3. Personal Data to be Processed Based on Customers' Explicit Consent and the Purposes of Processing:

For the situations listed below, where the conditions for processing personal data specified in Articles 5/2 and 6/3 of the Law cannot be met, the explicit consent of the customers must be obtained by trimbox.com.tr for the processing of personal data. Within this scope, customers' personal data may be processed based on their consent for the purposes of creating campaigns aimed at customers, cross-selling, determining target audiences, conducting activities to enhance user experience by tracking customer movements, improving and personalizing the operation of the trimbox.com.tr website and mobile application according to customer needs, direct and indirect marketing, personalized marketing and remarketing activities, personalized segmentation, targeting, analysis, and internal company reporting activities, market research, planning and execution of customer satisfaction activities, as well as planning and execution of customer relationship management processes. This also includes the planning and execution of sales and marketing processes for trimbox.com.tr’s products and/or services, and the planning and execution of processes aimed at creating and/or increasing loyalty to the products and/or services offered by trimbox.com.tr. All these activities will be conducted based on the customer’s given approval and may be shared with the parties stated in this Disclosure and Consent Text.

4. Transfer of Personal Data Belonging to Customers:

Personal data belonging to customers may be shared within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, including but not limited to the following: for the necessary work to be carried out by relevant business units to enable related persons to benefit from the products and services offered by trimbox.com.tr and to conduct the relevant business processes; for the necessary work to be carried out by relevant business units and to carry out related business processes for the realization of commercial activities conducted by trimbox.com.tr; for the planning and execution of trimbox.com.tr’s commercial and/or business strategies; for ensuring the legal, technical, and commercial-business security of trimbox.com.tr and the related persons who have a business relationship with trimbox.com.tr; for planning and executing the activities necessary to customize, recommend, and promote trimbox.com.tr’s products and services according to the preferences, usage habits, and needs of the related persons.

Within this scope, personal data may be shared with Kolay Koli A.Ş. company officials, our subsidiaries, business partners, suppliers, shareholders, legally authorized public institutions and organizations, as well as private institutions.

5. Method of Collecting Personal Data and Legal Basis:

Personal data is collected electronically from customers. Personal data collected based on the legal grounds mentioned above may be processed and transferred for the purposes specified in Articles 5 and 6 of the Law and in this Disclosure and Consent Text.

6. Rights of Customers as Personal Data Owners:

Pursuant to Article 11 of the Law, data subjects have the following rights:
(i) to learn whether their personal data are being processed,
(ii) to request information if their personal data have been processed,
(iii) to learn the purpose of processing the personal data and whether they are used accordingly,
(iv) to know the third parties to whom personal data have been transferred domestically or abroad,
(v) to request the correction of personal data if they have been processed incompletely or inaccurately and to request that the correction be notified to the third parties to whom the personal data have been transferred,
(vi) to request the deletion or destruction of personal data and that the deletion or destruction be notified to the third parties to whom the personal data have been transferred, if the reasons requiring the processing of the personal data have ceased to exist, despite the personal data having been processed in accordance with the Law and other relevant legislation,
(vii) to object to the emergence of a result against themselves by exclusively analyzing the processed data through automated systems, and
(viii) to demand compensation in case of damage due to unlawful processing of personal data.

Requests regarding the exercise of these rights can be submitted by personal data owners through the methods specified in the Policy on the Processing and Protection of Personal Data by trimbox.com.tr, available at https://www.trimbox.com.tr/. trimbox.com.tr will evaluate these requests and finalize them within 30 days. trimbox.com.tr reserves the right to charge a fee based on the tariff (if any) determined by the Personal Data Protection Board regarding such requests.