Personal Data Protection Privacy Notice

Personal Data Protection Privacy Notice

At Armada Heritage, we attach importance to the privacy and security of your personal data. This Privacy Notice has been prepared pursuant to Turkish Personal Data Protection Law No. 6698 (“KVKK”) to inform you about the processing of your personal data.

1. Data Controller

Within the scope of Law No. 6698, your personal data is processed by the following entity acting as the data controller:

[LEGAL / TRADE NAME] Brand: Armada Heritage Address: [BUSINESS ADDRESS] Email: [KVKK / CONTACT EMAIL ADDRESS]

2. Personal Data We Process

Depending on the nature of your relationship with Armada Heritage, the following categories of personal data may be processed:

• Identity information: name and surname
• Contact information: telephone number, email address, delivery and billing addresses
• Customer transaction information: orders, requests, quotations, returns, exchanges and customer service records
• Order and product information: purchased products, personalization preferences and order details
• Financial and billing information: information required for payment and invoicing processes
• Armada Club account information: membership, favorites, saved designs, stock notifications, appointments and account preferences
• Transaction security information: technical records generated for website and account security
• Request and communication information: information provided through contact forms, WhatsApp or other communication channels
• Design and project information: logos, designs, images and project content submitted for personalization or custom production

3. Purposes of Processing Personal Data

Your personal data may be processed for the following purposes:

• Managing membership and Armada Club account processes,
• Receiving, preparing and managing orders,
• Providing products and services,
• Managing personalized products and custom production requests,
• Evaluating quotation and project requests,
• Managing delivery and shipping processes,
• Carrying out invoicing and accounting procedures,
• Managing returns, exchanges and after-sales support,
• Creating and managing workshop appointments,
• Managing customer communication and support processes,
• Ensuring information and transaction security,
• Fulfilling legal obligations towards authorized public institutions and authorities,
• Establishing, exercising or protecting legal rights and managing legal disputes.

Commercial electronic communications and marketing activities are carried out, where applicable, through the required preference and consent processes in accordance with applicable legislation.

4. Methods of Collecting Personal Data

Your personal data may be collected through:

• armadaheritage.com,
• Armada Club membership and account areas,
• Order and quotation processes,
• Personalization and design areas,
• Workshop appointment forms,
• Contact forms,
• Email,
• WhatsApp and other communication channels through which you contact us.

Personal data may be collected electronically and, where necessary, physically, through fully or partially automated means or through non-automated means provided that they form part of a data recording system.

5. Legal Grounds for Processing Personal Data

Depending on the relevant processing activity, your personal data may be processed on the legal grounds set out in Article 5 of Law No. 6698, including:

• Processing being directly related to the establishment or performance of a contract,
• Processing being necessary for the data controller to fulfil its legal obligations,
• Processing being necessary for the establishment, exercise or protection of a right,
• Processing being necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed.

Where a separate personal data processing activity requires explicit consent, such consent will be requested separately from the provision of this Privacy Notice.

6. Transfer of Personal Data

To the extent necessary for the relevant processing activity and subject to appropriate security measures, your personal data may be transferred to:

• Shipping and logistics service providers for the delivery of orders,
• Relevant payment and financial institutions for payment transactions,
• Relevant service providers for invoicing, accounting and financial obligations,
• Information technology, hosting and technical infrastructure service providers,
• Authorized public institutions and authorities for compliance with legal obligations,
• Authorized advisers and authorities for the management of legal processes.

Such transfers are carried out in accordance with the conditions stipulated under KVKK and applicable legislation.

Where personal data is transferred abroad, the applicable provisions of KVKK concerning international transfers of personal data are followed.

7. Retention of Personal Data

Your personal data is retained for as long as necessary for the relevant processing purposes and for the statutory retention periods required under applicable legislation.

Where the reasons requiring processing cease to exist and no other legal obligation requires retention, personal data is deleted, destroyed or anonymized in accordance with applicable legislation.

8. Your Rights Under KVKK

Within the scope of Article 11 of Law No. 6698, you have the right to:

• Learn whether your personal data is being processed,
• Request information if your personal data has been processed,
• Learn the purpose of processing and whether your personal data is used in accordance with that purpose,
• Know the third parties to whom your personal data has been transferred domestically or abroad,
• Request correction of incomplete or inaccurate personal data,
• Request deletion or destruction of personal data under the conditions stipulated by law,
• Request notification of correction, deletion or destruction operations to third parties to whom your personal data has been transferred,
• Object to a result arising against you through the analysis of processed data exclusively by automated systems,
• Request compensation for damages arising from unlawful processing of your personal data.

9. Applications

You may submit your requests concerning your rights under KVKK to the data controller through an appropriate application method prescribed by applicable legislation:

Email: [KVKK APPLICATION EMAIL] Address: [DATA CONTROLLER APPLICATION ADDRESS]

Applications will be evaluated within the periods prescribed by applicable legislation, depending on the nature of the request.