Kanaatkar Kardeşler Sanayi Limited Şirketi (hereinafter referred to as the “Company”), in accordance with Article 10 of the Personal Data Protection Law No. 6698 (“KVKK”) and with the aim of ensuring your satisfaction, takes the highest level of security measures to ensure the lawful collection, storage, and sharing of your personal data and to protect your privacy.

Our goal: To inform you in the most transparent manner.

a) Data Controller

Pursuant to Law No. 6698, your personal data may be collected and processed by Kanaatkar Kardeşler Sanayi Limited Şirketi (the “Company”), acting as the Data Controller, within the scope explained below.

b) Purposes of Processing Personal Data

The Company may collect personal data from customers, employees, potential customers, employee candidates, business partners, suppliers, and similar parties under the following categories:

• Identity information
• Contact information
• Customer information
• Customer transaction information
• Transaction security information
• Legal transaction and compliance information
• Marketing and sales information

Your collected personal data are processed for the following purposes:

1. Service Provision and Legal Obligations

• Providing the Company’s products and services to you
• Fulfilling our obligations towards you
• Preparing records and documents
• Complying with information retention, reporting, notification, tax, and other obligations required by local and international legislation

2. Marketing and Sales Activities

• Conducting sales and marketing activities to improve the quality of services and products
• Offering personalized advertisements, campaigns, advantages, and other benefits

3. Internal Operations and Management

• Managing and supervising infrastructure and commercial activities
• Finance and accounting, billing, and collections
• IT systems, data, and website hosting
• Business continuity, records, document and print management
• Compliance with internal policies and procedures

4. Communication and Technical Support

• IT requirements and system structure needs
• Necessity of IT support services received
• Communicating with you to provide necessary information regarding these services and products

5. Analysis and Improvement

• Conducting traffic measurement for sales and marketing activities
• Performing statistical analysis, segmentation/profiling, and CRM activities

6. Customer Experience

• Measuring and increasing customer satisfaction
• Complaint management
• Collecting your opinions and suggestions regarding new services and products
• Receiving your issue/error notifications
• Providing you with information regarding products, services, complaints, and requests

7. Transaction Management

• Receiving your service requests and orders
• Carrying out your payment transactions
• Ensuring cooperation with relevant persons and families and completing the related process
• Recommending services that may interest you
• Student online behavioral training, advertising, and marketing
• Customer portfolio management, measuring and improving service quality

8. Research and Development

• Comparative student studies and/or improvements
• Use in all products and services to be provided under laws and relevant legislation governing the Company’s activities

9. Strategic Operations

• Determining and implementing the Company’s commercial and business strategies
• Finance operations, communication, market research, and social responsibility activities
• Procurement operations (requests, quotations, evaluations, orders, budgeting, discounts, debts, installments, contracts)
• Internal system and application management operations
• Managing legal operations

10. Legal Processes

• Complying with legal processes
• Reviewing, evaluating, and responding to requests from official and governmental authorities (including those outside your country of residence)

c) Recipients to Whom Personal Data May Be Transferred and Purposes of Transfer

Your personal data may be transferred to the following parties, limited to the purposes stated above:

1. Business Partners and Affiliates

• The Company’s business partners, suppliers, shareholders, and subsidiaries

2. Legal Authorities

• Institutions under the Tax Procedure Law
• Social Security Institution
• Court of Accounts
• Authorities under the Law on the Prevention of Laundering Proceeds of Crime
• Authorities under the Law on the Prevention of Money Laundering
• Authorized persons or institutions under the Turkish Commercial Code and the Code of Obligations

3. Public Institutions

• Legally authorized public institutions and organizations
• Administrative and judicial authorities

4. International Transfers

• Foreign companies and subsidiaries

5. Service Providers

• Real or legal persons providing services for product/service comparison, analysis, evaluation, and advertising
• Program partners with whom we cooperate
• Institutions contracted for sending communications to our customers
• Cargo companies delivering orders to you

ç) Method and Legal Grounds for Collecting Personal Data

Collection Channels:

Your personal data are collected through the following channels:

• Company and Headquarters
• Applications made through contracted websites
• Other institutions to which we provide/receive support services
• Real and/or legal persons with whom transactions are carried out under any legislation or contract
• Our website and mobile application
• Our call centers
• Our social media accounts
• Other possible future channels

Collection Methods:

• Verbal
• Written
• Electronic

Legal Ground:

Your personal data are collected by the Company within the framework of legal legislation and for the above-mentioned purposes, including the performance of the contract.

d) Rights of the Personal Data Subject under Article 11 of Law No. 6698

As the personal data subject, you have the following rights:

✓ Right to Information

• Learning whether personal data are processed
• Requesting information if personal data have been processed

✓ Right to Learn Purpose

• Learning the purpose of processing and whether the data are used in accordance with that purpose

✓ Right to Know Recipients

• Knowing the third parties to whom personal data are transferred domestically or abroad

✓ Right to Correction

• Requesting correction of incomplete or inaccurate personal data
• Requesting notification of such correction to third parties to whom data were transferred

✓ Right to Deletion/Destruction

• Requesting deletion or destruction of personal data if the reasons for processing no longer exist, in accordance with Law No. 6698 and other legislation
• Requesting notification of such deletion/destruction to third parties to whom the data were transferred

✓ Right to Object

• Objecting to results arising against you due to automated processing of personal data

✓ Right to Compensation

• Requesting compensation for damages arising from unlawful processing of personal data

Application Procedure

Process:

The Company will finalize the request as soon as possible and within thirty days at the latest, depending on the nature of the request.

Fees:

• First 10 pages: Free
• For pages exceeding 10 pages: 1 TL per page
• Cost of recording mediums such as CD or flash drive: Will not exceed the cost of the medium

Application Methods

1. Written Application
   You may submit the required documents to the GYMBOREE CLASSES at the Company’s relevant address.
2. E-mail Application
   You may send your request to: izmir@gymboreeturkey.com

Mandatory Information for Application

Personal Information:

• Your name, surname, and if the application is written, your signature
• For Turkish citizens: T.R. identification number
• For foreign nationals: Nationality, passport number, or identity number if available

Contact Information:

• Your residential or workplace address for notification
• If available, your e-mail address, telephone number, and fax number

Request Information:

• Your request
• Related information and documents (if any)

⚠️ Important Notices

• Information will only be provided regarding the applicant; information about other family members or third parties cannot be disclosed.
• The Company reserves the right to verify your identity before responding.
• Information and documents allowing identity verification must be provided fully and accurately.
• If the required information and documents are not properly submitted, disruptions may occur in conducting a complete and qualified investigation.

This clarification text has been prepared within the framework of the Personal Data Protection Law No. 6698 and relevant legislation.