Privacy Policy Information
Data Controller
Han Kozmetik ve Paz. San. ve Dis TIc. Ltd. Ltd. (Referred to as “Han Kozmetik” or “Company”)
We have prepared the Personal Data Processing Information Text ("Information Text") in order to enlighten the data subject regarding the processing, storage and transfer of your personal data within the framework of our activities arising from the Personal Data Protection Law No. 6698 ("KVKK") and the relevant legislation and legal regulations.
The Information Text will be valid as of the date it is published by Han Kozmetik. The Company may make changes to the Information Text at any time if necessary. Any changes will take effect immediately upon being published on the website.
1- Contact persons
- Customers
DATA CATEGORIES
1.1.1- Identity Information
Processed Personal Data:
Name - Surname, Date of Birth, Gender, TR ID Number
Personal Data Processing Purposes:
Carrying out finance and accounting affairs, communication activities, company/product/service commitment processes and activities in accordance with the legislation; Following up legal affairs and carrying out activities to ensure business continuity; Carrying out goods/service sales and after-sales support services and processes; Carrying out customer relationship management processes and activities aimed at customer satisfaction; execution of advertising, campaigns and promotion processes; carrying out storage and archive activities; execution of contract and membership processes; follow-up of requests and complaints; planning and execution of commercial and/or business strategies; Carrying out the necessary work and carrying out the relevant business processes to benefit from the products and services offered; Providing information to authorized persons, institutions and organizations.
Legal Reasons for Processing Personal Data
In this context, your personal data is processed by the Company in order to achieve the above-mentioned purposes, as specified in the relevant legislation and Article 5 of the KVKK: Provided that it is clearly provided for in the law and is directly related to the establishment or execution of a contract, it is necessary to process personal data of the parties to the contract, the data controller It is processed based on the legal reasons that data processing is mandatory for the legitimate interests of the data controller, provided that it is necessary to fulfill its legal obligation and does not harm the fundamental rights and freedoms of the data subject. For cases not covered by the above purposes, your personal data is processed based on your explicit consent, the details of which are specified in the Consent Text.
Methods of Collection of Personal Data:
The above-mentioned personal data is collected through membership forms on our website, fields within the My Account page that can be filled in depending on your preference, your requests and applications, contracts, campaigns and third-party authentication systems (e.g. Google Login, Facebook Login, etc.).
1.1.2- Contact Information
Processed Personal Data:
E-Mail Address, Billing & Delivery Addresses, Mobile Phone Number
Personal Data Processing Purposes:
Carrying out finance and accounting affairs, communication activities, company/product/service commitment processes and activities in accordance with the legislation; Following up legal affairs and carrying out activities to ensure business continuity; Carrying out goods/service sales and after-sales support services and processes; Carrying out customer relationship management processes and activities aimed at customer satisfaction; execution of advertising, campaigns and promotion processes; carrying out storage and archive activities; execution of contract and membership processes; follow-up of requests and complaints; planning and execution of commercial and/or business strategies; Carrying out the necessary work and carrying out the relevant business processes to benefit from the products and services offered; Providing information to authorized persons, institutions and organizations.
Legal Reasons for Processing Personal Data
In this context, your personal data is processed by the Company in order to achieve the above-mentioned purposes, as specified in the relevant legislation and Article 5 of the KVKK: Provided that it is clearly provided for in the law and is directly related to the establishment or execution of a contract, it is necessary to process personal data of the parties to the contract, the data controller It is processed based on the legal reasons that data processing is mandatory for the legitimate interests of the data controller, provided that it is necessary to fulfill its legal obligation and does not harm the fundamental rights and freedoms of the data subject. For cases not covered by the above purposes, your personal data is processed based on your explicit consent, the details of which are specified in the Consent Text.
Methods of Collection of Personal Data:
The above-mentioned personal data is collected through membership forms on our website, fields within the My Account page that can be filled in depending on your preference, your requests and applications, contracts, campaigns and third-party authentication systems (e.g. Google Login, Facebook Login, etc.).
1.1.3- Legal Transaction Information
Processed Personal Data:
In Case of Dispute, Information in the Case File, Warning Letters, Information in Correspondence with Judicial and Administrative Authorities
Personal Data Processing Purposes:
Follow-up and execution of legal affairs; execution and supervision of business activities; Providing information to authorized persons, institutions and organizations; carrying out activities in accordance with the legislation; carrying out storage and archive activities; execution of risk management processes; execution of contract processes; follow-up of requests/complaints; Ensuring the security of data controller operations
Legal Reasons for Processing Personal Data:
In this context, your personal data is processed by the Company in order to achieve the above-mentioned purposes, as specified in the relevant legislation and Article 5 of the KVKK: It is mandatory for the data controller to fulfill its legal obligation, data processing is mandatory for the establishment, use or protection of a right and the fundamental fundamentals of the relevant person. It is processed based on the legal grounds that data processing is mandatory for the legitimate interests of the data controller, provided that the rights and freedoms are not harmed.
Methods of Collection of Personal Data:
The personal data mentioned above are collected through official letters and other printed / electronic documents from judicial and administrative authorities.
1.1.4- Customer Transaction Information
Processed Personal Data:
Billing Information, Request Information, Order Information, Customer Comments
Personal Data Processing Purposes:
Execution of supply chain management processes; execution and supervision of business activities; Providing information to authorized persons, institutions and organizations; carrying out activities in accordance with the legislation; carrying out financial and accounting affairs; carrying out storage and archive activities; execution of contract processes; execution of goods/service sales processes; Carrying out after-sales support services for goods/services; execution of customer relationship management processes; Carrying out activities aimed at customer satisfaction; Conducting marketing analysis studies; execution of advertising, campaigns and promotion processes; follow-up of requests/complaints, execution of marketing processes of products/services
Legal Reasons for Processing Personal Data
In this context, your personal data is processed by the Company in order to achieve the above-mentioned purposes, as specified in the relevant legislation and Article 5 of the KVKK: Provided that it is clearly provided for in the law and is directly related to the establishment or execution of a contract, it is necessary to process personal data of the parties to the contract, the data controller It is processed based on the legal reasons that data processing is mandatory for the legitimate interests of the data controller, provided that it is necessary to fulfill its legal obligation and does not harm the fundamental rights and freedoms of the data subject. For cases not covered by the above purposes, your personal data is processed based on your explicit consent, the details of which are specified in the Consent Text.
Methods of Collection of Personal Data:
The personal data mentioned above are collected through printed/electronic forms, call center records, e-mails and SAP programs.
1.1.5- Transaction Security Information
Processed Personal Data:
IP Address Information, Website Login and Exit Information, User Name Information, Traffic Data (Connection Time / Duration, etc.)
Personal Data Processing Purposes:
Execution of information security processes; conducting audit/ethical activities; execution and supervision of business activities; carrying out storage and archive activities; ensuring the security of data controller operations; Providing information to authorized persons, institutions and organizations; carrying out activities in accordance with the legislation; follow-up and execution of legal affairs; execution of goods/service sales processes; follow-up of requests / complaints
Legal Reasons for Processing Personal Data:
In this context, your personal data is processed by the Company in order to achieve the above-mentioned purposes, as stated in the relevant legislation and Article 5 of the KVKK: Provided that it is clearly stipulated in the law, it is mandatory for the data controller to fulfill its legal obligations, and it does not harm the fundamental rights and freedoms of the data controller. It is processed based on the legal reasons that data processing is mandatory for legitimate interests. For cases not covered by the above purposes, your personal data is processed based on your explicit consent, the details of which are specified in the Consent Text.
Methods of Collection of Personal Data:
The personal data mentioned above are collected through information security systems and electronic devices.
1.1.6- Financial Information
Processed Personal Data:
Encrypted Credit Card Information, Bank Account / IBAN Number Information
Personal Data Processing Purposes:
Carrying out activities in accordance with the legislation; follow-up and execution of legal affairs; carrying out financial and accounting affairs; carrying out return processes; execution and supervision of business activities; execution of goods/service sales processes; carrying out storage and archive activities; execution of risk management processes; execution of contract processes; Providing information to authorized persons, institutions and organizations
Legal Reasons for Processing Personal Data
In this context, your personal data is processed by the Company in order to achieve the above-mentioned purposes, as specified in the relevant legislation and Article 5 of the KVKK; Provided that it is directly related to the establishment or performance of a contract, the personal data of the parties to the contract are processed based on the legal grounds that it is necessary to process it and that it is mandatory for the data controller to fulfill its legal obligation.
Methods of Collection of Personal Data:
The personal data mentioned above are collected through printed and electronic forms, e-mails and requests and messages on the website.
1.1.7- Location Information
Processed Personal Data: Location Information
Personal Data Processing Purposes:
Execution of customer relationship management processes; Conducting marketing analysis studies; execution of advertising / campaign / promotion processes; Carrying out activities aimed at customer satisfaction; Carrying out marketing processes of products/services; execution of goods/service sales processes; Carrying out goods / services production and operation processes
Legal Reasons for Processing Personal Data:
In this context, your personal data is processed by the Company in order to achieve the above-mentioned purposes, based on the relevant legislation and the legal basis of Explicit Consent, specified in Article 5 of the KVKK, the details of which can be found in the Consent Text.
Methods of Collection of Personal Data:
The above-mentioned personal data is collected according to your preferences in the internet browser you use and our Company's mobile application.
TRANSFER OF PERSONAL DATA
Personal data of customers are collected only to the extent necessary to achieve the relevant purpose, by complying with the rules in Article 8 of the KVKK titled "Transfer of Personal Data" and/or Article 9 titled "Transfer of Personal Data Abroad" and by taking the necessary technical and administrative measures; To our affiliates and subsidiaries, limited to the above-mentioned purposes, within the scope of the contracts between us for the above-mentioned purposes, the seller of the purchased product (for the shipment of the product), cargo companies (for the delivery of the product), banks (for receiving the payment for the product) and (delivery) It can be transferred to our business partners with whom we work in bulk SMS / e-mail sending (to provide information on issues such as etc.) and to our suppliers and product authorized services (for after-sales services when necessary), to authorized persons and official institutions in accordance with legal regulations and legislation in order to fulfill our legal obligation, and can be recorded in our programs and/or systems provided/made available to us by our infrastructure suppliers.
2- Storage of Personal Data, Your Rights and Application
2.1- Storage and Disposal
Our company has created a Storage and Destruction Policy for storing and deleting personal data. Storage and destruction of your personal data are carried out within the scope of this policy. Accordingly, if a period of time is specified for the storage of data in the KVKK or relevant laws and other relevant legislation, the data in question must be stored for at least this period.
Considering the possibility that a possible court request or a request from an administrative authority authorized by law regarding the relevant data may be received by us late or that a dispute may occur in which we may be a party, the storage period of the data is determined by adding a period of 6 months to 1 year to the periods stipulated in the legislation for the storage of your data and the determined At the end of the period, the data in question is deleted, destroyed or anonymized.
If there is no period specified in the legislation for the retention period of the data we process, your data will be deleted, destroyed or anonymized without your request, after the 10-year statute of limitations period has passed from the end of our legal relationship, taking into account possible disputes as a requirement of the relationship between us.
If all the processing conditions for personal data have been eliminated or the storage period declared by us or determined within the scope of the legislation has expired, your data will be deleted, destroyed or anonymized ex officio on the first periodic destruction date or within 6 months at the latest. If you request the deletion of your data for a valid reason, your data will be deleted within 30 days at the latest, to the extent legally possible. If you request that your data, whose retention period is determined in the legislation, be deleted or destroyed before the stipulated periods, your request will not be fulfilled.
2.2- Your rights
Regarding your personal data within the scope of KVKK and relevant legislation;
- Learning whether your personal data is being processed or not,
- Requesting information if your personal data has been processed,
- Learning the purpose of processing personal data and whether they are used for their intended purpose,
- Knowing the third parties to whom your personal data is transferred,
- Request correction of your personal data if it is incomplete or incorrectly processed,
- Requesting the deletion or destruction of your personal data within the framework of the conditions stipulated in the KVKK legislation,
- When you request the correction of incomplete or inaccurate data and the deletion or destruction of your personal data, request that this situation be notified to the third parties to whom we have transferred your personal data,
- Object to the emergence of a result against the individual by analyzing the processed data exclusively through automatic systems, and
- If you suffer damage due to unlawful processing of personal data, you have the right to request compensation for this damage.
2.3- Application
Your applications and requests regarding your personal data:
- With the wet signed petition and ID photocopy, İçerenköy Mah. Huzur Hoca Cad. By sending to no:30/1 Ataşehir/İSTANBUL,
- Applying to our Company in person with a valid identity document,
- You can send it to our registered e-mail address hankozmetik@hs03.kep.tr by using the registered e-mail (KEP) address and secure electronic signature or mobile signature, or by sending it to our address info@rhaneva.com from your e-mail address previously notified to our Company and registered in our system. .
In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, in these applications of the relevant persons, name and surname, signature if the application is in writing, TR ID number (passport number if the applicant is a foreigner), residence or workplace address subject to notification, e-mail address subject to notification, if any. It is mandatory to include address, telephone number and fax number and information regarding the subject of the request.
In order to exercise the above-mentioned rights, the data owner must clearly and understandably state the requested matter in the application, which includes explanations regarding the right he/she requests to use. Information and documents regarding the application must be attached to the application.
Although the subject of the request must be related to the applicant personally, if acting on behalf of someone else, the applicant must be specifically authorized in this regard and this authority must be documented (special power of attorney). In addition, the application must include identity and address information and documents verifying identity must be attached to the application.
Requests made by unauthorized third parties on behalf of someone else will not be taken into consideration.
Your claims regarding your personal data will be evaluated and responded to within 30 days at the latest from the date they are received by our Company. If your application is evaluated negatively, the reasoned rejection reasons will be sent to you by e-mail or postal mail to the address you specified in your application, and if possible, through the method in which the request was made.
