The purpose of this Policy is to determine the conditions and terms for the use of personal data produced by the Data Owner during the operation of the https: website and mobile application (collectively referred to as the “Platform”) operated by https: during the operation of the Platform, by Platform members/visitors/users (collectively referred to as the “Data Owner”).
Which Data is Processed?
Below are listed the data processed by https: and which are considered as personal data within the scope of the Law unless expressly stated otherwise; within the scope of this Policy, the term “personal data” will include the following information:
-
Identity Information
-
Contact Information
-
User Information
-
User Transaction Information
-
Transaction Security Information
-
Financial Information
-
Marketing Information
-
Request/Complaint Management Information
Pursuant to Articles 3 and 7 of the Personal Data Protection Law, data that is rendered anonymous in an unrecoverable manner will not be considered as personal data in accordance with the provisions of the said law, and processing activities related to this data will be carried out independently of this Policy.
Purposes of Processing Personal Data
https: may process the personal data provided by the Data Owner, including but not limited to identity information, contact information, user information, user transaction information, transaction security information, financial information, marketing information, and request/complaint management information, for the following purposes:
-
Creation and maintenance of membership registration and accounts, as well as keeping records related to them.
-
Enabling Data Owners to benefit from the services provided by https: through the Platform.
-
Detection of system errors and performance tracking for the improvement of the Platform’s operation.
-
Provision of maintenance, support services, and backup services.
-
Planning and execution of activities necessary for customizing products and services according to the liking, usage habits, and needs of Data Owners and recommending them accordingly.
-
Conducting commercial activities by relevant business units at https:.
-
Ensuring the legal, technical, and commercial-business security of https: and its business relationships.
-
Planning and execution of commercial and/or business strategies at https:.
-
Personal Data to be Processed in Accordance with the Explicit Consent of the Data Subject and Processing Purposes
With the explicit consent of the Data Subject, https: may process data to:
-
Enhance the user experience by tracking the actions of Data Subjects on the Platform.
-
Create statistics and profiles.
-
Conduct direct marketing and re-marketing activities.
-
Generate special promotional offers for Data Subjects and transmit them to them.
-
Use the data obtained for any kind of advertising and material content in the context of advertisements.
-
Data may be processed for these purposes and shared with the parties mentioned below.
Transfer of Personal Data:
https: may transfer the personal data of the Data Owner and the new data obtained using this personal data to third parties who benefit from https: services for the purpose of achieving the purposes specified in this Privacy Policy, in a limited manner for the provision of the relevant services. https: may share personal data with third parties, including external service providers, including those who send SMS messages, in order to improve the Data Owner’s experience (including improvement and personalization), ensure the security of the Data Owner, detect fraudulent or unauthorized uses, conduct operational evaluation research, rectify errors related to Platform services, and achieve any of the purposes stated in this Privacy Policy, as well as hosting service providers, law firms, research companies, call centers, and other third parties.
Personal data may be shared with Mas Pharma Company officials, shareholders, business partners, suppliers, legally authorized public institutions and organizations, and legally authorized private institutions within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, and may be transferred abroad within the scope of the Personal Data Protection Board decisions in accordance with the procedures and principles indicated in Article 9 of the Law, limited to these purposes.
Method of Collecting Personal Data and Legal Basis
Personal data is collected through the Platform and electronically. Personal data collected for the reasons mentioned above can be processed and transferred for the purposes specified in Law No. 6698, Articles 5 and 6, and this Privacy Policy.
Rights of the Data Subject
In accordance with Article 11 of the Law, data subjects have the following rights:
-
To learn whether their personal data has been processed,
-
To request information if their personal data has been processed,
-
To learn the purpose of the processing of personal data and whether data are used in accordance with the purpose,
-
To know the third parties in the country or abroad to whom personal data have been transferred,
-
To request the rectification of personal data if it is incomplete or inaccurate and to request the notification of the transaction made within this scope to third parties to whom personal data have been transferred,
-
To request the deletion or destruction of personal data in the event that the reasons requiring its processing are eliminated, and to request the notification of the transaction made within this scope to third parties to whom personal data have been transferred,
-
To object to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems,
-
To request the compensation of the damage in case of damage due to the unlawful processing of personal data in violation of the Law and other relevant laws.