Protection of Personal Data

DERMOSKİN SHOP POLICY ON PROCESSING AND PROTECTION OF PERSONAL DATA WITHIN THE SCOPE OF LAW NO. 6698

1. The purpose of our policy regarding the processing of personal data and our company's position as data controller:

Our company Dermosa Satış Pazarlama Eğitim Hizmetleri A.Ş (“Dermoskin Shop” and/or “Company”) has the title of “data controller” within the scope of the Law on the Protection of Personal Data No. 6698 (“Law”) regarding personal data related to customers, and the aim of this Policy on the Processing of Personal Data is to inform customers about the personal data processing activities carried out by Dermoskin Shop in accordance with the said Law and to obtain their explicit consent for the situations specified in Article 3 below.

2. Purpose of Processing Personal Data of Customers:

Personal data belonging to customers are processed within the framework of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law, including the performance of the necessary studies by the business units and the execution of the relevant business processes in order to enable the relevant persons to benefit from the products and services offered by Dermoskin Shop, the performance of the necessary studies by the relevant business units and the execution of the relevant business processes in order to carry out the commercial activities carried out by Dermoskin Shop, the planning and execution of Dermoskin Shop's commercial and/or business strategies, the provision of the legal, technical and commercial-occupational security of Dermoskin Shop and the relevant persons who have a business relationship with Dermoskin Shop, and the planning and execution of the activities required to customize the products and services offered by Dermoskin Shop according to the tastes, usage habits and needs of the relevant persons and to recommend and introduce them to the relevant persons.

Detailed information on the processing of personal data by Dermoskin Shop can be found in the Policy on the Processing and Protection of Personal Data by Dermoskin Shop within the Scope of Law No. 6698, which is available at https://shop.dermoskin.com.tr.

3. Personal Data to be Processed with the Explicit Consent of Customers and Purposes of Processing:

For the following situations where the personal data processing conditions in Articles 5/2 and 6/3 of the Law cannot be met, the explicit consent of the customers must be obtained in order for Dermoskin Shop to process personal data.

Within this scope, personal data of customers may be processed in line with the consent of the Customer within the scope of planning and executing sales and marketing processes of Dermoskin Shop's products and/or services, planning and executing processes of creating and/or increasing loyalty to products and/or services offered by Dermoskin Shop, including for the purposes of creating campaigns for customers, performing cross-selling, determining the target audience, carrying out activities to increase user experience by tracking Customer movements, improving the operation of Dermoskin Shop's website and mobile application and personalizing it according to Customer needs, carrying out direct and indirect marketing, personalized marketing and remarketing activities, carrying out personalized segmentation, targeting, analysis and in-house reporting activities, planning and executing market research, customer satisfaction activities and planning and executing customer relations management processes, and may be shared with the parties specified in this Policy Text regarding the Processing of Personal Data.

4. Transfer of Customer Personal Data:

Personal data of customers may be shared with Dermoskin Shop and Dermosa Satış Pazarlama Eğitim Hizmetleri A.Ş., Company officials, our affiliates, business partners, suppliers, shareholders, legally authorized public institutions and organizations and private institutions within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, including the planning and execution of the activities required for the relevant persons to benefit from the products and services offered by Dermoskin Shop and the execution of the relevant business processes, the performance of the necessary studies by the relevant business units for the realization of the commercial activities carried out by Dermoskin Shop and the execution of the related business processes, the planning and execution of the commercial and/or business strategies of Dermoskin Shop, the provision of the legal, technical and commercial-occupational security of Dermoskin Shop and the relevant persons who have a business relationship with Dermoskin Shop, and the planning and execution of the activities required for the customization of the products and services offered by Dermoskin Shop according to the tastes, usage habits and needs of the relevant persons and the recommendation and promotion of them to the relevant persons.

5. Method and Legal Reason for Collection of Personal Data:

Personal data is collected from customers electronically. Personal data collected for the legal reasons stated above can be processed and transferred for the purposes specified in Articles 5 and 6 of the Law and in the Policy Text on the Processing of Personal Data.

6. Rights of Customers as Personal Data Owners:
Pursuant to Article 11 of the Law, data owners have the right to; (i) learn whether or not their personal data is processed, (ii) request information if their personal data has been processed, (iii) learn the purpose of processing personal data and whether or not it is used in accordance with its purpose, (iv) know the third parties to whom personal data is transferred domestically or abroad, (v) request correction of personal data if it is processed incompletely or incorrectly and request notification of the action taken within this scope to third parties to whom personal data is transferred, (vi) request deletion or destruction of personal data if the reasons requiring processing are eliminated despite the fact that it has been processed in accordance with the provisions of the Law and other relevant laws and request notification of the action taken within this scope to third parties to whom personal data is transferred, (vii) object to the emergence of a result to the detriment of the person by means of analysis of processed data exclusively through automated systems and (viii) request compensation for the damages incurred due to unlawful processing of personal data.

Requests regarding the exercise of such rights may be submitted by personal data owners through the methods specified in the Policy on the Processing and Protection of Personal Data by Dermoskin Shop within the Scope of Law No. 6698, located at https://shop.dermoskin.com.tr.

Dermoskin Shop will evaluate the requests and finalize them within 30 days. Dermoskin Shop reserves the right to charge a fee based on the fee schedule determined by the Personal Data Protection Board (if any) regarding the requests.