INFORMATION TEXT

1) INFORMATION TEXT

1. What is the legal basis for Mielo Jewellery to collect personal data?

Mielo Jewellery collects and processes personal data based on the legal bases set forth in the following laws and regulations:

• The Law on the Protection of Personal Data No. 6698
• The Law on the Regulation of Electronic Commerce No. 6563
• The Law on the Protection of Consumers No. 6502
• The Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce
• The Regulation on Commercial Communication and Commercial Electronic Messages
• The Turkish Penal Code No. 5237, which includes provisions on the processing and confidentiality of personal data, as well as sanctions for violations.

As a company, Mielo Jewellery processes the personal data of visitors, customers, and members to fulfill its legal obligations under the Law on the Protection of Consumers No. 6502 and the Regulation on Distance Contracts, as well as to provide the best possible service, including the execution and performance of contracts we establish with our customers.

Which Personal Data Is Processed?

• - Your identity information (name, surname)
• - Your address,
• - Your contact information (phone number, e-mail address)
• - Shopping Information (shopping date, time, amount, shopping content, payment method (credit card, cash), and payment details),
• - Your credit card information if you shop with a credit card,
• - If you want it to be included in the invoice (Identity number, fax number, sole proprietorship information)
• - Your marketing information (Date of birth, gender information, Site usage, shopping habits, address, demographic member/user/customer information, shopping habits-preferences for all kinds of products and services, campaigns used, surveys, etc. and their contents, invoice contents, payment methods (cash, credit card etc.) and payment details (installment amount etc.), old and new mobile/home/work phone/fax numbers, e-mail addresses, approaches-actions to electronic commercial and other communications, identification information (cookies, web browser signals-information, IP, beacon, wired-wireless network connection information, etc.), advertising identifier information, location data if location sharing permission is given via the Mobile Application)

For what purposes do we use your personal data?

Sharing your personal data with us enables us to provide you with the products and services you require, deliver more responsive customer service, and improve our websites and services. The data you share with us, or that we automatically collect from you, includes, but is not limited to, the following:

-To offer personalized services to our Visitors, Customers, and Members, and to enhance user satisfaction by improving the quality of the user experience.

-To contact our Visitors, Customers, and Members, to the extent that they allow us, and to inform them about our services and campaigns.

- To monitor the technical functions of the Mielo Jewellery website and mobile applications, and to ensure that they operate as required.

- To use for advertising and sales purposes, allowing our Visitors, Customers, and Members to continue benefiting from the Mielo Jewellery website and mobile applications free of charge.

- To send you our publications,

- To send you newsletters or notifications by e-mail,

- To answer your questions and provide effective customer service,

- To inform you about our new services,

-To conduct direct marketing through the Mielo Jewellery website and mobile applications, or through third parties with whom we cooperate.

- To use for various statistical evaluations, database creation, and market research, without revealing the identity of our Visitors, Customers, and Members.

- To identify system-related problems and promptly resolve any issues that may arise within the Mielo Jewellery website or mobile applications.

- To develop and improve our services by analyzing the experiences of our Visitors, Customers, and Members, and to expand the variety of content and products.

- To communicate with you about our services within this scope (via instant messages, emails, other online and offline messages, or push notifications); to offer you options based on your preferences and interests; to provide technical support if you encounter any infrastructure issues; and to share updates and product recommendations related to the items you have viewed.

- To implement technical and legal measures regarding our products and services (for example, to prevent the sharing of illegal content).

- If you use the services we offer through your mobile device or mobile application, you may be asked to share your geographic location information. In such cases, when we cooperate with digital platforms or third parties, we may use your location data to personalize content, advertisements, and services based on your region or country. This helps us respond more quickly to your needs and provide relevant solutions.

- Used for advertising sales purposes to ensure that our Visitors, Customers, and Members can continue to access Mielo Jewellery's website and mobile applications free of charge.

Are your data shared?

Your collected personal data is used for the purposes mentioned above, and only to the extent necessary, in accordance with Law No. 6698 and other applicable legal regulations.

- For services that require expertise, such as information technologies, marketing activities, and consultancy, Mielo Jewellery may collaborate with its domestic and/or international business partners and service providers (e.g., call centers, data collection services via devices, marketing consultancy, database management, electronic messaging service providers, etc.). Additionally, personal data may be processed by foreign companies if the servers of our domestic business partners are located abroad.

- With our business partners who provide courier and shipping services to deliver your purchases and all other product requests made through the Site, Mobile Application, and Order Line,

-To fulfill our obligations to provide information, documents, and other related requirements to authorized public institutions, organizations, and judicial authorities, and to exercise our legal rights, such as filing lawsuits or responding to legal requests, we may provide the necessary information to these institutions, organizations, and authorities.

-If you make your payment by credit card, we transfer your credit card information to third parties, such as the relevant bank or electronic payment institution, which provide the service, without recording it ourselves. Necessary technical and legal measures are taken to prevent rights violations during the data transfer to these third parties. However, Mielo Jewellery is not responsible for any breaches that may occur due to the data protection policies of the third parties receiving your personal data, nor for any risks that fall under the responsibility of those third parties.

- What are your rights under the Personal Data Protection Law?

As data subjects, if you submit your requests regarding your rights to Mielo Jewellery using the methods outlined below, Mielo Jewellery will respond to your request as soon as possible and within a maximum of 30 business days, depending on the nature of the request.

Data subjects, within the scope of Law No. 6698, can apply to the data controller and request the following:

- To learn whether personal data has been processed,

- To request information about the personal data if it has been processed,

- To learn the purpose of processing personal data and whether it has been used for its intended purpose,

- To know the third parties to whom personal data has been transferred, both domestically and abroad,

- To request correction of personal data if it is incomplete or incorrect,

- To request the deletion, destruction, or anonymization of personal data, in accordance with the relevant laws, especially when the reasons for processing no longer exist, even if it was processed in compliance with the Personal Data Protection Law and other relevant legislation. This includes the right to request the deletion or destruction of personal data if the conditions for processing are no longer valid.

- To request that the actions taken under clauses (e) and (f) (i.e., correction, deletion, destruction, or anonymization of personal data) be notified to third parties to whom personal data has been transferred,

- To object to a decision made solely based on automated processing, including profiling, that has legal consequences or significantly affects the individual, especially when the processed data is analyzed by automatic systems,

- To request compensation for damages arising from the unlawful processing of personal data.

As Mielo Jewellery, we reserve the right to stop using certain cookies, modify their types or functions, or add new cookies to our website. Consequently, we may update or change the provisions of this text at any time. Any changes made to this text will take effect once they are published on our website.

You can submit your applications to Mielo Jewellery, as the Data Controller, through the communication channels specified below. (Please note that if the relevant request must be made in a specific manner as required by law, that procedure must be followed.)

Address: Yeniçeri Cad. Taşdirek Çeşme Sok. No:10 Floor:2 Çemberlitaş ISTANBUL

Phone: +90 212 516 09 25

E-Mail: [email protected]

Internet Address: www.mielojewellery.com

COOKIE POLICY AND COOKIE INFORMATION TEXT

The data provided by our customers to the www.mielojewellery.com website, the Mielo Jewellery mobile application, and the telephone order line are processed by Mielo Jewellery in accordance with our customers' consent and in compliance with the relevant legal provisions.

As part of our services, Mielo Jewellery uses various types of cookies on both the Mobile Application and Website. These cookies are used to conduct statistical studies on usage patterns, to deliver targeted advertisements and promotions, and to ensure an optimal customer experience.

A cookie is a small file consisting of letters and numbers that is stored on the device's internet browser or hard disk. It allows the device to be identified.

The cookies on www.mielojewellery.com store information collected through log files, web beacons (also known as "clear GIFs"), and/or third-party sources to create a summary of your preferences and usage behaviors.

We use two types of cookies on our site: session cookies and persistent cookies. Session cookies are temporary and only remain valid until you close your browser. Persistent cookies remain on your hard drive until you manually delete them or until they expire (the duration for which they remain on your device depends on their 'lifespan').

www.mielojewellery.com uses cookies to remember your preferences and personalize your experience on the website and mobile application. This includes cookies that save your login information and keep you logged in, so you don’t have to enter your password each time you visit. These cookies also help us recognize you on subsequent visits to the website or mobile application.

We also use cookies to analyze how you interact with the website and mobile application, including how you navigate the site, which content you view, and the duration of your visits. This information helps us improve your user experience.

Additionally, www.mielojewellery.com uses cookies for advertising purposes. These cookies allow us to show you advertisements that may be of interest to you when you visit search engines, the website, mobile application, and other websites where we advertise. Advertising technologies collect information about your previous visits to our website, mobile application, and other sites where we advertise, to deliver personalized ads. To serve these ads, a unique third-party cookie may be placed on your browser, allowing us to recognize you on subsequent visits.

Mielo Jewellery also uses Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses cookies to collect data on how users interact with the website, mobile application, and/or mobile site. This data is used to generate statistical reports about usage. For more information on Google Analytics, including how to opt out, please visit: Google Privacy Policy.

In the mobile application, we use the Software Development Kit (SDK) of the relevant application instead of cookies.

You can control and manage your cookies preferences through the following methods, depending on the browser you are using:

• Google Chrome: To manage cookies, click on the "lock icon" in the address bar and select the "Cookies" tab, where you can allow or block cookies.
• Internet Explorer: Go to the "Tools" section at the top right of your browser, click on the "Security" tab, and select your preferred cookie settings ("Allow" or "Don't allow").
• Mozilla Firefox: Click the "Menu" icon in the top right corner, select "Options," then go to the "Privacy & Security" section to manage cookies.
• Opera: Go to "Preferences" > "Advanced" and select the "Cookies" section to manage your cookie preferences.
• Safari: On your iPhone, open the "Settings" app, select "Safari," then go to the "Privacy & Security" section to manage cookies.

Additionally, to learn more about cookies and manage your preferences across websites, you can visit the following resources:

• All About Cookies
• Your Online Choices
• Privacy Badger by EFF

Please note that if you choose to reject persistent or session cookies, you may still be able to use the website, mobile application, and mobile site. However, certain features may not be accessible, and your experience may be limited.

INFORMATION ON E-BULLETIN AND COMMERCIAL ELECTRONIC MESSAGES

INFORMATION TEXT FOR BULLETIN MEMBER

In this Information Text, the principles regarding the processing of your personal data in accordance with the Law on the Protection of Personal Data No. 6698 (the "Law") and relevant legislation are outlined. These principles apply to data processing activities conducted by the data controller, ANI KUYUMCULUK TURZ. İNŞ. SAN. FOREIGN TİC. LTD. ŞTİ. ("Company"), located at Yeniçeri Cad. Taşdirek Çeşme Sok. No:10, Kat:2, Çemberlitaş, Istanbul.

1. Purpose of Processing Personal Data

Your email address, obtained as a result of your registration to our e-bulletin list, is processed for the purpose of sending you informative and promotional content. This includes sharing e-bulletins related to product promotions, as well as emails containing advertising, promotions, introductions, and campaign information. Additionally, your email address may be used for monitoring, analysis, and marketing activities related to business development projects in this field.

2. Method and Legal Reason for Collection of Personal Data

Personal data collected for e-bulletin membership is gathered electronically, in a partially automated manner, when the individual voluntarily submits their information in the e-bulletin registration section. This data is processed in accordance with the Law, based on the explicit consent given by the individual upon their request for e-bulletin membership, as outlined in Article 5/1 of the Law. Additionally, it is processed under the legal basis of "processing your data is necessary for our legitimate interests, provided that it does not violate your fundamental rights and freedoms," as specified in Article 5/2(f) of the Law.

3. Transfer Locations of Processed Personal Data and Purpose of Transfer

The purposes for processing and transferring personal data are aligned. Our Company may transfer the personal data it collects to institutions and organizations with which it collaborates in order to carry out its activities, to foreign countries due to the location of the servers used by the Company, and, upon request, to relevant public authorities, official institutions, and business partners, in accordance with the data processing conditions and purposes specified in Articles 8 and 9 of the Law.

4. Ways to Apply to the Data Controller and Your Rights

Under Article 11 of the Law, you have the right to apply to our Company and request the following regarding your personal data:

a) To learn whether your personal data has been processed,
b) If your personal data has been processed, to request information about it,
c) To learn the purpose of processing your personal data and whether it is being used for its intended purpose,
d) To learn the recipients, both domestic and international, to whom your personal data has been transferred,
e) To request correction if your personal data has been processed incompletely or incorrectly,
f) To request deletion or destruction of your personal data in accordance with the conditions set out in Article 7 of the Law,
g) To request that any transactions performed under subparagraphs (e) and (f) be notified to third parties to whom your data has been transferred,
h) To object to any result that may arise against you as a result of automated processing of your personal data,
i) To request compensation for any damages you may suffer due to unlawful processing of your personal data.

You can submit your information and requests regarding your rights, as specified above, to our Company in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Applications can be sent to us at the following address:

Yeniçeri Cad. Taşdirek Çeşme Sok. No:10 Kat:2 Çemberlitaş, İSTANBUL.Our Company will respond to your requests as soon as possible and within 30 days at the latest, depending on the nature of the request. The first request will be processed free of charge. However, a fee may be charged for subsequent requests on the same subject or if additional costs are incurred for fulfilling the request. Our Company reserves the right to either accept and process the request or to reject it in writing, providing an explanation for the rejection.

If the application made in accordance with the procedure outlined above is rejected, the response provided is deemed insufficient, or if the application is not responded to within the required time frame, you have the right to file a complaint with the Personal Data Protection Board ("Board") within 30 days following the notification of the response, or within 60 days from the date of the application. However, a complaint cannot be filed without first exhausting the application method.Upon receiving a complaint or learning of an alleged violation, the Board will conduct an investigation within its scope of authority. If the complaint is substantiated, the Board will examine the matter and provide a response to the relevant parties. If no response is provided within 60 days from the date of the complaint, the request is considered to have been rejected.If the Board determines that a violation has occurred following the investigation, whether due to a complaint or ex officio, it will order the data controller to remedy the identified issues. The Board will notify the relevant parties, and the decision must be implemented promptly, no later than 30 days after notification.In cases where there is clear illegality or where irreparable or significant damages may arise, the Board may also decide to suspend data processing or the transfer of data abroad.

INFORMATION ABOUT COMMERCIAL ELECTRONIC MESSAGES

By agreeing to this, I acknowledge that, in accordance with the Law on the Regulation of Electronic Commerce, my contact information, including mobile/home/work phone numbers and email address, will be collected for the purpose of sending me commercial electronic messages. I understand that I can change my communication preferences at any time, without providing any reason, and that I can opt out of receiving such commercial electronic communications by clicking the relevant link in the electronic messages I receive (or through the system established by the authorized authorities, if applicable). However, I am aware that legally required communications will continue regardless of my preferences.Within this context, I give my explicit consent to receive commercial electronic messages for purposes such as promotions, advertisements, campaigns, discounts, sales, marketing activities, as well as for information related to products and services, store cards, credit cards, membership applications, and any other related communications. I agree to be contacted via SMS, short messages, instant notifications, automated calls, computers, telephones, fax, email, and other electronic communication channels.