DD PHARMA KOZMETİK DIŞ TİC.LTD.ŞTİ. (KVKK DD PHARMA BEAUTY HEALTH COSMETICS IND. TRADE LTD. CO.) INFORMATION ON THE PROCESSING OF PERSONAL DATA (KVKK)

Below, information is provided under headings regarding how your personal data is processed by DD PHARMA KOZMETİK DIŞ TİC.LTD.ŞTİ. ("DD PHARMA and its affiliated group companies").

a)     About the Data Controller

Your personal data may be processed by DD PHARMA in accordance with the Law on the Protection of Personal Data No. 6698 ("Law"). DD PHARMA is considered the data controller within the scope of the Law. DDPHARMA.COM.TR

b)     Purposes of Processing Your Personal Data

Your personal data is processed in compliance with the conditions for the processing of personal data listed in Articles 5 and 6 of the Law. Without limitation to the purposes of processing your personal data, the purposes of DD PHARMA's processing activities include ensuring the legal and commercial security of DD PHARMA, its Group Companies, or DD PHARMA's business partners, as well as managing DD PHARMA's commercial activities and its human resources and employment policies. All necessary technical and administrative measures are taken to prevent the unlawful processing of your personal data, unauthorized access to your data, and to ensure the secure storage of your personal data.

c)      Sharing of Your Personal Data

Your personal data may be shared with DD PHARMA, DD PHARMA's shareholders, business partners, subsidiaries, suppliers, external service providers, and competent public institutions and organizations in compliance with the conditions specified in Articles 8 and 9 of the Law. Without limitation to the purposes of sharing your personal data, the purposes of sharing include ensuring the legal and commercial security of DD PHARMA or DD PHARMA's business partners, as well as the continuation of DD PHARMA's commercial activities and the management of its human resources processes and employment policies. Necessary security measures are taken in case of sharing your personal data.

d)     Methods of Collection of Your Personal Data and Their Legal Basis

In order to conduct its activities, DD PHARMA collects your personal data through surveys, websites, DD PHARMA representatives, and various channels, and processes them in compliance with the conditions listed in Articles 5 and 6 of the Law.

e)     Your Rights Arising from the Law Regarding Your Personal Data

In accordance with the Law, you have the following rights regarding your personal data:

1)     To learn whether your personal data is being processed

2)     To request information if your personal data has been processed

3)     To learn the purpose of the processing of personal data and whether they are used in accordance with their purpose

4)     To know the third parties to whom personal data is transferred, whether domestically or abroad

5)     To request the correction of personal data if it is incomplete or improperly processed

6)     To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law

7)     To request the notification of the actions taken in accordance with Articles 5 and 6 to third parties to whom personal data has been transferred

8)     To object to any result against you arising from the analysis of processed data exclusively through automated systems

9)     To demand compensation for damages in case of unlawful processing of personal data.

To exercise the abovementioned rights, you can submit a written application to DD PHARMA and send the application to the address specified below. If new application methods are determined by the Personal Data Protection Board, these methods will be announced by DD PHARMA. Within this scope, your applications will be concluded as soon as possible and no later than 30 days. Currently, these applications are free of charge. However, if the Personal Data Protection Board determines a fee tariff, charging may be made in accordance with this tariff.

To exercise your rights, it is necessary to submit your request in writing to DD PHARMA. When making a written application to our company, you need to explain which right you want to exercise along with your identification information and fill out the form on the website DDPHARMA.COM.TR. You can deliver a signed copy of the form to our company's address, "AğaoğluMaslak 1453 Residence, Maslak Mah. TaşyoncasıSok. T4 Blok -8 Kat 1U Daire:B139 Maslak, Istanbul", or you can send it via email to info@ddpharma.com.tr, provided that you verify the accuracy of your identity information.

While fulfilling your requests related to the exercise of your rights, our company reserves the right to claim the expenses to be incurred, in accordance with Article 13 of the Law titled "Application to the Data Controller."

Exceptions Requiring No Consent Under Law No. 6698

In accordance with the second paragraph of Article 5 of the Law on the Protection of Personal Data No. 6698, personal data may be processed without explicit consent in cases where it is explicitly prescribed by laws, it is necessary to protect the life or bodily integrity of the person or someone else who is unable to express their consent due to physical impossibility or whose consent is not legally valid, it is directly related to the establishment or performance of a contract and it is necessary to process personal data belonging to the parties of the contract, it is necessary for our company to fulfill its legal obligations as a data controller, it has been made public by the data subject themselves, it is necessary to establish, use, or protect a right, or it is necessary for the legitimate interests pursued by the data controller or a third party, provided that it does not harm the fundamental rights and freedoms of the data subject, without the need for obtaining explicit consent.

In accordance with the transparency principle, the data that includes the disclosure obligation for the balance sheet or activity reports or requires disclosure for the enlightenment of the public due to the legislation that our company is subject to, or the data that must be transferred to the relevant individuals or institutions as regulated in laws, and similar cases, our company cannot have an obligation to maintain confidentiality. Therefore, our company is authorized to disclose, transfer, and process the relevant data without obtaining consent.