GDPR

BALMY TÜKETİM ÜRÜNLERİ SAN. A.Ş. (BALMY)

INFORMATION TEXT ON THE PROTECTION OF PERSONAL DATA

BALMY TÜKETİM ÜRÜNLERİ SAN. A.Ş. (Balmy or Company) It attaches importance to the protection of personal data of every person and institution it is connected to. It takes all technical and administrative measures for the protection of personal data with reference to Article 20, paragraph 3 of the Constitution.

Balmy, which has the title of data controller within the scope of the Law on Protection of Personal Data No. 6698, may process some of your personal data listed below, in accordance with the purpose for which they will be processed and in a limited manner. The personal data you transmit to us will be securely stored in the files we create in physical environments and in the computer programs we use.

This clarification text has been prepared to inform you about the purpose, scope, duration of the processing of your personal data and other issues that may affect the data owners, within the scope of Article 10 of the “Personal Data Protection Law” (KVKK) No. 6698.

1. Definitions

1. Identity of Data Controller

In accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”), the information of the Data Controller, whose definition is given above, is given below in accordance with Article 10 of the Law.

1. What are Personal Data?

Balmy, within the scope of the sales sector in which it operates; The personal data listed below are processed for the purposes of providing services, marketing, identifying potential customers, fulfilling mutual obligations, establishing, exercising or protecting a right.

1. Identity Information (Name-Surname, Date of Birth)
2. Contact Information (GSM Number, Address, E-mail Address)
3. Your Gender Information
4. On-Site Usage Details (IP Address Information, Membership Information, Shopping habits, In-site browsing behaviors)
5. Family Members/Relatives (identity information of relevant persons)
6. Safety Information
7. Personal and Career Information (CV information…)
8. Financial Information (Invoice, IBAN no…)

1. Who Will Process Personal Data?

Regarding the processing of the personal data of the data owner, it will be processed by Balmy in the capacity of the data controller, in a way to ensure data security.

In order to ensure data security, it may be necessary to share personal data with one or more data processors that we have authorized.

1. For What Purposes Is the Collection and Processing of Personal Data Performed?

Balmy collects personal data from stores, offices, branches, call center, e-mail, social media, website, mobile applications, etc. in order to continue its activities. from channels, in accordance with the legislation and policy. As long as the contract between the data owners and Balmy continues, personal data will be updated and processed in accordance with the processing conditions in KVKK.

Personal data, in particular, provided that it is directly related to the establishment or performance of a contract, to carry out the necessary work by the business units and to carry out the relevant business processes, the frequency and times of visits to the site and / or mobile application or store, in order to benefit from the products and services offered by Balmy, Analyzing and understanding the ordering times, aggregate statistical data such as the statistics of the product pages visited and the products ordered, visitor movements, orders and preferences, creating a special account on the Balmy website and/or mobile application, Carrying out orders and order processes through online services , to complete and to ensure communication with our customers, to ensure the legal, technical and commercial-occupational safety of Balmy and the related persons who have a business relationship with Balmy, and to the tastes, usage habits and needs of the products and services offered by Balmy. It is processed for the legitimate interests of Balmy, if it is necessary to process the data of the data subjects, including the planning and execution of the activities required to be customized and promoted to the data subjects, and also provided that it does not harm the fundamental rights and freedoms of the data subject.

At the same time, personal data is processed in accordance with the general principles in Article 4/2 of the KVKK;

• In accordance with the law and honesty rules,
• Being accurate and up-to-date when necessary,
• Processing for specific, explicit and legitimate purposes,
• Being connected, limited and restrained with the purpose for which they are processed,
• To be stored for the period required by the relevant legislation or for the purpose for which they are processed.

1. To Whom Personal Data Can Be Transferred For What Purpose?

Personal data collected, KVKK. m. In accordance with Articles 8 and 9; domestically and internationally, within the scope of Balmy’s activities, service delivery, marketing, potential customer identification, fulfillment of mutual obligations arising from contracts Planning and execution of Balmy’s commercial and/or business strategies, Balmy’s and related persons who have a business relationship with Balmy for the purpose of ensuring legal, technical and commercial-occupational safety and customizing the products and services offered by Balmy according to the tastes, usage habits and needs of the persons concerned; It can be shared with the relevant units of Balmy, our business partners, our suppliers, our group companies, our shareholders, legally authorized public institutions and private individuals, the companies we work with at home and abroad, and natural and legal persons with whom contracts are concluded for the execution of certain activities.

1. What is the Method and Legal Reason for Collecting Personal Data?

Although personal data varies according to the type of relationship entered into with Balmy, through automatic or non-automatic methods, our staff, call center, website, social media channels, mobile application; It is collected orally, in writing or electronically to be used for the purpose of service provision, marketing, potential customer identification, fulfillment of mutual obligations arising from contracts, and updated when necessary and processed within the terms and purposes specified in Articles 5 and 6 of the KVKK.

1. How Long Will Personal Data Be Processed?

How long the personal data processed by Balmy is processed is determined within the scope of KVKK and other legislation. In this context, the personal data belonging to the data owner can be processed during the continuation of the contract, and after the end of the contract between the parties, the personal data of the data owner will not harm the fundamental rights and freedoms of the data owner, for the maximum periods specified in Balmy’s legitimate interests and relevant legislation. will continue to be processed. At the end of the specified periods or at the end of the data subject’s application regarding the processing of their data within the scope of the Application Form; In accordance with KVKK.art.7, the personal data in question will be deleted, destroyed or anonymized.

1. What are the Rights of the Data Owner and How to Apply?

Balmy is to plan the rights of data owners in accordance with KVKK.m.10 and the necessary channels and administrative/technical arrangement for data owners to apply to Balmy within the scope of KVKK.m.13.

Within the scope of KVKK.m.10, the data owner;

1. Learning whether the data is processed or not,
2. If it has been processed, informing about it,
3. Learning the purpose of processing and whether it is processed in accordance with this purpose,
4. Requesting notification of third parties transferred at home and abroad,
5. Requesting the destruction of the data in case the reason for the processing of the data disappears,
6. Requesting correction of personal data if it is incomplete or incorrectly processed,
7. Objecting to the result if the data is analyzed by automatic systems and the result is against the person himself,
8. In case of any damage due to illegally processed data, it has the right to demand the compensation of the damage.

Data owners’ rights and demands listed in 9, along with the information and documents that will determine their identities, must be submitted to the application form at the above mentioned internet address:

• Wet signed version in person or through a notary public “Cevizli Mah. Hizir Reis Sok. No: 6D/1 Maltepe/Istanbul”,
• After signing with a secure electronic signature, sending the form to “ info@balmy.com.tr” by e-mail

By fulfilling one of the options, they use their rights arising from KVKK.

Requests submitted to Balmy in accordance with one of the above-mentioned methods will be finalized within 30 days at the latest, and the data subject will be informed in accordance with the method selected in the Application Form. However, if the transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board will be taken as basis.

Regards,

BALMY TÜKETİM ÜRÜNLERİ SAN. A.Ş.

I have read, understood and accepted this lighting text within the framework of the above explanations.

TEXT OF CONSENT TO THE PROCESSING OF PERSONAL DATA

Our company BALMY TÜKETİM URUNLERI SAN. Inc. (“Balmy”), which is an electronic commerce platform operating on the website https://www.balmynaturel.com, there is no membership requirement to be able to shop. Therefore, you can shop on our platform without being a member. Membership is not offered as a condition of service. However, unlike the option to shop without being a member, the membership option; It is designed for users who want to get a personalized service by following and evaluating their shopping habits, shopping history and reviews, and who want to be informed about campaigns and promotions.

In order to offer these personalized advantages, some of your personal data may need to be processed for the purposes specified below, shared with our business partners, and recorded in our technology programs and/or systems. Some of your personal data that needs to be processed in order to ensure the satisfaction of our customers; Since it is not within the scope of the data processing conditions in the Personal Data Protection Law that are not subject to consent, it is only subject to the express consent of our customers. If you do not want to give consent, you can shop without registering on our site with the “Continue Without Membership” option.

Based on your express consent in this context;

1. Personal data to be processed and collection methods;

Your transaction information and transaction security information (Ip Address, Site Login – Exit Information, User Name and Password Information, Intra-Site Traffic Data) collected during your use of our website belonging to our customers, your marketing information (your shopping history, Cookie records), internet access data during your use of the website. Your location data will be processed according to your preferences in your browser.

1. Purposes of processing personal data and legal reasons;

Your personal data listed above, based on the express consent you have given as a member of Balmy; Conducting the necessary work and executing the relevant business processes in order to benefit the persons concerned from the products and services offered by Balmy, carrying out the necessary studies by the relevant business units for the realization of the commercial activities carried out by Hız Yayınları and executing the related business processes, / or planning and executing business strategies, ensuring legal, technical and commercial-occupational security of Speed ​​Publications and the related persons in business relationship with Speed ​​Publications, and customizing the products and services offered by Hız Yayınları according to the tastes, usage habits and needs of the relevant people. Including the planning and execution of the activities necessary for the proposal and promotion to the relevant persons, the 1st paragraph of the 5th article of the KVKK may be processed depending on the legal reason “explicit consent” and share with third parties in the country and abroad within the scope of the same purposes and legal reason. can be reached.

1. Your rights regarding the processed personal data;

Data owners pursuant to Article 11 of the Law;

• Learning whether personal data about them is processed,
• If personal data has been processed, requesting information about it,
• Learning the purpose of processing personal data and whether they are used in accordance with its purpose,
• Knowing the third parties to whom personal data is transferred at home or abroad,
• Requesting correction of personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,
• Requesting the deletion or destruction of personal data in the event that the reasons requiring its processing cease to exist despite the fact that it has been processed in accordance with the provisions of the law and other relevant laws, and requesting that the transaction carried out within this scope be notified to the third parties to whom the personal data has been transferred,
• Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems, and
• In the event that personal data is damaged due to unlawful processing, it has the right to demand the compensation of the damage.

By “being a member” of our site, you will be deemed to have given your explicit consent to the processing of all personal data given above without any pressure.