PRIVACY POLICY

Information Notice on the Processing of Personal Data

This Privacy Notice has been prepared by Rüstem Alali (“Data Controller”) in accordance with the Turkish Law on the Protection of Personal Data No. 6698 (“KVKK”) in order to inform you about the processing of your personal data.

1) Data Controller

Trade Name: Rüstem Alali
Address: Meşrutiyet Mahallesi, Şair Nigar Sokak No: 54, Daire: 8, Kat: 4, Şişli / İstanbul, Türkiye
Phone: +90 536 065 41 81
Email: info@rustemalali.com
Website: www.rustemalali.com
MERSIS No: 9925098031600001
Tax ID (VKN): 0480903953

2) Personal Data We May Process

Depending on your interaction and the relevant service process, we may process the following categories of personal data:

• Identity & Contact Data: name-surname, phone number, email address, country/city, communication preferences

• Customer Transaction Data: appointment requests, service type (bridal/evening/bespoke), message/request content, quotation and meeting records

• Preferences & Measurement Data: size/measurement information (including fitting notes), model/accessory preferences, event date (wedding/engagement etc.)

• B2B/Partner Data: boutique/company name, website/social media account, country, partnership type requested (wholesale/private label/OEM-ODM/capsule), estimated quantities and delivery timelines

• Digital Trace Data: IP address, device/browser data, cookie records (when you visit our website)

3) Purposes of Processing

Your personal data may be processed for the following purposes:

• Managing appointments (creation, confirmation, changes) and consultation processes

• Planning and delivering bridal, evening, and bespoke services; managing fitting and delivery processes

• Managing communication activities (requests/complaints/suggestions)

• Managing partner/wholesale/private label (OEM/ODM) and capsule collection processes; evaluating line sheet/brief requests and scheduling buyer calls

• Improving service quality and managing customer satisfaction

• Managing information security and preventing misuse

• Fulfilling legal obligations and responding to requests of competent public authorities

4) Legal Grounds for Processing

Your personal data may be processed based on the legal grounds set out in Articles 5 and 6 of KVKK, including:

• Necessity for the establishment or performance of a contract (KVKK Art. 5/2-c)

• Compliance with legal obligations (Art. 5/2-ç)

• Establishment, exercise, or protection of a right (Art. 5/2-e)

• Legitimate interests of the Data Controller (Art. 5/2-f) (e.g., security, quality, operational management)

• Explicit consent, where required (Art. 5/1) (e.g., promotional/portfolio use of images, non-essential cookies)

5) Transfer of Personal Data

For the purposes stated above and limited to what is necessary, your personal data may be transferred to:

• Website infrastructure/hosting, corporate email, and IT service providers

• Service providers used for appointment and communication processes (calendar/booking tools, form providers)

• Legal and financial advisors (when necessary)

• Competent public institutions and authorities (where required by law)

6) Cross-Border Data Transfers

Due to the use of website infrastructure, analytics/measurement tools, corporate email services, or calendar/booking tools, your personal data may be processed on servers located abroad. In such cases, appropriate technical and administrative measures are taken in accordance with KVKK; where required, your explicit consent is obtained and/or other lawful transfer mechanisms are applied.

7) Methods of Collection

Your personal data may be collected through website forms, appointment pages, email, phone, WhatsApp, social media messages, and in-person meetings, by automated or partially non-automated means.

8) Retention Period

Your personal data is retained for the period required by the purpose of processing and in accordance with applicable legal retention periods. At the end of the retention period, personal data is deleted, destroyed, or anonymized in line with KVKK.

9) Your Rights as a Data Subject (KVKK Art. 11)

Under KVKK, you have the right to:

• learn whether your personal data is processed,

• request information if it is processed,

• learn the purpose of processing and whether it is used in accordance with that purpose,

• know the third parties to whom it is transferred domestically or abroad,

• request correction of incomplete or inaccurate data,

• request deletion or destruction under the conditions set out in KVKK,

• request notification of such operations to third parties to whom data has been transferred,

• object to a result to your detriment arising from analysis exclusively by automated systems,

• request compensation if you suffer damage due to unlawful processing.

10) How to Submit a Request

You may submit your requests regarding your KVKK rights via:

• Email: info@rustemalali.com (Subject: “KVKK Request”)

• Postal Address: Meşrutiyet Mahallesi, Şair Nigar Sokak No: 54, Daire: 8, Kat: 4, Şişli / İstanbul, Türkiye

Your request will be finalized within the time limits prescribed by applicable legislation.