Randevu ve İletişim Aydınlatma Metni

PRIVACY POLICY FOR THE COMMUNICATION (APPOINTMENT) FORM PURSUANT TO LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA

Data Controller: Kiğılı Giyim Ticaret Anonim Şirketi (BRIANT markası)

Address: Aeropark Yenişehir Mah. Osmanlı Bulvarı No:11/B 34912 Kurtköy – Pendik/İstanbul

İşbu Aydınlatma Metni, BRIANT markasının sahibi Kiğılı Giyim Ticaret Anonim Şirketi (“Kiğılı” veya “Şirketimiz”) olarak 6698 sayılı Kişisel Verilerin Korunması Kanunu (“KVKK”) ve ilgili mevzuat kapsamında, https://www.briant.com.tr/randevu/ This Privacy Policy has been prepared by Kiğılı Giyim Ticaret Anonim Şirketi, the owner of the BRIANT brand (“Kiğılı” or “our Company”), in order to inform you, within the scope of Law No. 6698 on the Protection of Personal Data (“KVKK”) and the relevant legislation, regarding the processing, storage and transfer of your personal data that you submit to us through the appointment/contact form available at https://www.briant.com.tr/randevu/. Other privacy policies of our Company regarding the protection of personal data are available at https://www.briant.com.tr/ https://www.briant.com.tr/ adresinde yer almaktadır.

YOUR PERSONAL DATA PROCESSED AND METHOD OF COLLECTION

If you fill out the appointment form, the following personal data will be obtained electronically and by automated means when you submit the form:

Data Category	Form Field	Explanation
Identity	Name and Surname	For determining on whose behalf the appointment is created and for addressing you.
Contact	Telephone, E-mail	For confirming your appointment, sending change/cancellation notifications and contacting you regarding your request.
Customer Transaction	Service Request, Preferred Date, Preferred Time	For planning the service you request, such as made-to-measure tailoring, fitting or alteration, and the appointment time.
Transaction Security	IP address, browser and device information, form submission time, security verification result (Cloudflare Turnstile)	For verifying that the form is submitted by a real person, preventing abuse and keeping submission records.

By filling out the form, you confirm that you have read this Privacy Policy and have been informed. Please do not write personal data belonging to third parties or special categories of personal data, such as health data, in the form fields other than the requested information.

PURPOSES AND LEGAL GROUNDS FOR PROCESSING YOUR PERSONAL DATA

Your personal data will be processed by our Company for the following purposes and legal grounds within the scope of the personal data processing conditions set forth under Article 5 of the KVKK:

Data Category	Legal Ground	Purpose of Processing
Identity, Contact, Customer Transaction	Bir sözleşmenin kurulması veya ifasıyla doğrudan doğruya ilgili olması kaydıyla, sözleşmenin taraflarına ait kişisel verilerin işlenmesinin gerekli olması (KVKK m. 5 f. 2 c bendi) Processing being necessary for the data controller to fulfil its legal obligation. (KVKK Art. 5/2-ç) Processing being necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. (KVKK Art. 5/2-f)	Receiving, planning, confirming and managing appointment requests conducting communication activities carrying out goods/services sales processes carrying out after-sales support services for goods/services conducting customer relationship management processes carrying out activities aimed at customer satisfaction conducting contractual processes following up requests/complaints
Transaction Security	İlgili kişinin temel hak ve özgürlüklerine zarar vermemek kaydıyla, veri sorumlusunun meşru menfaatleri için veri işlenmesinin zorunlu olması (KVKK m. 5 f. 2 f bendi) Veri sorumlusunun hukuki yükümlülüğünü yerine getirebilmesi için zorunlu olması (KVKK m. 5 f. 2 ç bendi)	Conducting information security processes preventing automated/malicious form submissions Carrying out activities in compliance with the legislation; providing information to authorized persons, institutions and organizations.

Data Category

Legal Ground

Purpose of Processing

Identity, Contact, Customer Transaction

Bir sözleşmenin kurulması veya ifasıyla doğrudan doğruya ilgili olması kaydıyla, sözleşmenin taraflarına ait kişisel verilerin işlenmesinin gerekli olması (KVKK m. 5 f. 2 c bendi)

Processing being necessary for the data controller to fulfil its legal obligation. (KVKK Art. 5/2-ç) Processing being necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. (KVKK Art. 5/2-f)

Receiving, planning, confirming and managing appointment requests
conducting communication activities
carrying out goods/services sales processes
carrying out after-sales support services for goods/services
conducting customer relationship management processes
carrying out activities aimed at customer satisfaction
conducting contractual processes
following up requests/complaints

Transaction Security

İlgili kişinin temel hak ve özgürlüklerine zarar vermemek kaydıyla, veri sorumlusunun meşru menfaatleri için veri işlenmesinin zorunlu olması (KVKK m. 5 f. 2 f bendi)

Veri sorumlusunun hukuki yükümlülüğünü yerine getirebilmesi için zorunlu olması (KVKK m. 5 f. 2 ç bendi)

Conducting information security processes
preventing automated/malicious form submissions
Carrying out activities in compliance with the legislation;
providing information to authorized persons, institutions and organizations.

Your personal data shared through the appointment form will not be used for sending advertisements, campaigns or similar commercial electronic messages unless you give separate consent.

PARTIES TO WHOM PERSONAL DATA IS TRANSFERRED AND PURPOSES OF TRANSFER

Your personal data may be transferred to the following third parties and for the purposes specified below, within the framework of the personal data processing conditions and purposes set forth under Articles 8 and 9 of the KVKK:

Third Party	Data Categories	Aktarımın Amacı ve Hukuki Sebebi
BRIANT store/workshop where the appointment will take place, business partners, affiliates, subsidiaries, group companies and suppliers, including contracted tailors	Identity, Contact, Customer Transaction	Fulfilment of the appointment and the requested service. Processing being directly related to the establishment or performance of a contract (KVKK Art. 5/2-c); processing being necessary for the establishment, exercise or protection of a right (KVKK Art. 5/2-e); legitimate interest of the data controller (KVKK Art. 5/2-f). Bir sözleşmenin kurulması veya ifasıyla doğrudan doğruya ilgili olması (KVKK m. 5 f. 2 c bendi); bir hakkın tesisi, kullanılması veya korunması için veri işlemenin zorunlu olması (KVKK m. 5 f. 2 e bendi); veri sorumlusunun meşru menfaati (KVKK m. 5 f. 2 f bendi)
IT infrastructure and service providers, acting as data processors: e-mail infrastructure provider Microsoft, as form notifications are sent by e-mail; security verification service provider Cloudflare; server/hosting service provider	Identity, Contact, Customer Transaction, Transaction Security	Formun güvenli biçimde alınması, saklanması ve Şirketimize iletilmesi. Bu sağlayıcıların sunucuları yurt dışında bulunabildiğinden kişisel verileriniz, KVKK m. 9 kapsamında ve Şirketimizce gerekli yasal tedbirler alınarak yurt dışına aktarılabilmektedir. Veri sorumlusunun meşru menfaati (KVKK m. 5 f. 2 f bendi)
Authorized public institutions and organizations, judicial and administrative authorities, legal advisors	Identity, Contact, Customer Transaction, Transaction Security	Hukuki yükümlülüklerin yerine getirilmesi ve hukuki süreçlerin yürütülmesi. Fulfilment of legal obligations and conduct of legal processes. Processing being necessary for the data controller to fulfil its legal obligation (KVKK Art. 5/2-ç); processing being necessary for the establishment, exercise or protection of a right (KVKK Art. 5/2-e).

Third Party

Data Categories

Aktarımın Amacı ve Hukuki Sebebi

BRIANT store/workshop where the appointment will take place, business partners, affiliates, subsidiaries, group companies and suppliers, including contracted tailors

Identity, Contact, Customer Transaction

Fulfilment of the appointment and the requested service. Processing being directly related to the establishment or performance of a contract (KVKK Art. 5/2-c); processing being necessary for the establishment, exercise or protection of a right (KVKK Art. 5/2-e); legitimate interest of the data controller (KVKK Art. 5/2-f).

Bir sözleşmenin kurulması veya ifasıyla doğrudan doğruya ilgili olması (KVKK m. 5 f. 2 c bendi); bir hakkın tesisi, kullanılması veya korunması için veri işlemenin zorunlu olması (KVKK m. 5 f. 2 e bendi); veri sorumlusunun meşru menfaati (KVKK m. 5 f. 2 f bendi)

IT infrastructure and service providers, acting as data processors: e-mail infrastructure provider Microsoft, as form notifications are sent by e-mail; security verification service provider Cloudflare; server/hosting service provider

Identity, Contact, Customer Transaction, Transaction Security

Formun güvenli biçimde alınması, saklanması ve Şirketimize iletilmesi. Bu sağlayıcıların sunucuları yurt dışında bulunabildiğinden kişisel verileriniz, KVKK m. 9 kapsamında ve Şirketimizce gerekli yasal tedbirler alınarak yurt dışına aktarılabilmektedir.

Veri sorumlusunun meşru menfaati (KVKK m. 5 f. 2 f bendi)

Authorized public institutions and organizations, judicial and administrative authorities, legal advisors

Identity, Contact, Customer Transaction, Transaction Security

Hukuki yükümlülüklerin yerine getirilmesi ve hukuki süreçlerin yürütülmesi.

Fulfilment of legal obligations and conduct of legal processes. Processing being necessary for the data controller to fulfil its legal obligation (KVKK Art. 5/2-ç); processing being necessary for the establishment, exercise or protection of a right (KVKK Art. 5/2-e).

RETENTION PERIOD OF PERSONAL DATA

Your personal data obtained through the appointment form will be retained until the process relating to the appointment and the service you requested is completed and throughout the limitation periods stipulated under the relevant legislation, in accordance with our Company’s Personal Data Retention and Destruction Policy. At the end of these periods, it will be deleted, destroyed or anonymized.

RIGHTS OF THE PERSONAL DATA SUBJECT SET FORTH UNDER ARTICLE 11 OF LAW NO. 6698

Pursuant to Article 11 of the KVKK, you have the right to learn whether your personal data is processed, to request information if it has been processed, to learn the purpose of processing and whether it is used in accordance with such purpose, to know the third parties to whom it is transferred domestically or abroad, to request correction if it has been processed incompletely or inaccurately, to request deletion or destruction within the framework of the conditions set forth under Article 7 of the KVKK, to request notification of these operations to third parties to whom it has been transferred, to object to the occurrence of a result against you through analysis exclusively by automated systems, and to claim compensation if you suffer damage due to unlawful processing.

You may submit your applications and requests regarding your personal data to Kiğılı Giyim Ticaret Anonim Şirketi, preferably through the Data Subject Application Form, by one of the following methods:

By sending a wet-signed application together with a copy of your identity document to Aeropark Yenişehir Mah. Osmanlı Bulvarı No:11/B 34912 Kurtköy – Pendik/İstanbul;
By applying in person to Kiğılı Giyim Ticaret Anonim Şirketi at Aeropark Yenişehir Mah. Osmanlı Bulvarı No:11/B 34912 Kurtköy – Pendik/İstanbul together with a valid identity document;
• By signing the application with a mobile signature or secure electronic signature and sending it by e-mail to kvkk@kigili.com.tr;
By sending it to the registered electronic mail (“KEP”) address 0562003566100015@hs02.kep.tr using a registered electronic mail address, secure electronic signature or mobile signature;
By sending an e-mail to kvkk@kigili.com.tr through your e-mail address registered in the Kiğılı Giyim Ticaret Anonim Şirketi system.

Kiğılı Giyim Ticaret Anonim Şirketi system.

Pursuant to the Communiqué on the Procedures and Principles of Application to the Data Controller, the Data Subject’s application must include name, surname, signature if the application is in writing, Turkish identity number or passport number if the applicant is a foreigner, residential or workplace address for notification, e-mail address for notification if any, telephone and fax number, and information regarding the subject of the request.

In the application to be made for the exercise of the above-mentioned rights, the Data Subject must clearly and comprehensibly state the matter requested, together with explanations regarding the right they request to exercise. Information and documents relating to the application must be attached to the application.

Although the subject matter of the request must relate to the applicant personally, if acting on behalf of another person, the applicant must be specifically authorized in this regard and such authorization must be documented by a power of attorney. In addition, the application must include identity and address information, and documents verifying identity must be attached to the application. Requests made by unauthorized third parties on behalf of another person will not be taken into consideration.

Your requests regarding your personal data rights will be evaluated and responded to within 30 days at the latest from the date they reach us. If your application is rejected, the justified reasons for rejection will be sent to the address specified in your application, primarily by e-mail or post and, where possible, through the same method by which the request was made.

KİĞILI GİYİM TİCARET ANONİM ŞİRKETİ