Clarification Text

CUSTOMER AND VISITOR PRIVACY NOTICE

Dear User,

In accordance with the Personal Data Protection Law No. 6698 ("Law"), Kiperin İlaç Gıda San. ve Tic. Ltd. Şti. ("Kiperin" or the "Company"), acting as the "Data Controller," would like to inform you about the processing of your personal data through our website and marketplaces, as our customers ("Customer") who create an account and/or choose the guest checkout option to shop on www.kiperinturkiye.com or other online channels where we sell, or as visitors ("Visitor") who visit our websites.

For information on the processing of your personal data obtained automatically through cookies and similar tracking technologies used on our website, please review our Cookie Policy.

METHODS OF COLLECTION OF PERSONAL DATA, YOUR PROCESSED PERSONAL DATA, PURPOSES OF PROCESSING, AND LEGAL GROUNDS RELIED UPON

Account creation process: For our Customers who will create an account, we collect and process your Identity Information (name, surname), Contact Information (email address), Legal Transaction Information (information contained in the membership agreement), and Transaction Security Information (password information) based on your request, through the completion of the membership form on our website, to enable the creation of an account on our websites, completion of membership procedures, notification of members, execution of goods and services sales processes, execution of post-sales support services for goods and services, execution of customer relationship management processes, and execution of communication activities, based on the legal grounds that "processing the personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract" and "processing is necessary for the legitimate interests of the data controller, provided that the basic rights and freedoms of the data subject are not harmed."

Account information editing form process: For our Customers who will create an account, we collect and process your Identity Information (name, surname, date of birth), Contact Information (email address, mobile phone number, delivery address, billing address), and Transaction Security Information (password information) at any time after you create an account, through the entry/update of your information via the account information section on our websites, for the purposes of updating account information for orders on our website and subsequent processes, providing information to members based on updated information, executing communication activities, executing goods and services sales processes, executing post-sales support services for goods and services, and executing customer relationship management processes, based on the legal ground that "processing is necessary for the legitimate interests of the data controller, provided that the basic rights and freedoms of the data subject are not harmed."

ORDER AND RETURN PROCESSES

(i) For our Customers who will create an account, we collect and process your Identity Information (name, surname, T.C. ID number), Contact Information (email address, mobile phone number, landline phone number, business address, delivery address, billing address), and Customer Transaction Information (order number, order details, request/complaint information) through the entry of your information on our website, the entry of your updated address information during the order, communication with our Company using the form in the live support section on our websites or via email, or the transfer of this information by Marketplaces to our Company when you purchase our products from Marketplaces, for the purposes of executing your order processes, creating an order and creating a membership if necessary to enable this, executing order dispatch, delivery, and invoicing procedures, processing updated address information during the delivery of your order and the issuance of an invoice, executing goods and services sales processes, executing post-sales support services for goods and services, executing customer relationship management processes, executing business activities and audits, ensuring business continuity, executing financial and accounting tasks, executing contract processes, and informing authorized persons, institutions, and organizations, based on the legal grounds that "processing the personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract," "processing is necessary for the legitimate interests of the data controller, provided that the basic rights and freedoms of the data subject are not harmed," and "processing is necessary for the data controller to fulfill its legal obligations."

(ii) For Customers who will choose the guest checkout option, we collect and process your Identity Information (name, surname), Contact Information (email address, mobile phone number, delivery address, billing address), and Customer Transaction Information (order number, order details, request/complaint information) through the entry of your information on our website, for the purposes of creating your guest user account and opening your guest user session, informing you about your order, creating your order, executing your order processes, processing your updated address information during the delivery of your order and the issuance of an invoice, executing goods and services sales processes, executing post-sales support services for goods and services, executing customer relationship management processes, executing financial and accounting tasks, executing contract processes, and ensuring that activities are carried out in accordance with legislation, based on the legal grounds that "processing the personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract" and "processing is necessary for the legitimate interests of the data controller, provided that the basic rights and freedoms of the data subject are not harmed."

Return processes: If you are our Customer, we collect and process your Identity Information (name, surname, signature), Contact Information (email address, mobile phone number, delivery address), Customer Transaction Information (order number, order details, order amount, request/complaint information, product information), and Financial Information (IBAN information (if payment was made by wire transfer)) through the entry of your information on our website and the transfer of the information you share via marketplace platforms to our Company, for the purposes of executing return processes, carrying out your return transactions, and making refunds related to return transactions, executing goods and services sales processes, executing post-sales support services for goods and services, ensuring that activities are carried out in accordance with legislation, executing customer relationship management processes, executing contract processes, and tracking requests and complaints, based on the legal ground that "processing the personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract."

ACCOUNTING AND FINANCIAL PROCESSES

Invoicing processes:

(i) If you are our Customer, we collect and process your Identity Information (name, surname, T.C. ID number), Contact Information (email address, mobile phone number, landline phone number, business address, residential address), Customer Transaction Information (order number, payment methods (cash, credit card, wire transfer, or online shopping loan), payment details (installment information)), and Financial Information (IBAN information) through the entry of your information on our website, for the purposes of executing e-invoice processes within the scope of your purchases, executing goods and services sales processes, executing financial and accounting tasks, ensuring that activities are carried out in accordance with legislation, and executing contract processes, based on the legal grounds that "processing is necessary for the data controller to fulfill its legal obligations" and "processing is necessary for the establishment, exercise, or protection of a right."

(ii) In addition, for our Customers who will create an account, we collect and process your Customer Transaction Information (order number) through the acquisition of your personal data from existing data in our Company's systems, for the purposes of executing contract processes, executing business activities and audits, and executing financial and accounting tasks, to ensure the control of penalty invoices issued due to delayed product delivery when you purchase our products from Marketplaces, based on the legal grounds that "processing is necessary for the data controller to fulfill its legal obligations" and "processing is necessary for the establishment, exercise, or protection of a right."

Product profitability reporting processes: If you are our Customer, we collect and process your Identity Information (name, surname) and Customer Transaction Information (order number, platform where the order was placed, payment method, preferred cargo company) through the acquisition of your personal data from existing data in our Company's accounting systems collected within the scope of your previous orders, for the purposes of checking sales statistics related to purchased products, managing efficiency and supply processes, executing goods and services sales processes, executing supply chain management processes, receiving and evaluating suggestions aimed at improving business processes, based on the legal ground that "processing is necessary for the legitimate interests of the data controller, provided that the basic rights and freedoms of the data subject are not harmed."

COMMUNICATION PROCESSES

Request and complaint processes (Contact us (contact form)/live support processes/ Email, phone/ Customer Support Line): If you are our Customer or a Visitor, we collect and process your Identity Information (name, surname), Contact Information (email address, mobile phone number), Customer Transaction Information (message subject, message subject line, message content, request/complaint information, and if you are our Customer, additionally order number, order details), Transaction Security Information (IP address information, website login/logout information, website visitor information (computer operating system information, browser information used)), and call recordings from conversations conducted via the customer support line, as well as your requests, complaints, and feedback regarding your orders, payment processes, products, or other matters, to receive, review, and inform you of the results, for the purposes of executing communication activities, executing customer relationship management processes, receiving and evaluating suggestions aimed at improving business processes, executing post-sales support services for goods and services, executing brand, product, and service loyalty processes, executing activities aimed at customer satisfaction, and executing request and complaint processes, based on the legal ground that "processing is necessary for the legitimate interests of the data controller, provided that the basic rights and freedoms of the data subject are not harmed."

COMMERCIAL COMMUNICATION PROCESSES

(i) If you are our Customer, we collect and process your Contact Information (email address, phone number) through the acquisition of your personal data by entering your information on our website, for the purposes of establishing commercial communication with you within the scope of general or personalized campaigns, advantages, promotions, advertisements, notifications, surveys, and marketing activities, contacting you to receive feedback if you have not shopped for a certain period, sending you information about campaigns, promotions, and various other marketing activities via email, and executing e-newsletter processes within the framework of providing product updates and promotions via email, based on your "explicit consent"; your Identity Information (TokenID information), Contact Information (email address, phone number), and Legal Transaction Information (source of consent, how consent was obtained, commercial communication consent/refusal information, date and time of consent, communication method (SMS, call, email)) for the purposes of executing commercial communication permission processes in accordance with our legal obligations, tracking and executing legal affairs, and informing authorized persons, institutions, and organizations, based on the legal ground that "processing is necessary for the data controller to fulfill its legal obligations."

(ii) For our Customers who will create an account, we collect and process your Contact Information (email, phone number) through the acquisition of your personal data by entering your information on our website, for the purposes of establishing commercial communication with you (via instant notifications on our websites or other channels, push notifications, and, if you permit, email, SMS, or call methods) within the scope of general or personalized campaigns, advantages, promotions, advertisements, notifications, surveys, and marketing activities, contacting you to receive feedback if you have not shopped for a certain period, executing brand, product, and service loyalty processes, receiving and evaluating suggestions aimed at improving business processes, executing customer relationship management processes, executing activities aimed at customer satisfaction, executing advertising, campaign, and promotion processes, and executing product and service marketing processes, based on your "explicit consent"; your Identity Information (TokenID information), Contact Information (email address, phone number), and Legal Transaction Information (source of consent, how consent was obtained, commercial communication consent/refusal information, date and time of consent, communication method (SMS, call, email)) for the purposes of executing commercial communication permission processes in accordance with our legal obligations, tracking and executing legal affairs, and informing authorized persons, institutions, and organizations, based on the legal ground that "processing is necessary for the data controller to fulfill its legal obligations."

CUSTOMER SATISFACTION PROCESSES

Product review and evaluation processes: If you are our Customer, we collect and process your Customer Transaction Information (evaluation score, title, review text, review/evaluation date) through the acquisition of your personal data when you purchase goods or services offered on our website and publicly post a review or evaluation in the area designated for the purchased good or service, for the purposes of executing customer relationship management processes, executing brand, product, and service loyalty processes, executing activities aimed at customer satisfaction, and ensuring that activities are carried out in accordance with legislation, based on the legal grounds that "the data has been made public by the data subject themselves" and "processing is necessary for the legitimate interests of the data controller, provided that the basic rights and freedoms of the data subject are not harmed"; and to inform you if your review is evaluated as not being in compliance with current legislation and is decided not to be published, based on the legal ground that "processing is necessary for the data controller to fulfill its legal obligations," and if you permit your Identity Information (name, surname) to be shared publicly, based on the legal ground of "explicit consent" for the purpose of displaying your information in reviews.

Marketing, segmentation, analysis studies, and e-newsletter processes: If you are our Customer, we collect and process your Identity Information (name, surname, date of birth, gender), Contact Information (email address, mobile phone number), and Marketing Information (website usage/event details, attitudes/actions toward electronic commercial and other communications, order information, past purchase information, recently viewed products, answers to surveys) through the entry of your information on our website and the automatic recording of your activities, transactions, and behaviors on our websites by the websites, for the purposes of creating and providing personalized campaigns, advantages, and promotions, conducting segmentation, reporting, profiling, marketing, and analysis studies, organizing campaigns, competitions, lotteries, and other events, sending you information about campaigns, promotions, and various other marketing activities via email, and executing e-newsletter processes within the framework of providing product updates and promotions via email, executing brand, product, and service loyalty processes, receiving and evaluating suggestions aimed at improving business processes, executing customer relationship management processes, executing activities aimed at customer satisfaction, executing advertising, campaign, and promotion processes, executing marketing analysis studies, and executing product and service marketing processes, based on your "explicit consent."

LEGAL PROCESSES

Litigation Processes: If you are our customer, we collect and process your Identity Information (name, surname, T.C. ID number, signature), Contact Information (e-mail address, phone number, address), Financial Information (bank account details, IBAN), Transaction Security Information (IP address information, log records), Legal Transaction Information (litigation file information, enforcement file information, mediation file information, information on the request subject of the litigation/enforcement file, legal information regarding the complaint (request, dispute amount, subject of the dispute)), and Audio-Visual Recording Information (voice recordings (call center)) for the purposes of monitoring lawsuits and complaints filed on behalf of or against our Company, using them as evidence in litigation and investigation processes, exercising our rights of defense and response before authorized institutions, reporting lawsuits, conducting activities in compliance with legislation, tracking and conducting legal affairs, and carrying out reporting processes, and based on the legal grounds of “processing data is mandatory for the establishment, exercise, or protection of a right,” “processing data is mandatory for the data controller to fulfill its legal obligation,” and “processing data is mandatory for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed.”

Correspondence Processes with Courts, Enforcement Offices, and Public Institutions and Organizations: If you are our customer, we collect and process your Identity Information (name, surname, T.C. ID number), Contact Information (address), and Financial Information (credit card statement, credit card expiration date, bank account details, debt information) obtained through the receipt of notifications sent by courts, enforcement offices, notary offices, public institutions and organizations, and similar entities via mail, registered electronic mail (KEP), UETS, or the Revenue Administration, in order to respond to official letters from courts, enforcement offices, or public institutions, inform authorized persons, institutions, and organizations, and conduct activities in compliance with legislation, based on the legal ground of “processing data is mandatory for the data controller to fulfill its legal obligation.”

Disclosure and Consent Processes: If you are our customer or visitor, we collect and process your Identity Information (name, surname), Legal Transaction Information (information on whether you have given explicit consent for the processing of your personal data, if necessary), and Transaction Security Information (log records) obtained through your submission of information on the Website, to determine whether your personal data will be processed within the scope of our personal data processing activities that may be carried out based on your explicit consent (if any), to preserve the documents and records we receive from you, to exercise our rights of defense and response before authorized institutions, and to preserve these documents to fulfill our obligations arising from the Law, based on the legal grounds of “processing data is mandatory for the data controller to fulfill its legal obligation” and “processing data is mandatory for the establishment, exercise, or protection of a right.”

TO WHOM AND FOR WHAT PURPOSES PERSONAL DATA MAY BE TRANSFERRED

Suppliers and Business Partners: (i) If you are our customer, we collect and process your Identity Information (name, surname, T.C. ID number, signature, date of birth, gender), Contact Information (e-mail address, mobile phone number, business address, residential address, delivery address, billing address), Customer Transaction Information (order number, order amount, order details, product information, message subject, message subject line, message content, request and complaint information, payment methods (cash, credit card, wire transfer, or online shopping credit), payment details (installment information), platform where the order was placed, payment method, preferred cargo company, Website usage/event details), Financial Information (IBAN), Legal Transaction Information (legal information regarding the complaint (request, dispute amount, subject of the dispute), litigation file information, enforcement file information, mediation file information, request information subject to the litigation/enforcement file, commercial communication consent/refusal information, source of consent, how consent was obtained, commercial communication consent/refusal information, date and time of consent, communication method (SMS, call, e-mail)), Audio-Visual Recording Information (voice recording), and Marketing Information (past purchase information) to obtain products, services, and consultancy support in information technology services, marketing/advertising, communication and customer satisfaction services, cargo and transportation services, or consultancy in a specific profession or field (obtaining technical maintenance, support, and audit services; technical support and hosting services regarding e-invoice processes; technical support and automation services regarding marketing activities; consultancy services regarding databases; services regarding the monitoring of virtual machines; virtual server services; information technology services; production and stock tracking services; services regarding the integration of management systems that ensure the efficient use of Company resources with banks; services regarding the management of customer communication processes; integration services for recording commercial electronic communication consents in the Message Management System; customer satisfaction application services; customer service management application services; route optimization services; cargo services; motorcycle courier services; cash on delivery services; obtaining consultancy services from firms providing legal and financial consultancy services, lawyers, accountants/financial advisors; obtaining independent audit services; obtaining consultancy services regarding accounting system processes) from our domestic suppliers, business partners, and service providers based on the legal grounds of “processing data is mandatory for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed” and “processing data is mandatory for the data controller to fulfill its legal obligation”; (ii) for our Customers who will create a membership account, in addition to the above, we collect and process your Customer Transaction Information (evaluation score, title, review text, review/evaluation date), Transaction Security Information (password information), and Legal Transaction Information (information contained in the membership agreement) for the purposes of obtaining technical support and automation services regarding marketing activities, obtaining consultancy services regarding databases, obtaining services regarding the monitoring of virtual machines, obtaining virtual server services, and obtaining services regarding the management of customer communication processes, based on the legal ground of “processing data is mandatory for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed;

Public: For our Customers who will create a membership account, we collect and process your Customer Transaction Information (evaluation score, title, review text, review/evaluation date) in the event that you make a comment or evaluation regarding the goods and services you have purchased, in accordance with your purpose of making it public, as part of the processes of collecting and evaluating your feedback about products, carrying out loyalty processes related to the company, products, and services, carrying out activities aimed at customer satisfaction, and conducting activities in compliance with legislation, based on the legal ground of “it has been made public by the data subject themselves” in the area designated for the relevant good or service on our Website.

Authorized Institutions and Organizations: If you are our customer, we collect and process your Identity Information (name, surname, T.C. ID number, signature), Contact Information (e-mail address, phone number, address), Transaction Security Information (IP address information, log records), Legal Transaction Information (legal information regarding the complaint (request, dispute amount, subject of the dispute), litigation file information, enforcement file information, mediation file information, request information subject to the litigation/enforcement file, information on whether you have given explicit consent for the processing of your personal data, if necessary), and Audio-Visual Recording Information (voice recordings (call center)), and other personal data requested by the relevant institutions and organizations to fulfill our legal notification, declaration, and audit obligations and other relevant obligations, to enable judicial/official correspondence, to conduct legal disputes, and to exercise our legal rights, especially the rights of defense and response, and based on the legal grounds of “processing data is mandatory for the data controller to fulfill its legal obligation” and “processing data is mandatory for the establishment, exercise, or protection of a right,” we collect and process the information requested from us by authorized public institutions and organizations, consumer arbitration committees, courts, prosecutors' offices, law enforcement agencies, and other judicial/administrative authorities, as well as within the scope of our legal obligations.

Message Management System Inc.: If you are our customer, we collect and process your Contact Information (e-mail address, phone number) and Legal Transaction Information (source of consent, how consent was obtained, commercial communication consent/refusal information, date and time of consent, communication method (SMS, call, e-mail)) regarding commercial communication records within the scope of our legal obligations, based on the legal ground of “processing data is mandatory for the data controller to fulfill its legal obligation,” and transfer them to Message Management System Inc.

Public: For our Customers who will create a membership account, we transfer your Identity Information (name, surname) in the event that you make a comment or evaluation regarding the goods and services you have purchased, in accordance with your purpose of making it public, as part of the processes of carrying out loyalty processes related to the company, products, and services, and carrying out activities aimed at customer satisfaction, in the area designated for the relevant good or service on our Website.

3. What are your rights?

You may apply to our Company regarding your personal data processed by us at any time with respect to the rights set forth in Article 11 of the Law. You may submit your application using any of the methods listed below:

We would like to remind you that your application must comply with the conditions set forth in the Communiqué on the Procedures and Principles of Application to the Data Controller.

Written Application

You may submit your application in writing by delivering it in person, through a notary, or via PTT or cargo to the address of Kiperin specified below. In your application, write the following expression exactly as it is on the envelope/title of the letter: “Application of the Data Subject Within the Scope of the Personal Data Protection Law to the Legal Department of Kiperin İlaç Gıda San ve Tic Limited Şirketi” and send your application to Büyükdere Cad. No:185 Kanyon Ofis Bloğu Kat:6 Levent/Şişli/İstanbul.

Application via E-mail

You may send your application to the info@kiperincollagenturkiye.com e-mail address through your registered e-mail address at Kiperin, and if you do not have a registered e-mail address at Kiperin, you may send your application to the info@kiperincollagenturkiye.com e-mail address, provided that your application includes your mobile signature or e-signature.

KİPERİN İLAÇ GIDA SAN VE TİC LTD. ŞTİ