Information and Consent Approval Text on the Personal Data Protection Law

Dear Customer,

We present to your information our DEVI ILAC DERMOKOZMETIC ANONİM ŞİRKETİ (Devicosmetic.com) Information and Approval Text on the Protection and Processing of Personal Data.

Pursuant to the provisions of the Personal Data Protection Law No. 6698 (KVKK), any information that makes your identity specific or identifiable, including your special personal data, will be processed as Personal Data within the following scope by DEVI İLAÇ DERMOKOZMETİK ANONİM ŞİRKETİ (Devicosmetic.com) as the Data Controller. . Processing of your Personal Data refers to all kinds of operations performed on data such as obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, classifying or preventing the use of these data.

This Information and Consent Text aims to inform customers about the personal data processing activities carried out by Devicosmetic.com in accordance with the said Law and to obtain their explicit consent for the situations stated below.

We would like to state that, as DEVI ILAC DERMOKOZMETIC ANONIM COMPANY (Devicosmetic.com), we attach the highest importance to the security of your personal data and that we continue our activities with the awareness that the security of your personal data is at the forefront in all the products and services we offer to you.

Purposes and legal reasons for processing your personal data:

Personal data of customers is carried out by the business units to benefit the relevant people from the products and services offered by Devicosmetic.com and the relevant business processes are carried out, the necessary work is carried out by the relevant business units to realize the commercial activities carried out by Devicosmetic.com and the related business processes. execution, planning and execution of Devicosmetic.com's commercial and/or business strategies , ensuring the legal, technical and commercial-business security of Devicosmetic.com and the relevant persons in business relations with Devicosmetic.com , and the products offered by Devicosmetic.com . It is processed within the framework of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law, including the planning and execution of the activities necessary to recommend and promote the services to the relevant persons by customizing them according to the tastes, usage habits and needs of the relevant persons.

Explicit consent of customers must be obtained in order for Devicosmetic.com to process personal data in the following cases where the personal data processing conditions in Articles 5/2 and 6/3 of the Law cannot be met.

In this context, personal data of customers; Creating campaigns for customers, cross-selling, determining the target audience, carrying out activities that increase user experience by tracking customer movements, improving the functioning of Devicosmetic.com 's website and mobile application and personalizing it according to customer needs, direct and non-direct marketing, personalized Devicosmetic.com, including for the purposes of carrying out marketing and remarketing activities, carrying out personalized segmentation, targeting, analysis and in-house reporting activities, market research, planning and execution of customer satisfaction activities and planning and execution of customer relationship management processes. It may be processed in line with the approval given by the Customer within the scope of planning and execution of the sales and marketing processes of products and/or services, and the processes of establishing and/or increasing loyalty to the products and/or services offered by Devicosmetic.com, and is stated in this Information and Consent Text. may be shared with specified parties.

Transfer of your personal data:

Personal data of customers is carried out by the business units to benefit the relevant people from the products and services offered by Devicosmetic.com and the relevant business processes are carried out, the necessary work is carried out by the relevant business units to realize the commercial activities carried out by Devicosmetic.com and the related business processes. execution, planning and execution of Devicosmetic.com's commercial and/or business strategies, ensuring the legal, technical and commercial-business security of Devicosmetic.com and the relevant persons in business relations with Devicosmetic.com and the products offered by Devicosmetic.com . and DEVI ILAC DERMOKOZMETIK ANONIM within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, including the planning and implementation of the activities necessary to customize and promote the services to the relevant persons according to their tastes, usage habits and needs. It can be shared with the COMPANY and Company officials, our subsidiaries, business partners, suppliers, shareholders, legally authorized public institutions and organizations and private institutions.

Your rights under Article 11 of the Law:

By applying to Devicosmetic.com, your personal data; I) learning whether it has been processed or not, II) requesting information if it has been processed, III) learning the purpose of processing and whether it is used in accordance with its purpose, IV) knowing the third parties to whom it has been transferred domestically / abroad, V) requesting correction if it has been processed incompletely / incorrectly, VI) KVKK' To request deletion/destruction within the framework of the conditions stipulated in Article 7, VII) to request that the transactions made in accordance with clauses (V) and (VI) above be notified to third parties to whom it has been transferred, VIII) to object to the emergence of a result unfavorable to you due to being analyzed exclusively by automatic systems. IX) If you suffer damage due to illegal processing, you have the right to demand compensation for the damage.

Storage and Disposal

Our company has created a Storage and Destruction Policy for storing and deleting personal data. Storage and destruction of your personal data are carried out within the scope of this policy. Accordingly, if a period of time is specified for the storage of data in the KVKK or relevant laws and other relevant legislation, the data in question must be stored for at least this period.

Considering the possibility that a possible court request or a request from an administrative authority authorized by law regarding the relevant data may be received by us late or that a dispute may occur in which we may be a party, the storage period of the data is determined by adding a period of 6 months to 1 year to the periods stipulated in the legislation for the storage of your data and the determined At the end of the period, the data in question is deleted, destroyed or anonymized.

If there is no period specified in the legislation for the retention period of the data we process, your data will be deleted, destroyed or anonymized without your request, after the 10-year statute of limitations period has passed from the end of our legal relationship, taking into account possible disputes as a requirement of the relationship between us.

If all the processing conditions for personal data have been eliminated or the storage period declared by us or determined within the scope of the legislation has expired, your data will be deleted, destroyed or anonymized ex officio on the first periodic destruction date or within 6 months at the latest. If you request the deletion of your data for a valid reason, your data will be deleted within 30 days at the latest, to the extent legally possible. If you request that your data, whose retention period is determined in the legislation, be deleted or destroyed before the stipulated periods, your request will not be fulfilled.

YOUR RIGHTS

Regarding your personal data within the scope of KVKK and relevant legislation;

Learning whether your personal data is being processed or not,

Requesting information if your personal data has been processed,

Learning the purpose of processing personal data and whether they are used for their intended purpose,

Knowing the third parties to whom your personal data is transferred,

To request correction of your personal data if it is incomplete or incorrectly processed,

Requesting the deletion or destruction of your personal data within the framework of the conditions stipulated in the KVKK legislation,

When you request the correction of incomplete or inaccurate data and the deletion or destruction of your personal data, request that this situation be notified to the third parties to whom we have transferred your personal data,

Objecting to the emergence of a result against the individual by analyzing the processed data exclusively through automatic systems, and

If you suffer damage due to unlawful processing of personal data, you have the right to request compensation for this damage.

APPLICATION

If you wish to submit your applications and requests regarding your personal data, you can use the Relevant Person Application Form;

With wet signature and ID photocopy; By sending to Göktürk Merkez Mahallesi Çamlık Caddesi Office Number: 5-1 K.4 D.11 Eyüpsultan/İstanbul,

By applying to our Company in person with a valid identity document,

By sending it to our registered e-mail address deviilac@hs01.kep.tr using the registered e-mail (KEP) address and secure electronic signature or mobile signature, or by sending it to our address info@devicosmetic.com from your e-mail address previously notified to our Company and registered in our system , Devi İlaç You can forward it to .

In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, in these applications of the relevant persons, name and surname, signature if the application is in writing, TR ID number (passport number if the applicant is a foreigner), residence or workplace address subject to notification, e-mail address subject to notification, if any. It is mandatory to include address, telephone number and fax number and information regarding the subject of the request.

The requested matter must be stated clearly and understandably in the application that the data owner will make to exercise the above-mentioned rights and that includes explanations regarding the right he/she requests to use. Information and documents regarding the application must be attached to the application.

Although the subject of the request must be related to the applicant personally, if acting on behalf of someone else, the applicant must be specifically authorized in this regard and this authority must be documented (special power of attorney). In addition, the application must include identity and address information and documents verifying identity must be attached to the application.

Requests made by unauthorized third parties on behalf of someone else will not be taken into consideration.

Your claims regarding your personal data will be evaluated and responded to within 30 days at the latest from the date they are received by our Company. If your application is evaluated negatively, the reasoned rejection reasons will be sent to you by e-mail or postal mail to the address you specified in your application, and if possible, through the method in which the request was made.

The data controller to whom you can apply within the scope of the law:

In accordance with the regulations of the KVK, you can submit your request to exercise your above-mentioned rights to Devicosmetic.com in writing or through other methods determined by the Personal Data Protection Board, as well as through the channels specified below.

I have read and understood the "Information and Consent Confirmation Text on the Personal Data Protection Law" detailed above. I expressly accept, with my own consent, that my personal data will be collected, used, processed within the framework of the information above, and transferred to third parties, institutions and organizations abroad, including but not limited to subsidiaries, offices, business partners and within the framework of the rules set out in Article 9 of the KVKK.