GDPR / KVKK Clarification

1. Identity of the Data Controller
In accordance with the Law on Protection of Personal Data No. 6698 ("KVKK"), as Miella Studio ("Data Controller"), your personal data obtained through our platforms, digital communication channels, Meta (Instagram) integrations, and web applications are processed within the framework described below and within the limits of mandatory legislation.

2. Purpose and Legal Grounds for Processing Personal Data

Your personal data (Identity, Contact, Customer Transaction, Transaction Security, and Social Media User Data) submitted to us, in light of the legal grounds specified in KVKK Article 5 and Article 6;

• Performance of a Contract (Article 5/2-c): Establishment of contracts with you, execution of product/service processes, and fulfillment of support requests (including Instagram DM integration),
• Legal Obligation (Article 5/2-ç): Reporting to official authorities, fulfilling information retention and submission obligations arising from legislation,
• Legitimate Interest (Article 5/2-f): Conducting our commercial activities, organizing information security processes, and preventing fraud

are processed within this scope. Data analysis and profiling operations with any artificial intelligence (AI) system are not carried out in a manner that restricts the fundamental rights and freedoms of the individual, in compliance with the legal 2026 AI Act regulations.

3. Parties to Whom Personal Data May Be Transferred and Purpose of Transfer

Your personal data may be shared, limited solely to our legal processing purposes, with our business partners authorized to conduct our commercial activities, and with local providers from whom we receive infrastructure/hosting and security (firewall) services. Furthermore, if you contact us via **Instagram (Meta Platforms, Inc.)** as a communication channel, since your messages are transmitted to our business servers via the Meta Graph API, data interaction with servers located abroad will occur directly within the framework of Meta's service and transfer conditions (KVKK Article 9 compliance).

4. Method of Personal Data Collection

Your personal data is collected through fully or partially automated methods, or non-automated methods provided that they are part of a data recording system, such as contact, subscription, and order forms on our website, printed forms filled out in physical environments, e-mail, call center conversations, and our integrated Meta (Instagram) DM message box.

5. Rights of the Data Subject Under KVKK Article 11

In accordance with Article 11 of the Law, data subjects have the right to;

• Learn whether personal data is processed, and if so, request information,
• Learn the purpose of processing and whether it is used in accordance with its purpose,
• Know the third parties to whom personal data is transferred domestically or abroad,
• Request correction if personal data is incomplete or incorrectly processed,
• Request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,
• Object to the emergence of an unfavorable outcome by means of analyzing processed data exclusively through automated systems (or AI systems).

To exercise your rights and submit your requests in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send an e-mail to kvkk@miellastudio.com or apply via registered mail to our official company address.

Last Update: 05.04.2026 | Document Version: v2.0-2026