ETHERA PERSONAL DATA PROTECTION AND PROCESSING POLICY

ETHERA Personal Data Protection and Processing Policy

1. Purpose and Scope

This policy has been prepared to explain the personal data processing activities carried out by ETHERA MÜCEVHER SANAYİ VE TİCARET LİMİTED ŞİRKETİ within the framework of the Personal Data Protection Law No. 6698 (“KVKK”) and relevant legislation, and to share with the public the fundamental principles adopted in the processing of personal data.

The policy covers our customers, visitors, members, employee candidates, business partners, and third parties.

2. Data Controller

Pursuant to the KVKK, the data controller is:

ETHERA MÜCEVHER SANAYİ VE TİCARET LİMİTED ŞİRKETİ

MERSIS No: 0381113341300001

Address: Kavacık Mah. Ertürk Sk. No:1 Interior Door No:3 BEYKOZ/ISTANBUL

Phone: +90 543 849 82 99

E-mail: contact@etherajewelry.com

3. Purposes of Processing Personal Data

Collected personal data are processed for the following purposes:

Receiving orders, preparation and delivery of products

Carrying out payment transactions

Managing membership processes

Providing customer relations and support services

Conducting marketing, campaign and promotional activities (subject to explicit consent)

Measuring customer satisfaction and quality

Fulfilling legal obligations and providing information to official authorities

4. Personal Data Processed

The personal data processed by ETHERA MÜCEVHER SANAYİ VE TİCARET LİMİTED ŞİRKETİ are as follows:

Identity Information (name, surname, Turkish ID number – in special cases)

Contact Information (address, phone, e-mail)

Financial Information (payment information, invoice information)

Customer Transaction Information (orders, requests, complaints)

Cookie data and online usage information

Optional information obtained during membership (date of birth, gender, etc.)

5. Transfer of Personal Data

Collected personal data:

To authorized public institutions and organizations for the purpose of fulfilling legal obligations,

To cargo companies for the purpose of carrying out logistics and delivery processes,

To banks and payment institutions for payment processes,

To our technology providers within the scope of IT infrastructure services (e.g. Shopify, Amazon Web Services, etc.),

may be transferred in accordance with the relevant legislation.

When transfer abroad is required, standard contracts are executed in compliance with the KVKK or explicit consent is obtained.

6. Method of Collection and Legal Grounds

Personal data are collected through our website, membership forms, contracts, e-mail, call center, social media, and cookies.

Legal grounds:

KVKK Art. 5/2(c): Being necessary for the establishment or performance of a contract

KVKK Art. 5/2(e): Being necessary for the establishment, exercise or protection of a right

KVKK Art. 5/2(f): Legitimate interests of the data controller

KVKK Art. 5/1: Explicit consent

7. Data Retention Periods

Personal data are retained for the period stipulated in the relevant legislation or required by the purposes of processing. Upon the expiration of the period, personal data are deleted, destroyed, or anonymized.

8. Data Security

ETHERA MÜCEVHER SANAYİ VE TİCARET LİMİTED ŞİRKETİ takes all necessary technical and administrative measures to protect the confidentiality and integrity of personal data. In this context:

Security software and firewall systems are used against unauthorized access,

Access authorizations are restricted,

Data are encrypted and regularly backed up.

9. Rights of the Data Subject

Pursuant to KVKK Art. 11, data subjects may apply to the data controller to:

Learn whether their personal data are processed,

Request information if processed,

Learn whether they are used in accordance with their purpose,

Know the third parties to whom they are transferred,

Request correction if incomplete or incorrectly processed,

Request deletion or destruction within the scope of KVKK Art. 7,

Request compensation in case of damage due to unlawful processing.

To exercise these rights, you may contact us via etheramaisongemme@gmail.com.

10. Entry into Force of the Policy

This policy entered into force on 27/08/2025. ETHERA MÜCEVHER SANAYİ VE TİCARET LİMİTED ŞİRKETİ may amend this policy when deemed necessary and publish the updated version on its website.