LEGAL NOTICE ON E-BULLETIN, MARKETING ACTIVITIES &
COMMERCIAL ELECRONIC MESSAGES
As the Data Controller for personal data processing in accordance with the
Law Numbered 6698 on the Protection of Personal Data (“DPL” or “Law”) and as
the Service Provider in accordance with the Regulation on Commercial Electronic
Messages (“Regulation”); “Maslak Mah. Taşyoncası Sok. T4 Apt. No: 1 U/B 139
Sarıyer/İstanbul” DD PHARMA KOZMETİK DIŞ TİCARET LİMİTED ŞİRKETİ (Tax ID: 2720697185) ("DD Pharma"
or "COMPANY"), we would like to inform you in accordance with
Article 10 of the Law titled “Disclosure Obligation of the Data Controller”.
DD Pharma takes the utmost attention to ensure the confidentiality and
security of personal data requested form its users.
This notice/clarification text has been prepared in order to inform about
the personal data processed within the scope of DPL and the methods of
collection, the legal reasons and purposes of personal data processing, the
persons/organizations to whom personal data are transferred and the purposes of
transfer, the rights of natural persons whose data are processed and the
processes of sending commercial electronic messages.
1.
Categories and Types of Personal Data Processed
|
Personal Identifying Information |
Name, surname |
|
Contact Information |
Telephone number, e-mail address |
|
Customer Transactions |
Records for the use of products and services and
information such as the customer’s instructions and requests required for the
use of products and services, shopping history information, cookie records,
reports and evaluations showing the likes of the person to be used for
marketing purposes, shopping habits and preferences of the customer; shopping
date, time, amount, shopping content, installment information, payment method
and payment details, product reviews, campaign, discount, benefit information
etc. |
|
Marketing |
2.
Personal Data Collection Methods and the Activity from
Which it is Obtained
As the Company, we collect your personal data
automatically through electronic methods.
|
Data Category |
Process Obtained |
|
Identity,
Communication, Customer Transaction and Marketing |
By automatic method; By subscribing to DD Pharma
E-Bulletin through the form on the website and/or through the areas where
commercial electronic messages are allowed to be sent. |
3.
Purposes and Legal Reasons for the Processing Personal
Data
As the Company, we process your personal data for the
purposes and legal reasons described below.
|
Data Category |
Processing Purposes |
Legal Reason |
|
Identity |
Conducting marketing, analysis and modeling studies
in order to offer all our products and services offered and brokered on the
website to our customers specifically, Conducting marketing, advertising, campaign and
promotion processes and contacting you for these purposes, Contacting to get your opinions about products and
services, follow-up of requests and complaints, Management of relationships with support
service/external service providers, business partner or suppliers, execution
of support/external services after the sale of services, Obtaining the approval specified in the Regulation
in order to send commercial electronic messages to you. |
Art. 5/1 of DPL; Based on obtaining your explicit consent. |
|
Contact |
||
|
Customer Transaction |
||
|
Marketing |
4.
Transfer of Personal Data and Purposes of Transfer
|
Transferred Person/Organization |
Transfer Purposes |
Legal Reasons |
|
Company affiliates and/or partners, suppliers, service provider business
partners authorized as data processor. |
Carrying out business and business continuity activities, ensuring the
security of data controller operations, receiving suggestions for the
improvement of the Site, carrying out information security processes. |
With reference to Art 8/2 of DPL; Provided that it is directly related to the establishment or performance
of a contract, it is necessary to transfer personal data belonging to the
parties of the contract, and provided that it does not violate the
fundamental rights and freedoms of the person concerned, the data transfer is
mandatory for the legitimate interests of the data controller or when data
transfer is mandatory for the data controller to fulfill its legal
obligations. |
|
Public institutions and
organizations and judicial authorities by law to receive information |
Conducting legal reports,
carrying out regulatory and audit activities, constituting complaints and
legal proceedings. |
|
|
Message
Management System (“MMS”) and the relevant private legal entities |
Law No. 6353 on the
Regulation of Electronic Commerce and fulfillment of the obligations of
secondary legislation related to the Law. |
With reference to Art 8/2 of DPL; It is clearly stipulated in
the Law, it mandatory for the data controller to fulfill its legal
obligations. |
5.
Right of the Related Person/Data Subject
You may apply to the
Company at any time;
·
to learn whether personal data related to you are/have
being processed,
·
if it is processed, to request information with regard
to processing,
·
to learn purposes of the processing and whether your
personal data has been used for the intended purpose
·
to know the third parties within or outside the
country, to whom your personal data are transferred,
·
to request correction of the personal data if the data
is processed incompletely or inaccurately,
·
to request deletion or destruction of the personal
data under the conditions set forth in Article 7 of the Law No. 6698 on
Personal Data Protection,
·
to request notifying third persons to whom the
personal data are transferred, about the processes completed within the scope
of Art 11/d-e of the Law,
·
to object to negative consequences about you that are
concluded as a result of analysis of the processed personal data exclusively by
automatic means,
·
to claim indemnification if you suffered damage due to
illegal processing of your personal data.
You may
exercise your rights listed above through filling out and signing a form that
you can obtain from us or , www.ddpharma.com.trand apply to the following address personally or with
a notary approved power of attorney:
·
Fill in the application form; sign with your wet-ink
signature and pass it to “Maslak Mah. Taşyoncası Sok. T4 Apt. No: 1 U/B 139
Sarıyer/İstanbul” by personal application, by certified mail or through
a notary public.
·
Sign with your electronic signature or mobile
signature and send it to ddpharma@hs01.kep.tr by using your Registered Electronic Mail (REM) address
or the e-mail address registered to the data recording system of the Company.
If there is a written
response to your application, there will be no charge for the first 10 (ten)
pages, and a transaction fee of 1 TL will be charged for each page above 10
(ten) pages. If the response to your application is given in a recording medium
such as a CD or flash memory, the exigible cost will be no more than the cost
of the recording medium.
Your application as a
personal data owner, if you want to use or demand the use of your rights
mentioned above, the request should be clear and understandable enough, the
subject of your request should be related to you or if you are acting on behalf
of someone else, you must submit a special power of attorney approved by the
notary.
First name, signature,
identity number, residence or workplace address, e-mail address, telephone and
fax number, and the presence of the requisite elements are obligatory in
accordance with the “Notification on the Procedures and Principles of
Application to the Data Officer”. Applications that do not include such
elements will be rejected by the Company.
The Company reserves the right to make changes in this Notice, due to the
Law, secondary regulations and Board decisions. Changes in the Notice and the
current text will enter into force immediately as of the date of notification.
DECLARATION OF
EXPLICIT CONSENT
I hereby accept and declare that I have read and understood the “Legal
Notice On E-Bulletin, Marketing Activities & Commercial Electronic
Messages” notified to me, that I have been clearly and understandably informed
about my rights listed in Article 11 of the Law Numbered 6698 on the Protection
of Personal Data (“DPL” or “Law”) and how to exercise these rights, and that I
can withdraw my consent/ consent to marketing processes and commercial
electronic message sending at any time.
1.
Within the scope of Regulation on Commercial
Communication and Commercial Electronic Messages, I accept and declare that
I consent to sending commercial electronic messages via SMS and/or
e-mail in order to communicate with me electronically and promote products and
services.
2.
I accept and declare that I give my explicit
consent to the processing of my personal data in the marketing data category, provided
that it remains within the principles and purposes specified in the
clarification text.
Your explicit consent will be obtained by checking the checkbox for the
activities that require explicit consent within the scope of this clarification
text presented to you during the
registration and membership process to DD Pharma E-Bulletin. Otherwise, your
membership process will be realized but you will not be included in marketing
processes and commercial electronic message sending activities.
