Clarification Text

CUSTOMER AND VISITOR PRIVACY NOTICE

Dear User,

As Kiperin İlaç Gıda San. ve Tic. Ltd. Şti ("Kiperin or the "Company"), acting as the "Data Controller" in accordance with the Personal Data Protection Law No. 6698 ("Law"), we would like to inform you about your personal data that we process through our website www. kiperinturkiye.com or other online channels where we sell products ("Marketplaces") as our customers who create a member account and/or shop by choosing the guest checkout option ("Customer") or as visitors who visit our websites ("Visitor").

For information about the processing of your personal data obtained automatically through cookies and similar tracking technologies used on our website, we also request that you review our Cookie Policy.

METHODS OF COLLECTING PERSONAL DATA, YOUR PROCESSED PERSONAL DATA, PROCESSING PURPOSES AND LEGAL GROUNDS

Membership account creation process: For our Customers who will create a membership account, we collect and process your Identity Information (name, surname), Contact Information (e-mail address), Legal Transaction Information (information in the membership agreement) and Transaction Security Information (password information) through obtaining your personal data by filling out the membership form on our website, for the purposes of creating a membership account through the Website, completing membership procedures and providing information to members, conducting goods and services sales processes, conducting after-sales support services for goods and services, conducting customer relationship management processes and conducting communication activities, based on the legal grounds of "processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract" and "processing of data is necessary for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject".

Account information editing form process: For our Customers who will create a membership account, we collect and process your Identity Information (name, surname, date of birth), Contact Information (e-mail address, mobile phone number, delivery address, billing address) and Transaction Security Information (password information) through obtaining your personal data by entering/updating your information via the account information area on the Websites at any time following the creation of your membership account, for the purposes of updating account information for ordering and subsequent processes on our website and providing information to members in accordance with the updated information, conducting communication activities, conducting goods and services sales processes, conducting after-sales support services for goods and services and conducting customer relationship management processes based on the legal ground of "processing of data is necessary for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject".

ORDER PROCESSES AND RETURN PROCESSES

(i) For our Customers who will create a membership account, we collect and process your Identity Information (name, surname, Turkish ID number), Contact Information (e-mail address, mobile phone number, home phone number, business address, delivery address, billing address), Customer Transaction Information (order number, order details, request/complaint information) through obtaining your personal data by entering your information on our website, entering your current address information during ordering, using the form in the live support section on the Websites or communicating with our Company via e-mail, or through these information being transferred to our Company by the Marketplaces if you purchase our products from the Marketplaces, for the purposes of conducting your order processes, creating orders and creating membership if necessary for creating this order, order delivery, conducting delivery and invoicing processes, processing current address information during the delivery of your order and issuance of invoice, and within the scope of compliance with legislation, conducting goods and services sales processes, conducting after-sales support services for goods and services, conducting customer relationship management processes, conducting and supervising business activities, conducting activities to ensure business continuity, conducting finance and accounting affairs, conducting contract processes, and providing information to authorized persons, institutions and organizations, based on the legal grounds of "processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract", "processing of data is necessary for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject" and "processing of data is necessary for compliance with a legal obligation to which the data controller is subject" .

(ii) For Customers who will prefer the guest checkout option, we collect and process your Identity Information (name, surname), Contact Information (e-mail address, mobile phone number, delivery address, billing address) and Customer Transaction Information (order number, order details, request/complaint information) through obtaining your personal data by entering your information through the Website, for the purposes of creating your guest user account and opening your guest user session, providing you with information about your order, creating your order, conducting your order processes, processing your current address information during the delivery of your order and issuance of invoice, and conducting order delivery processes within the scope of conducting goods and services sales processes, conducting after-sales support services for goods and services, conducting customer relationship management processes, conducting finance and accounting affairs, conducting contract processes and conducting activities in compliance with legislation, based on the legal grounds of "processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract" and "processing of data is necessary for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject" .

Return processes: If you are our Customer, we collect and process your Identity Information (name, surname, signature), Contact Information (e-mail address, mobile phone number, delivery address), Customer Transaction Information (order number, order information, order amount, request/complaint information, product information), Financial Information (IBAN information (if payment was made by wire transfer)) through obtaining your personal data by entering your information on our website and through the information you share via marketplace platforms being transferred to our Company, for the purposes of conducting return processes, performing your return transactions, and making refunds regarding return transactions within the scope of conducting goods and services sales processes, conducting after-sales support services for goods and services, conducting activities in compliance with legislation, conducting customer relationship management processes, conducting contract processes and following up on requests and complaints, based on the legal ground of "processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract" .

ACCOUNTING AND FINANCE PROCESSES

Invoicing processes:

(i) If you are our Customer , we collect and process your Identity Information (name, surname, Turkish ID number), Contact Information (e-mail address, mobile phone number, home phone number, business address, residential address), Customer Transaction Information (order number, payment methods (cash, credit card, wire transfer, or online shopping credit), payment details (installment information)) and Financial Information (IBAN information) through obtaining your personal data by entering your information through our website, for the purposes of conducting e-invoice processes within the scope of your purchases, conducting goods and services sales processes, conducting finance and accounting affairs, conducting activities in compliance with legislation, and conducting contract processes, based on the legal grounds of "processing of data is necessary for compliance with a legal obligation to which the data controller is subject" and "processing of data is necessary for the establishment, exercise or protection of a right" .

(ii) Additionally for our Customers who will create a membership account, we collect and process your Customer Transaction Information (order number) through obtaining your personal data from existing data in our Company's systems, for the purposes of ensuring the control of penalty invoices issued due to delay in product delivery if you purchase our products from Marketplaces, within the scope of conducting contract processes, conducting and supervising business activities and conducting finance and accounting affairs, based on the legal grounds of "processing of data is necessary for compliance with a legal obligation to which the data controller is subject" and "processing of data is necessary for the establishment, exercise or protection of a right" .

Product profitability reporting processes: If you are our Customer, we collect and process your Identity Information (name, surname) and Customer Transaction Information (order number, order platform, payment method, preferred shipping company) through obtaining your personal data from the data available in our Company's accounting systems that we collected within the scope of your previous orders, for the purposes of controlling sales statistics regarding purchased products and managing efficiency and supply processes within the scope of conducting goods and services sales processes, conducting supply chain management processes, receiving and evaluating suggestions for the improvement of business processes, based on the legal ground of "processing of data is necessary for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject".

COMMUNICATION PROCESSES

Request and complaint processes (Contact us (contact form)/live support processes/E-mail, telephone/Customer Support Line): If you are our Customer or Visitor we collect and process your Identity Information (name, surname), Contact Information (e-mail address, mobile phone number), Customer Transaction Information (message subject, message subject heading, message content, request/complaint information, additionally if you are our Customer order number, order information), Transaction Security Information (IP address information, website login and logout information, website visitor information (computer operating system information, browser information used), log records), and call recording in calls made through the customer support line, through obtaining your personal data by communicating with our Company via e-mail, telephone, live support section on the Websites or using the form in the live support section or through the information you have shared with our business partners and suppliers being transferred to our Company, for the purposes of receiving, examining and providing you with information about the result of your requests, complaints and feedback regarding your orders, payment processes, our products or other matters, within the scope of conducting communication activities, conducting customer relationship management processes, receiving and evaluating suggestions for the improvement of business processes, conducting after-sales support services for goods and services, conducting firm, product and service loyalty processes, conducting activities for customer satisfaction and conducting request and complaint processes, based on the legal ground of "processing of data is necessary for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject".

COMMERCIAL COMMUNICATION PROCESSES

(i) If you are our Customer, we collect and process your Contact Information (e-mail address, telephone number) through obtaining your personal data by entering your information through the website, for the purposes of establishing commercial communication with you within the scope of general or special personalized campaigns, advantages, promotions, advertisements, information, surveys, and marketing activities, contacting you to receive feedback if you have not made a purchase for a certain period, sending you information about campaigns, promotions and promotional activities via e-mail, and making updates and promotions about products via e-mail within the framework of conducting e-bulletin processes, within the scope of conducting communication processes, based on "explicit consent" if you provide it; and we collect and process your Identity Information (TokenID information), Contact Information (e-mail address, telephone number) and Legal Transaction Information (source of consent, how the consent was obtained, commercial communication consent/rejection information, consent date and time, communication method (SMS, call, e-mail)) for the purposes of conducting commercial communication consent processes in accordance with our legal obligations, following up and conducting legal affairs, and providing information to authorized persons, institutions and organizations, based on the legal ground of "processing of data is necessary for compliance with a legal obligation to which the data controller is subject".

(ii) For our Customers who will create a membership account, we collect and process your Contact Information (e-mail, telephone number) through obtaining your personal data by entering your information through the Website, for the purposes of establishing commercial communication with you (instant notification through Websites or other channels, push notification and, if you give permission, via e-mail, SMS or call methods) within the scope of general or special personalized campaigns, advantages, promotions, advertisements, information, surveys, marketing activities, contacting you to receive feedback if you have not made a purchase for a certain period, conducting firm, product and service loyalty processes, receiving and evaluating suggestions for the improvement of business processes, conducting customer relationship management processes, conducting activities for customer satisfaction, conducting advertising, campaign and promotion processes, and conducting marketing processes of products and services, based on "explicit consent" if you provide it; and we collect and process your Identity Information (TokenID information), Contact Information (e-mail address, telephone number) and Legal Transaction Information (source of consent, how the consent was obtained, commercial communication consent/rejection information, consent date and time, communication method (SMS, call, e-mail)) for the purposes of conducting commercial communication consent processes in accordance with our legal obligations, following up and conducting legal affairs, and providing information to authorized persons, institutions and organizations, based on the legal ground of "processing of data is necessary for compliance with a legal obligation to which the data controller is subject".

CUSTOMER SATISFACTION PROCESSES

Product review and evaluation processes: If you are our Customer, we collect and process your Customer Transaction Information (evaluation score, title, review text, review/evaluation date) through obtaining your personal data by making a public comment or evaluation in the area dedicated to the good or service you purchased following your purchase of goods and services offered for sale on our Website, for the purposes of collecting and evaluating your feedback about products and providing feedback to our suppliers about products within the scope of conducting customer relationship management processes, conducting firm, product and service loyalty processes, conducting activities for customer satisfaction and conducting activities in compliance with legislation, based on the legal grounds of "the data being made public by the data subject" and "processing of data is necessary for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject"; and we collect and process your Identity Information (name, surname), Contact Information (telephone number) and Customer Transaction Information (evaluation score, title, review text, review/evaluation date) for the purposes of evaluating whether your comments comply with current legislation and contacting you to inform you if your comment is decided not to be published on the grounds that it does not comply with current legislation, within the scope of conducting activities in compliance with legislation, based on the legal ground of "processing of data is necessary for compliance with a legal obligation to which the data controller is subject"; and we collect and process your Identity Information (name, surname) for the purpose of displaying your information in comments if you give permission for your information to be shared publicly, based on the legal ground of "explicit consent".

Marketing, segmentation, analysis studies and e-bulletin processes: If you are our Customer, we collect and process your Identity Information (name, surname, date of birth, gender), Contact Information (e-mail address, mobile phone number), Marketing Information (Website usage/event details, approach/actions to electronic commercial and other communications, order information, past shopping information, last viewed products, answers to surveys) through obtaining your personal data by entering your information on our Website, automatically recording movements, transactions, behaviors on our Website by the Websites, for the purposes of creating and providing special personalized campaigns, advantages, promotions, conducting segmentation, reporting, profiling, marketing and analysis studies, organizing campaigns, competitions, draws and other events, sending information about campaigns, promotions and promotional activities to you via e-mail, and making updates and promotions about products via e-mail within the framework of conducting e-bulletin processes, within the scope of conducting firm, product and service loyalty processes, receiving and evaluating suggestions for the improvement of business processes, conducting customer relationship management processes, conducting activities for customer satisfaction, conducting advertising, campaign and promotion processes, conducting marketing analysis studies and conducting marketing processes of products and services, based on the legal ground of "explicit consent" if you provide it.

LEGAL PROCESSES

Litigation processes: If you are our Customer, we collect and process your Identity Information (name, surname, Turkish ID number, signature), Contact Information (e-mail address, telephone number, address), Financial Information (bank account information, IBAN information), Transaction Security Information (IP address information, log records), Legal Transaction Information (lawsuit file information, enforcement file information, mediation file information, request information regarding lawsuit/enforcement file, legal information related to complaint (request, dispute amount, dispute subject)) and Visual and Audio Recording Information (voice recordings (call center)) through obtaining your personal data from notifications sent from courts, enforcement offices, notaries, public institutions and organizations and similar places via mail, through UETS or through the Interactive Tax Office System, or from information available in our Company's systems, for the purposes of following up on lawsuits and complaints filed for and against our Company, using them as evidence in lawsuit and investigation processes, using our defense and response rights before authorized institutions and reporting lawsuits, within the scope of conducting activities in compliance with legislation, following up and conducting legal affairs and conducting reporting processes, based on the legal grounds of "processing of data is necessary for the establishment, exercise or protection of a right", "processing of data is necessary for compliance with a legal obligation to which the data controller is subject" and "processing of data is necessary for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject".

Correspondence processes with courts, enforcement offices and public institutions and organizations: If you are our Customer, we collect and process your Identity Information (name, surname, Turkish ID number), Contact Information (address) and Financial Information (credit card statement, credit card expiration date, bank account information, debt information) through obtaining your personal data from notifications sent from courts, enforcement offices, notaries, public institutions and organizations and similar places via mail, registered electronic mail (KEP) address, UETS or through the Revenue Administration, for the purpose of responding to writs coming from courts, enforcement offices or public institutions, within the scope of providing information to authorized persons, institutions and organizations and conducting activities in compliance with legislation, based on the legal ground of "processing of data is necessary for compliance with a legal obligation to which the data controller is subject".

Information and consent processes: If you are our Customer or Visitor, we collect and process your Identity Information (name, surname), Legal Transaction Information (information on whether you have given explicit consent for the processing of your personal data, if necessary) and Transaction Security Information (log records) through obtaining your personal data by entering your information through the Website, for the purposes of determining whether your personal data will be processed within the scope of our personal data processing activities that can be carried out based on your explicit consent (if any), storing the documents and records we receive from you, using our defense and response rights before authorized institutions, storing these documents for fulfilling our obligations arising from the Law, based on the legal grounds of "processing of data is necessary for compliance with a legal obligation to which the data controller is subject" and "processing of data is necessary for the establishment, exercise or protection of a right" .

TO WHOM AND FOR WHAT PURPOSE PERSONAL DATA MAY BE TRANSFERRED

Suppliers and Business Partners: (i) If you are our Customer, we transfer your Identity Information (name, surname, Turkish ID number, signature, date of birth, gender), Contact Information (e-mail address, mobile phone number, business address, residential address, delivery address, billing address), Customer Transaction Information (order number, order amount, order information, product information, message subject, message subject heading, message content, request and complaint information, payment methods (cash, credit card, wire transfer or online shopping credit), payment details (installment information), order platform, payment method, preferred shipping company, Website usage/eventdetails), Financial Information (IBAN information), Legal Transaction Information (legal information related to complaint (request, dispute amount, dispute subject), lawsuit file information, enforcement file information, mediation file information, request information regarding lawsuit and enforcement file, commercial communication consent/rejection information, source of consent, how the consent was obtained, commercial communication consent/rejection information, consent date and time, communication method (SMS, call, e-mail)), Visual and Audio Recording Information (voice recording) and Marketing Information (past shopping information) to our Company's suppliers, business partners and service providers located in Turkey for the purpose of receiving products, services and consultancy support in matters of information technology services, marketing/advertising, communication and customer satisfaction services, shipping and transportation services, or consulting in areas requiring expertise in a specific profession or field, (receiving technical maintenance, support and audit services, receiving technical support and hosting services regarding e-invoice processes, receiving technical support and automation services regarding marketing activities, receiving consultancy services regarding the database, receiving services regarding the monitoring of virtual machines, receiving virtual server services, receiving information technology services, receiving production and inventory tracking services, receiving services regarding the integration of management systems that ensure the efficient use of Company resources with the bank; receiving services regarding the management of customer communication processes, receiving integration services regarding the registration of commercial electronic message consents to the Message Management System, receiving customer satisfaction application services, receiving customer services management application services; receiving route optimization services, receiving shipping services; receiving motorized courier services, receiving payment at the door services; receiving consultancy services from firms, lawyers, accountants/financial advisors providing legal and financial consultancy services, receiving independent audit services, receiving consultancy services regarding accounting system processes) based on the legal grounds of "processing of data is necessary for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject" and "processing of data is necessary for compliance with a legal obligation to which the data controller is subject"; (ii) Additionally for our Customers who will create a membership account, we transfer your Customer Transaction Information (evaluation score, title, review text, review/evaluation date), Transaction Security Information (password information), Legal Transaction Information (information in the membership agreement) for the purposes of receiving technical support and automation services regarding marketing activities, receiving consultancy services regarding the database, receiving services regarding the monitoring of virtual machines, receiving virtual server services and receiving services regarding the management of customer communication processes to our Company's suppliers, business partners and service providers located in Turkey, based on the legal ground of "processing of data is necessary for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject";

Public: For our Customers who will create a membership account, we transfer your Customer Transaction Information (evaluation score, title, review text, review/evaluation date) publicly in the area dedicated to the relevant good or service through the Website, for the purposes of collecting and evaluating your feedback about products within the scope of conducting customer relationship management processes, conducting firm, product and service loyalty processes, conducting activities for customer satisfaction and conducting activities in compliance with legislation, if you make a comment or evaluation regarding the goods and services you have purchased, in line with your purpose of making it public, based on the legal ground of "the data being made public by the data subject";

Authorized Institutions and Organizations: If you are our Customer, we transfer your Identity Information (name, surname, Turkish ID number, signature), Contact Information (e-mail address, telephone number, address), Transaction Security Information (IP address information, log records), Legal Transaction Information (legal information related to complaint (request, dispute amount, dispute subject), lawsuit file information, enforcement file information, mediation file information, request information regarding lawsuit and enforcement file, information on whether you have given explicit consent for the processing of your personal data, if necessary) and Visual and Audio Recording Information (voice recordings (call center)) and other personal data requested by the relevant institutions and organizations to authorized public institutions and organizations, consumer arbitration committees, courts, public prosecutors, law enforcement agencies and other judicial/administrative authorities, as well as within the scope of our legal obligations, for the purposes of fulfilling our legal notification, declaration and audit obligations and relevant other obligations, carrying out official correspondence, conducting legal disputes and using our legal rights, especially the rights of litigation and response, based on the legal grounds of "processing of data is necessary for compliance with a legal obligation to which the data controller is subject" and "processing of data is necessary for the establishment, exercise or protection of a right" ;

Message Management System Inc.: If you are our Customer, we transfer your Contact Information (e-mail address, telephone number) and Legal Transaction Information (source of consent, how the consent was obtained, commercial communication consent/rejection information, consent date and time, communication method (SMS, call, e-mail)) to Message Management System Inc. within the scope of our legal obligations regarding records related to commercial communication, based on the legal ground of "processing of data is necessary for compliance with a legal obligation to which the data controller is subject";

Public: For our Customers who will create a membership account , we transfer your Identity Information (name, surname) publicly in the area dedicated to the relevant good or service through our Website, for the purposes of conducting firm, product and service loyalty processes, conducting activities for customer satisfaction, if you make a comment or evaluation regarding the goods and services you have purchased, in line with your purpose of making it public.

3. What are your rights?

You can always apply to our Company regarding your rights set forth in Article 11 of the Law concerning your personal data processed by us. You can submit your applications using any of the methods listed below:

We would like to remind you that your application must comply with the conditions set forth in the Communiqué on Procedures and Principles for Application to the Data Controller.

Written Application

You can apply in writing to the address of Kiperin stated below by hand delivery, through a notary public, by PTT or by courier. Please write the following statement exactly on the envelope/at the beginning of your letter: "Data Subject Application under the Personal Data Protection Law to Kiperin İlaç Gıda San ve Tic Limited Şirketi Legal Department" and send your application to Büyükdere Cad. No:185 Kanyon Office Block Floor:6 Levent/Şişli/Istanbul.

Application via E-Mail

You can send your applications via your e-mail address registered with Kiperin to info@kiperincollagenturkiye.com e-mail address, or if you do not have an e-mail address registered with Kiperin, you can send your applications to info@kiperincollagenturkiye.com e-mail address, provided that your application includes your mobile signature or e-signature.

KIPERIN ILAC GIDA SAN VE TIC LTD. STI