Privacy Notice for Website

This Privacy Notice (the "Notice") is prepared to inform and enlighten Users, including Members who register on www.trueshepherdco.com (the "Site"), and Visitors who access the Site, about the terms and conditions regarding the use of data obtained and/or to be obtained from Users within the scope of the services provided through the Site, operated and managed by the data controller located at ATATÜRK MAH. ERTUĞRUL GAZİ SK. METROPOL ISTANBUL C1 BLOCK NO: 2 B INNER DOOR NO: 376 ATAŞEHİR/ISTANBUL (the "Company").

The Company collects personal data audibly, electronically, or in writing, through the Site, social media accounts, email, mail, call center, fax, and notifications received from administrative and judicial authorities, in accordance with the personal data processing conditions specified in the Law and for the legal reasons and purposes specified in this Notice.

1 - Data Subjects, Data Categories, and Types of Data

Member

Identity Information

Name, surname, Turkish ID number, date of birth.

Customer Transaction

Order information

Contact Information

Username, email address, phone number, residential address, country, and city of residence.

Transaction Security

IP address, ID information, log transactions, website login and logout information, password information, transaction date and time.

Marketing

Site navigation information, past usage information, responses to shopping/promotion, hobbies, shopping preferences, other cookie records collected through third-party companies via the company's website.

Location Information

Information about the accessed location on platforms.

Visitor

Identity Information

Gender, age group.

Transaction Security

IP address, ID information, log transactions, website login and logout information, transaction date and time.

Location Information

Information about the accessed location on platforms.

Marketing

Site navigation information, past usage information, responses to shopping/promotion, hobbies, shopping preferences, other cookie records collected through third-party companies via the company's website.

2 - Legal Basis

The personal data mentioned above may be processed within the scope of the purposes listed below, in accordance with the conditions and principles specified in the Law and repeated in this Notice; within the scope of the personal data processing conditions specified in Articles 5 and 6 of the Law. The legal bases for each data category are explicitly stated below:

Member

Identity Information

Contact Information

• Necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract,
• Necessary for the establishment, exercise, or defense of legal claims

Customer Transaction

Transaction Security

Location

• Explicitly prescribed by the laws,
• Necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract,
• Necessary for the fulfillment of the legal obligation of the Company,
• Necessary for the establishment, exercise, or defense of legal claims.

Marketing

• Necessary for the legitimate interests pursued by the Company, provided that the fundamental rights and freedoms of the data subject are not overridden,
• Made public by the data subject.

Visitor

Identity Information

Transaction Security

Location Information

Marketing

• Necessary for the legitimate interests pursued by the Company, provided that the fundamental rights and freedoms of the data subject are not overridden,
• Made public by the data subject.

3 - Purpose of Processing Personal Data

Personal data subjects process the personal data listed in Article 2 of this Notice for the following purposes in accordance with the general conditions stated in this Notice:

Member

Identity Information

Contact Information

Based on the legal basis of necessity for the legitimate interests of the Company, provided that the fundamental rights and freedoms of the data subject are not overridden;

• Conducting information security processes
• Conducting audit/ethical activities
• Execution of access permissions
• Conducting communication activities
• Conducting customer satisfaction activities
• Conducting product/service marketing processes

Explicitly prescribed by the laws and necessary for the fulfillment of the legal obligation of the Company, based on the legal basis of necessity;

• Fulfillment of legal storage obligations,
• Fulfillment of requests from public institutions and organizations,
• Responding to requests from data subjects if any,
• Pursuit and execution of legal affairs
• Pursuit of requests and complaints

Customer Transaction

Transaction Security

Location

Based on the legal basis of necessity for the legitimate interests of the Company, provided that the fundamental rights and freedoms of the data subject are not overridden;

• Conducting information security processes
• Conducting audit/ethical activities
• Execution of access permissions
• Compliance with regulations
• Conducting Logistic Activities
• Providing information to authorized persons, institutions, and organizations
• Conducting communication activities

Explicitly prescribed by the laws and necessary for the fulfillment of the legal obligation of the Company, based on the legal basis of necessity;

• Fulfillment of legal storage obligations,
• Fulfillment of requests from public institutions and organizations,
• Responding to requests from data subjects if any,
• Pursuit and execution of legal affairs
• Pursuit of requests and complaints

Marketing

Based on the legal basis of necessity for the legitimate interests of the Company, provided that the fundamental rights and freedoms of the data subject are not overridden;

• Conducting loyalty processes to the company's products/services
• Conducting activities to ensure business continuity
• Conducting activities for customer satisfaction
• Conducting marketing analysis studies
• Conducting advertising, campaign, promotion processes
• Conducting product/service marketing processes

Visitor

Identity Information

Transaction Security

Location Information

Marketing

Based on the legal basis of necessity for the legitimate interests of the Company, provided that the fundamental rights and freedoms of the data subject are not overridden;

• Conducting loyalty processes to the company's products/services
• Conducting communication activities
• Conducting activities for business continuity
• Conducting activities for customer satisfaction
• Conducting marketing analysis studies
• Conducting advertising, campaign, promotion processes
• Conducting product/service marketing processes

4 - Transfer of Personal Data

The Company may transfer the personal data it obtains from data subjects to its servers and suppliers within the country and to legally authorized public institutions and legally authorized private institutions in accordance with the transfer conditions specified in Article 8 of the Law, provided that it fulfills its obligations stated in this Notice, in order to perform the services it offers through the Company's Platforms.

5 - Rights of the Data Subject

As personal data subjects, you can indicate your requests regarding your rights and use your rights on your personal data by completing the "Data Subject Application Form" and sending it to the Company's email address hello@trueshepherdco.com securely with an electronic signature, or personally or by notary via written application to the Company's address ATATÜRK MAH. ERTUĞRUL GAZİ SK. METROPOL ISTANBUL C1 BLOCK NO: 2 B INNER DOOR NO: 376 ATAŞEHİR/ISTANBUL or via your personal email address. If you transmit your requests to us through the specified methods, the Company will conclude your request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction also requires a cost, the fee specified in the tariff determined by the Personal Data Protection Board will be charged by the Company. In this context, as personal data subjects;

• You have the right to learn whether your personal data is processed or not,
• You have the right to request information if your personal data has been processed,
• You have the right to learn the purpose of the processing of personal data and whether data is used in accordance with its purpose,
• You have the right to know the third parties to whom personal data is transferred domestically or abroad,
• You have the right to request correction of personal data if it is incomplete or incorrectly processed,
• You have the right to request the deletion or destruction of personal data in accordance with the conditions set out in Article 7 of the Law,
• You have the right to request notification of the operations made as per subparagraphs (d) and (e) of Article 11 to third parties to whom personal data have been transferred,
• You have the right to object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems,
• You have the right to request compensation for damages in case personal data is processed unlawfully and causes damages.

In order to use your rights and indicate your requests regarding your rights, you need to submit a written application including your explanations regarding the requested subject, your identity and address information, and supporting documents proving your identity. The requested subject should be clear and comprehensible. Additionally, if you are acting on behalf of someone else, you need to be specially authorized in this regard and your authority must be documented.

6 - Changes to the Notice

The Company may make changes to this Notice at any time. These changes will take effect immediately upon the publication of the modified new text. You will be informed of the changes in this Notice, and necessary notifications will be made to you for you to be aware of the changes.