PRIVACY POLICY

**Privacy Policy**

**1. Introduction**

As Mountain MettleTextile Products Inc. (“Mountain Mettle” or “Company”), we prioritize the privacy of your personal data and approach the information you share with us with sensitivity, acknowledging that it is personal and confidential. We have created this Privacy Policy (“Policy”) to inform our users visiting our website www.Mountain Mettle.com about the privacy and security of the data collected through our website in accordance with the Personal Data Protection Law No. 6698 (“PDPL”) and secondary regulations. Your personal data will be used solely to provide you with better service within the framework of this Policy.

**2. Scope of the Policy**

The privacy and security of the data we collect during your access to our site, managed by Mountain Mettle, are within the scope of this Policy. The presence of a logo, symbol, or image belonging to Mountain Mettle on a site not managed by Mountain Mettle does not mean that this Policy is valid for that site.

**3. Protection of Personal Data**

**3.1. General Principles of Processing Personal Data**

The processing activities of your personal data by Mountain Mettle are carried out in accordance with the following general principles:

– Compliance with the law and principles of honesty,
– Accuracy and being up-to-date when necessary,
– Processing for specific, clear, and legitimate purposes,
– Being relevant, limited, and proportionate to the purpose for which they are processed,
– Retention for the period prescribed in the relevant legislation or necessary for the purpose for which they are processed.

**3.2. Purposes of Processing Personal Data and Information Text Regarding the Processing of Personal Data**

We use your personal data for purposes such as providing the services requested by you, receiving your requests, and communicating with you within the scope of purposes detailed as follows, without being limited to the following:

– Conducting activities in compliance with the legislation,
– Conducting financial and accounting operations,
– Conducting loyalty processes related to products/services,
– Conducting communication activities,
– Conducting activities to ensure business continuity,
– Conducting logistics activities,
– Conducting the purchase, production, marketing, sales, and after-sales support services of goods/services,
– Managing customer relations processes,
– Conducting storage and archive activities,
– Conducting information or advertising campaigns related to our products or services,
– Conducting contract processes,
– Tracking requests/complaints,
– Conducting supply chain management processes,
– Ensuring the security of data controller operations by providing information to authorized individuals, institutions, and organizations.

To learn detailed information about which type of personal data (data category) is processed by Mountain Mettle as the data controller, for what purposes and legal reasons, to whom your personal data is transferred, what your rights regarding your personal data are, please read the Information Text Regarding the Processing of Personal Data, which we have prepared to inform relevant data subjects within the framework of our activities arising from PDPL and related legislation.

**4. Storage and Destruction of Personal Data**

In addition, our company has created a Storage and Destruction Policy for the storage and destruction processes of personal data. Accordingly, if a period is determined for the storage of the data in the legislation or other relevant legislation, the data must be stored for at least this period.

If no period is envisaged for the storage of the data processed in the legislation, taking into account possible disputes as part of our relationship, your data is deleted, destroyed, or anonymized without the need for any request from you after the expiration of the 10-year statute of limitations period from the termination of our legal relationship.

If all processing conditions for personal data have ceased or if the storage period specified by us or determined by the legislation for the data has expired, your data is officially deleted, destroyed, or anonymized at the first periodic destruction date or at the latest within 6 months. If you request the deletion of your data for a valid reason, your data will be deleted legally within a maximum of 30 days. Your request cannot be realized if you request the deletion or destruction of your data before the expiration of the specified storage period.

**Data Collected Through Cookies**

Cookies are small text files that can contain data in name-value format stored on the visitor’s device (such as a computer or phone) when a website is visited. In this way, various information about the device and the related user can be obtained. For detailed information about the cookies used on our website, you can review the Cookie Policy.

Additionally, your Personal Information may be shared with third parties to assist us in using your Personal Information as described above. For example, we use Shopify to power our online store – you can learn more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy. We also use Google Analytics to help us understand how our customers use the Site – you can learn more about how Google uses your Personal Information here: https://www.google.com/intl/tr/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout

**5. Credit Card Security**

Mountain Mettle prioritizes the security of credit card holders who shop on www.Mountain Mettle.com. Mountain Mettle has a system that verifies the payment/invoice/delivery address information of the orders placed. Therefore, for example, for first-time orders to proceed to the supply and delivery stage, the accuracy of financial information must first be confirmed by the bank, and if necessary, customers who are credit card holders may be contacted to verify this information.
Mountain Mettle.com uses a payment infrastructure that complies with international security standards. During the shopping process, information related to the credit card used is encrypted via the SSL (Secure Sockets Layer) protocol independently of the site and sent to the relevant bank for verification. If the availability of the card is confirmed, the shopping continues. In addition, security measures are taken regarding the credit card data in accordance with the Payment Card Industry Data Security Standard (PCI DSS).

In addition to these measures, Mountain Mettle during the payment stage, takes into account parameters such as the basket amount, product type, whether the card is used for the first time, whether the transaction is made with 3D Secure Secure Payment, address changes, and the risk situation to decide whether 3D Secure control will be performed. Thus, a fast and secure payment is offered to enhance the user experience.

3D Secure Payment is a protocol designed as an additional security layer for credit and debit card transactions conducted online.

In this protocol, when the person shopping chooses to make a payment with a credit card through www.Mountain Mettle.com, the bank sends a password to the telephone number associated with the credit card. This password sent is single-use and therefore cannot be used at another time. The transaction is approved only when the person enters the code sent to their mobile phone from the bank.

**6. Links to Third-Party Websites**

Our site may contain links to third-party websites. In such cases, the collection, processing, sharing, or transfer of data by third parties is beyond our responsibility. Your use of third-party sites and your data sharing with these sites are subject to the privacy policy and terms of use on those sites and are beyond the scope of this Policy. We recommend reading the privacy policies of the websites you visit before sharing your personal data.

Mountain Mettle does not send emails and SMS requesting your credit card and account information or passwords. Therefore, it is essential not to trust emails and SMS that request your personal information, credit card and account information, or passwords, using the name and logo of Mountain Mettle

**7. Updating the Policy**

The provisions of this Policy may be changed or renewed in whole or in part to take effect on the date they are published on our website.

We recommend checking our website at regular intervals to keep track of changes to the Policy.

**8. Contact Us**

For questions, concerns, or complaints regarding the interpretation or implementation of this Policy, you can contact us:

– By email at info@Mountain Mettle.com
– By mail to Bebek Mah. Küçük Bebek Cd. Bebek Bostanı Sk. No.2/1, 34342 Istanbul/Turkey.

We may also share your Personal Information to comply with applicable laws and regulations, respond to court orders, search warrants, or other legal requests for information we receive, or to otherwise protect our rights.
Mountain Mettle may have other policies or procedures regarding the processing, security, and privacy of data that are beyond the scope of this Policy. Therefore, we recommend reviewing other legal texts.

By using the services provided by Mountain Mettle or visiting our website, you accept the practices described in this Privacy Policy.

*Note: This translation is provided for informational purposes, and for legal documents, it is recommended to consult with a professional translator or legal advisor for accuracy and context-specific nuances.*

Processing of Personal Data – Information Text

Data Controller: Mountain Mettle Textile Products Corporation (“Mountain Mettle” or “Company”)

In accordance with the Personal Data Protection Law No. 6698 (“PDPL”) and related legislation and regulations, Mountain Mettle aims to inform data subjects about the processing, storage, and transfer of their personal data through this Personal Data Processing Information Text (“Information Text”).

In addition, detailed information about cookies and SDKs used when visiting our website, mobile site, and/or mobile application is available in the Cookie Policy. The personal data processed through these means are explained in this Information Text.

This Information Text will be effective as of the date of publication by Mountain Mettle. Mountain Mettle reserves the right to make changes to this Information Text whenever necessary. Any changes will become effective immediately upon publication on www.Mountain Mettle.com.

DATA CATEGORIES:

Identity Information:
- Processed Personal Data: Name – Surname, Date of Birth, Gender, Turkish Republic ID Number
- Purposes of Personal Data Processing: Conducting Financial and Accounting Operations, Conducting Communication Activities, Executing Loyalty Processes Related to Company / Products / Services, Conducting Activities in Compliance with Legislation, Pursuing and Executing Legal Affairs, Ensuring the Continuity of Business Continuity Activities, Conducting Business Activities and Auditing, Conducting Product / Service Sales Processes, Conducting Post-Sale Support Services for Products / Services, Conducting Customer Relationship Management Processes, Conducting Activities for Customer Satisfaction, Conducting Advertising, Campaign, and Promotion Processes, Conducting Storage and Archiving Activities, Conducting Contract and Membership Processes, Tracking Requests/Complaints, Planning and Executing Commercial and/or Business Strategies, Conducting Necessary Studies by Business Units to Benefit from Offered Products and Services, and Conducting Related Business Processes; Deciding whether 3D Secure control will be performed, taking into account parameters such as basket amount, product type, whether the card is used for the first time, whether the previous transaction was made with 3D Secure Secure Payment, address changes, and risk status during the payment phase. In this way, quick and secure payment is provided, increasing user experience.
- Legal Basis for Personal Data Processing: Your personal data in this scope is processed based on the legal reasons specified in Article 5 of the PDPL, such as;
  - Explicitly prescribed by the laws,
  - Being directly related to the establishment or performance of a contract, provided that it is necessary for the processing of personal data belonging to the parties of the contract,
  - Being mandatory for the data controller to fulfill its legal obligation,
  - Being mandatory for the processing of personal data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, within the framework of the principles of proportionality and subsidiarity.
- Methods of Collecting Personal Data: Your personal data mentioned above are collected through membership forms on our website, fields that can be optionally filled out on the my account page, your requests and applications, contracts, campaigns, and third-party identity verification systems (e.g., Google Login, Facebook Login, etc.).
Contact Information:
- Processed Personal Data: Email Address, Billing & Delivery Addresses, Mobile Phone Number
- Purposes of Personal Data Processing: Conducting Financial and Accounting Operations, Conducting Communication Activities, Conducting Business Activities, Executing Loyalty Processes Related to Company / Products / Services, Pursuing and Executing Legal Affairs, Conducting Product / Service Sales Processes, Conducting Post-Sale Support Services for Products / Services, Conducting Customer Relationship Management Processes, Conducting Activities for Customer Satisfaction, Conducting Marketing Analysis Studies, Conducting Advertising, Campaign, and Promotion Processes, Tracking Requests/Complaints, Conducting Product / Service Marketing Processes, Conducting Storage and Archiving Processes, and Providing Information to Authorized Individuals, Institutions, and Organizations.
- Legal Basis for Personal Data Processing: Your personal data in this scope is processed based on the legal reasons specified in Article 5 of the PDPL, such as;
  - Explicitly prescribed by the laws,
  - Being directly related to the establishment or performance of a contract, provided that it is necessary for the processing of personal data belonging to the parties of the contract,
  - Being mandatory for the data controller to fulfill its legal obligation,
  - Being mandatory for the processing of personal data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, within the framework of the principles of proportionality and subsidiarity.
- Methods of Collecting Personal Data: Your personal data mentioned above are collected through membership pages on our website, contracts, fields that can be optionally filled out in the content of our my account page, your requests and applications, contracts, campaigns, and third-party identity verification systems (e.g., Google Login, Facebook Login, etc.).
Legal Transaction Information:
- Processed Personal Data: Information in the Lawsuit File in Case of Dispute, Notices, Information in Correspondence with Judicial and Administrative Authorities.
- Purposes of Personal Data Processing: Pursuing and Executing Legal Affairs, Conducting Business Activities and Auditing, Providing Information to Authorized Individuals, Institutions, and Organizations, Conducting Activities in Compliance with Legislation, Conducting Storage and Archiving Activities, Conducting Risk Management Processes, Conducting Contract Processes, Tracking Requests/Complaints, Ensuring the Security of Data Controller Operations.
- Legal Basis for Personal Data Processing: Your personal data in this scope is processed based on the legal reasons specified in Article 5 of the PDPL, such as;
  - Being mandatory for the data controller to fulfill its legal obligation,
  - Being mandatory for the processing of personal data for the establishment, exercise, or protection of a right,
  - Being mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, within the framework of the principles of proportionality and subsidiarity.
- Methods of Collecting Personal Data: Your personal data mentioned above are collected through official letters from judicial and administrative authorities and printed/electronic other documents.
Customer Transaction Information
*Processed Personal Data:*
– Invoice Information
– Request Information
– Order Information
– Customer Reviews
– Product Information
– Shipping Information
– Authorized Service Information
*Purposes of Personal Data Processing:*
– Execution of Supply Chain Management Processes
– Execution and Audit of Business Activities
– Providing Information to Authorized Individuals, Institutions, and Organizations
– Execution of Activities in Compliance with Legislation
– Execution of Financial and Accounting Affairs
– Execution of Storage and Archive Activities
– Execution of Contract Processes
– Execution of Product/Service Sales Processes
– Execution of After-Sales Support Services
– Execution of Customer Relationship Management Processes
– Execution of Activities for Customer Satisfaction
– Conducting Marketing Analysis Studies
– Execution of Advertising, Campaign, and Promotion Processes
– Tracking Requests/Complaints, Execution of Product/Service Marketing Processes

*Legal Grounds for Personal Data Processing:*
Your personal data in this scope is processed by Mountain Mettle based on the legal grounds specified in the relevant legislation and Article 5 of the KVKK (Personal Data Protection Law):

– Explicitly prescribed by laws,
– Necessary for the processing of personal data of the parties to a contract, provided that it is directly related to the establishment or performance of a contract,
– Mandatory for the data controller to fulfill its legal obligation,
– Mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

For cases not covered by the purposes mentioned above, your personal data is processed based on your explicit consent, as detailed in the Consent Text.

*Methods of Personal Data Collection:*
The personal data mentioned above is collected through printed/electronic forms, call center records, emails, and SAP programs.

—

**5- Transaction Security Information**

*Processed Personal Data:*
– IP Address Information
– Website Login-Logout Data
– Username Information
– Password Information
– Traffic Data (Connection Time/Duration, etc.)

*Purposes of Personal Data Processing:*
– Execution of Information Security Processes
– Conducting Audit/Ethical Activities
– Execution and Audit of Business Activities
– Implementation of Storage and Archive Activities
– Ensuring the Security of Data Controller Operations
– Providing Information to Authorized Individuals, Institutions, and Organizations
– Execution of Activities in Compliance with Legislation
– Tracking Legal Affairs and Execution
– Execution of Product/Service Sales Processes
– Tracking Requests/Complaints

*Legal Grounds for Personal Data Processing:*
Your personal data in this scope is processed by Mountain Mettle based on the legal grounds specified in the relevant legislation and Article 5 of the KVKK:

– Explicitly prescribed by laws,
– Mandatory for the data controller to fulfill its legal obligation,
– Mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

For cases not covered by the purposes mentioned above, your personal data is processed based on your explicit consent, as detailed in the Consent Text.

*Methods of Personal Data Collection:*
The personal data mentioned above is collected through information security systems and electronic devices.

—

**6- Financial Information**

*Processed Personal Data:*
– Encrypted Credit Card Information
– Bank Account/IBAN Number Information

*Purposes of Personal Data Processing:*
– Execution of Activities in Compliance with Legislation
– Tracking Legal Affairs and Execution
– Execution of Financial and Accounting Affairs
– Execution of Return Processes
– Execution and Audit of Business Activities
– Execution of Product/Service Sales Processes
– Execution of Storage and Archive Activities
– Execution of Risk Management Processes
– Execution of Contract Processes
– Providing Information to Authorized Individuals, Institutions, and Organizations

*Legal Grounds for Personal Data Processing:*
Your personal data in this scope is processed by Mountain Mettle based on the legal grounds specified in the relevant legislation and Article 5 of the KVKK:

– Necessary for the processing of personal data of the parties to a contract, provided that it is directly related to the establishment or performance of a contract,
– Mandatory for the data controller to fulfill its legal obligation.

For cases not covered by the purposes mentioned above, your personal data is processed based on your explicit consent, as detailed in the Consent Text.

*Methods of Personal Data Collection:*
The personal data mentioned above is collected through printed and electronic forms, emails, and requests and messages within the website.

—

**7- Location Information**

*Processed Personal Data:*
– Location Information

*Purposes of Personal Data Processing:*
– Execution of Customer Relationship Management Processes
– Conducting Marketing Analysis Studies
– Execution of Advertising/Campaign/Promotion Processes
– Execution of Activities for Customer Satisfaction
– Execution of Product/Service Marketing Processes
– Execution of Product/Service Sales Processes
– Execution of Product/Service Production and Operation Processes

*Legal Grounds for Personal Data Processing:*
Your personal data in this scope is processed by Mountain Mettle based on the legal grounds specified in Article 5 of the KVKK, and you can access the details through the Consent Text:

– Explicit Consent.

*Methods of Personal Data Collection:*
The personal data mentioned above is collected based on your preference in your internet browser and our company’s mobile application.

Privacy Policy

1. Introduction

As Mountain Merch Tekstil Tasarım İmalat ve Dış Tic. Ltd. Sti. (“Mountain Mettle” or “Company”), we prioritize the privacy of your personal data and approach the information you share with us with sensitivity, acknowledging that it is personal and confidential. We have created this Privacy Policy (“Policy”) to inform our users visiting our website www.zeyneptosun.com about the privacy and security of the data collected through our website in accordance with the Personal Data Protection Law No. 6698 (“PDPL”) and secondary regulations. Your personal data will be used solely to provide you with better service within the framework of this Policy.

2. Scope of the Policy

3. Protection of Personal Data

3.1. General Principles of Processing Personal Data

The processing activities of your personal data by Mountain Mettle are carried out in accordance with the following general principles:

Compliance with the law and principles of honesty,
Accuracy and being up-to-date when necessary,
Processing for specific, clear, and legitimate purposes,
Being relevant, limited, and proportionate to the purpose for which they are processed,
Retention for the period prescribed in the relevant legislation or necessary for the purpose for which they are processed.

3.2. Purposes of Processing Personal Data and Information Text Regarding the Processing of Personal Data

Conducting activities in compliance with the legislation,
Conducting financial and accounting operations,
Conducting loyalty processes related to products/services,
Conducting communication activities,
Conducting activities to ensure business continuity,
Conducting logistics activities,
Conducting the purchase, production, marketing, sales, and after-sales support services of goods/services,
Managing customer relations processes,
Conducting storage and archive activities,
Conducting information or advertising campaigns related to our products or services,
Conducting contract processes,
Tracking requests/complaints,
Conducting supply chain management processes,
Ensuring the security of data controller operations by providing information to authorized individuals, institutions, and organizations.

4. Storage and Destruction of Personal Data

Data Collected Through Cookies

Additionally, your Personal Information may be shared with third parties to assist us in using your Personal Information as described above. For example, we use WooCommerce to power our online store – you can learn more about how WooCommerce uses your Personal Information here: https://woocommerce.com/privacy-policy/. We also use Google Analytics to help us understand how our customers use the Site – you can learn more about how Google uses your Personal Information here: https://www.google.com/intl/tr/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

5. Credit Card Security

Mountain Mettle prioritizes the security of credit card holders who shop on www.zeyneptosun.com. Mountain Mettle has a system that verifies the payment/invoice/delivery address information of the orders placed. Therefore, for example, for first-time orders to proceed to the supply and delivery stage, the accuracy of financial information must first be confirmed by the bank, and if necessary, customers who are credit card holders may be contacted to verify this information.

Zeyneptosun.com uses a payment infrastructure that complies with international security standards. During the shopping process, information related to the credit card used is encrypted via the SSL (Secure Sockets Layer) protocol independently of the site and sent to the relevant bank for verification. If the availability of the card is confirmed, the shopping continues. In addition, security measures are taken regarding the credit card data in accordance with the Payment Card Industry Data Security Standard (PCI DSS).

3D Secure Payment is a protocol designed as an additional security layer for credit and debit card transactions conducted online.

In this protocol, when the person shopping chooses to make a payment with a credit card through www.zeyneptosun.com, the bank sends a password to the telephone number associated with the credit card. This password sent is single-use and therefore cannot be used at another time. The transaction is approved only when the person enters the code sent to their mobile phone from the bank.

6. Links to Third-Party Websites

7. Updating the Policy

The provisions of this Policy may be changed or renewed in whole or in part to take effect on the date they are published on our website.

We recommend checking our website at regular intervals to keep track of changes to the Policy.

8. Contact Us

For questions, concerns, or complaints regarding the interpretation or implementation of this Policy, you can contact us:

By email at [email protected]
By mail to 351 Greenwich Avenue, Greenwich, CT 06830, United States.

Mountain Mettle may have other policies or procedures regarding the processing, security, and privacy of data that are beyond the scope of this Policy. Therefore, we recommend reviewing other legal texts.

By using the services provided by Mountain Mettle or visiting our website, you accept the practices described in this Privacy Policy.

Processing of Personal Data – Information Text

Data Controller: error (“error” or “Company”)

In accordance with the Personal Data Protection Law No. 6698 (“PDPL”) and related legislation and regulations, error aims to inform data subjects about the processing, storage, and transfer of their personal data through this Personal Data Processing Information Text (“Information Text”).

This Information Text will be effective as of the date of publication by error. error reserves the right to make changes to this Information Text whenever necessary. Any changes will become effective immediately upon publication on mountainmettle.shop.

Data Categories

1. Identity Information

Processed Personal Data: Name – Surname, Date of Birth, Gender, Turkish Republic ID Number
Purposes of Personal Data Processing: Conducting financial and accounting operations, communication activities, customer relationship management, post-sale support, legal compliance, advertising, promotion, 3D Secure payment decisions, etc.
Legal Basis for Personal Data Processing: Based on the reasons specified in Article 5 of the PDPL, such as legal obligation, contractual necessity, legitimate interest, etc.
Methods of Collecting Personal Data: Collected through membership forms, account page fields, third-party identity verification systems (e.g., Google Login, Facebook Login), etc.

2. Contact Information

Processed Personal Data: Email Address, Billing & Delivery Addresses, Mobile Phone Number
Purposes of Personal Data Processing: Financial operations, customer communication, business activities, marketing analysis, promotions, request tracking, etc.
Legal Basis for Personal Data Processing: Similar to Identity Information.
Methods of Collecting Personal Data: Through website membership, contracts, and third-party verification systems.

3. Legal Transaction Information

Processed Personal Data: Information in dispute lawsuits, notices, correspondence with judicial authorities.
Purposes of Personal Data Processing: Legal affairs, business audits, compliance, risk management, contract processes, etc.
Legal Basis for Personal Data Processing: Legal obligation, protection of rights, legitimate interests.
Methods of Collecting Personal Data: Collected through official letters from judicial authorities and other documents.

4. Customer Transaction Information

Processed Personal Data: Invoice information, order information, shipping details, product information, customer reviews.
Purposes of Personal Data Processing: Supply chain management, sales, post-sales services, marketing, request tracking, etc.
Legal Basis for Personal Data Processing: Legal obligation, contractual necessity, legitimate interest.
Methods of Collecting Personal Data: Collected through forms, emails, SAP systems.

5. Transaction Security Information

Processed Personal Data: IP address, website login-logout data, username, password, traffic data.
Purposes of Personal Data Processing: Information security, legal compliance, business audits, complaint tracking, etc.
Legal Basis for Personal Data Processing: Legal obligation, legitimate interest.
Methods of Collecting Personal Data: Collected through information security systems and electronic devices.

6. Financial Information

Processed Personal Data: Encrypted credit card information, bank account/IBAN number.
Purposes of Personal Data Processing: Financial affairs, return processes, sales operations, business audits, risk management, legal affairs.
Legal Basis for Personal Data Processing: Legal obligation, contractual necessity.
Methods of Collecting Personal Data: Collected through forms, emails, website requests.

7. Location Information

Processed Personal Data: Location data.
Purposes of Personal Data Processing: Customer relationship management, marketing analysis, advertising, sales processes.
Legal Basis for Personal Data Processing: Explicit consent.
Methods of Collecting Personal Data: Collected through internet browsers and mobile applications.
Profile-Related Consent Text

We would like to inform you about the activities conducted through the website www.zeyneptosun.com by our company Mountain Mettle Textile Products Inc..

Our electronic commerce platform, Mountain Mettle, does not require membership to make purchases. Therefore, membership is not a service condition on our platform. However, the membership option is designed for users who wish to receive a personalized service based on their habits, shopping history, and reviews. To provide these personalized advantages, some of your personal data may be processed for the purposes detailed below.

Personal Data Processing

Processed Personal Data:
- Identity information: Name, surname, date of birth, nationality, ID number, gender, passport expiration date, passport number.
- Contact information: Email address, billing and delivery addresses, mobile phone number.
- Customer transaction information: Request details, order information, invoice details, customer reviews, miles & smiles number, shopping history, open or implicit user ratings.
- Financial information: Bank card, credit card, and prepaid card information.
- Transaction security information: IP address information, website login/logout information, username, password, traffic data (e.g., connection time/duration), cookie records.
- Location data: May be collected based on your preferences in your internet browser and/or the mobile application.
Purposes and Legal Basis of Processing Personal Data

If you choose to become a Mountain Mettle member by giving your explicit consent, your personal data will be processed for the following purposes:
- Creating personalized advertisements, promotions, and campaigns.
- Conducting cross-selling.
- Determining target audiences.
- Enhancing user experience by tracking customer movements.
- Personalizing the operation of the Mountain Mettle website.
- Performing customer-specific segmentation, targeting, analysis, and internal reporting activities.
Legal Basis: Your personal data will be processed based on the legal ground of “explicit consent” under Article 5(1)(a) of the Personal Data Protection Law (KVKK).

Your Rights Regarding the Processed Data

As per Article 11 of the KVKK, you have the right to:
1. Learn whether your personal data is processed.
2. Request information if your personal data has been processed.
3. Learn the purpose of processing and whether it is used accordingly.
4. Know third parties to whom personal data is transferred.
5. Request correction of incomplete or incorrect data.
6. Request deletion or destruction of data within the framework of KVKK conditions.
7. Request notification of corrections, deletions, or destructions to third parties to whom data was transferred.
8. Object to results derived from automated processing.
9. Seek compensation for damages from unlawful data processing.
Your personal data will be processed based on your explicit consent, declared on the “Sign Up” page.

Cookie Policy

This policy has been prepared by Mountain Mettle Textile Products Inc. (“Mountain Mettle“) as the data controller within the scope of the Regulation on Procedures and Principles Regarding Fulfillment of the Obligation to Inform of the Personal Data Protection Law No. 6698 (“Law“).

What Are Cookies?

Cookies are small text files created by a website on your device, allowing the website to store and retrieve information during your subsequent visits. Mountain Mettle uses cookies on its website www.zeyneptosun.com for different purposes, as outlined below.

Cookie Types and Usage

Based on Ownership
- First-Party Cookies: Placed directly by the website.
Based on Active Period
- Session Cookies: Stored temporarily until the browser is closed.
- Persistent Cookies: Stored until deleted by the user or until their set expiration date.
Based on Purpose
- Technical/Mandatory Cookies: Necessary for website navigation and accessing secure areas.
- Functional Cookies: Personalize the website (e.g., remembering username, password, language preferences).
- Performance/Analysis Cookies: Provide anonymized statistical data on website use.
- Marketing/Targeting Cookies: Used to create a profile based on your interests for targeted ads.
Processing Purposes and Legal Basis

Technical/Mandatory Cookies: Used for necessary services like login and form completion, processed under Article 5(2)(c) of the Law for contract performance.

Functional Cookies: Used to personalize the website based on your preferences, processed based on explicit consent under Article 5(1).

Performance/Analysis Cookies: Used for analyzing user behavior, processed based on explicit consent under Article 5(1).

Marketing/Targeting Cookies: Used by business partners for advertising, processed based on explicit consent under Article 5(1).

Transfer of Personal Data

Personal data processed through cookies may be transferred to suppliers for customization and improvement of Mountain Mettle services, and to service providers located abroad for storage and analytical purposes (e.g., Google Analytics).

Cookie Management

You can manage your cookie preferences through the cookie management panel on the website, including enabling or disabling cookies. Disabling technical cookies may affect the functionality of the website.

To change your cookie preferences, use the Cookie Settings.

PRIVACY POLICY

Processing of Personal Data – Information Text

Data Categories

1. Identity Information

2. Contact Information

3. Legal Transaction Information

4. Customer Transaction Information

5. Transaction Security Information

6. Financial Information

7. Location Information

Profile-Related Consent Text

Personal Data Processing

Purposes and Legal Basis of Processing Personal Data

Your Rights Regarding the Processed Data

Cookie Policy

What Are Cookies?

Cookie Types and Usage

Based on Ownership

Based on Active Period

Based on Purpose

Processing Purposes and Legal Basis

Transfer of Personal Data

Cookie Management

Login