Privacy and Personal Data Protection Policy

Introduction

Canan İnşaat Sanayi ve Ticaret Limited Şirketi ("Canan İnşaat", "we", "us", or "Company"), presents this Privacy Policy ("Policy") explaining how we collect, use, and disclose personal data collected through our website located at https://www.wooduneed.com/ ("Website") and the related mobile application ("App"). This Policy applies to all users of our Website or App ("Users", "you", or "your"). By using our Website or App, you acknowledge that you have read and understood this Policy. We may change this Policy at any time and the changes will be effective when posted on our Website or App. We recommend that you regularly check these pages to stay informed about the changes to this Policy.

1. Personal Data We Collect

We may collect the following personal data from you when you use our Website:

• Identity Information: Such as your name, surname, email address, phone number, postal address, date of birth, and gender.
• Demographic Information: Such as your age, gender, interests, and hobbies.
• Technical Information: Such as your IP address, browser type, operating system, device type, and unique device identifier.
• Cookies and Other Tracking Technologies: We may use cookies and other tracking technologies to analyze how you use our Website and to provide you with a better experience.

2. How We Use Your Personal Data

We may use the personal data we collect for the following purposes:

• Operating the Website and providing services to you: We may use your information to operate our Website, provide you with content, and fulfill your requests.
• Communicating with you: We may use your information to communicate with you about newsletters, promotions, and other information.
• Developing the Website: We may use your information to develop our Website and the services we offer.
• Complying with laws: We may use your information to comply with laws and legal requests.

3. With Whom We Share Your Personal Data

We may share your personal data with third parties in the following circumstances:

• Service Providers: We may use third-party service providers (such as web hosting providers, email marketing providers) to help us operate our Website. These service providers may have access to your information to perform their functions.
• Legal Requests: We may share your information with third parties to comply with laws or legal requests.
• Business Transactions: If the Company is involved in a business transaction, such as a sale or merger of the Gallery, your information may be transferred to the acquirer.

4. Security of Your Personal Data

We take technical and administrative security measures to protect the security of your personal data. These measures include:

• Secure data centers: We store your information in secure data centers.
• Data encryption: We encrypt your information using encryption methods.
• Access controls: We restrict access to your information to authorized personnel only.

5. Your Rights

You have the following rights regarding your personal data:

• Right of Access: You have the right to obtain a copy of your personal data and information about how it is being used.
• Right to Rectification: You have the right to have your personal data rectified if it is inaccurate or incomplete.
• Right to Erasure: In certain circumstances, you have the right to have your personal data erased.
• Right to Restriction of Processing: In certain circumstances, you have the right to request the restriction of the processing of your personal data.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to have this data transferred to another data controller.
• Right to Object: You have the right to object to the processing of your personal data under certain circumstances.

6. Transfer of Your Personal Data

Within the framework of the Personal Data Protection Law ("KVKK") of the Republic of Turkey, and in accordance with the purposes of the contract, your personal data collected by any of the methods listed above may be transferred to service providers located abroad. This transfer takes place only in the following cases:

• Transfer to countries deemed by the Personal Data Protection Authority to have adequate protection.
• In case of a request by authorized institutions or courts.

The groups of personal data that you may transfer may include:

• Identity Information (such as name, surname, title)
• Contact Information (such as email address, phone number, postal address)
• Demographic Information (such as age, gender, interests)
• Usage Information (such as pages visited on the Website, links clicked)

We will take the necessary measures to ensure that sufficient security measures are applied to your data by entering into the necessary contracts with the service providers to ensure compliance with the Personal Data Protection Law.

7. Storage and Protection of Personal Data

As the "Company", we are obliged to protect the systems and databases where your personal data is stored in accordance with Article 12 of the KVKK. This protection includes the following measures:

• Technical measures: Such as data encryption, access controls, and regular backups.
• Physical measures: Security measures to prevent unauthorized physical access.
• Legal measures: Following the necessary legal processes to prevent unlawful processing of data.
• In the event of a personal data security breach, we will make the necessary notifications to the KVKK and the relevant individuals.

8. Keeping Personal Data Up-to-Date and Accurate

Pursuant to Article 4 of the KVKK, inaccurate and outdated personal data is considered unlawfully processed. Therefore, it is important that you share your up-to-date and accurate information with us. We offer the possibility to update your information on the Website or mobile application.

9. Rights of the Personal Data Owner under Law No. 6698 (KVKK)

According to Article 11 of the KVKK, the personal data owner has the following rights:

• The right to learn whether your personal data is being processed or not.
• The right to access your personal data.
• The right to request the rectification of your inaccurate or incomplete personal data.
• The right to request the erasure or deletion of your personal data.
• The right to request notification of the rectification, erasure or deletion of your personal data to third parties to whom it has been disclosed.
• The right to object to the application of automated decision-making processes to your data.
• The right to compensation for any damage suffered due to the unlawful processing of your personal data.

10. Contact and Application Method

You can send your questions, comments, or requests regarding your personal data to [e-posta adresi] (email address). Your requests will be answered in writing or electronically within 30 days at the latest.

No fee will be charged for transactions that are required to be free by law. However, we reserve the right to charge a fee for transactions that require expenses. These fees will be calculated based on the tariff determined by the Personal Data Protection Authority.

By sharing your personal data on the website, mobile application, or other channels, you are deemed to have accepted this Privacy Policy. This Policy covers topics such as the purposes for processing your personal data, the methods and transfers of your data, and your rights.

11. Updates

This Privacy Policy may be updated from time to time to reflect changes in the Company's practices or technologies, or to comply with legal changes. You can find the most recent update date of this Policy at the beginning of the document. When the Policy is updated, we will inform you through the website or other communication channels to keep you informed about the updates.

12. Cookies and Other Tracking Technologies

We may use cookies and other tracking technologies on the Website to provide you with a better experience and to improve our services. Cookies are small text files that are placed on your device by your web browser. Other tracking technologies are tools that can collect data, such as web beacons, pixels, and local storage.

Here are some examples of the cookies and tracking technologies we use:

• Session cookies: These cookies are used temporarily during your visit to the Website and are deleted when you close your browser.
• Persistent cookies: These cookies are stored on your device for a certain period of time.
• First-party cookies: These are cookies placed by the Company.
• Third-party cookies: These are cookies placed by third parties through content or advertisements on the website.

Here's how you can control cookies and tracking technologies:

• Most web browsers allow you to accept or reject cookies. You can refer to the help section of your browser for more information on how to manage cookies.
• The Website may also offer a mechanism where you can set your cookie preferences.
• If you disable cookies, some features of the Website may not function properly.

13. Children's Privacy

The Website is not directed towards children under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a child under 18, we will delete that information as soon as possible.

14. Contact Information

If you have any questions about your personal data or this Privacy Policy, please contact us using the following contact information:

Email: info@wooduneed.com

15. Acceptance

By using the Website, you are deemed to have accepted this Privacy Policy. If you do not agree to the terms of this Policy, you should not use the Website.

Our Website has taken all necessary security measures to protect the communication at every stage of the credit card transaction process.

Website-Visitor Communication Security

Communication between the Website and the visitor on our order pages is carried out using the 128-bit SSL standard. This communication standard is a secure method used even on websites with a high volume of transactions. Whether this communication method is used on the page where credit card information will be provided can be determined by checking if the address bar displays https://.. instead of http://.. when the page is accessed. In addition, a lock icon will appear in the bottom right corner of the browser when you access pages of this type.

Website-Bank Communication Security

The security of the transfer of credit card information from the Website to the bank is ensured by the maximum security provided by the bank. In addition to this security, the CVV2/CVC2 code is also used on our Website as a precaution against shopping with stolen cards or card information.

Website Data Security

No person, institution, or organization other than you and the bank that issued you the credit card can access your information during transactions you make in a secure environment. The credit card transaction page directly transmits the card information to the bank POS system and informs the customer of the transaction result. Credit card information is not transmitted by e-mail or similar methods. It is not even possible for us to access the credit card information that is transferred as a result of the online transaction.