WEBSITE MEMBER PRIVACY NOTICE

Dear customer,

SOHO Perakende Yatırım ve Ticaret Anonim Şirketi is authorised by Alo, LLC, based in California, United States, and sells Alo-branded products as part of its collaboration with Alo, LLC. Under the cooperation between the parties, your personal data collected during your purchases on the www.aloyoga.tr website, your personal data is being processed by SOHO Retail Investment and Trade Joint Stock Company (“SOHO”) and  Alo, LLC (“ALO”) (both companies collectively referred to as the “Companies”) in their capacity as data controllers.

As SOHO and ALO, we take the utmost care to ensure the protection and security of your personal data. With this in mind, we attach great importance to ensuring that all personal data, including that of individuals using our products and services is processed and stored in compliance with the Personal Data Protection Law No. 6698 (“DP Law”). In our capacity as Data Controller, we process your personal data in accordance with the law and within the framework of the purposes outlined below. We hereby inform you that we will record, store, and retain your personal data in a manner that is relevant, limited, and proportionate to the stated purposes, whilst ensuring the accuracy and up-to-date nature of such data; we will share it only with institutions authorised by law to request personal data; and we will transfer it to third parties and companies in accordance with the conditions set out in the DP Law.  

1. 1. Personal Data Subject to Processing, Purpose of Data Processing and Legal Grounds

The personal data processed during the membership process;

Your personal data processed in the context of campaigns, marketing and personalised services

2. Method of Collecting Personal Data

Your personal data is collected automatically via electronic means during the execution of product sales transactions and/or during the creation of contracts, invoices and similar documents established with you, in accordance with the purposes set out above.

3. How Is the Security of Personal Data Ensured?

We place great importance to protecting the confidentiality and security of personal data. In this context, necessary technical and administrative security measures are taken to protect personal data against unauthorised access, damage, loss or disclosure. Accordingly, the necessary system controls, data access controls, security transfer controls, business continuity controls and other necessary organisational controls are implemented.

4. Are your personal data transferred to third parties and/or abroad?

Where the above-mentioned legal grounds exist, your personal data may be transferred, where necessary, to official authorities, supervisory and regulatory public institutions and organizations, attorneys, and business partners from whom information technology services are obtained.

As a company established outside Türkiye, ALO processes personal data through its own systems and technology infrastructure. In this context, ALO engages various technology and service providers that operate in conjunction with service providers located outside Türkiye for the purposes of operating the website and providing related services. Accordingly, your personal data is processed by such service providers within the scope of these activities.

5. Procedure for Data Subject Requests

In accordance with Article 13(1) of the DP Law, to exercise your rights under Article 11 of the DP Law, by filling out the [APPLICATION FORM] available at https://dev.aloyoga.tr/en/pages/basvuru-formu-kvkk-adresindeki, and you may send a signed copy of the form to SOHO’s specified address via a notary or deliver it in person along with documents verifying your identity. Additionally, you may submit the relevant form to SOHO’s KEP address with a secure electronic signature. If the email address previously provided to us is registered in our system, you may use that email address to send your application form to SOHO at sohoperakendeyatirim@hs03.kep.tr.

SOHO shall be authorised to handle data subject requests directed to ALO. In this context, SOHO will collect data subject requests on behalf of ALO and manage the processes to ensure they are resolved in accordance with the legislation. SOHO may accept requests directed to it or reject them by providing a justification.

SOHO will process requests submitted to it free of charge within the shortest possible time and no later than thirty days, depending on the nature of the request. Should any costs arise as a result of fulfilling your requests, you may only be charged the fees set out in the tariff determined by the Board.

6. Data Controller Identification Information