PROTECTION OF PERSONAL DATA

As ASFİN GIDA KOZMETİK İNŞAAT SANAYİ VE TİCARET LİMİTED ŞİRKETİ, we place great importance on ensuring the security of your personal information, whether you use our website, our mobile application, or otherwise. Therefore, it is important for us to read this text, which details which personal data we use and why, and to demonstrate that you clearly understand the obligations of ZARİFOĞLU, who is responsible for its administrative and technical security as the "Data Controller." Indeed, the "Personal Data Protection Law" No. 6698 entered into force on April 7, 2016. As the data controller, we would like to inform you about the aforementioned legislation and certain definitions set forth therein:

Personal data: Any information relating to an identified or identifiable natural person,

Processing of Personal Data: Any operation performed on personal data, such as obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data, in whole or in part, by automatic means or non-automatic means provided that it is part of any data recording system.

Data processor: The natural or legal person who processes personal data on behalf of the data controller based on the authority granted by the data controller,

Data recording system: A recording system in which personal data is structured and processed according to certain criteria.

Data controller: Refers to the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.

1. Protection of Personal Data and Purpose of the Consent Text and Our Company's Position as Data Controller:

Our shopping site has the title of "data controller" within the scope of the Personal Data Protection Law No. 6698 ("Law") regarding personal data of customers, and this Personal Data Protection and Consent Text aims to inform customers about the personal data processing activities carried out by our shopping site in accordance with the said Law and to obtain their explicit consent for the situations specified in Article 3 below. As Zarifoğlu, we obtain your personal data within the scope of the information text when you create a membership through our website zarifoglubaharat.com. If we need to explain what the personal data obtained is and why we need to obtain it;

Your name and surname are requested as identity data, and your mobile phone number and e-mail address are requested as contact data. The legal reason is that it is necessary to process personal data of the parties to the contract, which is directly related to the establishment and fulfillment of the contract.

Your website or mobile application login and logout information, password and passcode information, and IP address information are requested as Transaction Security data, and the legal reason for this is that the transaction is prescribed by law.

As legal transaction data, a record is requested indicating that you have read and accepted the information text and membership agreements, and the legal reason is to fulfill our legal obligation regarding the approvals you provide.

Your call center records, information on your teller receipts, comments you make on the website or mobile application, order and request information are recorded as customer transaction data, and the legal reason for this is that processing is mandatory in order to fulfill legally valid interests and requests.

If you do not want your name and surname to be displayed on our website or mobile app, you can choose to comment anonymously. If you choose not to be anonymous, your comments will be published based on the name and surname information registered in your account. We kindly ask that you do not share any personal or sensitive data outside the scope of the Personal Data Protection Law in your comments. Such sharing will be deemed your explicit consent, and your comments may be deleted if necessary.

2. Purpose of Processing Customer Personal Data:

Customer personal data is processed within the framework of the personal data processing conditions and purposes specified below and in Articles 5 and 6 of the Law. For the purposes of establishing a membership agreement and creating a membership profile, identity, contact information, and legal transaction data are processed for the legal purpose of establishing and fulfilling the agreement. Identity and contact information are processed for the legal purpose of maintaining current contact information and providing informational communications regarding customer membership transactions. Transaction security and contact data are processed to verify contact addresses and perform password resets.

Personal data of customers;

To ensure that relevant people benefit from the products and services offered by our shopping site, the necessary work is carried out by the business units and the relevant business processes are carried out,
Carrying out the necessary work by the relevant business units and carrying out the related business processes in order to carry out the commercial activities carried out by our shopping site,
Planning and execution of commercial and/or business strategies of our shopping site,
To plan and execute the activities necessary to ensure the legal, technical and commercial-occupational security of the persons who have a business relationship with our shopping site, and to recommend and promote the products and services we offer to the persons concerned by customizing them according to their tastes, usage habits and needs,
Establishment of possible rights and claims of interested parties
Providing information to authorized institutions arising from legislation
Creating and tracking visitor records
To ensure the fulfillment of obligations within the scope of the Consumer Protection Law, the Retail Trade Regulation Law and other legal legislation through our Company and our branches, call center, affiliated companies on behalf of our Company or through our websites and social media pages or through all kinds of channels, including but not limited to these,
To provide better service to customers, to provide and offer various advantages, to provide information about sales, marketing, information, promotions, campaigns and conditions, to conduct surveys and customer satisfaction research, to speed up your purchasing transactions, to receive and deliver your orders,
Creating campaigns for customers, cross-selling, determining the target audience,
Carrying out activities to enhance user experience by tracking customer movements, improving the operation of our shopping site's website and mobile application and personalizing it according to customer needs, carrying out direct and indirect marketing, personalized marketing and remarketing activities, carrying out personalized segmentation, targeting, analysis and internal reporting activities, market research,
It may be processed in line with the consent of the Customer and may be shared with the parties specified in this Personal Data Protection Text, within the scope of planning and execution of sales and marketing processes of products and/or services of our shopping site, including for the purposes of planning and execution of customer satisfaction activities and customer relations management processes, and planning and execution of processes of creating and/or increasing loyalty to products and/or services offered by our shopping site.

Our Shopping Site reserves the right to associate the site's behavior, even if the user is not a registered member, with a cookie stored in the user's browser for online behavioral advertising and marketing purposes, and to define remarketing lists based on metrics such as the number of pages viewed, duration of visit, and goal completions. This user may then be shown targeted advertising content based on their interests on the site or other sites within the Display Network. When Google AFS ads are directed to our Shopping Site, Google may place or read cookies on users' browsers or use web beacons to collect information. The customer has expressly consented to all of these.

3. Personal Data to be Processed with the Explicit Consent of Customers and Purposes of Processing:

Personal data is processed in accordance with the Personal Data Processing Conditions specified in Articles 5 and 6 of Law No. 6698. In the following cases where the personal data processing conditions stipulated in Articles 5/2 and 6/3 of Law No. 6698 cannot be met, the explicit consent of customers must be obtained for the processing of personal data by our Shopping Site.

4. Transfer of Customer Personal Data:

Personal data may be transferred to real persons and legal entities, provided that it complies with Articles 8 and 9 of Law No. 6698. These transfers are made for specific purposes and with the customer's knowledge. Therefore, personal data belonging to customers may be shared with Company officials, our affiliates, lawyers, financial advisors, business partners, suppliers, shareholders, legally authorized public institutions and organizations and private institutions within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, including the performance of the necessary work by the business units to benefit the relevant people from the products and services offered by our shopping site and the execution of the relevant business processes, the performance of the necessary work by the relevant business units to carry out the commercial activities carried out by our shopping site and the execution of the related business processes, the planning and execution of the commercial and/or business strategies of our shopping site, the planning and execution of the activities necessary to ensure the legal, technical and commercial-business security of our shopping site and the relevant people who have a business relationship with our shopping site and the planning and execution of the activities necessary to recommend and promote the products and services offered by our shopping site to the relevant people by customizing them according to the tastes, usage habits and needs of the relevant people. The User's Name and Contact Information may be shared with Company officials, our affiliates, lawyers, financial advisors, business partners, suppliers, shareholders, legally authorized public institutions and organizations and private institutions in accordance with the payment institution framework agreement that the User will approve at the payment stage and dated January 9, 2008. It may be shared with payment institutions for the purpose of identity verification in accordance with the Regulation on Measures to Prevent Laundering Proceeds of Crime and Financing of Terrorism published in the Official Gazette numbered 26751. Our Shopping Site may transfer personal data to third parties within the country and abroad, provided that the conditions stipulated in Law numbered 6698 are met, within the scope of the purposes stated above.

5. Method and Legal Reason for Collection of Personal Data:

Personal data is collected electronically from customers. Personal data collected for the legal reasons mentioned above may be processed and transferred for the purposes specified in Articles 5 and 6 of the Law and this Personal Data Protection Text. Article 1 of the Information Text details the personal data processed by specifying the data category and the legal reasons for obtaining this data.

6. Storage Periods of Personal Data:

Our Shopping Site stores personal data for the period specified in relevant laws and legislation, if stipulated in these legislations.

If there is no specific period stipulated in the legislation regarding how long personal data should be stored, Personal Data is processed for the period required by the practices and commercial practices of Our Shopping Site, depending on the activity carried out while processing that data, and is then deleted, destroyed or anonymized.

If the purpose of processing personal data has expired, and the retention periods specified by relevant legislation and our Shopping Site have expired, personal data may be retained solely as evidence in potential legal disputes or to assert or defend a relevant right related to personal data. Retention periods are determined based on the statute of limitations for asserting the aforementioned right and examples of previous requests submitted to our Shopping Site regarding the same matters despite the expiration of the statute of limitations. In this case, stored personal data is not accessed for any other purpose and is only accessed when it is necessary to resolve the relevant legal dispute. After this period, personal data is deleted, destroyed, or anonymized.

7. Rights of Customers as Personal Data Owners:

Pursuant to Article 11 of the Law, data owners have many rights, including but not limited to the following: (i) to learn whether their personal data is being processed, (ii) to request information if their personal data has been processed, (iii) to learn the purpose of processing personal data and whether they are being used in accordance with their intended purpose, (iv) to know the third parties to whom personal data has been transferred, whether domestically or internationally, (v) to request correction of personal data if it is incomplete or inaccurately processed and to request notification of the action taken in this context to third parties to whom personal data has been transferred, (vi) to request the deletion or destruction of personal data if the reasons requiring processing are no longer necessary, despite the data having been processed in accordance with the provisions of the Law and other relevant laws, and to request notification of the action taken in this context to third parties to whom personal data has been transferred, (vii) to object to any outcome detrimental to the data subject arising from the analysis of processed data exclusively through automated systems, and (viii) to request compensation in the event of damages suffered due to unlawful processing of personal data.

Requests regarding the exercise of these rights may be submitted by personal data owners to our Shopping Site in writing (notification letter or registered letter with return receipt) using the methods specified in Law No. 6698, or by using a registered electronic mail (KEP) address, electronic signature, mobile signature, or the electronic mail address registered in the system. Changes to the matters included in this form are subject to change in line with legal and technological developments. Requests will be resolved free of charge as soon as possible and within thirty days at the latest. If an additional cost is required to fulfill the request, you may be charged a fee according to the tariff determined by the Personal Data Protection Board.

KVKK