Data Processing and Privacy Statement
This document is prepared by MAS PHARMA İLAÇ SANAYİ İÇ VE DIŞ TİCARET LİMİTED ŞİRKETİ, operating at Tepeören Mah. Karadağ Cad. Gurme Carrefoursa No: 7 İç Kapı No: 1 Tuzla/Istanbul. It aims to inform and enlighten Users (Members and Visitors) registered on https: (the Site), and others who access the Site. The statement covers the terms and conditions related to the use of data obtained or to be obtained from Users via the Site, along with the methods of data processing.
The Company collects personal data through various means including the Site, social media accounts, email, postal service, call center, fax, and notifications from administrative and judicial authorities. This collection is done audibly, electronically, or in writing, following the personal data processing conditions outlined in the Law and for the legal reasons and purposes stated in this text.
Cookies are used by the Company during Users’ visits to the Site as part of the services offered. For more detailed information on cookie usage, please review our Cookie Policy.
1 – Related Person, Data Categories, and Types of Data
Member
– Identity Information: Name, surname, T.C.K Number, date of birth.
– Customer Transaction: Order information.
– Contact Information: Username, email address, phone number, residence address, the country and city of residence.
– Transaction Security: IP address, ID information, log transactions, website entry and exit information, password and password information, date and time of transaction.
– Marketing: Site navigation information, past usage information, shopping/campaign response information, hobbies, shopping preferences, other cookie records collected through the company by third-party cookie owners.
– Location Information: Information about the location from where the platforms are accessed.
Visitor
– Identity Information: Gender, age group.
– Transaction Security: IP address, ID information, log transactions, website entry and exit information, date and time of transaction.
– Location Information: Information about the location from where the platforms are accessed.
– Marketing: Site navigation information, past usage information, shopping/campaign response information, hobbies, shopping preferences, other cookie records collected through the company by third-party cookie owners.
2 – Legal Reasons
The personal data mentioned above, subject to disclosure to the company by data owners, can be processed in line with the conditions and principles stated in Article 4 of the Law and repeated in this Text. Processing will be within the personal data processing conditions stated in Articles 5 and 6 of the Law, for the purposes listed below. The legal reasons for each data category are explicitly stated below:
Member
– Identity Information
– Contact Information
– Necessary for the processing of personal data of the parties of a contract, directly related to the establishment or performance of the contract,
– Necessary for data processing for the establishment, exercise, or protection of a right.
– Customer Transaction
– Transaction Security
– Location
– Explicitly provided for by laws,
– Necessary for the processing of personal data of the parties of a contract, directly related to the establishment or performance of the contract,
– Necessary for the company to fulfill a legal obligation,
– Necessary for data processing for the establishment, exercise, or protection of a right.
– Marketing
– Necessary for data processing for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the data subject,
– Made public by the data subject.
Visitor
– Identity Information
– Transaction Security
– Location Information
– Marketing
The processing of data in these categories is necessary for the following legal reasons:
1. To fulfill the legal obligations of the Company.
2. To process data for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the data subject.
3. When the data subject has made the data public themselves.
3 – Purposes for Processing Personal Data
Under this Text, personal data mentioned in Article 2 is processed for the following purposes in accordance with the general conditions specified in this Text:
Member
– Identity Information
– Contact Information
– Execution of information security processes
– Conducting audit/ethics activities
– Execution of access permissions
– Following and conducting legal affairs
– Conducting communication activities
– Creating surveys for customer satisfaction
– Conducting contract processes
– Managing requests and complaints
– Executing marketing processes for products/services
– Registration and account creation
– Enabling Data Subject to benefit from the services provided on the Platform
– Detecting system errors and monitoring performance
– Improving the operation of the Platform
– Provision of maintenance and support services and backup services
– Conducting necessary studies by business units and carrying out related business processes to benefit relevant persons from products and services offered by https:
– Planning and executing activities necessary for customizing and recommending products and services to relevant persons according to their preferences, usage habits, and needs
Customer Transaction
– Transaction Security
– Location
– Execution of information security processes
– Conducting audit/ethics activities
– Execution of access permissions
– Compliance with regulations in operations
– Following and conducting legal affairs
– Conducting Logistics Activities
– Providing information to authorized individuals, institutions, and organizations
– Conducting communication activities
– Conducting contract processes
Marketing
– Executing loyalty processes for company products/services
– Conducting activities for ensuring business continuity
– Executing activities aimed at customer satisfaction
– Conducting marketing analysis studies
– Execution of advertising, campaign, and promotion processes
– Executing marketing processes for products/services
Visitor
– Identity Information
– Transaction Security
– Location Information
– Marketing
– Executing loyalty processes for company products/services
– Conducting communication activities
– Conducting activities for ensuring business continuity
– Executing activities aimed at customer satisfaction
– Conducting marketing analysis studies
– Execution of advertising, campaign, and promotion processes
– Executing marketing processes for products/services
4 – Transfer of Personal Data
The Company may transfer personal data obtained from data subjects and new data generated by using these personal data to its domestic servers and suppliers in order to perform the services provided through the Company’s Platforms and to fulfill the obligations declared in the Text. The Company may also transfer personal data of data subjects to third parties such as external service providers, hosting service providers (hosting services), law offices, research companies, call centers for the following purposes:
– https: may share with third parties, including SMS senders, external service providers, hosting service providers (hosting services), law offices, research companies, call centers, for the purposes of improving the Data Subject experience (including improvement and personalization), ensuring the security of Data Subject, detecting fraudulent or unauthorized usage, operational evaluation research, rectifying errors related to Platform services, and for any purpose stated in this Privacy Policy.
– Personal data can be shared with Mas Pharma Kozmetik Anonim Şirketi Company officials, shareholders, our business partners, our suppliers, legally authorized public institutions and organizations, and legally authorized private institutions within the framework of personal data processing conditions and purposes stated in Articles 8 and 9 of the Law, and can be transferred abroad within the limits of the purposes specified, in accordance with the procedures and principles stated in Law Article 9 and the decisions of the Personal Data Protection Board.
Member
– For the purposes of compliance with legislation, following and conducting legal affairs, and providing information to authorized public institutions and organizations, sharing of identity, contact, and transaction security information;
– Conducting communication activities
– Sharing with suppliers used in business processes for the purpose of conducting business activities and control
– Conducting marketing analysis studies
– Conducting Logistics Activities
– Conducting After-Sales Support Services for Goods/Services
– Execution of advertising, campaign, and promotion processes
– Sharing information with storage service providers for the purpose of conducting storage and archive activities;
– Conducting Supply Chain Management Processes
– Improving Data Subject’s experience (including improvement and personalization)
– Ensuring the security of Data Subject, detecting fraudulent or unauthorized usage
– Operational evaluation research
– Rectifying errors related to Platform services
– Defining member profiles
– Geographically and demographically defining member profiles
Visitor
– Conducting marketing analysis studies
– Execution of advertising, campaign, and promotion processes
– Sharing information with storage service providers for the purpose of conducting storage and archive activities;
– Sharing site usage preferences and browsing history with suppliers for segmentation purposes.
– Ensuring the security of the Data Subject, detecting fraudulent or unauthorized uses
– Rectifying errors related to Platform services
– Defining visitor profiles
– Geographically and demographically defining visitor profiles
5 – Rights of the Related Person
As personal data owners, you can exercise your rights over your personal data by filling out the “Related Person Application Form”. You can submit your requests for necessary modifications, updates, and/or deletions through the Company’s email address info@ with a secure electronic signature, through your personal email address, or by written application in person or through a notary to the Company’s address at Tepeören Mah. Karadağ Cad. Gurme Carrefoursa No: 7 Inner Door No: 1 Tuzla/Istanbul. Upon receiving your requests through these methods, the Company will conclude your request as soon as possible and at the latest within thirty days without charge. However, if the process requires an additional cost, a fee determined by the Personal Data Protection Board will be charged by the Company. In this context, personal data owners have the right to:
– Learn whether their personal data is processed,
– Request information if their personal data has been processed,
– Know the purpose of processing personal data and whether they are used appropriately for their purpose,
– Be informed about third parties in domestic or foreign countries to whom personal data is transferred,
– Request correction of personal data if processed incompletely or inaccurately and request notification of these corrections to third parties to whom personal data has been transferred,
– Request the deletion or destruction of personal data within the framework of the conditions provided in Article 7 of the Law and request notification of these procedures to third parties to whom personal data has been transferred,
– Request notification to third parties of processes carried out in accordance with clauses (d) and (e),
– Object to outcomes against themselves due to the analysis of processed data solely through automated systems,
– Request compensation for damages due to the unlawful processing of personal data.
To exercise your rights as a personal data owner, your application should include explanations regarding the right you wish to exercise; it should be clear and understandable, related to you personally or, if acting on behalf of someone else, you should be specifically authorized and provide documentation of this authority. The application must include your identity and address information, and documents verifying your identity must be attached.
6 – Changes to the Text
The Company may make changes to this Text at any time. These changes become effective immediately upon the publication of the revised text. You will be informed about the changes in this Text as necessary.
