As TEMS BIOTECH, we place great importance on the security of your personal data. We must inform you that we reserve the right to update the Privacy Statement in accordance with changes in applicable legislation, Board Decisions, and court decisions. With this sensitivity, it is of great importance for our Company to process and retain all kinds of personal data related to individuals associated with the Institution, including those benefiting from our services, in accordance with the Law No. 6698 on the Protection of Personal Data ("PDPL"). We would like to inform you that any processing of your personal data by our institution, including obtaining, recording, storing, preserving, modifying, disclosing, transferring, and making your information available by automatic or non-automatic means, constitutes "processing of personal data". In this context:
-The Law No. 6563 on Regulation of Electronic Commerce also contains provisions regarding the protection of personal data.
-5237 Sayılı Türk Ceza Kanunu hükümleri yoluyla da kişisel verilerin korunması için bazı hallerde cezai yaptırımlar öngörülmüştür.
-Indeed, in order to fulfill our obligations arising from the Law No. 6502 on Consumer Protection and the Regulation on Distance Contracts, it is necessary to collect and use data.
-Moreover, pursuant to Law No. 6769, there are data that our institution is obliged to retain. In accordance with this responsibility, as defined in the PDPL as the "Data Controller," we process your personal data within the framework explained below and regulated by legislation.
After your review of this disclosure statement and the notification to our institution, a consent form will be presented to you, Mr./Ms. Addressee, for the limited use of all your personal data by our institution within the scope of the business and commercial relationship where you are the Addressee, subject to the requirements of this relationship. It should be noted that it is not obligatory to sign the consent form in question. In this context, it is essential for the validity of approval that the consent form is approved after a detailed and sufficient review of this disclosure statement and after all relevant questions, if any, have been addressed to our institution and found suitable.
Definitions
In this disclosure statement;
-Personal Data: Any kind of information relating to an identified or identifiable natural person,
-The Law on the Protection of Personal Data ("PDPL"): Law No. 6698 on the Protection of Personal Data, which entered into force by being published in the Official Gazette on April 7, 2016,
TEMS BIOTECH
Veri İşleyen: Veri sorumlusunun verdiği yetkiye dayanarak onun adına Kişisel Verileri işleyen gerçek veya tüzel kişiyi,
Veri Sorumlusu: Kişisel Verilerin işleme amaçlarını ve vasıtalarını belirleyen, veri kayıt sisteminin kurulmasından ve yönetilmesinden sorumlu olan gerçek veya tüzel kişiyi,
ifade eder.
1) Veri Sorumlusu ve Temsilcisi
KVK Kanunu uyarınca, kişisel verileriniz; veri sorumlusu olarak Kurumumuz tarafından aşağıda açıklanan kapsamda işlenebilecektir.
2) Kişisel Verilerin Toplanması, İşlenmesi ve İşleme Amaçları
Kişisel verileriniz, Kurumumuz tarafından icra edilen faaliyetlerin ilgili mevzuat ve Kurumumuz prosedürlerine uygun olarak yerine getirilmesini temin maksadıyla ilgili birimlerimiz tarafından ilgili tüm ulusal/uluslararası mevzuat ve bunlara dayalı olarak ulusal/uluslararası yetkili otoritelerce yayımlanmış olan ikincil düzenlemeler ya da bunlarla ilgili olarak veya faaliyetleri ile ilgili olarak taraf olduğu sözleşmeler kapsamındaki yükümlülüklerinin ve taahhütlerinin yerine getirilmesi adına;
-Identity Information (name, surname, Turkish ID number, passport information for foreigners);
-Contact Information (address, email address, contact address, phone number)
-Location Information (location data of the individual's whereabouts)
-Customer Transactions (call center records, invoices, promissory notes, check information, information on counter receipts, order details, request information)
-Risk Management (information processed for the management of commercial, technical, and administrative risks)
-Transaction Security (IP address information, website login and logout details, password information)
-Marketing (purchase history information, survey data, cookie records, information obtained through campaign activities), along with these information;
All kinds of contracts for products and services requested from our institution and all other records and documents (in paper or electronic format) shall be established, customer satisfaction calls shall be made, SMS/email sending requests shall be fulfilled, the said products and services shall be provided and maintained seamlessly, necessary activities related to services and products shall be carried out, participant and customer transactions shall be conducted, processed in accordance with the Service Terms or specific contracts for the product, complaints regarding the provided services shall be addressed, and services shall be improved, Customers' instructions compliant with the law and the contract shall be fulfilled, planning of our institution's human resources policies and processes, determination of the scope of services, products, and marketing activities, identification and evaluation of customers' purchasing habits, determination and statistical evaluation of the process and results of marketing and service provision, and their execution, use as evidence in case of legal disputes, fulfillment of our obligations under the legislation and international rules to which our institution is subject, and protection and storage of data required to be preserved and stored at certain intervals by the administration shall be processed within the personal data processing conditions and purposes specified in Articles 5, 6, 8, and 9 of the PDPL.
3) Who Personal Data Processed Can be Transferred to and for What Purpose:
Your collected personal data; To ensure that the activities carried out by our institution are performed in compliance with the relevant legislation and our institution's procedures, by our relevant departments, all relevant national/international legislation and secondary regulations published by national/international competent authorities based on them or related to them, or in connection with their activities;
-Confirming the identity information of the person conducting/shopping through the website, mobile applications.
-For the establishment of the contract requested by the customer in terms of service and product.
-Recording address and other necessary information for communication.
-Contacting customers regarding the conditions, current status, and updates of contracts concluded under the relevant articles of the Law on the Protection of Consumers in Distance Contracts and/or Sales Contracts for the establishment of distance sales contracts and/or sales contracts, and providing necessary information.
-Preparation of all records and documents, whether in electronic or paper format, that will form the basis for processing.
-Fulfillment of necessary obligations under national/international legislation to which our institution is subject.
-Fulfillment of obligations that our institution is subject to under the contract concluded in the context of national/international legislation applicable to our institution.
-Providing information to public officials upon request and as required by legislation regarding matters related to public security
-Providing information to customers about products and services that may be of interest to them, taking into account customers' preferences to ensure a better shopping experience, informing customers about campaigns, conducting activities to enhance user experience by monitoring consumer behaviors, conducting market research, planning and implementing post-sales service activities, and organizing and implementing relationship management processes.
In order to increase customer satisfaction, conducting customer satisfaction calls, fulfilling SMS/email sending requests, identifying purchasing habits of customers who shop through the website and/or mobile applications to organize direct and non-direct marketing, personalized marketing, and remarketing activities according to the customer's preferences, using in marketing and advertising activities, informing electronically and/or physically through affiliated institutions, determining target audience, cross-selling, personalized segmentation, target setting, analysis, and internal reporting activities.
Fulfillment of obligations (identity verification, information retention, reporting, notification) and commitments within the scope of contracts to which our institution is a party;
Addressing customer complaints and improving services provided by our institution;
-Fulfilling customers' instructions compliant with the law and the contract;
-Planning our institution's human resources policies and processes;
-Determining the scope of service, product, and marketing activities, identifying their results, and evaluating them statistically, and executing them;
Being able to be used as evidence in case of a legal dispute;
-Fulfillment of our obligations under the national and international legislation and rules to which our institution is subject;
-In the context of planning and implementing post-sales service processes, improving them, identifying and developing alternative production techniques, and planning and implementing processes to enhance or increase loyalty to the products and/or services offered by our institution, along with sales and marketing activities for products and/or services;
-Data that must be preserved and stored at specified intervals by the administration is processed and stored in accordance with the purposes, with the consent of customers and provisions of the legislation, to be preserved and stored for the periods specified in the relevant legislation.
In the scope mentioned above, all types of personal data may be obtained, recorded, stored, modified, updated, periodically checked, reorganized, classified, and processed partially or entirely by authorized personnel of the institution, third parties, domestic and international business partners, solution partners, suppliers, legally authorized public institutions and private persons, as well as shared with service providers or suppliers who are located domestically or abroad, in accordance with legal or service-related actual requirements, including sharing with individuals and institutions authorized to request and obtain relevant data under the legislation to which our institution is subject, and may be transferred abroad in case of legal or service-related actual requirements, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law on the Protection of Personal Data.
4) Method and Legal Basis of Personal Data Collection
Your personal data may be collected by automatic or non-automatic methods, depending on your relationship with our institution, through our institution's units and offices, website, social media platforms, mobile applications, and similar means, orally, in writing, or electronically. Personal data collected in this way may be processed and transferred for the purposes specified in clauses (2) and (3) of this text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law on the Protection of Personal Data. Additionally, when you use our website to use our institution's services, visit our institution or our website, or participate in training, seminars, or events organized by our institution, your personal data may be processed for the purposes stated in clause 3.
When you use our institution's website, our institution stores the information it collects in order to form an opinion about your preferences. For the purpose of personalized promotion, organizing promotions and marketing activities, improving the content of the website, and/or determining your preferences, our institution may track your browsing information and/or usage history on the website.
Customers who make purchases with a credit card through our institution's website and/or mobile platform using the ............... payment system are deemed to have consented to share their personal data with the .................. company from which this service is purchased and to be processed by ................. Therefore, it is also necessary to read and review page ............... before making a purchase with a credit card.
Our institution's website may provide links to third-party websites. While these links are used to facilitate obtaining information and/or providing a service, if you are redirected to other websites, companies, or individuals' links outside our institution's website, you should also review the privacy policies and cookie policies of these sites separately.
In such cases, our institution bears no responsibility for the acquisition and processing of your personal data by websites other than its own. In order to obtain information about the current practices regarding privacy and personal data of the relevant individuals and institutions, it is necessary to first review the information available on the relevant sites and, if available, address your questions to the respective site management.
How Long Will Your Personal Data Be Processed?
Our institution determines the storage periods of personal data by taking into account the applicable national and international legislation and the purposes for which the data is processed. In accordance with the Law on the Protection of Personal Data (KVKK), your personal data processed for the purposes stated in this Privacy Notice will be deleted, destroyed, or anonymized for continued use when the purpose requiring processing under Article 7/f.1 of the KVKK ceases to exist and/or when all statutory retention periods for processing your data have expired.
6) Your Rights as a Data Subject Listed in Article 11 of the Law on the Protection of Personal Data (KVKK):
As data subjects, you may submit your requests regarding your rights to our institution through the methods outlined in this Privacy Notice. Our institution will promptly conclude your request based on the nature of the request. In this context, data subjects may:
- Learn whether personal data is being processed or not,
- Request information if personal data has been processed.
- Learn the purpose of processing personal data and whether they are being used for that purpose,
- Know the third parties to whom personal data is transferred domestically or internationally,
- Request the correction of personal data if it is incomplete or incorrect, and request that the third parties to whom the personal data has been transferred be notified of the correction made in this context,
- Request the deletion or destruction of personal data if it has been processed in accordance with the Law on the Protection of Personal Data and other relevant legislation, but the reasons requiring its processing have ceased to exist, and request that the third parties to whom the personal data has been transferred be notified of the deletion or destruction made in this context,
- Object to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you,
- You have the right to demand compensation for damages in case of suffering damage due to the unlawful processing of personal data.
According to Article 13, paragraph 1 of the KVKK, you can submit your request regarding the exercise of the rights mentioned above in writing to the address ................ To ensure the fulfillment of your requests, if there is a need for expenses to be incurred by our institution, we reserve the right to request them from you according to the tariff specified in Article 13 of the KVKK under the heading "Application to the data controller." Since the Personal Data Protection Board has not determined any method at this stage, your application must be submitted to our institution in writing in accordance with the KVKK. In this context, the channels and methods for submitting your applications to our institution within the scope of Article 11 of the KVKK are explained below.
To exercise the rights mentioned above, you can submit your request containing explanations regarding the right you wish to exercise, along with necessary identification information, to ................. Inc. at the address ................, either by delivering it in person with identifying documents, through a notary, or by other methods specified in the KVKK. Alternatively, you can send your request to ..................@...............com with a secure electronic signature.
If you require further details regarding the information provided above, you can contact us for detailed information at ................ telephone number or via email at .................
English 
Türkçe