POTENTIAL CUSTOMER CLARIFICATION TEXT

ON THE PROTECTION OF PERSONAL DATA IN ACCORDANCE WITH THE PROCEDURES AND PRINCIPLES OF THE LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA (“KVKK”)

Identity of the Data Controller
We have prepared this Clarification Text to explain which of your personal data we will process and for what purposes as Elifce Takı ve Kozmetik Ltd. Şti. (hereinafter referred to as “Morafilli”). We hereby inform you that we shall process your personal data specified below under all circumstances:

In accordance with the law and the rules of honesty,
By maintaining the accuracy and the most up-to-date version of the personal data you share as reported to us,
For specific, explicit, and legitimate purposes,
In a manner that is relevant, limited, and proportionate to the purposes for which they are processed,
By retaining them for the period prescribed in the relevant legislation or required for the purpose for which they are processed.

Processed Personal Data
Your personal data that may be subject to processing by us, if shared with us or if necessary, are as follows:

Personal Data Category	Personal Data	Source of Personal Data
Contact Data	E-Mail	https://www.morafilli.com/
Marketing Data	Cookie Records	https://www.morafilli.com

Methods and Purposes of Processing Personal Data
Your personal data are collected through your visits to our website, your purchases from our store, and your shares in telephone or e-mail correspondence. Morafilli shall process your data within the framework of the legal compliance grounds specified in Article 5, Paragraph 2 of the Law, for the purposes of performance of the contract, fulfillment of legal obligations, and within the scope of mandatory legitimate interests.

Legal Grounds for Processing Personal Data
Your data may be processed by our company, Morafilli, for the purposes of benefiting from our products and services without interruption, improving our product variety with the information received, providing product variety according to your preferences, providing a personal marketing service about you by adopting the "best product" principle, analyzing your personal shopping habits through automated systems; and also to be used by group companies, business partners, suppliers, and service providers to enable you to benefit from the products you have purchased/are interested in, related customer services, consumer rights, and other opportunities, and/or to fulfill commercial/financial/legal responsibilities, and/or in cases necessitated or mandatory for legally legitimate interests, provided that your fundamental rights and freedoms are not harmed.

Transfer of Personal Data to Third Parties
The procedures and principles to be applied in personal data transfers are regulated in Articles 8 and 9 of the KVKK Law, and the personal data of the data subject may be transferred to real or legal third parties.
Data may be shared with current company employees, legal advisors, auditors, business partners, dealers, authorized public institutions and organizations such as other ministries and judicial authorities, and third parties resident in the country who share our sensitivity regarding data security and comply with the relevant legislative provisions; only in case of need, to the extent necessary and within the limits permitted by the legislation, for the purposes of carrying out communication activities, conducting marketing analysis studies, collecting incoming calls and providing services to customers, notifying and following up on customer information changes, following up on customer complaints, recording and following up on customer requests, and fulfilling all kinds of obligations in the contract to be concluded between the parties, as well as fulfilling legal obligations and service contract requirements, including but not limited to the Turkish Code of Obligations, the Law on Consumer Protection, the Turkish Commercial Code, and the Law on the Protection of Personal Data.

Your Rights Under the Law
In accordance with Article 11 of the KVKK Law, you may apply to our Company and request the following regarding your personal data:

To learn whether personal data is processed,
To request information if personal data has been processed,
To learn the purpose of the processing of personal data and whether they are used in accordance with their purpose,
To know the third parties to whom personal data are transferred domestically,
To request rectification of personal data if they are processed incompletely or inaccurately and to request notification of this transaction to third parties to whom personal data are transferred,
To request the erasure or destruction of personal data in the event that the reasons requiring their processing cease to exist and to request notification of this transaction to third parties to whom personal data are transferred,
To object to the occurrence of a result against the data subject by analyzing the processed data exclusively through automated systems,
To claim compensation for the damage arising from the unlawful processing of personal data.

You may submit your applications and requests within the scope of the Law by filling out the “Data Controller Application Form” at https://www.morafilli.com or via a notice to be sent through a notary public to the following address:
Yavuz Selim mahallesi Selimiye caddesi N:4/B Çubuk / ANKARA

Morafilli shall finalize the application requests free of charge as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request, in accordance with Article 13 of the Law. If the request is rejected, the reason(s) for rejection shall be notified in writing or electronically with justification.