**1. Identity of the Data Controller**

FEBA YATÇILIK ANONİM ŞİRKETİ (the “Company”) takes utmost care regarding the security of your personal data and implements the highest level of security measures to protect this data. With this awareness, the Company places great importance on processing and maintaining all personal data related to individuals who benefit from the Company’s products and services, as well as those associated with the Company, in accordance with the Personal Data Protection Law No. 6698 (“KVKK Law”). The purpose of this document is to transparently inform you, in accordance with Article 10 of the KVKK Law, about how your personal data is collected, processed, shared, the legal reasons for processing, and your rights.

**1. Collection, Processing, and Purposes of Personal Data**

Your personal data may vary depending on the services, products, or commercial activities provided by the Company. It can be collected through automatic or non-automatic methods, verbally, in writing, or electronically, via offices, branches, dealers, call centers, websites, social media platforms, mobile applications, and similar means. Personal data will be created and updated while you benefit from the Company’s products and services.

Your personal data is processed for the following purposes:

– Providing and delivering Company products and services, organizing records and documents,

– Complying with local and international legal obligations, such as information storage, reporting, tax, and other duties,

– Improving the quality of services and products,

– Evaluating requests from official authorities and users,

– Fulfilling legal obligations,

– Processing e-commerce orders and payment transactions,

– Facilitating product delivery through third parties and recommending products and services,

– Online advertising and marketing,

– Measuring service quality.

**2. Transfer of Processed Personal Data**

Your collected personal data may be shared with third parties for the following purposes:

– To provide and customize Company products and services,

– To ensure the legal and commercial security of the Company and its business partners,

– To determine and implement commercial and business strategies,

– To manage human resources policies.

Your data may be transferred to business partners, suppliers, shareholders, legally authorized public institutions, and private entities. Additionally, your data may be stored abroad; in such cases, the Company will ensure that adequate legal protection is in place and will only transfer data if the receiving institution takes necessary measures to protect the data.

**3. Methods of Collecting Personal Data and Legal Grounds**

Your personal data is collected through various verbal, written, or electronic means, in line with the purposes stated above and to fulfill the Company’s contractual and legal responsibilities. The legal grounds for processing and transferring your data are based on Articles 5 and 6 of the KVKK Law.

**4. Rights of the Data Subject under Article 11 of the KVKK Law**

As a data subject, you have the following rights, which can be exercised by submitting a request to the Company in accordance with this Privacy Notice:

– Learning whether your personal data is processed,

– Requesting information about your processed personal data,

– Understanding the purpose of processing your personal data and whether it is used accordingly,

– Knowing the third parties to whom your personal data is transferred within the country or abroad,

– Requesting correction of incomplete or inaccurate personal data and notifying third parties of the correction,

– Requesting deletion or destruction of personal data when the reasons for processing have ceased and notifying third parties of the deletion or destruction,

– Objecting to automated processing of data that results in negative consequences for you,

– Requesting compensation for damages incurred due to unlawful processing of personal data.

To exercise these rights, you must submit your request in writing or using other methods specified by the Personal Data Protection Board. Currently, the Board has not determined any specific method, so requests should be made in writing. You can submit your request using the contact methods detailed below:

– Fill out the form available at www.lovesail.net, and send the signed copy along with identification documents to “Mithatpaşa Mah. Kızılçam Sk. 32/A İÇ KAPI NO:1 Eyüpsultan/İstanbul” by hand, via notary, or other KVKK Law methods.

– Alternatively, you can send the form with a secure electronic signature to lovesail@lovesail.net.