Notice on the Processing of Personal Data

This Notice has been prepared by Fenix Dekorasyon İnşaat Turizm Ticaret A.Ş., acting as data controller, pursuant to the Turkish Personal Data Protection Law No. 6698 (“KVKK”).

Its purpose is to inform users, visitors and other data subjects (“Data Subject”) of the Fenix Center AVM website about the personal data processing carried out through the website.

Your personal data is processed within the framework of:

• Law No. 6698 (KVKK),
• decisions of the Personal Data Protection Board (the “Board”),
• secondary legislation (the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform, and the Communiqué on the Procedures and Principles for Applications to the Data Controller),
• Law No. 5651 and related legislation.

The personal data that may be processed when visiting the Fenix Center AVM website is limited to the following categories:

3.1. Identity data

• First and last name (if contact forms are used)

3.2. Contact data

• E-mail address
• Telephone number (if a form is added in the future)

3.3. Transaction security data

• IP address
• Log records
• Traffic data
• Access records

3.4. Technical and device data

• Browser information
• Device type
• Operating system
• Language and time settings

3.5. Cookie data

• Information relating to strictly necessary cookies
• Information relating to performance, analytics and marketing cookies (if explicit consent is given)

Your personal data is collected through:

• visits to the website,
• cookies and similar technologies,
• contact forms (where available or added in the future),
• automated means during the normal operation of the site infrastructure.

The collected personal data is processed for the following purposes:

• Ensuring the secure and uninterrupted operation of the website
• Measuring and improving site performance
• Detecting and resolving technical problems
• Carrying out information security processes
• Responding to user requests and applications
• Fulfilling legal obligations
• Providing information to authorised institutions and organisations

Your personal data is processed on the following legal grounds set out in Article 5 of the KVKK:

• It is expressly provided for by law
• It is necessary for the data controller to fulfil its legal obligations
• It is necessary for the establishment, exercise or protection of a right
• The legitimate interest of the data controller

For non-essential cookies and marketing activities, the explicit consent of the data subject is used as the legal ground.

Your personal data may be transferred to:

• information technology service providers,
• companies providing hosting services,
• legally authorised public institutions and organisations,

only to the extent required by the purposes of processing and in accordance with the KVKK.

Your personal data is retained:

• for as long as the purpose of processing requires,
• taking into account the limitation and retention periods set out in the relevant legislation.

When the purpose of processing no longer exists, the data is erased, destroyed or anonymised in accordance with the KVKK and related legislation.

Under Article 11 of the KVKK, data subjects have the right to:

• learn whether their personal data is processed
• request information about it if it has been processed
• learn the purpose of processing and whether it is used in line with that purpose
• know the third parties to whom it is transferred in Türkiye or abroad
• request correction if it is incomplete or inaccurate
• request erasure or destruction if the reasons for processing no longer exist
• object to a result against them arising from analysis exclusively by automated systems
• claim compensation for damage caused by unlawful processing

Data subjects may submit requests regarding their rights to [email protected]. Applications are concluded within 30 (thirty) days at the latest, in accordance with the KVKK and the relevant Communiqué.