CLARIFICATION TEXT ON THE PROTECTION OF PERSONAL DATA (KVKK)

Last Update: 10.08.2026

1. Data Controller

Within the scope of the Personal Data Protection Law No. 6698 (“KVKK”), the data controller is:

• Seller: Candaş Yatırım Medikal Gıda İnşaat Ticaret Limited Şirketi
• Address: Kızılay, Meşrutiyet Mah. Karanfil Sok. Karanfil İş Merkezi D:3/38 06530 Çankaya / Ankara
• E-mail: info@glamlifestore.com
• Phone: +90 501 148 04 04
• MERSIS / Tax ID: 0200047974300001 / 2000479743

2. Processed Personal Data

Within the scope of transactions carried out via GlamLifeStore;

• Identity information
• Contact information
• Customer transaction information
• Transaction security information
• Financial information
• Invoice and transaction information
• Address information
• Request and complaint information
• Website usage information
• IP and technical connection information

Information obtained through cookies and similar technologies

may be processed.

3. Purposes of Processing Personal Data

Your personal data; ...may be processed for the purposes of:

• executing order and sales processes
• delivering products
• carrying out payment transactions
• managing invoicing and accounting processes
• handling return, cancellation, and right-of-withdrawal processes
• managing customer relations and support services
• conducting information security processes
• preventing fraud and misuse
• fulfilling legal and financial obligations
• complying with requests from competent public authorities
• conducting legal proceedings
• developing the website and services
• improving the user experience

and conducting marketing and commercial communication activities, provided that the necessary legal conditions are met.

4. Legal Grounds for Processing Personal Data

Your personal data may be processed based on the legal grounds set forth in Article 5 of the KVKK (Personal Data Protection Law), depending on the specific processing activity.

These legal grounds may include:

• Being expressly provided for by law
• Being necessary for the establishment or performance of a contract
• Compliance with a legal obligation to which the data controller is subject

Data processing being mandatory for the establishment, exercise, or protection of a right,

The existence of a legitimate interest, provided it does not harm the fundamental rights and freedoms of the data subject,

Explicit consent, where required.

Explicit consent is obtained separately for data processing activities that require it.

5. Method of Collecting Personal Data

Personal data may be collected via automated or partially automated methods through:

• The glamlifestore.com website
• Membership and account creation forms
• Order and payment screens
• Contact forms
• E-mail
• Telephone
• Customer service channels
• Cookies and similar technologies
• Shipping and delivery processes

6. Parties to Whom Personal Data May Be Transferred

Your personal data may be transferred—where necessary and in accordance with applicable legislation—to:

• Shipping and logistics service providers
• Payment institutions and banks
• E-commerce infrastructure providers
• Technical service providers
• Accounting and financial advisory service providers
• Legal and consultancy service providers
• Authorized public institutions and organizations

7. Rights of the Data Subject

Under Article 11 of the KVKK, data subjects have the right to: ...has the right to:

• Learn whether their personal data is being processed
• Request information regarding such processing

Learn the purpose of the processing and whether the data is being used in accordance with that purpose,

• Know the third parties to whom the data is transferred domestically or abroad
• Request the correction of the data if it is incomplete or incorrectly processed

Request the deletion or destruction of the data within the scope of the conditions prescribed by law,

Request that the correction, deletion, or destruction operations be notified to the third parties to whom the data was transferred,

Object to a result adverse to the individual arising from analysis performed exclusively through automated systems,

Demand compensation for damages incurred due to unlawful data processing.

8. Application

You may submit your requests under the KVKK (Personal Data Protection Law) via the following channels, in accordance with the application methods prescribed by the KVKK and relevant legislation:

• E-mail: info@glamlifestore.com
• Address: Kızılay, Meşrutiyet Mah. Karanfil Sok. Karanfil İş Merkezi D:3/38 06530 Çankaya / Ankara

Applications will be evaluated within the timeframes stipulated by the relevant legislation.

Data Controller: CANDAŞ YATIRIM MEDİKAL GIDA İNŞAAT TİCARET LİMİTED ŞİRKETİ / Glamlife Güzellik Hizmetleri