained through Website transactions may also be used anonymously for statistical analysis, database creation, and market research.

The Company may periodically send campaign notifications, promotional offers, and information about new services. Members may opt in or opt out of receiving such communications at the time of registration or later via their account settings or unsubscribe links.

Purposes of Processing Personal Data

Personal data is processed for specific, explicit, and legitimate purposes, including but not limited to:

• Providing and modifying services offered through the Website
• Customizing products and services according to customer needs
• Updating and improving services due to legal or technical developments
• User account creation and system access management
• Marketing and sales activities
• Conducting market research
• Statistical analysis and usage analytics
• Processing payments and managing collections
• Complying with Law No. 6563 on Electronic Commerce and other legal obligations
• Sending advertisements, promotions, and campaigns
• Resolving technical issues encountered during Website use
• Improving user experience and navigation
• Managing business relationships with suppliers, partners, and service providers
• Developing and planning Company commercial strategies
• Conducting satisfaction surveys
• Managing events, trainings, competitions, certifications, and awards
• Managing legal and administrative processes
• Fulfilling legal obligations and resolving disputes
• Managing investor relations
• Handling mergers, acquisitions, or transfers
• Recruitment and HR processes
• Managing employment contracts and employee performance
• Ensuring Website and application security
• Creating personal data inventories
• Evaluating and responding to inquiries, requests, complaints, and applications

Data may be transferred domestically or abroad (including EU countries) in line with contractual performance, data security, and legal compliance requirements.

Method and Legal Basis of Data Collection

Personal data is collected partially or fully through automated or non-automated means, based on contractual necessity or legal grounds arising from legislation.

Personal Data Processed Without Explicit Consent

Pursuant to KVKK, personal data may be processed without explicit consent in the following cases:

• If the data has been made public by the data subject
• If explicitly permitted by law
• If required to fulfill legal obligations
• If necessary for the establishment, exercise, or protection of a right

Data Transferred to Third Parties

Personal data may be shared, within the scope of KVKK and our legitimate interests, with:

• Company employees and officials
• Legal, financial, and tax advisors
• Auditors
• Business partners and service providers
• Tekrom Teknoloji A.Ş. (e-commerce infrastructure provider)
• Cloud service providers located primarily in the United States and EU countries
• Amazon Web Services, Inc. (AWS)
• Advertising and marketing agencies
• Consultants and contracted institutions

Such transfers are carried out in compliance with applicable data protection regulations.

Server Log Data

When you access the Website, your browser automatically transmits certain data to our server (log data), including:

• Date and time of access
• Referring website URL
• Files accessed
• Amount of data transferred
• Browser type and version
• Operating system
• IP address
• Internet service provider domain

This data is collected for technical purposes and analyzed statistically before deletion.

Cookies

The Company uses cookies and similar technologies to:

• Recognize users
• Improve user experience
• Enhance security
• Analyze usage
• Provide personalized advertising and content

Cookies do not retrieve personal data from your device nor run programs or transmit viruses. You may disable cookies via browser settings; however, some features may not function properly.

Social Media Plugins

The Website uses social plugins from platforms such as Facebook, YouTube, Twitter, and Instagram.

These plugins remain inactive until clicked. Once activated, data may be transmitted to the respective social network. Please review the privacy policies of these platforms for further details.

Your Rights Regarding Personal Data

Under KVKK, you have the right to:

• Learn whether your personal data is processed
• Request information regarding processing
• Learn the purpose of processing
• Learn third parties to whom data is transferred
• Request correction of inaccurate data
• Request deletion or destruction of data
• Object to automated decision-making
• Request compensation for damages due to unlawful processing

Exercising Your Rights

You may submit your requests in writing to the Company’s address or via legally accepted methods (e.g., notary).

Data Security

The Company has implemented technical and administrative measures to ensure data security.

Minors

Personal data of minors must not be submitted without parental or guardian consent.

External Links

The Website may contain links to third-party websites. The Company is not responsible for their content or compliance with data protection regulations.

Amendments

This Information Notice may be updated to reflect legal or service changes.

Data Backup

Your data is backed up daily against technical issues.

Security Breach Response

Although no transmission method is 100% secure, in case of a data breach, affected users will be notified in accordance with legal obligations.

Your Responsibilities

You are responsible for maintaining the confidentiality of your password and ensuring the security of devices used to access Company services.