CLARIFICATION TEXT ON THE PROTECTION OF PERSONAL DATA
This Information Text Regarding the Protection of Personal Data (“Information Text”) is issued by MARDİNİ KOZMETİK SANAYİ VE TİCARET LİMİTED ŞİRKETİ (“MARDINI KOZMETIK”), in its capacity as data controller, to comply with the obligation to inform as per Article 10 of the Personal Data Protection Law No. 6698 (“KVKK”). It has been created to fulfill and inform about the personal data collected, transferred, stored, processed and shared by MARDİNİ KOZMETİK.
All real persons who visit the internet address named " www.mardinikozmetik.com " or use the service offered by MARDINI KOZMETIK are within the scope of this information text. The Information Text will be valid from the date it is published on the website by MARDINI KOZMETIK. MARDINI KOZMETIK reserves the right to update this information text at any time within the framework of changes that may be made in the current legislation.
1. Definitions
Personal Data : any information regarding an identified or identifiable natural person.
Processing of personal data : obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available personal data by fully or partially automatic or non-automatic means provided that it is part of any data recording system, Any action performed on data, such as classifying or preventing its use
Visitor/Contact Person : All persons who access to www.mardinikozmetik.com, the real person whose personal data is processed, the personal data of MARDİNİ KOZMETİK SAN. VE TİC. LTD. ŞTİ. You are defined as a Visitor (Internet) due to your visit to our website and you are accepted as a Relevant Person by the Law.
Data Controller : MARDINI KOZMETIK data controller is the natural or legal person who determines the purposes and means of processing personal data, is responsible for establishing and managing the data recording system, determines the purposes and means of processing personal data regarding personal data about you, and is responsible for establishing and managing the data recording system.
Disclosure Obligation : During the acquisition of personal data, the data controller or the person authorized by him/her shall inform the relevant persons; the obligation to provide information about the identity of the data controller, the purpose for which personal data will be processed, to whom and for what purpose the processed personal data can be transferred, the method and legal reason for collecting personal data, and other rights listed in Article 11 of the Law.
Cookies : Small text files sent by servers to Online Visitors through browsers. Cookies; To be able to follow the Visitor's navigation information and usage history on the Website in order to provide special service to the Visitor, increase service quality, improve page contents, and offer promotional and marketing suggestions; In this context, to be able to stay on the Visitor's device for the specified period of time,
expresses.
2. Which Personal Data of Yours Are Processed?
If you become a member or contact us at our website called www.mardinikozmetik.com, your personal data below may be processed.
• Your Identity Information : Name, surname, gender, TR ID number and age information (if you purchase certain product groups, it is processed in accordance with the legislation).
• Contact Information: Mobile phone number, delivery address, e-mail address
• Transaction Security Information: IP address information, password and password information, cookie information,
• Legal Transaction Information: Information in correspondence with authorized persons, institutions and organizations, information in lawsuit and enforcement files, legal information request information.
• Cookies: If you visit our website named www.mardinikozmetik.com or any internet platform belonging to MARDINI KOZMETIK - the details of which are stated in the cookie policy on our website - these are cookies that may change depending on the browser used.
3. For what purposes is your personal data processed?
Your personal data (name-surname, address, identification number, etc.) can be recorded, transferred, updated, classified and transferred by MARDINI KOZMETIK to the extent permitted by the legislation.
Your personal data,
• To confirm the identity information of the person contacted via the internet address,
• To record address, telephone number and other necessary information for communication,
• Within the scope of the Consumer Protection Law and distance sales contract
• To organize all records and documents that will be the basis for the transaction in electronic (internet/mobile etc.) or paper format,
• To provide information to public officials on matters related to public security upon request and in accordance with the legislation,
• To provide better service to consumers, to provide information about our services that may be of interest to consumers, to convey campaigns,
• To increase user satisfaction, to recognize the customers receiving service and to use it in customer environment analysis, to use it in various marketing and advertising activities, and to organize surveys in electronic and physical environments through contracted organizations in this context,
• To be able to provide suggestions to our customers by our contracted institutions and solution partners and to inform our customers about our services,
• complaints and suggestions regarding our services ,
• To be able to fulfill our legal obligations and exercise our rights arising from the current legislation,
of the KVKK .
4. To whom and why is your personal data transferred?
Your personal data is processed based on your prior explicit consent and within the circumstances stipulated by law, and as a rule, it is not transferred to any institution, person or organization other than our obligations without your consent.
Your personal data may be transferred to the relevant authorities upon request within the framework of KVKK Article 28/1, without any obligation to inform and without your explicit consent.
Apart from this, in unforeseen cases, your personal data may be transferred to public institutions specified in the law (administrative authorities such as ministries, Presidential boards) within the purposes and limitations stipulated in the law, if requested, in cases clearly stated in the law.
Necessary technical and legal measures are taken to prevent rights violations during data transfer to third parties. However, MARDINI KOZMETIK is not responsible for the data protection policies of the third party receiving personal data and for any violations that occur in the risk area under the responsibility of the third party.
Based on the legal reasons that it is clearly stipulated in the legislation to which our company is subject, that it is mandatory for the fulfillment of its legal obligation, and that it is necessary for the establishment or execution of the contract;
• The address, name, surname, telephone, authorized person, and recipient information required for the order are shared with the printing houses, marketplace companies, dealers, cargo companies, logistics companies and service providers related to the transportation process, with whom we have agreements, in order to provide and manage the order,
• With our business partners, the seller of the purchased product, our consultants and service providers, banks, financial advisors, in order to carry out the billing processes,
• With business partners and other service providers who provide call center services to provide support services,
• With business partners and service providers who provide services in the field of quality control, complaint management and risk analysis of services,
• With our relevant business partners, consultants and service providers, banks and financial advisors for the management of financial and accounting processes, detection and evaluation of risks, and prevention of fraud,
• With tax offices to fulfill tax obligations, and with officials of the Ministry of Treasury and Finance of the Republic of Turkey to share invoices and collection receipts during tax audits,
• With our business partners and service providers who provide, operate or provide services to our IT infrastructure,
• With our business partners who provide services in the field of risk management and financial reporting processes,
Based on the legal reasons that data processing is mandatory for the establishment, exercise or protection of a right, that it is clearly stipulated in the legislation to which our company is subject, and that it is mandatory for the fulfillment of its legal obligation;
• With lawyers, auditors, digital forensic experts, cyber security consultants, tax consultants and other third parties and business partners from whom we receive consultancy and services, within the scope of fulfilling legal obligations,
• With authorized public institutions and organizations such as regulatory and supervisory institutions, courts and enforcement offices,
• It may be shared with other public institutions or organizations authorized to request your personal data, our domestic and/or foreign subsidiaries, suppliers, business partners, contracted banks and third parties from whom we purchase products or services.
5. Measures Taken for the Security of Data
Our company must take all necessary administrative and technical measures to prevent unlawful processing of personal data and unlawful access to personal data, to ensure the preservation of personal data, and to ensure the appropriate level of security.
In case of redirection to other sites or applications via the website, MARDINI KOZMETIK has no knowledge of the compliance of the directed sites and applications with the legislation on the protection of personal data and is not responsible for their privacy policies and contents.
Administrative Measures; As MARDINI KOZMETIK, we provide the necessary training to our personnel for the legal processing and protection of your personal data and we regularly inspect our employees to measure the level of compliance with the law. We adopt the compliance and care shown by our personnel with the Law as a criterion in the performance evaluation of our personnel. While these measures are taken within the company, we ensure your data security by signing confidentiality agreements and commitments with the groups of people (suppliers, business partners) with whom we have shared your personal data in accordance with the law, and we ensure that our stakeholders show sufficient sensitivity to your personal data. In addition to this training, auditing and measures, in case of a breach of your personal data, intervention plans have been created to resolve this breach, and the Company has worked with the Board to make the necessary preparations to resolve the breach.
b. Technical Measures; An IT infrastructure equipped with security measures in accordance with international standards has been established to ensure data security and prevent unlawful access to your data. In order for the system built on this infrastructure to operate smoothly, it is constantly audited internally. Technical measures given by the Personal Data Protection Authority, such as encryption, authorization matrix, application and network security, data masking, firewalls, backup, key management and up-to-date anti-virus systems, are followed in our IT infrastructure where the data we collect through our website is processed and stored. In addition, attack detection and prevention systems have been established to prevent attacks on our IT infrastructure, and the security of the system is checked regularly by performing risk analysis, data classification, vulnerability scanning and penetration tests. In order to carry out all these transactions, software programs and support that comply with international standards are purchased, as a requirement of the importance we attach to your personal data.
6. Your Rights Regarding Your Personal Data
In order to exercise their rights regarding their personal data, relevant persons must first apply to the data controller. According to Article 14 of the Law, a complaint cannot be made directly to the Personal Data Protection Board.
Regarding your personal data in accordance with the law
a) Learning whether personal data is processed or not,
b) Requesting information if your personal data has been processed,
c) Learning the purpose of processing your personal data and whether they are used for their intended purpose,
d) Knowing the third parties to whom your personal data is transferred at home or abroad,
d) Request correction of your personal data if it is incomplete or incorrectly processed,
e) Requesting the deletion or destruction of your personal data in case the reasons requiring processing are eliminated,
f) To request that the transactions carried out in accordance with paragraphs (d) and (e) be notified to third parties to whom your personal data has been transferred,
g) Object to the emergence of a result against you by analyzing your processed data exclusively through automatic systems,
g) Requesting compensation for the damage if you suffer damage due to illegal processing of personal data.
You can exercise your rights by contacting the data controller, that is, us.
7. Application Method for Your Rights and Requests
Application Method Address to Application
Personal Written Application Orhan Gazi Mahallesi Mimsan Sanayi Sitesi 1720. Sk. No:4 Esenyurt/İstanbul
Via Email Address info@mardinikozmetik.com
You can forward your questions and requests regarding your personal data to the above-mentioned addresses with a petition prepared in accordance with the conditions specified in the Communiqué on Application Procedures and Principles to the Data Controller.
As personal data owners, if you submit your requests regarding your rights to MARDINI KOZMETIK, MARDINI KOZMETIK will finalize your request free of charge within 30 (thirty) days at the latest. However, if the response to your application requires a cost in accordance with the legislation, MARDINI KOZMETIK may charge the fee in the tariff determined by the Personal Data Protection Board.
MARDINI KOZMETIK reserves the right to update this Information Text on the Protection of Personal Data at any time within the framework of changes that may be made in the current legislation.
DATE