PPPD Clarification Text

CLARIFICATION TEXT ON THE PROCESSING AND PROTECTION OF PERSONAL DATA

As Agreka Bilimsel Doğal Yaşam Ürünleri San. ve Tic. Ltd. Şti. (shortly “Agreka”), we show maximum sensitivity to ensure the confidentiality and security of the personal data of all our customers and visitors in accordance with the Constitution of the Republic of Turkey, the Law on the Protection of Personal Data No. 6698 (KVKK) and other relevant legislation and regulations.

In this context, we would like to inform you about your personal data and their processing, storage and transfer, in order to fulfill our disclosure obligation arising from Article 10 of the Law on the Protection of Personal Data No. 6698 ("KVKK"). Personal data means any information that makes your identity specific or identifiable. Your personal data that we process as Agreka with our "Data Controller" title, the purposes of data processing, the recipient groups to which data can be transferred, the method of collection, legal reason and your rights regarding the personal data in question are listed below.

A- OUR MEMBERS

1. Who is Responsible for the Security and Processing of Your Personal Data?

As Agreka, we are responsible for the security of all your personal data you give us, as a "data controller" in accordance with the Law on Protection of Personal Data No. 6698.

2. Which of your personal data is processed by Agreka?

Persons who accept the membership conditions on the Agreka website (www.agreka.com.tr) and log in from the website or the application installed on mobile devices and follow and / or buy the products on the site are defined as "Members". If you become a member of the Agreka website, the following personal data can be processed.

Your Identity Information: your name, surname, gender and age information, identity number (only processed in accordance with the legislation if you purchase certain product groups),
Your Contact Information: your mobile phone number, delivery address, e-mail address,
Your Customer Transaction Information: your order and billing information, your delivery transaction information, transaction history information regarding your purchases, your request and complaint information, the information you personally share in your comments and questions if you make comments and/or ask questions about the products on the site, Information about the content of the conversation made with the Agreka assistant through the chat channel,
Your Transaction Security Information: IP address information, password and password information, cookie information,
Your Legal Transaction Information: information in correspondence with authorized persons, institutions and organizations, information in lawsuit and enforcement files, your legal information request information,
Your Audio Recording Information: your audio recording in case you talk to the call center.

3. What are the purposes of processing your personal data and the collection methods?

Your identity, contact and customer transaction information; within the scope of our contractual relationship, is automatically collected and processed in electronic environment from you, our website or mobile application for the following purposes:

Execution of the processes for the establishment and performance of the contract,
Execution and supervision of finance and accounting processes,
Execution and supervision of the company's business activities,
Execution of invoicing processes,
Execution of logistics, cargo activities and follow-up of delivery processes,
Realization of purchases via the website/mobile applications and confirming the identity information of the transaction,
If you have your express consent, can be used in various marketing and advertising activities, providing you with a better shopping experience, especially by providing you with products suitable for your preferences, and carrying out activities to increase your satisfaction,
To increase customer satisfaction, to be able to recognize our customers who shop from the site and to use them in customer environment analysis, to carry out activities for the development and improvement of the products and services offered by our Company,
Carrying out strategic analysis studies,
Execution of communication activities,
Presenting products that you may be interested in, taking into account your interests,
Contacting and informing about the conditions, current status and updates of contracts concluded on our website pursuant to the relevant articles of the Law on Distance Sales Contract and Consumer Protection,
Informing you about developments, opportunities and innovations at Agreka, if you have your explicit consent,
To recognize our customers who shop from the website and/or mobile applications, to carry out activities for their use in customer environment analysis, and to conduct surveys in electronic and/or physical environment through contracted institutions in this context,
Evaluation of your requests, complaints and suggestions regarding our products and services,
Enabling you to receive information about the products,
Carrying out product and service after-sales support services,
Execution of information security processes,
Ensuring the security of operations regarding the Agreka site,
Ensuring that the activities are carried out in accordance with the legislation,
Follow-up and execution of legal affairs,
Providing information to authorized persons, public institutions and organizations.

Your transaction security information; Within the scope of our contractual relationship, is automatically collected and processed in electronic environment from you, our website or mobile application for the following purposes.

Execution of the processes for the establishment and performance of the contract,
Execution and supervision of the company's business activities,
Realization of purchases via website/mobile applications and confirming the identity information of the person making the transaction,
If you have your express consent, can be used in various marketing and advertising activities, providing you with a better shopping experience, especially by providing you with products suitable for your preferences, and carrying out activities to increase your satisfaction.
To increase customer satisfaction, to be able to recognize our customers who shop from the site and to use them in customer environment analysis, to carry out activities for the development and improvement of the products and services offered by our Company,
Execution of information security processes,
Ensuring the security of operations regarding the Agreka site,
Ensuring that the activities are carried out in accordance with the legislation,
Providing information to authorized persons, institutions and organizations.

Your legal transaction information; within the scope of our contractual relationship, is automatically collected and processed in electronic environment from you, our website or mobile application for the following purposes.

Execution of the processes for the establishment and performance of the contract,
Execution and supervision of the company's business activities,
Evaluation of your requests, complaints and suggestions regarding our products and services,
Execution of information security processes,
Ensuring the security of operations regarding the Agreka site,
Ensuring that the activities are carried out in accordance with the legislation,
Follow-up and execution of legal affairs,
Providing information to authorized persons, institutions and organizations..

Your audio recording information; If you contact the call center, it is collected and processed for the following purposes.

Execution of the processes for the establishment and performance of the contract,
Execution of communication activities,
Carrying out activities to provide you with a better shopping experience and to increase your satisfaction, especially by running the campaigns, presenting the products suitable for your preferences,
Carrying out activities for the development and improvement of the products and services offered by our company,
Presenting products that you may be interested in, taking into account your interests,
To contact and inform about the conditions, current status and updates of the contracts concluded on our website, under the distance sales contract and the relevant articles of the Law on the Protection of the Consumer
Informing you about developments, opportunities and innovations on the Agreka side, if you have your explicit consent,
To recognize our customers who shop from the website and/or mobile applications, to carry out activities for their use in customer environment analysis, and to conduct surveys in electronic and/or physical environment through contracted institutions in this context,
Evaluation of your requests, complaints and suggestions regarding our products and services,
Ensuring the security of operations regarding the Agreka site,
Ensuring that the activities are carried out in accordance with the legislation,
Follow-up and execution of legal affairs,
Providing information to authorized persons, institutions and organizations.

4. What is the legal reason for the processing of your personal data?

Agreka, processes your personal data in the heading "Which personal data is processed by Agreka?" for the above purposes and based on the reasons for compliance with the law specified in Articles 5, 8 and 9 of the KVKK and listed below.

Based on the legal reason that it is clearly stipulated in the legislation, especially Law on Regulation of Electronic Commerce No. 6563, Turkish Commercial Code No. 6102, Turkish Penal Code No. 5237 and Law No. 6502 on the Protection of Consumers, to which our company is subject; Fulfilling our obligations arising from the legislation, especially the activities to ensure the security of the operations on the company website, to carry out the information security processes, to ensure that the activities are carried out in accordance with the legislation,

Provided that it is directly related to the establishment or performance of the contract, under the relevant articles of the Law on the Protection of the Consumer, such as the distance sales contract, based on the legal reason that the processing of your personal data is necessary; Carrying out the activities of establishing contracts concluded on our website, carrying out activities for the realization of your purchases, execution and supervision of the company's business activities, follow-up of delivery processes, evaluation of your requests, complaints and suggestions regarding our products and services, execution and control of financial and accounting processes, carrying out communication activities,

Based on the legal reason that it is compulsory for our company to fulfill its legal obligation; Fulfilling the legal obligations specified, especially the Regulation on Distance Contracts and the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce, and in the decisions, guides and directories included in the secondary legislation to which our company is subject and/or published by the competent authorities, providing information to authorized persons, institutions and organizations, ensuring that activities are carried out in accordance with the legislation, follow-up and execution of legal affairs, execution of financial and accounting affairs,

Based on the legal reason that data processing is mandatory for the establishment, exercise or protection of a right; execution of legal and litigation affairs,

Based on the legal reason that data processing is mandatory for the legitimate interests of our company, provided that it does not harm fundamental rights and freedoms; Carrying out activities for the development and improvement of the products and services offered by our company,

Based on the legal reason for your explicit consent; transferring personal data abroad.

5. To whom and for what reasons Agreka transfers your personal data?

Our company takes care to process your personal data in accordance with the "need to know" and "need to use" principles, by ensuring the necessary data minimization and by taking the necessary technical and administrative security measures. Since the execution or control of business activities, ensuring business continuity, operation of digital infrastructures necessitate continuous data flow with different stakeholders, we have to transfer the personal data we process to third parties for certain purposes. In addition, it is very important that your personal data is accurate and up-to-date so that we can fully and properly fulfill our contractual and legal obligations. For this, we have to work with various business partners and service providers.

Especially for the purposes of carrying out the delivery processes of the products you ordered, managing your help and support requests for your processes, carrying out activities to increase your experience and satisfaction, carrying out activities for the development and improvement of the products and services offered by our company, providing you with a better shopping experience and increasing your satisfaction, ensuring continuity, ensuring information security, fulfilling legal obligations, and to the extent necessary, limited to the purposes specified in the third article of this illumination text:

Based on that it is clearly stipulated in the legislation to which our company is subject and it is mandatory in order to fulfill its legal obligation and based on the legal reasons that it is necessary for the establishment or performance of the contract; your personal data can be shared with:

Information of you and/or the person on whose behalf the product will be delivered, in order to carry out logistics activities and follow up the delivery processes, with cargo companies and private couriers,
With our business partners, consultants and service providers, banks, financial advisors in order to carry out invoicing processes,
With business partners and other service providers that provide call center services for product and service sales and after-sales support services,
With business partners and service providers providing services in the field of quality control, complaint management and risk analysis,
With our relevant business partners, consultants and service providers, banks, financial advisors for the management of financial and accounting processes, identification and evaluation of risks, and prevention of fraud,
With the e-invoice business partner to send the e-invoice to the customer electronically; With cargo and courier companies for the delivery of physical contracts or invoices, with our business partners who provide private integrator, independent audit, customs, financial advisor/accounting services,
With tax offices in order to fulfill their tax obligations, with the officials of the Ministry of Treasury and Finance of the Republic of Turkey, of the invoices and collection receipts during tax audits,
With our business partners and service providers that provide, operate or provide services to our IT infrastructure,
With our business partners who provide services in the field of risk management and financial reporting processes,

Based on the legal reasons that data processing is mandatory for the establishment, exercise or protection of a right and that it is clearly stipulated in the legislation to which our company is subject and that it is mandatory in order to fulfill its legal obligation; your personal data can be shared with:

With lawyers, auditors, forensic experts, cyber security consultants, tax consultants and other third parties and business partners from whom we receive consultancy and service within the scope of fulfilling legal obligations,
With authorized public institutions and organizations such as regulatory and supervisory institutions, courts and enforcement offices,
With other public institutions or organizations that are authorized to request your personal data, with our domestic and/or abroad affiliates, suppliers, business partners, contracted banks and third parties from which we purchase products or services.

B- OUR GUEST MEMBERS

1. Who is Responsible for the Security and Processing of Your Personal Data?

As Agreka, we are responsible for the security of all your personal data you give us, as "data controller" in accordance with the Law on Protection of Personal Data No. 6698.

2. Which of your personal data is processed by Agreka?

Persons who follow and/or buy the products on the site without being a member of the Agreka website are defined as "Guest Members". The following personal data are processed when you use the Agreka website as a guest member and while you shop:

Your Identity Information: your name, surname,
Your Contact Information: your mobile phone number, delivery address, e-mail address,
Your Customer Transaction Information: order and information, billing information, delivery transaction information, transaction history information regarding your purchases, request and complaint information, information shared personally in comments and questions in case of comments and/or questions regarding the products on the site, information on the contents of the conversation made with Agreka assistant through the chat channel,
Your Transaction Security Information: IP address information, cookie information,
Your Legal Transaction Information: information in correspondence with authorized persons, institutions and organizations, information in lawsuit and enforcement files, your legal information request information,
Your Audio Recording Information: in case of contacting the call center, your audio recording information.

3. What are the purposes of processing your personal data and the collection methods?

Your identity, contact and customer transaction information; is automatically collected and processed in electronical environment from you personally, from our website or mobile application for the following purposes.

Execution of the processes for the establishment and performance of the contract,
Execution and supervision of finance and accounting processes,
Execution and supervision of the company's business activities,
Execution of logistics activities and follow-up of delivery processes,
Making purchases on the website / mobile applications and confirming the identity information of the transaction,
Carrying out activities for the development and improvement of the products and services offered by our company,
Carrying out strategic analysis studies,
Execution of communication activities,
Communicating and providing necessary information, about the conditions, current status and updates of the contracts concluded on our site, under the distance sales contract and the relevant articles of the Law on the Protection of the Consumer, and establishment of the membership agreement,
Evaluation of requests, complaints and suggestions regarding our products and services,
Carrying out product and service after-sales support services,
Execution of information security processes,
Ensuring the security of operations regarding the Agreka website,
Ensuring that the activities are carried out in accordance with the legislation,
Follow-up and execution of legal affairs,
Providing information to authorized persons, institutions and organizations.

Your transaction security information; It is automatically collected and processed electronically from you, our website or our mobile application for the following purposes.

Execution of the processes for the establishment and performance of the contract,
Execution and supervision of the company's business activities,
Making purchases on the website / mobile applications and confirming the identity information of the transaction,
Carrying out activities for the development and improvement of the products and services offered by our company,
Execution of information security processes,
Ensuring the security of operations regarding the Agreka website,
Ensuring that the activities are carried out in accordance with the legislation,
Providing information to authorized persons, institutions and organizations.

Your legal transaction information; It is automatically collected and processed electronically from you, our website or our mobile application for the following purposes.

Execution of the processes for the establishment and performance of the contract,
Execution and supervision of the company's business activities,
Carrying out activities for the development and improvement of the products and services offered by our company,
Evaluation of your requests, complaints and suggestions regarding our products and services,
Execution of information security processes,
Ensuring the security of operations regarding the Agreka website,
Ensuring that the activities are carried out in accordance with the legislation,
Follow-up and execution of legal affairs,
Providing information to authorized persons, institutions and organizations.

Your audio recording information; If you contact the call center, it is collected and processed for the following purposes.

Execution of the processes for the establishment and performance of the contract,
Execution of communication activities,
Carrying out activities for the development and improvement of the products and services offered by our company,
Contacting and informing about the conditions, current status and updates of contracts concluded on our website pursuant to the relevant articles of the Law on Distance Sales Contract and Consumer Protection,
Evaluation of your requests, complaints and suggestions regarding our products and services,
Ensuring the security of operations regarding the Agreka website,
Ensuring that the activities are carried out in accordance with the legislation,
Follow-up and execution of legal affairs,
Providing information to authorized persons, institutions and organizations.

4. What is the legal reason for the processing of your personal data?

Based on the legal reason that it is clearly stipulated in the legislation, especially Law on Regulation of Electronic Commerce No. 6563, Turkish Commercial Code No. 6102, Turkish Penal Code No. 5237 and Law No. 6502 on the Protection of Consumers, to which our company is subject; Fulfilling our obligations arising from the legislation, especially the activities to ensure the security of the operations on the company website, to carry out the information security processes, to ensure that the activities are carried out in accordance with the legislation

Provided that it is directly related to the establishment or performance of the contract, under the relevant articles of the Law on the Protection of the Consumer, such as the distance sales contract, based on the legal reason that the processing of your personal data is necessary; Carrying out the activities of establishing contracts concluded on our website, carrying out activities for the realization of your purchases, execution and supervision of the company's business activities, follow-up of delivery processes, evaluation of your requests, complaints and suggestions regarding our products and services, execution and control of financial and accounting processes, carrying out communication activities,

Based on the legal reason that it is compulsory for our company to fulfill its legal obligation; Fulfilling the legal obligations specified, especially the Regulation on Distance Contracts and the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce, and in the decisions, guides and directories included in the secondary legislation to which our company is subject and/or published by the competent authorities, providing information to authorized persons, institutions and organizations, ensuring that activities are carried out in accordance with the legislation, follow-up and execution of legal affairs, execution of financial and accounting affairs,

Based on the legal reason that data processing is mandatory for the establishment, exercise or protection of a right; execution of legal and litigation affairs,

Based on the legal reason that data processing is mandatory for the legitimate interests of our company, provided that it does not harm fundamental rights and freedoms; Carrying out activities for the development and improvement of the products and services offered by our company,

Based on the legal reason for your explicit consent; transferring personal data abroad.

5. To whom and for what reasons Agreka transfers your personal data?

To the extent necessary, limited to the purposes specified in the second article of this clarification text, especially for the purposes of executing the website operation, executing the delivery processes of the products you ordered, managing your help and support requests for your processes, carrying out activities to increase your experience and satisfaction, carrying out activities for the development and improvement of the products and services offered by our company, providing you with a better shopping experience and carrying out activities to increase your satisfaction, ensuring business continuity, ensuring information security, fulfillment of legal obligations;

Information of you and/or the person on whose behalf the product will be delivered, in order to carry out logistics activities and follow up the delivery processes, with cargo companies and private couriers,
With our business partners, consultants and service providers, banks, financial advisors in order to carry out invoicing processes,
With business partners and other service providers that provide call center services for product and service sales and after-sales support services,
With business partners and service providers providing services in the field of quality control, complaint management and risk analysis,
With our relevant business partners, consultants and service providers, banks, financial advisors for the management of financial and accounting processes, identification and evaluation of risks, and prevention of fraud,
With the e-invoice business partner to send the e-invoice to the customer electronically; With cargo and courier companies for the delivery of physical contracts or invoices, with our business partners who provide private integrator, independent audit, customs, financial advisor/accounting services,
With tax offices in order to fulfill their tax obligations, with the officials of the Ministry of Treasury and Finance of the Republic of Turkey, of the invoices and collection receipts during tax audits,
With our business partners and service providers that provide, operate or provide services to our IT infrastructure,
With our business partners who provide services in the field of risk management and financial reporting processes,

With lawyers, auditors, forensic experts, cyber security consultants, tax consultants and other third parties and business partners from whom we receive consultancy and service within the scope of fulfilling legal obligations,
With authorized public institutions and organizations such as regulatory and supervisory institutions, courts and enforcement offices,
With other public institutions or organizations that are authorized to request your personal data, with our domestic and/or abroad affiliates, suppliers, business partners, contracted banks and third parties from which we purchase products or services.

HOW DOES AGREKA PROTECT YOUR PERSONAL DATA?

Personal data shared with Agreka are under the supervision and control of Agreka. As a data controller, Agreka has undertaken the responsibility of establishing the necessary organization and taking and adapting technical measures in order to protect the confidentiality and integrity of the information in accordance with the provisions of the applicable legislation. Being aware of our obligation in this regard;

Your personal data that you transmit to Agreka via the website, mobile site and mobile application is protected using SSL (Secure Sockets Layer) technology.
Access and authorization controls are implemented to prevent unauthorized access to personal data.
In this context, we would like to inform you that we always update our data processing policies.

YOUR RIGHTS TO PROTECT YOUR PERSONAL DATA

By applying to our Company through the methods listed in the "Communication for Your Rights and Requests" section of this Clarification Text, you have the right of:

Learning whether your personal data is processed or not,
If your personal data has been processed, requesting information about it,
Learning the purpose of processing your personal data and whether they are used in accordance with the purpose,
Knowing the third parties to whom your personal data has been transferred in the country or abroad,
Requesting correction of personal data if it is incomplete or incorrectly processed,
Requesting the deletion or destruction of your personal data within the framework of the conditions stipulated in the KVKK,
Requesting notification of the actions taken in accordance with your rights in the form of correction, deletion and destruction mentioned above, to third parties to whom personal data has been transferred,
Objecting to the emergence of a result against you by analyzing your processed personal data exclusively with automated systems,
Requesting the compensation of your damage in case you suffer damage due to the processing of your personal data in violation of the relevant legislation.

CONTACT FOR YOUR RIGHTS AND REQUESTS

You can send your questions and requests regarding your personal data to Data Controller, with a petition prepared in accordance with the conditions specified in the Communiqué on Application Procedures and Principles or with "Agreka Bilimsel Doğal Yaşam Ürünleri San. Ve Tic. Ltd. Şti.”’s "Application Form" sing the following methods. You can find the application form here.

* Relevant Persons who will apply for "Personally Written Application" are required to submit documents proving their identity. In this context, we kindly request you to submit only the front side of the ID photocopy (without showing blood type and religion) along with the application form for the personal written applications that will be made to address Saray Mah. Dr. Adnan Buyukdeniz Cad. (OryaPark) No: 3 A Da: 120 Ümraniye / İSTANBUL.

** We kindly request that "Personal Data Protection Law Relevant Person Request" be written in the notification envelope of the application form or in the subject of the e-mail.

As personal data owners, if you forward your requests regarding your rights to Agreka, Agreka will conclude your request free of charge within 30 (thirty) days at the latest. However, if the response to your application requires a cost in accordance with the legislation, Agreka may charge the fee in the tariff determined by the Personal Data Protection Board.

ABOUT THE CLARIFICATION TEXT

Agreka reserves the right to update the text of this "Disclosure on the Protection of Personal Data" at any time within the framework of the changes that can be made in the current legislation.

Updated Date: 03 /03/ 2022