KVKK Clarification Text and Explicit Consent Form

As Yıldız Pharmaceutical Warehouse Trade Limited Company (hereinafter referred to as ‘Yıldız Pharmaceutical Warehouse’ or ‘Company’); The Constitution of the Republic of Turkey and international conventions on human rights to which our country is a party, of the personal data of persons related to our company, including our customers, consumers, suppliers and employees, as well as the Law on the Protection of Personal Data No. 6698 (“KVKK”), Procedures and Principles to be Complied with in Fulfilling the Obligation to Clarify In accordance with the Communiqué about it and the relevant legislation, we have adopted the principle of being attentive to the securing and processing of personal data. In this context, we would like to enlighten you as a Data Controller in accordance with the aforementioned legislation.

As Yıldız Pharmaceutical Warehouse; In the capacity of data controller, your personal data we obtain in the following ways, depending on the situation, within the scope of our commercial relations or within our business relationship with you; Personal data will be recorded, stored, preserved, rearranged, and shared with institutions that are legally authorized to request such personal data, within the framework of the purpose requiring their processing and in connection with this purpose, in a limited and measured manner, by protecting the accuracy and the most up-to-date version of the personal data you have notified or notified to us, and We inform you that, under the conditions stipulated by the KVKK, it will be transferred to domestic or foreign third parties, transferred, classified and processed in other ways listed in KVKK.

1. DEFINITIONS:

Explicit consent should be understood as a declaration of consent given by the data subject to the processing of data about him/her freely, with sufficient information about the subject, clear enough to leave no room for hesitation, and limited to that transaction, in accordance with the Personal Data Protection Law. Anonymization of personal data means that personal data cannot be associated with an identified or identifiable natural person under any circumstances, even by matching with other data.

Data registration system refers to the registration system in which personal data is processed and structured according to certain criteria. These systems can be physical or digital. In the system in question, data can be processed according to more than one criterion. For example, name-surname, T.C. Data can be recorded and processed based on a registration system based on identity number or place of birth.

Data controller is the person who is directly responsible for the processing, transfer, deletion of data within the scope of Law No. 6698 and its obligations under other laws. Those who determine the purposes and means of processing personal data and are responsible for the establishment and management of the data recording system.

Data processor are natural and legal persons who process data on behalf of the data controller. These persons may be employees who process personal data within the framework of the instructions given to them, or they may be a separate natural or legal person determined by the data controller by purchasing a service. In this context, Yıldız Ecza Deposu Ticaret Limited Şirketi, whose information is given above, processes data within the framework of this clarification text.

Relevant Person means the customer whose personal data is processed within the scope of this contract.

Destruction refers to the deletion, destruction or anonymization of personal data.

2. YOUR PROCESSED PERSONAL DATA

Personal data provided to us by us regarding customers can be processed. As a data controller, it is necessary to obtain the following information from the customers due to the Labor Law, the employment contract between us and the creation of your personal file as a requirement of the work. Your personal data that may be subject to processing as Tadadi are as follows;

Identity Information: Information contained in documents such as driver’s license, identity card, residence, passport, attorney’s ID, marriage certificate (eg TCKN, passport no., identity card serial no., name-doyad , photo, place of birth, date of birth, age, place of registration, proof of identity card sample)
Contact Information: Information used to contact the person (eg e-mail address, telephone number, mobile phone number, address)
Location Data: Data to determine the location of the data owner
Customer Information: Information about customers who benefit from our products and services (eg customer number, professional information, etc.)
Customer Transaction Information: Information regarding all kinds of transactions performed by customers who benefit from our products and services (eg, requests and instructions, order and basket information, etc.)
Physical Space Security Information:Personal data on records and documents (e.g. entry and exit logs, visit information, camera recordings, etc.)
Transaction Security Information: Personal data processed in order to ensure the technical, administrative, legal and commercial security of our company and related parties (for example, that the transaction associated with the personal data owner is authorized to match that person and that the person is authorized to perform that transaction. information such as Internet site password and password)
Risk Management Information: Personal data processed in order to manage our company’s commercial, technical and administrative risks (eg IP address, Mac ID, etc. records)
Financial Information: Personal data within the scope of information, documents and records showing all kinds of financial results created according to the type of legal relationship with the personal data owner (For example: information showing the financial result of the transactions made by the data owner, credit amount, card information, loan payments, interest amount and rate payable, debt balance, credit balance etc.)
Marketing Information: Data to be used by our company in marketing activities (eg, reports and evaluations showing the habits and tastes of the person collected for marketing purposes, targeting information, cookie records, data enrichment activities)
Legal Transaction and Compliance Information: Personal data processed for the purpose of determination and follow-up of legal claims and rights and fulfillment of debts and legal obligations (eg data contained in documents such as court and administrative authority decisions)
Audit and Inspection Information: Personal data processed within the scope of our company’s compliance with its legal obligations and company policies (eg audit and inspection reports, related interview records and similar records
Demand/Complaint Management Information: Personal data regarding the receipt and evaluation of all kinds of requests or complaints directed to our company (eg, requests and complaints against the Company, records and reports regarding them)
Visual and Audio Data: Visual and audio recordings (eg photographs, camera recordings and audio recordings) associated with the personal data owner

3. METHOD OF COLLECTION AND LEGAL REASON OF YOUR PERSONAL DATA

In Article 3 of the Law No. 6698, the concept of processing personal data is defined, in Article 4 it is stated that the personal data processed should be related to the purpose for which they are processed, limited and measured, and should be kept for the period required for the purpose for which they are processed or as stipulated in the relevant legislation. data processing conditions. Personal data pursuant to Article 5,

The data processing is clearly stipulated in the law,
The processing of the relevant data is obligatory in order to protect the life or bodily integrity of the person or anyone else, who is unable to express his or her consent due to actual impossibility or whose consent is not legally valid,
Provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract,
Compulsory data processing in order for the data controller to fulfill its legal obligations,
The personal data has been made public by the person concerned,
Data processing is mandatory for the establishment, exercise or protection of a right,
Provided that it does not harm the fundamental rights and freedoms of the data subject, in cases where data processing is necessary for the legitimate interests of the data controller, it can be processed even if there is no prior explicit consent of the data owner (provided that the necessary illumination is made).
We collect information by sending it to us physically or electronically and by recording information on Company computer programs, applications and servers that are open to the use of more than one person, or on the internet, which are accessible to third parties.
Due to the Company’s legitimate interest in following up the business, through systems that control entry and exit times; provides workplace safety. We fulfill our legal obligations.
Due to the Company’s legal obligation and legitimate interest in providing workplace safety, we collect it through the cameras we place in the workplace building.
We collect through legal documents and notifications sent to us in order to fulfill our legal obligations.
Due to the Company’s legitimate interest to improve its platform and make it more effective, it is on our website, as detailed in our Cookie Policy. We collect your personal data through the cookies used.

4. PURPOSE OF PROCESSING YOUR PERSONAL DATA

Personal by the companyYour data may be processed for similar purposes and reasons such as but not limited to the purposes and legal reasons stated below. Your identity, contact and customer transaction information; It is automatically collected and processed electronically from you, mobile application or website, for the following purposes.

Execution of the processes for the establishment and performance of the contract,
Execution and supervision of finance and accounting processes,
Execution and supervision of the company’s business activities,
Execution of logistics activities and follow-up of delivery processes,
Making purchases on the website/mobile applications and confirming the identity information of the transaction,
In case of your explicit consent, using it in various marketing and advertising activities, providing you with products suitable for your preferences, providing you with a better shopping experience and carrying out activities to increase your satisfaction,
To increase customer satisfaction, to be able to recognize our customers who shop from the platform and to use them in customer environment analysis, to carry out activities for the development and improvement of the products and services offered by our company,
Executing activities for the development and improvement of the products and services offered by our company,
Execution of strategic analysis studies,
Execution of communication activities,
Contacting and informing about the conditions, current status and updates of contracts concluded on our platform pursuant to the relevant articles of the Law on Distance Sales Contract and Consumer Protection, establishment of a membership agreement,
Informing you about developments, opportunities and innovations at the Company, if you have your explicit consent,
Recognition of our customers who shop from the website and/or mobile applications, carrying out activities for their use in customer environment analysis, and within this scope, conducting surveys in electronic and/or physical environment through contracted institutions,
Evaluation of requests, complaints and suggestions regarding our products and services,
Ensuring you receive information about products,
Execution of goods and services after-sales support services,
Execution of information security processes,
Ensuring the security of operations regarding the company platform,
Ensuring that the activities are carried out in accordance with the legislation,
Follow-up and execution of legal affairs,
Informing authorized persons, institutions and organizations.

Your transaction security information is automatically collected and processed electronically from you, the mobile application or the website, for the following purposes.

Execution of the processes for the establishment and performance of the contract,
Execution and supervision of the company’s business activities,
Making purchases on the website/mobile applications and confirming the identity information of the transaction,
In case of your explicit consent, using it in various marketing and advertising activities, providing you with products suitable for your preferences, providing you with a better shopping experience and carrying out activities to increase your satisfaction,
To increase customer satisfaction, to be able to recognize our customers who shop from the platform and to use them in customer environment analysis, to carry out activities for the development and improvement of the products and services offered by our company,
Executing activities for the development and improvement of the products and services offered by our company,
Execution of information security processes,
Ensuring the security of operations regarding the company platform,
Ensuring that the activities are carried out in accordance with the legislation,
Informing authorized persons, institutions and organizations.

Your legal transaction information; is collected and processed automatically from you, mobile application, website in electronic environment for the following purposes.

Execution of the processes for the establishment and performance of the contract,
Execution and supervision of the company’s business activities,
Executing activities for the development and improvement of the products and services offered by our company,
Evaluation of your requests, complaints and suggestions regarding our products and services,
Execution of information security processes,
Ensuring the security of operations regarding the company platform,
To ensure that the activities are carried out in accordance with the legislationprovision of
Follow-up and execution of legal affairs,
Informing authorized persons, institutions and organizations.

Your auditory recording information; is collected and processed for the following purposes if you contact the call center.

Execution of the processes for the establishment and performance of the contract,
Execution of communication activities,
Executing activities to provide you with a better shopping experience and to increase your satisfaction, especially by running the campaigns, presenting the products suitable for your preferences,
Executing activities for the development and improvement of the products and services offered by our company,
Contacting and informing about the conditions, current status and updates of contracts concluded on our platform pursuant to the relevant articles of the Law on Distance Sales Contract and Consumer Protection,
Informing you about developments, opportunities and innovations at the Company, if you have your explicit consent,
Recognition of our customers who shop from the website and/or mobile applications, carrying out activities for their use in customer environment analysis, and within this scope, conducting surveys in electronic and/or physical environment through contracted institutions,
Evaluation of your requests, complaints and suggestions regarding our products and services,
Ensuring the security of operations regarding the company platform,
Ensuring that the activities are carried out in accordance with the legislation,
Follow-up and execution of legal affairs,
Informing authorized persons, institutions and organizations.