ENVOYO LIMITED

CLARIFICATION TEXT ON PERSONAL DATA ABOUT CUSTOMERS

Your personal data that you share through the Platform is collected and processed through the web page at envoyo.net (“Site”) owned by Envoyo Limited (“Company”). The Company is deemed to be the “Data Controller” in terms of the personal data it processes in accordance with the Personal Data Protection Law No. 6698 (“Law”) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation (“Communiqué”) and attaches importance to the security of the personal data collected. gives.

According to Article 3 of the Law, “all kinds of information regarding an identified or identifiable natural person” is considered personal data.

If you enter personal data belonging to another person other than you, the Company accepts that you have informed the relevant data owners that you will share this personal data with them, within the meaning of Article 10 of the Law, and that you have provided the necessary legal reason for sharing within the meaning of Article 5 of the Law.

MEMBERSHIP STAGE TO THE SITE AND PLATFORM

The Company collects the following personal data during the membership phase to the Site and Platform;

• Name surname,
• Email address and phone number,
• Password.

The Company collects your personal data through the following methods during the membership phase to the Site and Platform;

Your personal data that you share with the Company may be collected electronically by automatic methods, through the website, mobile applications and similar means. Your personal data will be stored in electronic and/or physical media. In order to prevent your personal data provided and stored by the Company from unauthorized access, manipulation, loss or damage in the environments where they are stored, necessary business process design and technical security infrastructure developments are implemented.

Your personal data will be processed by taking all necessary information security measures, provided that it is not used outside the purposes and scope notified to you, and will be stored and processed during the legal retention period or, if such a period is not foreseen, for the period required by the purpose of processing. When this period expires, your personal data will be removed from the Company’s data flows by deletion, destruction or anonymization methods.

The company processes personal data for the following purposes;

• Execution of product / service sales processes,
• Carrying out product/service after-sales support services,
• Execution of customer relationship management processes.

The Company processes personal data collected through the Site and Platform based on the following legal reasons;

The Company collects personal data received within the scope of establishing a service relationship and concluding a contract based on the legal reason that “it is necessary for the establishment and execution of the contract”. The personal data collected is transferred to business partners and group companies abroad and processed by these persons based on your explicit consent.

The company can share the collected personal data with the following persons for the purposes explained above;

• Shareholders,
• Relevant group companies,
• Business partnerships, affiliates and subsidiaries, suppliers, banks, credit risk and financial institutions,
• Authorized public institutions and organizations.

ENVOYO STORE PRODUCT / SERVICE PURCHASE

The company collects the following personal data during the product / service purchase phase;

• E-mail address,
• Credit card number, credit card expiration date and CVC number.

The company collects personal data through the following methods during the product / service purchase phase;

Your personal data that you share with the Company may be collected electronically by automatic methods, through the website, mobile applications and similar means. Your personal data will be stored in electronic and/or physical media. In order to prevent your personal data provided and stored by the Company from unauthorized access, manipulation, loss or damage in the environments where they are stored, necessary business process design and technical security infrastructure developments are implemented.

Your personal data will be processed by taking all necessary information security measures, provided that it is not used outside the purposes and scope notified to you, and will be stored and processed during the legal retention period or, if such a period is not foreseen, for the period required by the purpose of processing. When this period expires, your personal data will be removed from the Company’s data flows by deletion, destruction or anonymization methods.

The company processes personal data for the following purposes;

• Execution of product / service sales processes,
• Carrying out product/service after-sales support services,
• Execution of customer relationship management processes.

The Company processes personal data collected through the Platform based on the following legal reasons;

The Company collects personal data received within the scope of sales and contract preparation activities based on the legal reason that “it is necessary for the establishment and execution of the contract”. The personal data collected is transferred to business partners and group companies abroad and processed by these persons based on your explicit consent.

The company can share the collected personal data with the following persons for the purposes explained above;

• Shareholders,
• Relevant group companies,
• Business partnerships, affiliates and subsidiaries, suppliers, banks, credit risk and financial institutions,
• Authorized public institutions and organizations.

MANAGING SITE AND PLATFORM ACCOUNT SETTINGS

The Company collects the following personal data during the management of Site and Platform account settings;

• Name surname,
• Email address, address, phone number, billing address,
• Company name, company tax office, company tax number,
• Company phone number,
• Current password, new password,
• Information on the company tax certificate, information on the company signature circular,
• Information on the passport image.

The Company collects personal data through the following methods during the management of Site and Platform account settings;

Your personal data that you share with the Company may be collected electronically by automatic methods, through the website, mobile applications and similar means. Your personal data will be stored in electronic and/or physical media. In order to prevent your personal data provided and stored by the Company from unauthorized access, manipulation, loss or damage in the environments where they are stored, necessary business process design and technical security infrastructure developments are implemented.

Your personal data will be processed by taking all necessary information security measures, provided that it is not used outside the purposes and scope notified to you, and will be stored and processed during the legal retention period or, if such a period is not foreseen, for the period required by the purpose of processing. When this period expires, your personal data will be removed from the Company’s data flows by deletion, destruction or anonymization methods.

The company processes personal data for the following purposes;

• Execution of product / service sales processes,
• Carrying out product/service after-sales support services,
• Execution of customer relationship management processes.

The Company processes personal data collected during the management of Site and Platform account settings based on the following legal reasons;

The Company collects personal data received within the scope of sales and contract preparation activities based on the legal reason that “it is necessary for the establishment and execution of the contract”. The personal data collected is transferred to business partners and group companies abroad and processed by these persons based on your explicit consent.

The company can share the collected personal data with the following persons for the purposes explained above;

• Shareholders,
• Relevant group companies,
• Business partnerships, affiliates and subsidiaries, suppliers, banks, credit risk and financial institutions,
• Authorized public institutions and organizations.

EXECUTION OF ADVERTISING / CAMPAIGNS / PROMOTIONAL NOTIFICATION ACTIVITIES PROCESSES

The company collects the following personal data regarding the execution of advertising / campaign / promotion notification activities processes;

• Name surname,
• Address, Email address, phone number.

The Company collects personal data regarding the execution of advertising / campaign / promotion notification activities processes by the following methods;

Your personal data that you share with the Company may be collected electronically by automatic methods, through the website, mobile applications and similar means. Your personal data will be stored in electronic and/or physical media. In order to prevent your personal data provided and stored by the Company from unauthorized access, manipulation, loss or damage in the environments where they are stored, necessary business process design and technical security infrastructure developments are implemented.

Your personal data will be processed by taking all necessary information security measures, provided that it is not used outside the purposes and scope notified to you, and will be stored and processed during the legal retention period or, if such a period is not foreseen, for the period required by the purpose of processing. When this period expires, your personal data will be removed from the Company’s data flows by deletion, destruction or anonymization methods.

The company processes personal data for the following purposes;

• Execution of advertising / campaign / promotion processes,
• Execution of customer relationship management processes.

The Company processes personal data regarding the execution of advertising / campaign / promotion notification activities based on the following legal reasons;

The Company may process personal data received within the scope of sales and contract arrangement activities by obtaining informed express consent for advertising/campaign/promotion notification activities in accordance with the Law and the relevant provisions of the Law on the Regulation of Electronic Commerce No. 6563, and its business partners at home and abroad. and its group companies and processing by these persons will be carried out based on your explicit consent.

The company can share the collected personal data with the following persons for the purposes explained above;

• Shareholders,
• Relevant group companies,
• Business partnerships, affiliates and subsidiaries, suppliers, banks, credit risk and financial institutions,
• Authorized public institutions and organizations.

In accordance with Article 11 of the Law, as a data owner, you have the right to apply to the company as the data controller regarding your rights listed below:

• Learning whether your personal data is being processed or not,
  Requesting information if your personal data has been processed,
  Learning the purpose of processing your personal data and whether they are used for their intended purpose,
  Knowing the third parties to whom your personal data is transferred at home or abroad,
  Requesting correction of your personal data if it has been processed incorrectly or incompletely, and requesting that the action taken in this context be notified to third parties to whom personal data has been transferred,
  Requesting the deletion or destruction of your personal data in case the reasons requiring processing no longer exist, even though it has been processed in accordance with the law and other relevant legal provisions, and requesting that the action taken in this context be notified to third parties to whom your personal data has been transferred,
  Object to the emergence of a result against you by analyzing your processed data exclusively through automatic systems,
  Request compensation for the damage if you suffer damage due to the unlawful processing of your personal data.

You can personally deliver your applications regarding your above-mentioned rights, in writing and with a wet signature, in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller”, to our Company address “2A ST Martins Lane 2. Floor Y016LN York England”, send it through a notary public or envoyo. You can send it to @envoyo.net e-mail address.

Regards,

ENVOYO LIMITED