KVKK

PERSONAL DATA PROTECTION LAW INFORMATION TEXT

As Mesmed, we attach importance to the security of your personal data. With this awareness, we show great sensitivity to the processing and preservation of all personal data belonging to you in the best possible way and with the utmost care. With the awareness of this responsibility, we process your personal data within the scope of the Law on the Protection of Personal Data No. 6698 (hereinafter referred to as the Law) and the relevant legislation, as the Data Controller, within the framework specified below.

Within the scope of the law, data processing refers to any operation performed on personal data, such as obtaining, recording, storing, updating, classifying, sharing with third parties permitted by law, or transferring to them, through fully or partially automatic means or non-automatic means provided that it is part of any data recording system.

COLLECTION, PROCESSING AND PROCESSING PURPOSES OF PERSONAL DATA

In order to provide you with high standards of service, we process your personal data for the following purposes, depending on the nature of the service provided;

• To provide the products and services we offer as a company within the specified legal framework,
• Our company's ability to fully and accurately fulfill its responsibilities arising from the contract and the law,
• Our business units carry out the necessary work to make you benefit from the products and services offered by our company, and the products and services are customized according to your tastes, usage habits and needs and recommended to you,
• Ensuring the legal and commercial security of people who have a business relationship with our company,
• Administrative operations regarding communication carried out by our company,
• To ensure the physical security and control of company locations,
• Customer evaluation/complaint management processes, reputation research processes, event management, legal compliance process, auditing, financial affairs,
• Determining and implementing our Company's commercial and business strategies and ensuring the execution of our Company's human resources policies,
• In order to continue our company's training activities

We obtain your personal data verbally, in writing, visually or electronically within the scope of the contract or from physical locations and similar channels, in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the Personal Data Protection Law.

In this context, the main general and special personal data obtained within the scope of the activities carried out by our company and for the above-mentioned purpose are listed below;

• Your identity data such as your name, surname, TR identity number, passport number or temporary TR identity number if you are not a Turkish citizen, date of birth,
• Your contact data such as your address, telephone number, e-mail address,
• Your financial data such as your bank account number and IBAN number,
• Your responses and comments that you share to evaluate our services,
• Navigation information obtained during the use of our website, IP address, browser information and location data that you transmit with your own consent.

Your personal data listed above and your special personal data may be processed in accordance with the personal data processing conditions specified in Articles 5 and 6 of the Personal Data Protection Law and for the following purposes:

• To confirm the identity of the person who makes/makes purchases via the website/mobile applications,
• Recording the address and other necessary information for communication,
• To communicate with our customers regarding the conditions, current status and updates of the contracts we have concluded under the relevant articles of the Distance Selling Contract and the Consumer Protection Law, and to provide the necessary information,
• To prepare all records and documents that will form the basis of the transaction in electronic (internet/mobile etc.) or paper format,
• To fulfill the obligations undertaken in accordance with the contracts we have concluded under the distance sales contract and the relevant articles of the Consumer Protection Law, To provide information to public officials upon request and in accordance with the legislation on matters related to public security,
• To provide our customers with a better shopping experience, to inform our customers about our products that may be of interest to them, and to convey campaigns, "taking into account our customers' interests"
• To increase customer satisfaction, to be able to recognize our customers who shop from the website and/or mobile applications and to use them in customer circle analysis, to use them in various marketing and advertising activities and to organize surveys in electronic and/or physical environments through contracted organizations within this scope,
• To be able to provide suggestions to our customers through our contracted institutions and solution partners and to inform our customers about our services,
• To evaluate customer complaints and suggestions regarding our services,
• To fulfill our legal obligations and exercise our rights arising from the current legislation,
• Marketing, Media and Communication, Design and delivery of special content, tangible and intangible benefits on web and mobile channels.

Your “Personal and Special Personal Data” mentioned above may be stored in physical and electronic archives within Sinoz and external service providers with great care and in compliance with the provisions of the legislation.

TRANSFER OF PERSONAL DATA

Sharing of personal data belonging to our customers with third parties is carried out within the framework of the customers' consent and, as a rule, personal data is not transferred to third parties without the consent of our customers. However, due to our legal obligations and limited to these, personal data is shared with courts and other public institutions. In addition, personal data is transferred to contracted third parties in order to provide the services we undertake and to control the quality of the services provided.

Necessary technical and legal measures are taken to prevent rights violations during data transfer to third parties. However, Mesmed is not responsible for any violations that occur due to the data protection policies of the third party receiving personal data and in the risk area under the responsibility of the third party. Your personal data may be shared with our business partners, suppliers, Company officials, shareholders, legally authorized public institutions and private persons as specified below within the framework of the Personal Data Protection Law No. 6698, other legislation provisions and for the purposes explained above.

• General Directorate of Security and other law enforcement forces,
• Judicial authorities,
• Your authorized legal representatives,
• Third parties from whom we receive advice, including the lawyers, tax advisors and auditors we work with,
• Regulatory and supervisory institutions and official authorities,

PROTECTION OF PERSONAL DATA

Personal data shared with Mesmed is under the supervision and control of Mesmed. Mesmed has assumed responsibility as the data controller to establish the necessary organization and to take and adapt technical measures in order to protect the confidentiality, integrity and accessibility of information in accordance with the relevant legislation in force.

Being aware of our obligation in this regard, we periodically conduct penetration tests in accordance with international and national technical standards regarding data confidentiality, and we always update our data processing policies within this scope.

METHOD AND LEGAL REASON FOR COLLECTING PERSONAL DATA

Your personal data is collected and processed in all kinds of verbal, written, visual or electronic media, for the purposes stated above and for the execution of all kinds of work within the scope of Mesmed's field of activity within the legal framework and for Mesmed to fully and duly fulfill its contractual and legal obligations within this scope. The legal reason for the collection of your data is primarily the Personal Data Protection Law No. 6698 and other legislation provisions.

You can access our Company's Personal Data Protection and Processing Policy, Personal Data Storage and Destruction Policy and Visitor Information Text on our corporate website.

YOUR RIGHTS REGARDING THE PROTECTION OF PERSONAL DATA

In accordance with the law and relevant legislation;

• Learning whether personal data is being processed,
• To request information regarding personal data processed,
• Access to personal health data and request this data,
• To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom personal data is transferred, either domestically or abroad,
• To request correction of personal data if it is processed incompletely or incorrectly,
• Requesting the deletion or destruction of personal data,
• To request that the third parties to whom the personal data has been transferred be notified of the rectification and/or deletion or destruction of personal data in case the personal data has been processed incompletely or incorrectly,
• To object to a result that is to the detriment of the person himself/herself, as a result of the analysis of the processed data exclusively through automatic systems,
• In case of damage caused by the unlawful processing of personal data, you have the right to demand compensation for the damage.
  

DATA SECURITY AND RIGHT TO APPLY

Your personal data is meticulously protected within technical and administrative possibilities and necessary security measures are provided at a level appropriate to possible risks, taking into account technological possibilities. In accordance with Article 13, paragraph 1 of the Personal Data Protection Law, you can submit your request to our Company regarding the use of your rights specified above, in writing or through other methods determined by the Personal Data Protection Board. In order to use your rights specified above, you can submit your request including the necessary information identifying your identity and your explanations regarding the right you request to use among the rights specified in Article 11 of the Personal Data Protection Law.

You can submit your requests within the scope of the law by filling out the “Application Form Pursuant to the Personal Data Protection Law” on our website;

You can personally deliver it to the address Kocasinan mah. Paşa str. No:40 Bahçelievler/İstanbul.