“MÜŞTERİ” KİŞİSEL VERİLERİNİN İŞLENMESİNE İLİŞKİN AYDINLATMA METNİ
Data Controller and Personal Data Categories In accordance with the Law No. 6698 on the Protection of Personal Data (“Law No. 6698”); your personal data in the form of name, surname, telephone number, address, e-mail address, customer transaction information, credit card information, request-complaint information and transaction security information; may be processed as the data controller within the scope detailed below.
Definitions Personal Data: Any information related to an identified or identifiable natural person. Data Controller: Refers to the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system. Supplier: Refers to the natural or legal person from whom goods or services are purchased. Business Partner: Refers to economically and legally independent natural or legal persons with whom we establish partnerships for the purpose of performing a specific job within the scope of the contractual relationship within the scope of the execution of our business activities.
Purposes of Processing Personal Data Your collected personal data is subject to your disclosure of your personal data to us; It is processed for the purposes of carrying out after-sales support services of goods and services, carrying out sales processes of goods and services, carrying out production and operation processes of goods and services, carrying out auditing/ethical activities, carrying out activities in accordance with the legislation, carrying out finance and accounting affairs, following up and carrying out legal affairs, carrying out internal audit/investigation/intelligence activities, following up on requests and complaints, carrying out and auditing business activities, receiving and evaluating suggestions for improving business processes, carrying out activities to ensure business continuity, carrying out customer relations management processes, carrying out activities for customer satisfaction, carrying out advertising/campaign/promotion processes, carrying out contract processes, carrying out communication activities. Transfer of Personal Data Your personal data; transferring the necessary information to the companies from which we receive service in order to fulfill our obligations under our service contract, etc. It is transferred to our business partners, suppliers, legally authorized public institutions and organizations under the conditions that it is directly related to the establishment or execution of a contract, such as requirements, the processing of personal data belonging to the parties to the contract is necessary, it is mandatory for the data controller to fulfill its legal obligation such as transferring your invoice information to the Revenue Administration due to legal obligations, the processing of data is mandatory for the legitimate interests of the data controller such as the use of corporate programs, the use of services and software received for business continuity and business development activities, the fulfillment of the obligations undertaken by the company. In addition, your personal data is transferred to our domestic business partners whose servers and cloud systems are located abroad and to our business partners resident abroad, provided that your explicit consent is obtained or that the data controllers in the relevant foreign country undertake adequate protection in writing and that the Personal Data Protection Board has permission.
Source and Legal ReasonYour personal data; before, after and during the performance of the service as required by our contractual obligations; through the information and documents you deliver physically, the information and documents you transmit electronically, and by us personally or from third parties, through physical, electronic means, automatically, partially automatically or non-automatically provided that it is part of any data recording system, in writing or verbally. Our personal data processing activities are processed limited to the purposes specified above, in accordance with Article 5 of Law No. 6698; provided that it is clearly foreseen in the laws, data processing is mandatory for the establishment, exercise and protection of a right, directly related to the establishment or performance of a contract, the processing of personal data belonging to the parties to the contract is necessary, it is mandatory for the data controller to fulfill its legal obligation or provided that it does not harm the fundamental rights and freedoms of the relevant person, the data processing is mandatory for the legitimate interests of the data controller, or upon obtaining your explicit consent in accordance with Article 5 of Law No. 6698. Application Procedures and PrinciplesAs the relevant person, you can submit your requests regarding your rights stipulated in Article 11 of Law No. 6698 by filling out the relevant form in accordance with the procedures and principles in the Related Person Application Form on our website https://santecosmetics.com/ and in any case, you can apply to the Data Controller by providing the minimum conditions stipulated by the Communiqué on Application Procedures and Principles; to our e-mail address info@santecosmetics.com with your e-mail address registered in our system or with a secure e-signature message or in writing to our address 50. Yıl mah. 27163 sok. No:8/A Yenişehir/MERSİN in person or through a notary. As the Company, we will finalize your application free of charge as soon as possible and within thirty days at the latest, depending on the nature of your request. However, if the transaction requires an additional cost, the Company will charge the fee in the tariff determined by the Personal Data Protection Board.