Clarification Text

CUSTOMER AND VISITOR INFORMATION TEXT

Dear User,

In accordance with the Personal Data Protection Law No. 6698 ("Law"), Kiperin İlaç Gıda San. ve Tic. Ltd., as the "Data Controller". As our customers who shop by creating a member account and/or choosing the option of shopping without membership through www.kiperinturkiye.com or other online channels we sell through (“Marketplaces”) (“Customers”) or visitors who visit our Websites (“Visitors”), we would like to inform you about your personal data that we process through our website and marketplaces.

We also kindly ask you to review our Cookie Policy to obtain information about the processing of your personal data obtained automatically through cookies and similar tracking technologies used on our website.

METHODS OF COLLECTION OF PERSONAL DATA, YOUR PROCESSED PERSONAL DATA, THE PURPOSES OF PROCESSING AND LEGAL REASONS BASED ON

Membership account creation process: For our Customers who will create a membership account, your personal data will be obtained by filling out the membership form on our website, and we will collect your Identity Information (name, surname), Contact Information (e-mail address), Legal Transaction We collect and process your information (information included in the membership agreement) and Transaction Security Information (password information) based on your request, for the purposes of creating a membership account on the Websites, completing membership transactions and informing members, carrying out goods and service sales processes, carrying out goods and service after-sales support services, carrying out customer relations management processes and carrying out communication activities, based on the legal grounds of "the necessity of processing personal data of the parties to a contract, provided that it is directly related to the establishment or execution of a contract" and "the necessity of processing data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person".

Account information editing form process: For our Customers who will create a membership account, we collect and process your Identity Information (name, surname, date of birth), Contact Information (e-mail address, mobile phone number, delivery address, billing address) and Transaction Security Information (password information) by obtaining your personal data through the account information field on the Websites at any time after you create your membership account, for the purposes of updating account information for the order and subsequent processes on our website and informing members in line with current information, carrying out communication activities, carrying out goods and service sales processes, carrying out goods and service after-sales support services and carrying out customer relations management processes, based on the legal reason that "data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person".

ORDER PROCESSES AND RETURN PROCESSES

(i) For our Customers who will create a membership account, you will enter your personal data through our website, enter your current address information during the order, contact our Company using the form in the live support section on the Websites or via e-mail, or purchase our products from the Marketplaces, and obtain this information by transferring it to our Company by the Marketplaces. We will collect your Identity Information (name, surname, T.R. identity number), Contact Information (e-mail address, mobile phone number, home phone number, work address, delivery address, invoice address), Customer Transaction Information (order number, order information, request/complaint information) for the execution of your order processes, creation of an order and, if necessary, creation of a membership for this order, execution of order submission, delivery and invoicing transactions, processing of current address information during the delivery of your order and issuance of an invoice, and execution of goods and service sales processes within the scope of carrying out activities in accordance with the legislation, execution of goods and service after-sales support services, customer relations management processes. We collect and process your personal data for the purposes of carrying out your business, carrying out and auditing your business activities, carrying out business continuity activities, carrying out financial and accounting affairs, carrying out contract processes and providing information to authorized persons, institutions and organizations, and based on the legal reasons of “processing personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or execution of a contract”, “processing data is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person” and “it is mandatory for the data controller to fulfill its legal obligation”.

(ii) For Customers who will prefer the membership-free shopping option, we collect and process your Identity Information (name, surname), Contact Information (e-mail address, mobile phone number, delivery address, invoice address) and Customer Transaction Information (order number, order information, request/complaint information) by obtaining your personal data through entering your information on the Website, creating your guest user account, opening your guest user session, informing you about your order, creating your order, carrying out your order processes, processing your current address information during the delivery of your order and issuing an invoice, and carrying out goods and service sales processes within the scope of carrying out order delivery processes, carrying out goods and service after-sales support services, carrying out customer relations management processes, carrying out finance and accounting affairs, carrying out contract processes and carrying out activities in accordance with the legislation, provided that it is directly related to the establishment or execution of a contract, processing personal data belonging to the parties to the contract is necessary and "data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person".

Return processes: If you are our customer, we collect and process your Identity Information (name, surname, signature), Contact Information (e-mail address, mobile phone number, delivery address), Customer Transaction Information (order number, order information, order amount, request/complaint information, product information), Financial Information (IBAN information (if payment is made by money order)) by obtaining your personal data through your entry on our website and the transfer of the information you share on the marketplace platforms to our Company, for the purposes of carrying out return processes, carrying out your return transactions and making refunds related to return transactions, carrying out goods and service sales processes, carrying out goods and service after-sales support services, carrying out activities in accordance with the legislation, carrying out customer relations management processes, carrying out contract processes and following up on requests and complaints, and based on the legal reason of "processing personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or execution of a contract".

ACCOUNTING AND FINANCE PROCESSES

Billing processes:

(i) If you are our customer, we collect and process your Identity Information (name, surname, Turkish Republic identity number), Contact Information (e-mail address, mobile phone number, home phone number, business address, residence address), Customer Transaction Information (order number, payment methods (cash, credit card, money order or online shopping credit), payment details (installment information)) and Financial Information (IBAN information) within the scope of your shopping, for the purposes of conducting e-invoice processes, conducting goods and services sales processes, conducting finance and accounting transactions, conducting activities in accordance with the legislation and conducting contract processes; based on the legal reasons of "being mandatory for the data controller to fulfill its legal obligation" and "being mandatory for data processing to establish, exercise or protect a right".

(ii) For our Customers who will create a membership account, we also collect and process your Customer Transaction Information (order number) by obtaining your personal data from the data available in our Company's systems, for the purposes of executing contract processes, conducting and auditing business activities, and conducting finance and accounting transactions within the scope of ensuring the control of penal invoices issued due to delays in product delivery when you purchase our products from the Marketplaces; based on the legal reasons of "being mandatory for the data controller to fulfill its legal obligation" and "being mandatory for data processing to establish, exercise or protect a right".

Product profitability reporting processes: If you are our customer, we collect and process your Identity Information (name, surname) and Customer Transaction Information (order number, ordering platform, payment method, preferred cargo company) by obtaining your personal data from the data available in our Company's accounting systems that we have collected within the scope of your previous orders, for the purposes of controlling the sales statistics of purchased products, executing goods and service sales processes within the scope of managing efficiency and supply processes, executing supply chain management processes, receiving and evaluating suggestions for improving business processes, and based on the legal reason that "data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person".

COMMUNICATION PROCESSES

Request and complaint processes (Contact us (contact form)/live support processes/E-mail, telephone/Customer Support Line): If you are our customer or visitor, your personal data will be obtained by contacting our Company via e-mail, telephone, live support section on the Websites or the form in the live support section or by transferring the information you have shared with our business partners and suppliers to our Company, your Identity Information (name, surname), Contact Information (e-mail address, mobile phone number), Customer Transaction Information (message subject, message subject, message content, request/complaint information, if you are our customer, also order number, order information), Transaction Security Information (IP address information, website login and exit information, website visitor information (computer operating system information, browser used), log records), and communication activities within the scope of receiving, examining and informing you about the results of your requests, complaints and feedback regarding your orders, payment processes, products or other issues in conversations made through the customer support line, We collect and process your personal data for the purposes of conducting customer relations management processes, receiving and evaluating suggestions for improving business processes, conducting after-sales support services for goods and services, conducting loyalty processes for companies, products and services, conducting activities aimed at customer satisfaction, and conducting request and complaint processes, and based on the legal reason that "data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person".

COMMERCIAL COMMUNICATION PROCESSES

(i) If you are our customer, by obtaining your personal data through your entry of information on the website, your Contact Information (e-mail address, phone number) will be used for the purposes of establishing commercial communication with you within the scope of general or personalized campaigns, advantages, promotions, advertisements, information, surveys and marketing activities, contacting you to receive feedback if you have not made a purchase for a certain period of time, sending you information regarding various marketing activities such as campaigns, promotions and promotions via e-mail, and conducting e-bulletin processes within the scope of making updates and promotions regarding products via e-mail, for the purposes of conducting communication processes and in case you give your express consent; Your Identity Information (TokenID information), Contact Information (e-mail address, phone number) and Legal Transaction Information (source of approval, how the approval was obtained, commercial communication approval/rejection information, approval date and time, communication method (SMS, call, e-mail) will be used for the execution of commercial communication permission processes in accordance with our legal obligations, for the follow-up and execution of legal affairs and for the authorized persons We collect and process it for the purposes of providing information to individuals, institutions and organizations based on the legal reason that it is “mandatory for the data controller to fulfill its legal obligations”.

(ii) For our Customers who will create a membership account, by obtaining your personal data through your entry of information on the Website, your Contact Information (e-mail, phone number) will be used for the purposes of establishing general or personalized campaigns, advantages, promotions, advertisements, information, surveys, commercial communication with you (instant notification, push notification and, if you allow, e-mail, SMS or call methods via the Websites or other channels) within the scope of marketing activities, contacting you to receive feedback if you have not made a purchase for a certain period of time, conducting loyalty processes to companies, products and services, receiving and evaluating suggestions for improving business processes, conducting customer relations management processes, conducting activities aimed at customer satisfaction, conducting advertising, campaign and promotion processes and conducting marketing processes of products and services, and in case you give your express consent; We collect and process your Identity Information (TokenID information), Contact Information (e-mail address, phone number) and Legal Transaction Information (source of approval, how approval was obtained, commercial communication approval/rejection information, approval date and time, communication method (SMS, call, e-mail) for the purposes of carrying out commercial communication permission processes in accordance with our legal obligations, following up and conducting legal affairs and providing information to authorized persons, institutions and organizations, based on the legal reason that "it is mandatory for the data controller to fulfill its legal obligations".

CUSTOMER SATISFACTION PROCESSES

Product comment and evaluation processes: If you are our customer, your personal data will be obtained by making a comment or evaluation publicly in the area reserved for the goods or services you purchased after purchasing them on our Website. Your Customer Transaction Information (evaluation score, title, comment text, comment/evaluation date) will be collected and evaluated for your feedback on the products and provided to our suppliers with feedback on the products, for the purposes of conducting customer relations management processes, conducting loyalty processes to companies, products and services, conducting activities aimed at customer satisfaction and conducting activities in accordance with the legislation, based on the legal grounds that "the data has been made public by the relevant person" and "data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person"; We collect and process your Identity Information (name, surname), Contact Information (phone number) and Customer Transaction Information (evaluation score, title, comment text, comment/evaluation date) in order to evaluate whether your comments comply with the current legislation and to contact you to inform you about your comment if it is decided not to be published due to its non-compliance with the current legislation, based on the legal reason of “it is mandatory for the data controller to fulfill its legal obligation” in order to carry out the activities in accordance with the legislation; and in case you allow your Identity Information (name, surname) to be shared publicly, based on the legal reason of “explicit consent” in order to display your information in the comments.

Marketing, segmentation, analysis studies and e-bulletin processes: If you are our customer, we will automatically record your personal data, transactions and behaviors on our Website, and we will collect your Identity Information (name, surname, date of birth, gender), Contact Information (e-mail address, mobile phone number), Marketing Information (Website usage/event details, approach/actions to electronic commercial and other communications, order information, past shopping information, recently viewed products, responses to surveys) or personalized campaigns, advantages and promotions for you, segmentation, reporting, profiling, marketing and analysis studies, organization of campaigns, competitions, draws and other events, sending you information about various marketing activities such as campaigns, promotions and introductions via e-mail, and updating and promoting products via e-mail, and carrying out e-bulletin processes within the scope of carrying out loyalty processes for companies, products and services, receiving and evaluating suggestions for improving business processes, carrying out customer relations management processes, We collect and process your personal data, provided that you give your "explicit consent", for the purposes of conducting activities aimed at customer satisfaction, conducting advertising, campaign and promotion processes, conducting marketing analysis studies and conducting marketing processes of products and services.

LEGAL PROCESSES

Case processes: If you are our customer, your personal data may be obtained by receiving notifications sent from courts, enforcement offices, notary offices, public institutions and organizations and similar places by mail, via UETS or via the Interactive Tax Office System or by obtaining information from the existing information in our Company's systems, such as your Identity Information (name, surname, T.R. identity number, signature), Contact Information (e-mail address, telephone number, address), Financial Information (bank account information, IBAN information), Transaction Security Information (IP address information, log records), Legal Transaction Information (case file information, enforcement file information, mediation file information, request information subject to the case/enforcement file, legal information regarding the complaint (demand, dispute fee, subject of the dispute)) and Visual and Audio Recording Information (voice recordings (call center)) for the follow-up of lawsuits and complaints filed in favor of and against our Company, their use as evidence in lawsuit and investigation processes, the use of our rights of defense and response before authorized institutions and We collect and process data for the purposes of carrying out activities in accordance with the legislation within the scope of reporting cases, following and carrying out legal affairs and carrying out reporting processes, and based on the legal reasons of “data processing is mandatory for the establishment, use or protection of a right”, “it is mandatory for the data controller to fulfill its legal obligation” and “data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person”.

Correspondence processes with courts, enforcement offices and public institutions and organizations: If you are our customer, we collect and process your Identity Information (name, surname, T.R. identity number), Contact Information (address) and Financial Information (credit card statement, credit card expiration date, bank account information, debt information) by obtaining your personal data through the mail, registered electronic mail (KEP) address, UETS or Revenue Administration of notifications sent from courts, enforcement offices, notary offices, public institutions and organizations and similar places, based on the legal reason of "it is mandatory for the data controller to fulfill its legal obligation" for the purposes of responding to warrants from courts, enforcement offices or public institutions and informing authorized persons, institutions and organizations and carrying out activities in accordance with the legislation.

Information and consent processes: If you are our Customer or Visitor, we collect and process your Identity Information (name, surname), Legal Transaction Information (if necessary, information on whether you have given explicit consent for the processing of your personal data) and Transaction Security Information (log records) by obtaining your personal data through your entry of information on the Website, for the purposes of determining whether your personal data will be processed within the scope of our personal data processing activities that may be carried out based on your explicit consent (if any), preserving the documents and records we receive from you, exercising our rights of defense and response before authorized institutions, storing these documents in order to fulfill our obligations arising from the Law, and based on the legal grounds of "being mandatory for the data controller to fulfill its legal obligation" and "being mandatory for data processing to establish, exercise or protect a right".

TO WHOM PERSONAL DATA MAY BE TRANSFERRED AND FOR WHAT PURPOSE

Suppliers and Business Partners: (i) If you are our customer, your identity information (name, surname, Turkish Republic identity number, signature, date of birth, gender), your contact information (e-mail address, mobile phone number, business address, residence address, delivery address, invoice address), your customer transaction information (order number, order amount, order information, product information, message subject, message subject title, message content, request and complaint information, payment methods (cash, credit card transfer or online shopping credit), payment details (installment information), platform where the order is placed, payment method, preferred cargo company, Website usage/event details), your financial information (IBAN information), your legal transaction information (legal information regarding the complaint (request, dispute amount, subject of the dispute), case file information, enforcement file information, mediation file information, request information subject to the case and enforcement file, commercial communication approval/rejection information, source, how the approval was obtained, commercial communication approval/rejection information, approval date and time, communication method (SMS, call, e-mail)), Your Visual and Audio Record Information (voice recording) and Marketing Information (past shopping information) in order to receive product, service and consultancy support in information technologies services, marketing/advertisement, communication and customer satisfaction services, cargo and transportation services or consultancy that requires expertise in a certain profession or field (to receive technical maintenance, support and audit service, to receive technical support and hosting service regarding e-invoice processes, to receive technical support and automation service regarding marketing activities, to receive database consultancy service, to receive service regarding monitoring of virtual machines, to receive virtual server service, to receive information technologies services, to receive production and stock tracking service, to receive service regarding integration of management systems that ensure efficient use of Company resources with the bank; to receive service regarding management of customer communication processes, to receive integration service regarding recording commercial electronic message approvals in the Message Management System, to receive customer satisfaction application service, to receive customer services management application service; to receive route optimization service, to receive cargo service; getting motor courier service, getting payment at the door service; (ii) For our Customers who will create a Membership account, in addition to the above, we may also share your Customer Transaction Information (evaluation score, title, comment text, comment/evaluation date), Transaction Security Information (password information), Legal Transaction Information (information included in the membership agreement) with our Company's suppliers, business partners and service providers located in the country for the purposes of receiving technical support and automation services regarding marketing activities, receiving consultancy services regarding databases, receiving services regarding monitoring virtual machines, receiving virtual server services and receiving services regarding management of customer communication processes, (iii) for our Customers who will create a Membership account, in addition to the above, we may also share your Customer Transaction Information (evaluation score, title, comment text, comment/evaluation date), Transaction Security Information (password information), Legal Transaction Information (information included in the membership agreement) with our Company's suppliers, business partners and service providers located in the country for the purposes of receiving technical support and automation services regarding marketing activities, receiving consultancy services regarding databases, receiving services regarding monitoring virtual machines, receiving virtual server services and receiving services regarding management of customer communication processes, Based on the legal reason “data processing is mandatory for the legitimate interests of the data controller”;

Public: For our Customers who will create a membership account, if you make a comment or evaluation regarding the goods and services you have purchased, your Customer Transaction Information (evaluation score, title, comment text, comment/evaluation date) will be made public in accordance with your purpose of collecting and evaluating your feedback about the products, conducting customer relations management processes, conducting loyalty processes to companies, products and services, conducting activities aimed at customer satisfaction and conducting activities in accordance with the legislation, based on the legal reason of “being made public by the relevant person himself/herself” in the area reserved for the relevant goods or services on the Website,

Authorized Institutions and Organizations: If you are our Customer, your Identity Information (name, surname, T.R. identity number, signature), Contact Information (e-mail address, telephone number, address), Transaction Security Information (IP address information, log records), Legal Transaction Information (legal information regarding the complaint (demand, dispute amount, subject of the dispute), case file information, enforcement file information, mediation file information, request information subject to the case and enforcement file, if necessary, personal information on whether you have given explicit consent for the processing of your data) and your Visual and Audio Record Information (voice recordings (call center)) and other personal data requested by the relevant institutions and organizations in order to fulfill our legal notification, declaration and audit obligations and other relevant obligations, to be able to conduct judicial/official correspondence, to conduct legal disputes and to exercise our legal rights, especially the rights of lawsuit and response, to the authorized public institutions and organizations, consumer arbitration committees, courts, prosecutors' offices, law enforcement forces and other judicial/administrative authorities, and also within the scope of our legal obligations, based on the legal grounds that "it is mandatory for the data controller to fulfill its legal obligation" and "data processing is mandatory for the establishment, use or protection of a right",

Message Management System Inc.: If you are our customer, we will transfer your contact information (e-mail address, phone number) and legal transaction information (source of approval, how the approval was received, commercial communication approval/rejection information, approval date and time, communication method (SMS, call, e-mail)) and commercial communication records to Message Management System Inc. within the scope of our legal obligations, based on the legal reason that “it is mandatory for the data controller to fulfill its legal obligation”,

Open to Public: For our Customers who will create a membership account, your identity information (name, surname) and in case you make a comment or evaluation regarding the goods and services you have purchased, we will transfer them openly to everyone in the area reserved for the relevant goods or services on our website in accordance with your purpose of making public, in order to carry out the processes of loyalty to the company, products and services, and to carry out activities aimed at customer satisfaction.

3. What are your rights?

You can always apply to our Company regarding your rights stipulated in Article 11 of the Law regarding your personal data processed by us. You can submit your applications using any of the methods listed below:

We would like to remind you that your application must comply with the conditions set forth in the Communiqué on the Procedures and Principles of Application to the Data Controller.

Written Application

You can apply in writing to Kiperin’s address below by hand delivery, via notary, PTT or cargo. Write the following statement on the envelope/title of your application: “Relevant Person Application to Kiperin İlaç Gıda San ve Tic Limited Şirketi Legal Department within the Scope of the Personal Data Protection Law” and send your application to Büyükdere Cad. No:185 Kanyon Office Block Floor:6 Levent/Şişli/İstanbul.

Application via E-Mail

You can send your applications to info@kiperincollagenturkiye.com via your registered e-mail address in Kiperin. If you do not have a registered e-mail address in Kiperin, you can send your applications to info@kiperincollagenturkiye.com provided that your application includes your mobile signature or e-signature.

KİPERİN MEDICINE FOOD INDUSTRY AND TRADE CO. LTD.