PERSONAL DATA PROTECTION AND PRIVACY NOTICE

(Rugsnarts – Carpet Products)

1. Identity of the Data Controller

In accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”), your personal data are processed by:

KARBAS TURİZM VE DIŞ TİCARET LİMİTED ŞİRKETİ
acting as the Data Controller, within the scope explained below.

• Title: KARBAS TURİZM VE DIŞ TİCARET LİMİTED ŞİRKETİ
• Address: Osmanlı Bulvarı, Yenişehir Mahallesi, Ayport Residence, 2A Block, Apartment: 24, Pendik / Istanbul, Türkiye
• Tax Office / Number: Pendik VD – 5231481589
• Phone: +90 507 139 13 76 / +90 537 380 83 07 / +90 533 282 52 64
• E-mail: info@rugsnarts.com
• Registered E-mail (KEP): karbas@hs01.kep.tr

2. For What Purposes Are Your Personal Data Processed?

Your personal data are processed within the scope of the sale of carpet and home textile products for the following purposes:

• Carrying out membership and/or guest shopping transactions
• Managing order, sale, and delivery processes related to carpet products
• Conducting payment, invoicing, and accounting transactions
• Planning and managing cargo, logistics, and delivery processes
• Managing customer support, request, and complaint processes
• Fulfilling legal obligations (tax, accounting, official requests, etc.)
• Preventing fraud, forgery, and unauthorized transactions
• Ensuring website security and keeping log records
• Conducting marketing, campaign, and promotional activities, subject to your explicit consent

3. Categories of Personal Data Processed

The categories of personal data that may be processed within the scope of our activities are as follows:

• Identity Information: Name, surname (and tax information where required)
• Contact Information: Phone number, e-mail address, delivery address
• Customer Transaction Information: Order history, invoice details, product details
• Payment Information: Payment method details
  (Card information is never stored by the Company; payments are processed via authorized payment institutions)
• Transaction Security Information: IP address, device information, log records, cookie data
• Request / Complaint Information: Records submitted through the Website, e-mail, or other communication channels

4. Method and Legal Basis of Collecting Personal Data

Your personal data are collected through:

• The website rugsnarts.com
• Electronic order and contact forms
• E-mail correspondence and customer support channels
• Cargo and logistics processes
• Cookies and similar technologies

Your personal data are processed on the basis of the legal grounds set out in Articles 5 and 6 of KVKK, including:

• Necessity for the establishment or performance of a contract (distance sales contract)
• Necessity for compliance with the data controller’s legal obligations
• Necessity for the protection of the data controller’s legitimate interests (order and delivery security)
• Necessity for the establishment, exercise, or protection of a right
• Your explicit consent (for marketing, advertising, and cookies)

5. Transfer of Personal Data

Your personal data may be transferred, only to the extent necessary and in compliance with applicable legislation, to:

• Authorized public institutions and organizations
• Banks and payment service providers
• Cargo and logistics companies
• Information technology and infrastructure service providers
• Legal advisors and competent authorities

In cases where personal data need to be transferred abroad, compliance with KVKK and the decisions of the Personal Data Protection Authority is ensured.

5.1. Information Regarding Data Subjects Residing Abroad (U.S. Customers)

Personal data processed within the scope of transactions carried out by data subjects residing abroad (in particular, in the United States of America) through the Company’s website are processed in accordance with KVKK and the relevant secondary legislation, for the purposes of:

• Establishment and performance of contracts
• Managing payment and delivery processes
• Fulfilling legal obligations
• Protecting the Company’s legitimate interests

Such personal data are stored within the borders of the Republic of Türkiye, and international data transfers are made only in compliance with KVKK and the decisions of the Personal Data Protection Authority, and where the necessary legal conditions are fulfilled.

Data subjects residing abroad may also exercise their rights set out in Article 11 of KVKK in accordance with the procedures specified in this Privacy Notice.

6. Your Rights Under KVKK

Pursuant to Article 11 of KVKK, you have the right to:

• Learn whether your personal data are being processed
• Request information if your personal data have been processed
• Learn the purpose of processing and whether they are used in accordance with that purpose
• Know the third parties to whom your personal data are transferred, domestically or abroad
• Request correction of incomplete or incorrect personal data
• Request deletion or destruction of your personal data
• Request that the transactions carried out in this context be notified to third parties to whom data have been transferred
• Object to any result arising to your detriment from analysis of your data exclusively through automated systems
• Request compensation for damages arising from unlawful processing of your personal data

7. Application Methods

You may submit your requests within the scope of KVKK:

• In writing
• Via registered e-mail (KEP)
• By e-mail

using the contact details below:

Address: Osmanlı Bulvarı, Yenişehir Mahallesi, Ayport Residence, 2A Block, Apartment: 24, Pendik / Istanbul, Türkiye
E-mail: info@rugsnarts.com
KEP: karbas@hs01.kep.tr

Your applications will be finalized within 30 days at the latest.

8. Updates

This Privacy Notice may be updated in line with changes in legislation or services.
The updated version enters into force as of the date it is published on rugsnarts.com.