PERSONAL DATA PROTECTION AND PRIVACY NOTICE

Your Personal Data Is Important to Us

At Evinizde Olsun , we respect your privacy and are committed to protecting your personal data.

This Privacy Notice explains how Africa Trade Center (“Company”, “we”, “us” or “our”) collects, uses, stores and protects personal data obtained through our website, online sales channels, customer services and other communication channels.

Where applicable, the processing of personal data is carried out in accordance with the Turkish Law No. 6698 on the Protection of Personal Data (“KVKK”), the applicable data protection legislation in the countries where our customers are located, and other relevant legal requirements.

1. DATA CONTROLLER

Company Name: Evinizde Olsun
Legal Company Name: [Full Legal Company Name]
Address: [Company Address]
Telephone: [Phone Number]
E-mail: [E-mail Address]
Website: [Website Address]
MERSIS No.: [MERSIS Number]
Tax Number: [Tax Number]

Africa Trade Center acts as the data controller with respect to personal data processed within the scope of its business activities, to the extent provided by applicable legislation.

2. PERSONAL DATA WE MAY COLLECT

Depending on your interaction with Africa Trade Center, we may collect and process the following categories of personal data:

Identity Information

• First and last name
• Date of birth, where required
• Passport or identification information where required for international shipping or customs procedures

Contact Information

• E-mail address
• Telephone/mobile phone number
• Delivery and billing address
• Country and city of residence

Order and Transaction Information

• Products ordered
• Order number
• Order history
• Invoice information
• Payment status
• Delivery information
• Return, refund and cancellation information

Customer Communication Information

• Messages and requests submitted through our website
• E-mails and other correspondence
• Customer service records
• Complaints, suggestions and requests

Technical and Website Information

• IP address
• Browser and device information
• Website access information
• Login and session information
• Cookies and similar technologies
• Security and system logs

Marketing Preferences

• Marketing and communication preferences
• Consent or withdrawal records, where applicable
• Information regarding promotional communications sent to you

We do not intentionally collect sensitive personal data unless such collection is required or permitted by applicable law.

3. PURPOSES OF PROCESSING PERSONAL DATA

Your personal data may be processed for the following purposes:

• Creating and managing customer accounts;
• Processing and fulfilling orders;
• Processing payments;
• Preparing invoices and other transaction documents;
• Arranging delivery and international shipment of products;
• Completing customs and import/export procedures;
• Providing customer support and responding to inquiries;
• Managing returns, refunds and cancellations;
• Communicating with customers regarding their orders;
• Sending service-related notifications;
• Sending promotional and marketing communications where legally permitted and, where required, based on your consent;
• Improving our products, services and website;
• Preventing fraud, unauthorized transactions and misuse of our services;
• Maintaining website and information security;
• Maintaining business and transaction records;
• Complying with applicable legal, tax, accounting and regulatory obligations;
• Responding to requests from authorized public institutions and governmental authorities;
• Establishing, exercising or protecting legal rights;
• Resolving disputes and maintaining evidence;
• Managing our business operations and contractual relationships.

4. LEGAL BASIS FOR PROCESSING

Depending on the circumstances, your personal data may be processed on the following legal grounds, where applicable:

• Performance of a contract or taking steps at your request before entering into a contract;
• Compliance with legal obligations;
• Establishment, exercise or protection of legal rights;
• Legitimate interests of Africa Trade Center, provided that such interests do not override your fundamental rights and freedoms;
• Your consent, where consent is legally required;
• Other legal grounds permitted under applicable data protection legislation.

Where processing is based on your consent, you may withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

5. METHODS OF COLLECTING PERSONAL DATA

Your personal data may be collected through:

• Our website;
• Online order and checkout forms;
• Customer account registration;
• E-mail;
• Telephone and customer service communications;
• Contact forms;
• Payment service providers;
• Shipping and logistics companies;
• Customs and international delivery processes;
• Cookies and similar technologies;
• Other communication channels through which you voluntarily provide your information.

6. TRANSFER OF PERSONAL DATA

Where necessary and permitted by applicable law, personal data may be shared with:

• Payment service providers and banks;
• Shipping and logistics companies;
• Customs brokers and relevant customs authorities;
• Business partners and service providers assisting us with order fulfillment;
• Information technology and hosting service providers;
• Accounting, auditing and legal service providers;
• Governmental authorities and public institutions where legally required;
• Competent authorities for the prevention of fraud, unlawful activities or security threats.

Because Africa Trade Center provides international sales and delivery services, personal data may be transferred to countries outside Türkiye and/or outside the country in which the customer resides.

Where required by applicable data protection legislation, appropriate safeguards and legal mechanisms will be used for international data transfers.

7. DATA RETENTION

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, to provide our services, to comply with legal and regulatory obligations, to resolve disputes and to establish, exercise or protect our legal rights.

When personal data is no longer required, it will be securely deleted, destroyed or anonymized in accordance with applicable legislation and our internal data retention procedures.

8. COOKIES AND WEBSITE TECHNOLOGIES

Our website may use cookies and similar technologies to:

• Ensure the proper functioning of the website;
• Maintain website security;
• Remember user preferences;
• Analyze website performance;
• Improve user experience;
• Measure website traffic;
• Provide marketing and promotional services where legally permitted.

You may manage or disable certain cookies through your browser settings or our cookie management tools, where available.

Disabling certain cookies may affect the functionality of some parts of the website.

9. DATA SECURITY

Africa Trade Center takes reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure, destruction and other unlawful processing.

However, no method of transmission or electronic storage can be guaranteed to be completely secure. Therefore, while we take appropriate security measures, we cannot guarantee absolute security of information transmitted over the internet.

10. YOUR RIGHTS

Where applicable under KVKK Article 11 and/or other relevant data protection legislation, you may have the right to:

• Learn whether your personal data is being processed;
• Request information about the processing of your personal data;
• Learn the purposes for which your personal data is processed;
• Learn the third parties to whom your personal data has been transferred;
• Request correction of incomplete or inaccurate personal data;
• Request deletion or destruction of your personal data where legally permitted;
• Request notification of corrections, deletion or destruction to relevant third parties where required by law;
• Object to certain processing activities;
• Object to a decision resulting in a disadvantage to you based solely on automated processing, where applicable;
• Request restriction of processing in circumstances provided by applicable law;
• Request data portability where such a right applies;
• Withdraw consent where processing is based on consent;
• Lodge a complaint with the competent data protection authority; and
• Request compensation for damages where provided by applicable law.

11. EXERCISING YOUR RIGHTS

To exercise your rights or submit a privacy-related request, you may contact Africa Trade Center using the contact details below:

Africa Trade Center
E-mail: [Privacy E-mail Address]
Address: [Company Address]
Telephone: [Telephone Number]

Requests will be reviewed and handled within the period prescribed by the applicable legislation.

Where necessary, we may request additional information to verify your identity before processing your request.

12. CHILDREN’S PRIVACY

Our website and services are not intentionally directed at children where such services require the user to be of legal age.

We do not knowingly collect personal data from children in violation of applicable laws.

If you believe that a child has provided us with personal data unlawfully, please contact us so that we can take appropriate action.

13. CHANGES TO THIS PRIVACY NOTICE

Africa Trade Center may update this Privacy Notice from time to time to reflect changes in our business activities, legal requirements, technology or data protection practices.

The updated version will be published on our website with the relevant effective date.

14. CONTACT INFORMATION

For questions, requests or complaints concerning the processing of your personal data, please contact:

Evinizde Olsun
Legal Company Name: [Full Legal Company Name]
Address: [Full Address]
E-mail: [E-mail Address]
Telephone: [Telephone Number]
Website: [Website Address]

Effective Date: [Day / Month / Year]

---

Important Notice: This Privacy Notice is a general template prepared for Africa Trade Center’s international e-commerce activities. The final version should be reviewed and adapted by a qualified legal professional according to the company’s actual data processing activities, registered company information, payment providers, logistics partners, target countries and applicable data protection legislation.