1. Data Controller

In this Privacy Notice, the principles regarding the processing of your personal data by the data controller, Mapa Mobilya ve Aksesuar Pazarlama A.Ş. (“IKEA” or the “Company”), located at “Fatih Sultan Mehmet Mah. Balkan Cad. No:62 Ümraniye / İstanbul,” n accordance with Law No. 6698 on the Protection of Personal Data (the “Law”) (the “Law”) and the relevant legislation, are set forth below.

2. Purpose of Processing Personal Data

As a rule, statistical data is obtained within the scope of the survey, and no personal data is collected. However, you, our valued customers, may provide certain personal data while responding to the survey. Any personal data shared in this context is processed for the purposes of obtaining your feedback, confirming whether you are within the target audience, conducting customer satisfaction activities, providing solutions to customer complaints and requests, delivering the survey, and ensuring communication regarding the survey and its results.

3. Recipients and Purposes of Personal Data Transfer

The purposes of processing personal data and the purposes of data transfer are aligned. Your personal data may be transferred to our business partners, suppliers, group companies, affiliates, domestic/international service providers contracted for sending notifications or mail, law firms, tax consultants, sub-contractors, and—in the event of cloud system usage or within our group companies—abroad, as well as to relevant official institutions and, in exceptional cases, to private individuals, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law.

4. Method and Legal Grounds for Personal Data Collection

As a rule, since the non-collection of personal data is essential within the scope of the survey, any data such as e-mail addresses, telephone numbers, order numbers, loyalty card numbers, or financial data detected automatically by the system within your responses may be redacted/masked and deleted.

Personal data obtained without being blocked is processed based on the legal grounds that "data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject" pursuant to Article 5/2(f) of the Law, and that "the data has been made public by the data subject themselves" pursuant to Article 5/2(d) of the Law. Your personal data is collected through the forms used during the survey and through automated methods.

5. Application Procedures and Your Rights as a Data Subject

Pursuant to Article 11 of the Law, by applying to our Company, you have the right to;

a) Learn whether your personal data is being processed, b) Request information if your personal data has been processed, c) Learn the purpose of the processing and whether the data is being used in accordance with that purpose, d) Know the third parties to whom personal data is transferred domestically or abroad, e) Request rectification if the personal data is incomplete or inaccurate, f) Request the erasure or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law, g) Request notification of the operations carried out pursuant to subparagraphs (e) and (f) to third parties to whom the personal data has been transferred, h) Object to any outcome detrimental to you resulting from the analysis of the processed data exclusively through automated systems, i) Claim indemnification for damages incurred due to the unlawful processing of personal data.

You may submit your requests regarding the rights listed above to the Company in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. You may also submit your applications by filling out the Mapa Mobilya ve Aksesuar Pazarlama Anonim Şirketi Data Subject Application Form, available at https://www.ikea.com.tr/en/personal-data-protection. Depending on the nature of your request, your application will be concluded free of charge as soon as possible and within thirty days at the latest; however, if the transaction requires an additional cost, you may be charged according to the tariff determined by the Personal Data Protection Board.

We would like to emphasize that your data is protected with the utmost sensitivity within our Company; thank you for your trust in us.