NESPRESSO PRIVACY POLICY

Nespresso Turkey Gıda Ticaret A.Ş. ("Nespresso"), as the data controller, is aware that you may want to have information about how your personal data ("Personal Data") such as name, address, telephone/fax number or e-mail address, etc. that you provide to Nespresso is used by Nespresso. In this context, we have created a Privacy Policy ("Policy") that explains how your Data is used and the steps taken to the maximum extent possible to keep your Data confidential and secure.

1. What is Personal Data?

Within the scope of Law No. 6698 on the Protection of Personal Data ("LPPD"), Personal Data refers to any information relating to an identified or identifiable natural person.

2. What Methods and Legal Reasons Do We Collect Your Personal Data?

In all Personal Data processing activities we carry out, we act in accordance with the obligations and principles sought in the relevant legislation, especially LPPD, and we take all necessary administrative and technical security measures for the safe processing of your Personal Data.

Pursuant to the KVKK, we collect your Personal Data through the channels listed below by automatic, partially automatic or non-automatic methods, provided that they are part of the data recording system, and according to the purpose of processing, within the scope of Article 5.1, Article 5.2 of the LPPD:

- Through our websites ("Websites"), mobile and other applications and all other online media ("Media Tools") belonging to the Group Company that manufactures and distributes Nespresso products, primarily our websites related to the Nespresso brand and where personal data is processed, and other websites managed by Nespresso or Group Companies that manufacture and distribute Nespresso products, or through cookies ("Cookies") belonging to Nespresso or third parties as specified below that communicate with your devices on the Websites, - through the entire sales and marketing network established or operated by Nespresso and managed under Nespresso ("Nespresso Stores"),
- through Nespresso's employees and/or third party employees ("Field Employees") acting on behalf of Nespresso for Nespresso and working in the sales and marketing network, through forms and other means issued within the scope of sales and marketing, - through workplaces owned or controlled by Nespresso ("Workplaces")
, - through accounts operated by or on behalf of Nespresso
on various social media channels ("Social Media")
, - through correspondence carried out through
our e-mail addresses ("E-mail"), other communication methods including short messages ("SMS") or multimedia messages ("MMS") and any other means of communication ("Communication Tools"), - Through our call centers ("Call Center") managed by Nespresso or third parties from which Nespresso receives services,
- Through third parties such as group companies, business partners, manufacturers or companies from which ABC provides or receives services, we collect and process by automatic, partially automatic or non-automatic methods provided that they are part of the data recording system.

3. Identity of the Data Controller

The Data Controller in terms of your Personal Data that you share through the above-mentioned channels is Nespresso Turkey Gıda Ticaret Anonim Şirketi, registered with the Istanbul Trade Registry with the registration number 218921, with the Mersis number 0631135630200001, with its head office located at Büyükdere Caddesi Nurol Plaza No:255 A- Blok Kat:6 Maslak/Sarıyer.

4. Which Personal Data Do We Process?

The following examples can be given to your Personal Data that we process:

Personal Data You Provide to Us: Name-surname, Turkish ID number, telephone number, e-mail address, address, tax number and any other Personal Data you share with us in any way through the channels mentioned above.

Other Information, Including Personal Data Collected by Automatic Means: Your Personal Data collected automatically through automatic search machines, video and audio recording devices, Cookies or other means. The data collected through cookies are collected anonymously unless you are a member and do not constitute Personal Data. In this context, the Internet protocol (IP) address used to connect your computer to the internet; internet browser plug-in types and versions, receipt and read confirmations for e-mails; login; e-mail address; password; computer and connection information such as internet browser type and version; time setting; operating system and platform; purchase history, URLs you enter through our Websites, cookie number; information and Personal Data such as the products you view or search for and any phone number used to call our customer service number, and audio and video recordings taken for security or to improve service quality.

Other Information, Including Personal Data Received from Other Sources: Examples of Personal Data such as updated delivery and address information shared with us by social media tools, our business partners, suppliers and other third parties based on your prior consent; account information, purchase, page view information; information such as searched terms and search results, paid listings (such as Sponsored Links).

5. For what purposes do we process your personal data?

As a rule, we process your Personal Data based on the conditions that it is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract, and that data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned, or based on your explicit consent. However, in other exceptional cases permitted under the LPPD, your Personal Data may be processed without your explicit consent (Article 5.2 of the LPPD).

In this context;

a) LPPD Article 5.Within the scope of 2; (i) establishing or performing a contract or fulfilling our legal obligations or establishing a right such as membership agreements, providing you with products and services ordered or purchased through the websites, contacting you when necessary in this context, making purchases and sales in the Company Stores, using POS, return transactions, shipping services, establishing a distance sales contract within the scope of electronic commerce, selling, supplying, delivering products or services, receiving your questions and complaints, responding to you, providing after-sales services, using them in a possible dispute when necessary, (ii) in order to protect our legitimate interests such as, but not limited to, cost reduction, efficient use of resources, observation of call center service quality, provided that it does not harm your fundamental rights and freedoms (such as ensuring your security and measuring the quality of the service provided to you, evaluating and resolving your requests in this context, processing on common servers and software used operationally in order to reduce costs, and any other processing that can be attributed within the scope of the relevant regulation); We process your Personal Data without seeking your explicit consent. In addition, we may process your Personal Data that you make public through means such as Social Media channels to the extent permitted under the LPPD without seeking your explicit consent and without exceeding the limits of the purpose of publicization.

b) By becoming a member of Nespresso Club, your Personal Data collected through the above-mentioned channels, again with the above-mentioned methods:

(i) Processing for the purpose of providing opportunities for products and services tailored to you such as internet advertising, targeting, re-targeting, cross-selling, campaigns, opportunities and product/service advertisements on Facebook, Instagram and Google platforms, using Cookies for this purpose, making commercial offers by taking into account your preferences and recent purchases

(ii) to determine how you are aware of our Websites, to create non-anonymous traffic statistics through unique user registration, to make your visit to the Websites more enjoyable and to increase the use and functionality of the Websites, to get to know you during your visit to the Websites and to provide content and personalized browsing opportunities tailored to your expectations and interests, to use Cookies for this purpose, as well as to track your usage habits according to your previous records during your visit to Nespresso Stores and to offer you special Products

(iii) Processing for sales and marketing activities, especially for the purpose of providing you with special advertisements, campaigns, advantages and other benefits and conducting other marketing and CRM (Customer Relationship Management) activities, using cookies for this purpose

(iv) Processing for the purpose of creating new product and service models, using cookies for this purpose

(v) Sending electronic commercial messages (such as campaigns, newsletters, customer satisfaction surveys, product and service advertisements)

(vi) Sending gifts and promotions and other magazines/periodicals

(vii) It may be processed for the purpose of organizing and informing about corporate communication and other events and invitations within this scope.

In this context, you can support us to serve you better by giving this consent in the documents and areas where your explicit consent is requested for each of the types of processing that require your explicit consent in this Privacy Policy. However, this Privacy Policy has been issued exclusively for the purpose of fulfilling our disclosure obligation as Data Controller within the scope of LPPD, and your explicit consent will be obtained separately in terms of these processes and these processes will not be carried out if you do not give explicit consent in the relevant media.

6. Transferring Your Personal Data to Third Parties and/or Abroad

The Company may transfer your Personal Data collected through the channels and methods mentioned in this Privacy Policy to third parties or abroad within the scope of LPPD and other legislation and for the purposes mentioned in this Privacy Policy. Your Personal Data:

a) In case of the existence of processing purposes that do not require your explicit consent within the scope of Article 5.2 of the LPPD, it may be transferred to third parties in the country or to third parties abroad within the scope of Article 9.2 of the LPPD from whom we receive support in areas such as storage, archiving, information technology support (server, hosting, program, cloud computing), security, call center, Group Companies, business partners, suppliers, banks, financial institutions, consulting firms from which support is received in similar areas such as law, tax, etc., and other related parties and authorized institutions and organizations where transfer is necessary for the specified purposes. and other related parties and authorized institutions and organizations where the transfer is necessary for the specified purposes.

b) Provided that your explicit consent is obtained within the scope of Articles 5.1, 9.1 of the LPPD, third parties from whom we receive support in areas such as storage, archiving, information technology support (server, hosting, program, cloud computing), security, call center in Turkey and abroad, Group Companies, business partners, supplier companies, banks, financial institutions, law, tax, etc. that cooperate and / or receive services in Turkey and abroad, Group Companies that produce and distribute Nespresso and / or Nespresso products, business partners, suppliers, banks, financial institutions, law, tax, etc. In addition, CRM companies, market research companies, third parties that provide support in advertising, marketing and sales such as mailing, SMS sending can be transferred to third parties based on your explicit consent.

In addition, in the event that a part or assets of Nespresso (including but not limited to brand, domain name and other commercial business elements) are sold based on your explicit consent, your Personal Data may be transferred to the real or legal persons or legal entities that take over, their shareholders, business partners, intermediaries, It may be transferred to third parties at home and abroad, including its consultants, to the extent required by the transfer, it may be processed to the extent limited to the necessary evaluation by these third parties during the transaction process, and in case of transfer, the transferee may continue to process your Personal Data, which are the values attached to these assets together with the assets, with itself as the data controller.

For the security of the Personal Data of our valued customers, we would like to state that your Personal Data is not processed under any circumstances and in any way within the scope of an activity not related to Nespresso.

7. Use of Cookies and Identification Technologies

We use cookies and identification technologies ("Cookies and Identification Technologies") together with our suppliers and service providers to collect information automatically, to measure and analyze the web pages you click on and your use of the Nespresso website and to improve your experience on the Nespresso website, to improve our services and to provide you with personalized advertising on the Nespresso website or mobile applications through your devices. Cookies and Cookies are small files that, when placed on your device, allow the Nespresso website to provide certain features and functions.

You can reject or disable Cookies by changing your browser or device settings. As each browser is different, please refer to the instructions provided by your browser. For more information on Cookies and Cookies, please review the relevant Cookie Policy or Cookie Technologies Policy.

8. Spam Emails

Nespresso does not send "spam" e-mails. "Spam e-mails" are unsolicited e-mails, often commercial in nature, that are sent repeatedly to a large number of users, usually from a source with which the users have no prior relationship or contact, or from a source with which the user has declined to receive such messages. Conversely, where we believe that our products may be important to you, we reach out to you via email, giving you the option to decline to use such a service.

9. Data and Children

In order to respect the privacy of children and to comply with laws aimed at protecting children, no Data is requested from children under the age of 18. Nespresso does not knowingly and voluntarily collect, use or disclose Data from minors under the age of 18 without the prior consent of the person acting as a parent (parent, guardian, etc.).

10. Links to Other Websites

As a service to our visitors, our websites may contain hyperlinks to other websites that are not operated or controlled by Nespresso. In this regard, Nespresso shall not be responsible or liable for the content of such websites or the privacy practices of such other parties. Please note that such private practices may differ from our Privacy Policy. We encourage you to review and thoroughly understand the privacy practices of such sites before sharing your personal information.

11. Access to Your Personal Data and Your Rights under LPPD

By applying to the Company in accordance with Article 11 of LPPD;

-To learn whether your personal data has been processed,
- To request information if your personal data has been processed, -
To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
- To know the third parties to whom your Personal Data is transferred domestically or abroad,
- To request correction of your personal data in case of incomplete or incorrect processing,
- To request the deletion or destruction of your Personal Data in case the reasons requiring the processing of your Personal Data disappear, to be evaluated within the principles of purpose, duration and legitimacy, - In
the event that your personal data is corrected, deleted or destroyed, you have the right to request that these transactions be notified to third parties to whom Personal Data is transferred,
- In the event that your processed Personal Data is analyzed exclusively through automated systems, you have the right to object to this result if a result arises against you
, - In case your personal data is processed unlawfully and you suffer damage for this reason, you have the right to demand compensation for the damage.

In this context, you can submit your requests regarding your rights mentioned above to Nespresso by filling out the application form on our Website with information and documents identifying your identity or by creating your own request in a way that meets the conditions determined by the Personal Data Protection Authority and using the methods specified below.

(i) By hand with wet signature or through a notary public to our postal address below, which may change from time to time,

Address: Nespresso Turkey Food Trade Inc.

Maslak Mah. Eski Büyükdere Cad. Orjin Maslak İş Merkezi Sitesi No: 27 İç Kapı No: 58 34398, Maslak/Sarıyer, İstanbul, Mersis No: 0631135630200001

 (ii) By e-mail that you will send to our e-mail address below from the e-mail address you have previously notified us and registered in our system (please check your e-mail address registered in our system) or to our KEP address with secure electronic signature or mobile signature

E-mail address: club.turkey@ Nespresso.com.tr

KEP address: Nespresso@hs01.kep.tr

(iii) Other methods specified in the Communique on Principles and Procedures of Application to Data Controller.

Please confirm the current application methods and application content requirements from the legislation beforehand. Applications that do not comply with the content requirements determined by the Authority or submitted by methods not accepted by the Personal Data Protection Authority will not be accepted.

The Company will finalize your request free of charge as soon as possible and within 30 (thirty) days at the latest, depending on its nature. In case a cost arises due to the fulfillment of your requests, we may only charge you the fees in the tariff determined by the Personal Data Protection Board.

You can always follow the changes within the scope of the legislation on Personal Data and our practice from the relevant page of our website or mobile application.

NESPRESSO TURKEY GIDA TICARET A.S.

NESPRESSO INTERNET SITE

PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA MEMBERSHIP FORM

1. Data Controller

As Nespresso Turkey Gıda Ticaret A.Ş. (“Nespresso” or “Company”), we process your personal data within the scope of the relevant processes upon completion of the membership form at our internet site https://www.nespresso.com/tr/tr (“Site”). In this privacy notice, we aim to inform you about how we process your personal data as the data controller.

2. Your Personal Data Processed, Purposes and Legal Grounds of Processing Your Personal Data

Article 5 under the Law on the Protection of Personal Data specifies the legal grounds of processing personal data. Below you will find the personal data we process, the purposes of processing and legal grounds we rely on:

3. Transferred Personal Data to Third Parties and Purposes of Transfer

We share your personal data with third parties in compliance with the purposes and legal grounds specified in "2. Your Processed Personal Data Purposes and Legal Grounds of Processing Your Personal Data” in this information notice. We ensure compliance with the rules specified in the Law when sharing your personal data with third parties.

Below you will find information about with whom and for what purposes we share your personal data:

Within the scope of transferring your personal data abroad, compliance with Art. 9 of the Law is ensured. In addition, all necessary administrative and technical measures are taken when transferring your personal data abroad.

4. Methods of Collecting Personal Data

We collect your personal data mentioned above by automatic or partially automatic means through the membership form you complete on the Site.

5. Your Rights Regarding Your Personal Data

Article 11 of the Law on the Protection of Personal Data specifies the rights of the data subject. All natural persons whose personal data are processed by Nespresso have the right to apply to our Company in accordance with the Law and exercise their legal rights listed in the Law. You may choose one of the following methods when applying to our Company to exercise your rights:

• You can send in writing to Maslak Mah. Eski Büyükdere Cad. Orjin Maslak İş Merkezi Sitesi No: 27 İç Kapı No: 58 34398, Maslak/Sarıyer, İstanbul address by mail.
• Use your e-mail address registered in our systems and send an e-mail with your inquiries to e-mail address club.turkey@Nespresso.com.tr.

You can submit your inquiries to us using the other methods at Communique on Procedures and Principles on Application to Data Controller.

NESPRESSO TURKEY GIDA TİCARET A.Ş.

PRIVACY NOTICE ON THE COMMERCIAL ELECTRONIC MESSAGES

As Nespresso Turkey Gıda Ticaret A.Ş. (“Nespresso” veya “Şirket”), we process your personal data as data controller in accordance with the Law on the Protection of Personal Data (“Law”). In case you provide explicit consent, your identity (name, surname) and contact (mobile phone number, fixed phone number, e-mail address, address) data are processed in order to inform you about advertising, promotion, events, campaigns, deals and satisfaction surveys through communication channels (e-mail, SMS and call). Your personal data are collected with automatic and semi-automatic means through forms completed electronically, SMS and e-mail correspondences. Your personal data are shared with the service suppliers and İleti Yönetim Sistemi A.Ş. for the purpose specified above, in accordance with the rules under the Law and for performing our obligation to notify under the Regulation on Commercial Communication and Commercial Electronic Messages. You can send in writing to Büyükdere Caddesi Nurol Plaza No:255 A- Blok Kat:6 34398, Maslak/Sarıyer, İstanbul your requests regarding your legal rights listed in the Article 11 of the Law or you may send your inquiries to us by other methods specified in Communique on Principles and Procedures of Application to Data Controller. You can always withdraw your consent for sending messages at any time by contacting us or by submitting a refusal via the İleti Yönetim Sistemi.

NESPRESSO TURKEY GIDA TICARET A.S.

NESPRESSO INTERNET SITE

PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA

CONTACT FORM

1. Data Controller

As Nespresso Turkey Gıda Ticaret A.Ş. (“Nespresso” or “Company”), we process your personal data within the scope of the relevant processes upon completion of the contact form at our internet site, https://www.nespresso.com/tr/tr (“Site”). In this privacy notice, we aim to inform you about how we process your personal data as the data controller.

2. Your Personal Data Processed, Purposes and Legal Grounds of Processing Your Personal Data

Article 5 under the Law on the Protection of Personal Data specifies the legal grounds of processing personal data. Below you will find the personal data we process, the purposes of processing and legal grounds we rely on:

3. Transferred Personal Data to Third Parties and Purposes of Transfer

We share your personal data with third parties in compliance with the purposes and legal grounds specified in "2. Your Processed Personal Data Purposes and Legal Grounds of Processing Your Personal Data” in this information notice. We ensure compliance with the rules specified in the Law when sharing your personal data with third parties.

Below you will find information about with whom and for what purposes we share your personal data:

Within the scope of transferring your personal data abroad, compliance with Art. 9 of the Law is ensured. In addition, all necessary administrative and technical measures are taken when transferring your personal data abroad.

4. Methods of Collecting Personal Data

We collect your personal data mentioned above by automatic or partially automatic means through the contact form you complete on the Site.

5. Your Rights Regarding Your Personal Data

Article 11 of the Law on the Protection of Personal Data specifies the rights of the data subject. All natural persons whose personal data are processed by Nespresso have the right to apply to our Company in accordance with the Law and exercise their legal rights listed in the Law. You may choose one of the following methods when applying to our Company to exercise your rights:

• You can send in writing to Maslak Mah. Eski Büyükdere Cad. Orjin Maslak İş Merkezi Sitesi No: 27 İç Kapı No: 58 34398, Maslak/Sarıyer, İstanbul address by mail.
• Use your e-mail address registered in our systems and send an e-mail with your inquiries to e-mail address club.turkey@Nespresso.com.tr.

You can submit your inquiries to us using the other methods at Communique on Procedures and Principles on Application to Data Controller.

NESPRESSO TURKEY GIDA TICARET A.S.

NESPRESSOINTERNET SITE

PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA

FEEDBACK FORM

1. Data Controller

As Nespresso Turkey Gıda Ticaret A.Ş. (“Nespresso” or “Company”), we process your personal data within the scope of the relevant processes upon completion of the feedback form at our internet site https://www.nespresso.com/tr/tr (“Site”). In this privacy notice, we aim to inform you about how we process your personal data as the data controller.

2. Your Personal Data Processed, Purposes and Legal Grounds of Processing Your Personal Data

Article 5 under the Law on the Protection of Personal Data specifies the legal grounds of processing personal data. Below you will find the personal data we process, the purposes of processing and legal grounds we rely on:

3. Transferred Personal Data to Third Parties and Purposes of Transfer

We share your personal data with third parties in compliance with the purposes and legal grounds specified in "2. Your Processed Personal Data Purposes and Legal Grounds of Processing Your Personal Data” in this information notice. We ensure compliance with the rules specified in the Law when sharing your personal data with third parties.

Below you will find information about with whom and for what purposes we share your personal data:

Within the scope of transferring your personal data abroad, compliance with Art. 9 of the Law is ensured. In addition, all necessary administrative and technical measures are taken when transferring your personal data abroad.

4. Methods of Collecting Personal Data

We collect your personal data mentioned above by automatic or partially automatic means through the feedback form you complete on the Site.

5. Your Rights Regarding Your Personal Data

Article 11 of the Law on the Protection of Personal Data specifies the rights of the data subject. All natural persons whose personal data are processed by Nespresso have the right to apply to our Company in accordance with the Law and exercise their legal rights listed in the Law. You may choose one of the following methods when applying to our Company to exercise your rights:

• You can send in writing to Maslak Mah. Eski Büyükdere Cad. Orjin Maslak İş Merkezi Sitesi No: 27 İç Kapı No: 58 34398, Maslak/Sarıyer, İstanbul address by mail.
• Use your e-mail address registered in our systems and send an e-mail with your inquiries to e-mail address club.turkey@Nespresso.com.tr.

You can submit your inquiries to us using the other methods at Communique on Procedures and Principles on Application to Data Controller.