LEGAL NOTICE ON PERSONAL DATA PROCESSING AND PROTECTION
WITHIN THE SCOPE OF CONTACT FORM
1. Information Related to Data Controller
We, as DD PHARMA KOZMETİK DIŞ TİCARET LİMİTED ŞİRKETİ (Tax ID:
2720697185) ("DD Pharma" or "COMPANY"),
located at Maslak Mah. Taşyoncası Sok. T4 Apt. No: 1 U/B 139 Sarıyer/İstanbul,
are extremely sensitive to the security of your personal data. With this
awareness, we attach great importance to the processing and preservation of
personal data belonging to individuals with whom the Company interacts, in
accordance with the Law on the Protection of Personal Data numbered 6698
("Law" or "DPL"), secondary regulations (regulations,
communiqués, etc.) issued and to be issued in accordance with the Law, and
binding decisions taken and to be taken by the Personal Data Protection Board.
With full awareness of our responsibility as defined in the Law as the
"Data Controller", we process your personal data and take all
necessary technical and administrative measures to ensure an adequate level of
security in order to prevent the unlawful processing of personal data, prevent
unauthorized access to personal data and ensure the preservation of personal
data within the limits prescribed by the legislation."
2.
Processed Personal Data Categories and Types
Personal Identifying
Information |
Name |
Contact Information |
e-mail address |
3.
Personal Data Collection Methods and the Activity from
Which it is Obtained
As the Company, we collect your personal data automatically through
electronic methods.
Data Category |
Process Obtained |
Identity,
Contact |
By automatic method;In order to get in contact
with the Data Controller regarding the services provided or for any reason
and to respond to the requests, questions, complaints or any notification
sent to the data controller. |
4.
Purposes and Legal Reasons for the Processing Personal
Data
As the Company, we process your personal data for the purposes and legal
reasons described below.
Data |
Processing
Purposes |
Legal Reason |
Identity |
·
Ensuring the security of data controller’s operations, ·
Following up the requests or complaints of customers and Site users, ·
Responding to the requests or complaints of customers and Site users, ·
Receiving suggestion for the purpose of business improvement. |
Art. 5/2-c-f of the DPL; processing of personal data belonging to the
parties of a contract is mandatory provided that it is directly related to
the conclusion or performance of that contract and processing of personal
data is mandatory for the legitimate interests of the controller, provided
that such processing shall not violate the fundamental rights and freedoms of
the data subject. |
Contact |
5.
Transfer of Personal Data and Purposes of Transfer
Transferred Person/Organization |
Transfer
Purposes |
Legal Reasons |
Company affiliates and/or
partners, suppliers, service provider business partners authorized as data
processor. |
Carrying out business and
business continuity activities, ensuring the security of data controller
operations, receiving suggestions for the improvement of the Site, carrying
out information security processes. |
With reference to Art 8/2 of DPL; Provided that it is directly
related to the establishment or performance of a contract, it is necessary to
transfer personal data belonging to the parties of the contract, and provided
that it does not violate the fundamental rights and freedoms of the person
concerned, the data transfer is mandatory for the legitimate interests of the
data controller. |
Public institutions and
organizations and judicial authorities by law to receive information |
Conducting legal reports,
carrying out regulatory and audit activities, constituting complaints and
legal proceedings. |
6.
Right of the Related Person/Data Subject
You may apply to the
Company at any time;
·
to learn whether personal data related to you are/have
being processed,
·
if it is processed, to request information with regard
to processing,
·
to learn purposes of the processing and whether your
personal data has been used for the intended purpose
·
to know the third parties within or outside the
country, to whom your personal data are transferred,
·
to request correction of the personal data if the data
is processed incompletely or inaccurately,
·
to request deletion or destruction of the personal
data under the conditions set forth in Article 7 of the Law No. 6698 on
Personal Data Protection,
·
to request notifying third persons to whom the
personal data are transferred, about the processes completed within the scope
of Art 11/d-e of the Law,
·
to object to negative consequences about you that are
concluded as a result of analysis of the processed personal data exclusively by
automatic means,
·
to claim indemnification if you suffered damage due to
illegal processing of your personal data.
You may
exercise your rights listed above through filling out and signing a form that
you can obtain from us or , www.ddpharma.com.trand apply to the following address personally or with
a notary approved power of attorney:
·
Fill in the application form; sign with your wet-ink
signature and pass it to “Maslak Mah. Taşyoncası Sok. T4 Apt. No: 1 U/B 139
Sarıyer/İstanbul” by personal application, by certified mail or through
a notary public.
·
Sign with your electronic signature or mobile
signature and send it to ddpharma@hs01.kep.tr by using your Registered Electronic Mail (REM) address
or the e-mail address registered to the data recording system of the Company.
If there is a written
response to your application, there will be no charge for the first 10 (ten)
pages, and a transaction fee of 1 TL will be charged for each page above 10
(ten) pages. If the response to your application is given in a recording medium
such as a CD or flash memory, the exigible cost will be no more than the cost
of the recording medium.
Your application as a
personal data owner, if you want to use or demand the use of your rights
mentioned above, the request should be clear and understandable enough, the
subject of your request should be related to you or if you are acting on behalf
of someone else, you must submit a special power of attorney approved by the
notary.
First name, signature,
identity number, residence or workplace address, e-mail address, telephone and
fax number, and the presence of the requisite elements are obligatory in
accordance with the “Notification on the Procedures and Principles of
Application to the Data Officer”. Applications that do not include such
elements will be rejected by the Company.
The Company reserves the right to make changes in this Notice, due to the
Law, secondary regulations and Board decisions. Changes in the Notice and the
current text will enter into force immediately as of the date of notification.