BANDİTO CLARIFICATION TEXT

BANDİTO GİYİM TEKSTİL İTH. İHR. LTD.ŞTİ. (may be referred to as Los Banditos, Bandito, and the Company) hereby inform our valued customers that we act in accordance with the Personal Data Protection Law No. 6698 (“KVKK”) regarding the processing, recording, transferring, sharing, and storing of all kinds of personal data and special categories of personal data belonging to you, and that we exercise the necessary sensitivity in this regard. Data received by our company is processed into the system only as much as is necessary, “since the data we will collect is determined based on the purpose.” Data declared by you, our valued customers, and/or collected through automatic or non-automatic means is carefully processed, shared, transferred, and stored, accompanied by administrative and technical measures taken to increase the quality of the services we provide, while unnecessary data is deleted. As Los Banditos, in the capacity of data controller, your personal and/or special categories of personal data that we obtain with your consent through our call centers, written communication channels, social media pages, mobile communication channels, in-store communication channels, and/or any and all channels without limitation; may be obtained, recorded, stored, kept, modified, updated, periodically checked, rearranged, classified, or preserved for the period required for the purpose for which they are processed or as stipulated in the relevant law, may be shared/transferred with private/legal entities that Los Banditos works with, or public institutions and organizations that it is legally obliged to, and/or relevant 3rd party natural/legal persons residing in Turkey or abroad, and may be transferred abroad in cases of legal or service-related actual requirements. We would like to inform you that we may process your personal data for purposes such as enabling Los Banditos customers to benefit from the services of our brands, informing you about our campaigns upon your consent, recording your suggestions and complaints, establishing better service standards for you, and determining and implementing Los Banditos commercial and business strategies, and in any case, in compliance with the Personal Data Protection Law No. 6698 and relevant legislation.

Within the framework of Article 10 titled “Data Controller’s Clarification Obligation” and Article 11 titled “Rights of the Data Subject” contained in the Personal Data Protection Law No. 6698 (KVKK); we, as BANDİTO GİYİM TEKSTİL İTH. İHR. LTD.ŞTİ (“Company”) in the capacity of data controller, would like to inform you with this “Clarification Text” we have prepared in order to fulfill our clarification obligation to our customers, business partners, and natural or legal persons we are in contact with, regarding the purpose for which your personal data will be processed, to whom and for what purpose your processed personal data may be transferred, the method and legal reason for collecting your personal data, and the rights possessed.

1 - The Purpose for Which Your Personal Data Will Be Processed, and to Whom and for What Purpose It Will Be Transferred

1. Processing of data

Our Company processes your personal data obtained through any of the collection methods specified in the 3rd subsection of this text within the scope of your explicit consent for the purposes of carrying out the company's core activities, planning and implementing marketing processes for products and services, conducting reporting and analysis activities, customizing products and services for its customers, announcing them, and conducting advertising activities, and sharing them with third parties with whom it is mandatory to share due to the company's activities.

2. Transferring of Data

In order for you, our valued guests, to benefit from the products and services we offer by customizing them according to your tastes and habits with the highest service quality, we collect your personal data within the limits determined by official legislation and process them within the conditions and purposes specified in Articles 5 and 6 of Law No. 6698. To offer you, our customers, value-added services, opportunities, and possibilities, and to increase service quality, we share this data with our affiliates at home or abroad, our direct or indirect subsidiaries and joint ventures, or with public institutions and organizations authorized to request this data due to a legal obligation, as well as with other institutions, suppliers, authorized dealers, authorized distributors, and business partners with whom we have contracts as required by our activities.

2 - Cases Where Personal Data May Be Processed Without Explicit Consent as Required by Law

Pursuant to Article 5 of the KVKK, our Company may process your personal data mentioned above, which it has obtained in accordance with the law, without your explicit consent in the following cases.

1. It is expressly provided for in the laws.
2. It is mandatory for the protection of the life or physical integrity of the person or of any other person who is physically incapable of giving his/her consent or whose consent is not legally valid.
3. It is necessary to process the personal data of the parties to a contract, provided that it is directly related to the establishment or performance of a contract.
4. It is mandatory for the data controller to fulfill its legal obligation.
5. It has been made public by the data subject himself/herself.
6. Data processing is mandatory for the establishment, exercise, or protection of a right.
7. Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

3 - Collection of Personal Data, Method and Legal Reason

In order to provide and fulfill the products and services we offer as a Company at the determined highest service quality and within the legal framework, and in this context, to fully and accurately fulfill the responsibilities arising from the law and the contracts our Company has made with its business partners, your personal data, which varies depending on the service, product, or commercial activity provided, is collected in all kinds of verbal, written, or electronic environments through automatic or non-automatic methods, offices, branches, dealers, call center, website, social media channels, mobile applications, and similar methods in line with the purposes mentioned above.

4 - Storage Period of Personal Data

In accordance with the KVK Law, your personal data, which has been processed for the purposes specified in this “Clarification Text Regarding the Processing of Personal Data,” will be deleted, destroyed, or anonymized and continued to be used by us when the purpose requiring processing according to Article 7/f.1 of the KVK Law disappears and/or when the limitation periods that we are obliged to process your data according to the legislation expire.

5 - Rights of the Personal Data Subject,

Within the scope of Article 11 of the KVKK and in its entirety, we hereby inform you that you have the following rights regarding your personal data;

1. To learn whether personal data is being processed,
2. To request information if personal data has been processed,
3. To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
4. To know the third parties to whom personal data is transferred domestically or abroad,
5. To request correction of personal data in case of incomplete or incorrect processing,
6. To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7,
7. To request notification of the transactions made pursuant to clauses (e) and (f) to third parties to whom personal data has been transferred,
8. To object to the emergence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,
1. To request the remedy of damages in the event of suffering damages due to the unlawful processing of personal data,

When you wish to exercise your rights specified in Article 11 of the Personal Data Protection Law, you must submit your requests by filling out the KVKK Information Request Form available on our website, either in person or via our registered electronic mail (KEP) address bandito@hs01.kep.tr. Your requests included in your application will be concluded free of charge within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost for the Company, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board in the Communiqué on the Procedures and Principles of Application to the Data Controller.

Click to Download the KVKK Application Form