Protection and Processing of Personal Data
Information Text

1. Veri Sorumlusu

In accordance with the Law No. 6698 on the Protection of Personal Data ("the Law"), Nesil İlaç Kozmetik Ltd. Şti. ("the Company"), as the data controller, may process, record, store, classify, update, and, where permitted by legislation, disclose/transfer your personal data to third parties in a lawful and fair manner for the purposes described below.

2. Method and Legal Basis for the Collection of Personal Data

Your personal data is collected through our website (https://nesililac.com), mobile applications, social media accounts, email, call center, contracts, and physical channels, using automated or non-automated methods. This data is processed based on the legal grounds specified in Article 5 of the Law, namely "establishment or performance of a contract," "fulfillment of a legal obligation," "establishment, exercise, or protection of a right," and "legitimate interest of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject."

Special Categories of Personal Data

Your personal data, which is processed within the scope of our activities and falls under the category of "Special Category Personal Data" (health data, biometric data, religion, sect, clothing, association membership, etc.), is processed in accordance with the conditions specified in Article 6 of the Personal Data Protection Law; primarily by obtaining your explicit consent, or in cases foreseen by law (for data other than health and sexual life); your health data is processed without your explicit consent only by persons under an obligation of confidentiality for the purpose of protecting public health, preventive medicine, medical diagnosis, treatment and care services.

3. Purposes of Processing Personal Data

Your personal data collected (Identity, Contact, Customer Transaction, Transaction Security data, etc.);

• Providing products and services and carrying out operational processes,
• Execution of contract processes and fulfillment of legal obligations,
• Planning customer relationship management and satisfaction initiatives.
• Tracking requests and complaints, managing finance and accounting tasks,
• Information is processed solely for the purposes of implementing information security processes and providing information to authorized persons/institutions.

4. To Whom and for What Purpose Personal Data May Be Transferred

Your processed personal data may be transferred to our suppliers, legally authorized public institutions, and private individuals (notaries, lawyers, financial advisors, etc.) in accordance with Articles 8 and 9 of the Law and for the purpose of achieving the objectives stated above.

5. Data Subject Rights (Law Article 11)

According to Article 11 of the Law, as a data subject:

• To find out whether personal data is being processed, and if so, to request information about it,
• To learn the purpose of processing personal data and whether it is being used appropriately for that purpose.
• Knowing the third parties to whom personal data is transferred, whether domestically or internationally.
• Requesting the correction of personal data if it has been processed incompletely or incorrectly.
• Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in the law.
• You have the right to object to an outcome that is unfavorable to you, resulting solely from the analysis of processed data by automated systems.
• If you suffer damages as a result of the unlawful processing of your personal data, you have the right to claim compensation for those damages.

6. Communication and Application

You can submit your requests regarding your rights under the KVKK (Personal Data Protection Law) to us in writing or via registered electronic mail (KEP) address, secure electronic signature, mobile signature, or using the email address you previously provided to our company and which is registered in our system, in accordance with the "Notification on the Procedures and Principles for Applications to the Data Controller", through the following communication channels.