Data Subject Rights Request Form (GDPR)

General Information

This form has been prepared by STARTUP CREATIVE TEKNOLOJİ VE DANIŞMANLIK LİMİTED ŞİRKETİ ("My Tiny Garden") to enable individuals to exercise their rights as data subjects under the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable national data protection legislation.

To allow us to process your request, this form must be completed fully and accurately, and appropriate identity verification documentation must be attached. Requests that are incomplete or contain misleading information may not be processed.

Data Controller: STARTUP CREATIVE TEKNOLOJİ VE DANIŞMANLIK LİMİTED ŞİRKETİ ("My Tiny Garden")

Address: Eğitim Mah. Poyraz Sok. No:1/68, Kadıköy, İstanbul, Turkey

Email: info@mytinygarden.com

Section 1 — Identity and Contact Details of the Applicant

Please complete all fields below in full.

Full Name: ………………………………………………………………………………
Date of Birth: ………………………………………………………………………………
Nationality: ………………………………………………………………………………
Passport / National ID Number: ………………………………………………………………………………
Phone Number: ………………………………………………………………………………
Email Address: ………………………………………………………………………………
Postal Address (Street, City, Postcode, Country): ………………………………………………………………………………
Preferred Channel for Response: ☐ Email ☐ Post

Section 2 — Your Relationship with the Data Controller

Please tick the option(s) that best describe your relationship with My Tiny Garden (more than one option may be selected).

☐ Customer — I have purchased products or services via the website or other channels.
☐ Prospective Customer / Website Visitor — I have visited the website and/or subscribed to the newsletter.
☐ Former Customer — I have previously made a purchase but am no longer an active customer.
☐ Employee / Former Employee ………………………………………………
☐ Business Partner / Supplier / Reseller ………………………………………………
☐ Other: ………………………………………………………………………………

Approximate date the relationship began (if known): ………………………………………………

Section 3 — Nature of the Request (GDPR Data Subject Rights)

Please tick the right(s) you wish to exercise under the GDPR. You may select more than one.

Right of Access (Article 15 GDPR)
☐ I would like to obtain confirmation as to whether personal data concerning me is being processed, and if so, to receive a copy of that data together with information about the purposes of processing, the categories of data concerned, and any recipients to whom data has been or will be disclosed.
Right to Rectification (Article 16 GDPR)
☐ I would like inaccurate or incomplete personal data concerning me to be corrected or completed without undue delay.
Information I believe to be inaccurate: ………………………………………………………………
Correct information: ………………………………………………………………
Right to Erasure / "Right to be Forgotten" (Article 17 GDPR)
☐ I request the erasure of personal data concerning me where one of the grounds set out in Article 17 GDPR applies (e.g., data is no longer necessary for the purposes for which it was collected, consent has been withdrawn, data has been unlawfully processed).
Right to Restriction of Processing (Article 18 GDPR)
☐ I request that the processing of my personal data be restricted in accordance with the conditions set out in Article 18 GDPR.
Reason for the request: ………………………………………………………………
Right to Data Portability (Article 20 GDPR)
☐ I request to receive the personal data I have provided in a structured, commonly used and machine-readable format, and/or to have that data transmitted directly to another controller where technically feasible.
Right to Object (Article 21 GDPR)
☐ I object to the processing of my personal data on grounds relating to my particular situation, including processing carried out for direct marketing purposes or profiling.
Grounds for objection: ………………………………………………………………
Right Not to be Subject to Automated Decision-Making (Article 22 GDPR)
☐ I believe I have been subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects concerning me, and I wish to contest that decision.
Description of the relevant decision or process: ………………………………………………………………
Withdrawal of Consent (Article 7(3) GDPR)
☐ I wish to withdraw the consent I previously gave for the processing of my personal data. I understand that withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Consent to be withdrawn (please describe): ………………………………………………………………

Additional information in support of your request (optional):

………………………………………………………………………………………………………………………………………………………………………………………………………………………………………

Section 4 — Identity Verification and Supporting Documents

In order to protect your personal data and to prevent unauthorised disclosure, we are required to verify your identity before processing your request. Please attach one of the following documents:

☐ Copy of a valid government-issued photo ID (e.g., national identity card or passport) — you may redact any information that is not necessary for identity verification (e.g., personal identification number, signature)
☐ Copy of a valid passport (required for applicants who do not hold a national ID card)
☐ Copy of a valid driving licence
☐ If submitting on behalf of another person: a notarised power of attorney or equivalent legal authorisation, together with the representative's own identity document

Important Notice: Your request cannot be processed until identity verification is complete. Please ensure the document you submit clearly shows your full name and date of birth.

If this request is submitted on behalf of another person (by a representative or legal guardian):

Full Name of Representative: ………………………………………………
Type of Authority: ☐ Power of Attorney ☐ Legal Guardianship / Parental Authority

Section 5 — How to Submit Your Request

You may submit your completed form and supporting documents through one of the following channels. Please tick your preferred method:

☐ By Email: Complete this form, attach your identity verification document, and send both to info@mytinygarden.com. Please use the subject line "GDPR Data Subject Request" to help us handle your request promptly.
☐ By Post: Print, sign and send this form together with a copy of your identity document by recorded post to:
STARTUP CREATIVE TEKNOLOJİ VE DANIŞMANLIK LİMİTED ŞİRKETİ
Eğitim Mah. Poyraz Sok. No:1/68, Kadıköy, İstanbul, Turkey
(Please mark the envelope: "GDPR Data Subject Request")

For security reasons, requests submitted verbally or via instant messaging channels (including telephone, social media or live chat) cannot be accepted under this procedure and will not be processed as formal data subject requests.

Section 6 — Response Timeline

In accordance with Article 12 of the GDPR, we will respond to your request without undue delay and in any event within one (1) month of receipt. Where requests are complex or numerous, this period may be extended by a further two months; in such cases, we will notify you within one month of receipt of the request and explain the reason for the extension.

We will respond to your request free of charge. Where requests are manifestly unfounded or excessive, in particular because of their repetitive character, we may either charge a reasonable administrative fee or refuse to act, in accordance with Article 12(5) GDPR.

If you are not satisfied with our response, or if you consider that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority — in particular, the supervisory authority of the EU Member State or country of your habitual residence, place of work or the place of the alleged infringement. You also retain the right to an effective judicial remedy against the controller.

Section 7 — Declaration and Signature

Please read the declaration below carefully. By signing (or, in the case of an email submission, by sending this completed form from the email address stated above), you confirm that you agree with the following statement.

I declare that I have completed this form accurately and in good faith; that all information and documents provided are true and correct; and that I accept full legal responsibility for any consequences arising from false or misleading information. I confirm that I am submitting this request for the purpose of exercising my rights as a data subject under the General Data Protection Regulation (GDPR) and applicable data protection legislation.

Full Name: ………………………………………………………………………………
Date of Request: ………………………………………………………………………………
Signature: ………………………………………………………………………………

Note: A handwritten signature is not required for requests submitted by email; however, the email must be sent from the address stated in Section 1 of this form, and this will be treated as part of the identity verification process.

Summary of Your Rights Under the GDPR

The following is a concise overview of the rights available to you as a data subject under the General Data Protection Regulation:

The right to access your personal data and obtain information about how it is processed (Article 15);
The right to rectification of inaccurate or incomplete personal data (Article 16);
The right to erasure of your personal data ("right to be forgotten") where applicable (Article 17);
The right to restriction of processing in certain circumstances (Article 18);
The right to data portability in a structured, commonly used and machine-readable format (Article 20);
The right to object to processing, including processing for direct marketing purposes (Article 21);
The right not to be subject to solely automated decision-making, including profiling, that produces significant effects (Article 22);
The right to withdraw consent at any time, without affecting the lawfulness of prior processing (Article 7(3));
The right to lodge a complaint with a competent supervisory authority (Article 77).

For full details on how My Tiny Garden processes your personal data, please refer to our Privacy Policy and Cookie Policy, available on our website.