PROTECTION OF PERSONAL DATA LAW

Privacy Policy and Disclosure Statement

The Zaira Nova brand and including Zaira Nova and other trademarks registered under Turkish Patent and Trademark Office (TPE), as well as brands for which usage rights have been obtained through license agreements—this document serves to inform you, our valued customers, regarding the promotion, sales, discount campaigns, end-of-season promotions, special events, invitations, and campaigns organized by our company, as well as to update your membership information, evaluate your purchases, provide campaign announcements made with third parties, and share points notifications. It includes obtaining your explicit consent, ensuring the confidentiality of information you have voluntarily provided, and outlining how such information is recorded and regulated, as per the privacy policies stated below:

1) Security and Confidentiality of Information

Zaira Nova ensures the security and confidentiality of all data and transactions in accordance with the laws of the Republic of Turkey by using an SSL (Secure Socket Layer) certificate on its systems and online platforms. SSL technology guarantees that any private or sensitive data transferred by the USER to the system is securely encrypted and protected against unauthorized access or use by third parties. These personal details cannot be viewed by any third party or other users.

Personal contact information collected from our customers is recorded indefinitely for purposes including advertisements, promotions, sales, announcements, statistical analysis, customer classification, and sending of catalogs. Customers may request detailed information about how their data is stored by contacting: [email protected].

Disclosure Statement on the Processing of Personal Data

Zaira Nova places great importance on the security of your personal data. As a company established under the Constitution and Laws of the Republic of Turkey, we would like to inform you, as our valued customer, in accordance with the Personal Data Protection Law No. 6698 (KVKK), about how your data is collected, processed, and the purposes of such processing, in our capacity as a “Data Controller” defined by the law.

The personal data you have voluntarily shared with our company with your explicit consent may be processed, transferred within Turkey or abroad to parties affiliated with our company, and stored, used for profiling or classification purposes, strictly within the scope of our business operations and legal obligations.

1. Collection, Processing, and Purpose of Personal Data

Your personal data is processed in accordance with the principles stated in Articles 5 and 6 of KVKK, including legality, fairness, accuracy, and up-to-dateness. Data is collected through automatic and non-automatic means including, but not limited to, our company departments, branches, stores, offices, websites, call centers, social media, mobile apps, verbally, in writing or electronically—without exceeding legally allowed periods. Based on the nature of the data, it may be archived, stored, modified, used, shared, or transferred as needed.

The purposes of processing include:

Conducting the commercial activities of our company and providing you with access to our products and services.
Personalizing and promoting products/services based on your preferences and usage patterns.
Executing processes related to memberships, sales, marketing, communications, promotions, and store loyalty cards.
Planning and executing marketing strategies, customer relations, and after-sales support.
Ensuring the legal and commercial security of our company and related third parties.
Performing administrative operations, facility security, event management, legal compliance, audits, financial operations, and protecting our legal rights.
Managing customer satisfaction, corporate communications, and requests/complaints.
Ensuring business continuity, corporate governance, strategic planning, and information security.
Managing relationships with business partners, distributors, suppliers, and other third parties.

2. Sharing of Processed Personal Data

Your personal data may be shared domestically or internationally with our business partners, affiliates, subcontractors, agents, and regulatory authorities in line with Articles 8 and 9 of the KVKK, strictly for the purposes mentioned above and in compliance with legal obligations.

3. Method and Legal Grounds for Personal Data Collection

Your personal data is collected for the purposes stated above through various methods, including in-person, online, phone calls, official records, and business partnerships. This may occur via our headquarters, call centers, websites, business affiliates, online services, sales networks, and other authorized channels, either directly from you or from legally permitted third parties.

This text may be referenced as “KVKHM” (Personal Data Protection Statement) in consent forms and other relevant documents. Your personal data will be collected upon your approval and through forms filled on our website.

4. Rights of the Data Subject Under Article 11 of KVKK

As a data subject, you have the following rights:

To learn whether personal data is being processed,
To request information about the processing if it has occurred,
To learn the purpose of processing and whether it has been used accordingly,
To know the third parties in Turkey or abroad to whom data has been transferred,
To request correction if personal data has been processed inaccurately or incompletely,
To request deletion or destruction of personal data if legal grounds for processing no longer exist,
To request notification of corrections or deletions to third parties to whom the data was transferred,
To object to outcomes against your interest resulting from analysis through automated systems.