PERSONAL DATA PROTECTION AGENCY and Privacy Policy
KVKK Information Statement
The subject of this KVKK Information Statement is to specify the principles regarding the processing of all personal data belonging to all persons affiliated with the Company by Maison De Maa Kozmetik Sanayi ve Dış Ticaret Limited Şirketi (“Company”) in accordance with the Law on the Protection of Personal Data No. 6698 (“Law”). Accordingly, the Company, which is the data controller in accordance with Article 3 of the Law, informs and enlightens personal data owners (employees, job candidates, customers, suppliers, consultants, business partners, shareholders, company officials, company representatives, persons with whom contractual relations are established and employees of these persons, persons who are the addressees of all kinds of legal transactions, visitors and real or legal persons with whom they communicate for any reason) with this KVKK Information Statement in accordance with Article 10 of the Law. Personal data and special personal data processed by the Company are stored securely in a physical or electronic environment for a period appropriate for the purpose of processing. The Company declares that it acts in accordance with the obligations stipulated in all relevant legislation, especially KVKK, regarding the protection of personal data within the scope of the activities in question.
As Maison De Maa Kozmetik Sanayi ve Dış Ticaret Limited Şirketi, we attach importance to the security of your personal data. With this awareness, we show great sensitivity to the processing and preservation of all personal data belonging to you in the best possible way and with the utmost care. With the awareness of this responsibility, we process your personal data within the framework specified below, as the Data Controller, within the scope of the Law on the Protection of Personal Data No. 6698 (hereinafter referred to as the Law) and the relevant legislation.
Within the scope of the Law, data processing refers to all kinds of operations performed on data, such as obtaining, recording, storing, updating, classifying, sharing with third parties permitted by the legislation, or transferring your personal data, through fully or partially automatic means or non-automatic means provided that it is part of any data recording system.
Data controller refers to the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system. The data controller regarding your personal data is Maison De Maa Kozmetik Sanayi ve Dış Ticaret Limited Şirketi, registered with the Istanbul Chamber of Commerce with the Trade Registry Number 934018 and İkitelli Tax Office, with the Tax Number 6090508296, with the Mersis Number 0609050829600016 and operating at the Başak Mahallesi Yunus Emre Caddesi Başak Pazar No:17 Başakşehir/İstanbul center. The procedures and principles stipulated in Law No. 6698 and other laws are taken into consideration in the processing of your personal data. We process your personal data primarily within the framework of our authorities and obligations arising from the legislation, primarily the Turkish Commercial Code No. 6102, the Consumer Protection Law No. 6502, the Tax Procedure Law No. 213, in accordance with the law and the rules of honesty, for specific, clear, legitimate purposes and with your consent.
In order to provide you with high standards of service and to process your personal data for the purpose specified below, depending on the nature of the service provided,
To ensure the physical security and control of the company's locations, customer evaluation/complaint management processes, reputation research processes, event management, legal compliance process, audit, financialprocesses, event management, legal compliance process, audit, financial affairs etc.),
To ensure that third parties perform their technical, logistical and similar functions on our behalf as service providers and to ensure that your payments are made quickly and securely when necessary
To determine and implement our Company's commercial and business strategies and to ensure that our Company's human resources policies are carried out
To ensure that our Company's training activities continue
We obtain your personal data verbally, in writing, visually or electronically within the scope of the contract or from physical locations and similar channels within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Personal Data Protection Law. In this context, the main general and special personal data obtained within the scope of all activities carried out by our company and for the above-mentioned purpose are listed below;
Your identity data such as your name, surname, Turkish identity number, passport number or temporary Turkish identity number if you are not a Turkish citizen, place and date of birth, marital status, gender information and the photocopy of your Turkish identity card or driver's license that you have submitted,
Your contact data such as your address, telephone number, e-mail address,
Your financial data such as your bank account number and IBAN number,
Your answers and comments that you share for the purpose of evaluating our services,
Closed circuit camera system image,
Vehicle license plate information,
Navigation information obtained during the use of our website, IP address, browser information and your location data that you have provided with your own consent. Your personal data listed above and your special personal data may be processed within the scope of the personal data processing conditions specified in Articles 5 and 6 of the Personal Data Protection Law and the purposes listed below:
Sharing the requested information with the Social Security Institution, the Police and other public institutions and organizations in accordance with the relevant legislation,
Fulfilling legal and regulatory requirements,
Confirming your identity by the Sales and Support departments,
Planning and managing the internal operations of the institution by the Company Management,
Providing training to our employees by the Human Resources department,
Monitoring and preventing abuse and unauthorized transactions by the Audit and Information Systems departments,
Performing risk management and quality development activities by the Information Systems departments,
Invoicing by the Financial Affairs departments in return for our services,
Confirming your relationship with institutions that have agreements with our company by the Financial Affairs departments,
Responding to all your questions and complaints regarding our services by the Company Management, Support and Sales departments,
Providing all necessary technical and administrative services within the scope of data security of our company's systems and applications by the Company Management, Information Systems departments taking measures,
Marketing, Media and Communication, Designing and communicating special content, tangible and intangible benefits on web and mobile channels,
Measuring, increasing and researching customer satisfaction by the relevant departments of our company,
Performing education and training activities by educational institutions that the institution cooperates with. The above-mentioned “Personal and Special Data” may be stored in physical and electronic archives within Maa Althahab and external service providers with great care and in compliance with the provisions of the legislation.
Transfer of Personal Data and Purposes of Transfer
Your personal data is stored in our database available in electronic environment. The personal data you share with us is shared with third parties only in necessary cases, such as sharing your address with the cargo company for the delivery of your order, and only with your approval. Your personal data may be shared with our business partners, suppliers, company officials, shareholders, legally authorized public institutions and private individuals within the framework of the Personal Data Protection Law No. 6698, other legislation provisions and for the purposes explained above, and within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Personal Data Protection Law below.
Ministry of Health, sub-units affiliated to the ministry and family medicine centers,
Private insurance companies (health, retirement, life insurance and similar),
Social Security Institution,
General Directorate of Security and other law enforcement agencies,
General Directorate of Population,
Judicial authorities,
Your authorized legal representatives,
Third parties from whom we receive consultancy, including lawyers, tax consultants and auditors we work,
Regulatory and supervisory institutions and official authorities,
With your employer,
Our suppliers, support service providers, archive service providers and business partners whose services we benefit from or with whom we cooperate(For more detailed information, you can contact our company in writing and get information.)
Transfer of Personal Data Abroad
The company can transfer personal data abroad at any time by obtaining the explicit consent of the personal data owner. In the absence of the explicit consent of the personal data owner, personal data can be transferred abroad if the conditions for processing data without explicit consent, as stipulated in Article 5, paragraph 2 and Article 6, paragraph 3 of the Law, are met. In this case, personal data can only be transferred to persons and organizations resident in foreign countries after the Personal Data Protection Board has determined and declared that foreign countries have sufficient protection, in accordance with Article 9 of the Law; and for countries where it has been determined and declared that there is no sufficient protection, it can be transferred only to the cases where the data controllers in Turkey and the relevant foreign country have undertaken in writing to provide sufficient protection and the Board's permission can be obtained for the relevant transfer.
Personal data is collected by our Company or real or legal persons processing data on behalf of the Company through the website, contracts made with the personal data owner, information forms, surveys, social media applications, call centers, participation in training, seminars, fairs and similar environments organized by the Company, parties with whom the Company has a business relationship and/or receives services complementary to its activities, contracted organizations, offices and other physical environments where it can communicate and other similar channels, including but not limited to those listed here, and is collected with the express consent of the personal data owner, where possible.
Personal data is obtained in all business processes for the Company to continue its commercial life and to fulfill its obligations arising from the law completely and correctly, and personal data collected in this direction is processed in accordance with the general principles listed in Article 4 of the Law, based on the data processing conditions specified in Article 5 of the Law.
Rights of the Personal Data Owner
The personal data owner has the following rights listed in Article 11 of the Law:
Your personal data is meticulously protected within technical and administrative possibilities and necessary security measures are provided at a level appropriate to possible risks, also considering technological possibilities. In accordance with Article 13, paragraph 1 of the PDP Law, you can submit your request regarding the use of your rights specified above to our Company in writing or by other methods determined by the Personal Data Protection Board. In order to use your rights specified above, you can submit your request including the necessary information identifying your identity and explanations regarding the right you request to use among the rights specified in Article 11 of the PDP Law, and you can submit your requests within the scope of the Law by filling out the “Application Form Pursuant to the Personal Data Protection Law” on the www.maa-althahab.com website and deliver your request by hand with a wet signature to Başak Mah. Yunus Emre Cad. Başak Pazar No:17 Başakşehir/İstanbul or send it to the maisondemaakozmetik@hs01.kep.tr e-mail address with a secure electronic signature. You can also send the application form to info@maa-althabab.com by using the e-mail address previously notified to us by you and registered in the Maison De Maa Kozmetik San. ve Dış Tic. Ltd. Şti system. Our company will finalize the request free of charge as soon as possible and within thirty (30) days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, we will charge the fee in the tariff determined by the Personal Data Protection Board.
In case of any change in the personal data owner's data,can report their correct personal information to the Company address or to the e-mail address info@maa-althahab.com.
The Company reserves the right to make changes to this Disclosure Statement in the event of a change in the Law or the methods determined by the Personal Data Protection Board.
For detailed information about the Company's data processing policy, you can review the "Personal Data Protection and Processing Policy" located at www.maa-althahab.com.
ANNEX-1
Application Form for Information Acquisition within the Scope of KVKK
As the Maa Althahab brand, it attaches great importance to the privacy rights of its customers and implements the Privacy Policy explained below.
The following items include topics such as what customer information is collected on our site, for what purposes it is collected, in what ways it is used, how you can change this information, and your preferences regarding communication with you.
If you become a member of our website and e-bulletin, we will need some of your personal information such as your name, surname, e-mail address, phone number, gender, date of birth, personal interests, invoice and delivery addresses in order to provide you with better service. This information is used to carry out and complete order processes and to communicate with our customers. Your credit card information requested on the payment page is not kept on our website or on the servers of the companies that provide services to it in any way in order to keep the security of our valued customers who shop on the site at the highest level. In this way, all transactions for payment are carried out between the bank and your computer (your tablet or mobile device) via the www.maa-althahab.com interface.
In addition to these; It is used to provide information about products, services, campaigns and promotions, to better understand our customers' shopping preferences, to conduct trend and statistical analyses, and to strengthen the security of the site.
You can always send your membership / personal information and communication preferences or requests on any subject by sending an e-mail to info@maa-althahab.com. For additional information, you can reach us via our Customer Services line at (+90) 212 488 68 30.
- Subject
The subject of this KVKK Information Statement is to specify the principles regarding the processing of all personal data belonging to all persons affiliated with the Company by Maison De Maa Kozmetik Sanayi ve Dış Ticaret Limited Şirketi (“Company”) in accordance with the Law on the Protection of Personal Data No. 6698 (“Law”). Accordingly, the Company, which is the data controller in accordance with Article 3 of the Law, informs and enlightens personal data owners (employees, job candidates, customers, suppliers, consultants, business partners, shareholders, company officials, company representatives, persons with whom contractual relations are established and employees of these persons, persons who are the addressees of all kinds of legal transactions, visitors and real or legal persons with whom they communicate for any reason) with this KVKK Information Statement in accordance with Article 10 of the Law. Personal data and special personal data processed by the Company are stored securely in a physical or electronic environment for a period appropriate for the purpose of processing. The Company declares that it acts in accordance with the obligations stipulated in all relevant legislation, especially KVKK, regarding the protection of personal data within the scope of the activities in question.
As Maison De Maa Kozmetik Sanayi ve Dış Ticaret Limited Şirketi, we attach importance to the security of your personal data. With this awareness, we show great sensitivity to the processing and preservation of all personal data belonging to you in the best possible way and with the utmost care. With the awareness of this responsibility, we process your personal data within the framework specified below, as the Data Controller, within the scope of the Law on the Protection of Personal Data No. 6698 (hereinafter referred to as the Law) and the relevant legislation.
Within the scope of the Law, data processing refers to all kinds of operations performed on data, such as obtaining, recording, storing, updating, classifying, sharing with third parties permitted by the legislation, or transferring your personal data, through fully or partially automatic means or non-automatic means provided that it is part of any data recording system.
- Data Controller
Data controller refers to the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system. The data controller regarding your personal data is Maison De Maa Kozmetik Sanayi ve Dış Ticaret Limited Şirketi, registered with the Istanbul Chamber of Commerce with the Trade Registry Number 934018 and İkitelli Tax Office, with the Tax Number 6090508296, with the Mersis Number 0609050829600016 and operating at the Başak Mahallesi Yunus Emre Caddesi Başak Pazar No:17 Başakşehir/İstanbul center. The procedures and principles stipulated in Law No. 6698 and other laws are taken into consideration in the processing of your personal data. We process your personal data primarily within the framework of our authorities and obligations arising from the legislation, primarily the Turkish Commercial Code No. 6102, the Consumer Protection Law No. 6502, the Tax Procedure Law No. 213, in accordance with the law and the rules of honesty, for specific, clear, legitimate purposes and with your consent.
- Collection, Processing and Purposes of Processing of Personal Data
In order to provide you with high standards of service and to process your personal data for the purpose specified below, depending on the nature of the service provided,
- To provide the products and services we offer as a company within the determined legal framework, to fulfill our company's responsibilities arising from the contract and the law completely and correctly,
- To improve the services we offer to you; to announce our products and campaigns, to plan, execute and manage management and communication activities and strategies correctly, to improve the services offered on the website and to fix errors on the website, to contact you when you submit your requests and complaints, to manage your requests and complaints, to increase the service quality,
- To ensure that the necessary work is carried out by our business units to make you benefit from the products and services offered by our company, to customize the products and services according to your tastes, usage habits and needs and to recommend them to you,
- To ensure the legal and commercial security of the persons who have a business relationship with our company (administrative operations carried out by our company for communication),
To ensure the physical security and control of the company's locations, customer evaluation/complaint management processes, reputation research processes, event management, legal compliance process, audit, financialprocesses, event management, legal compliance process, audit, financial affairs etc.),
To ensure that third parties perform their technical, logistical and similar functions on our behalf as service providers and to ensure that your payments are made quickly and securely when necessary
To determine and implement our Company's commercial and business strategies and to ensure that our Company's human resources policies are carried out
To ensure that our Company's training activities continue
We obtain your personal data verbally, in writing, visually or electronically within the scope of the contract or from physical locations and similar channels within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Personal Data Protection Law. In this context, the main general and special personal data obtained within the scope of all activities carried out by our company and for the above-mentioned purpose are listed below;
Your identity data such as your name, surname, Turkish identity number, passport number or temporary Turkish identity number if you are not a Turkish citizen, place and date of birth, marital status, gender information and the photocopy of your Turkish identity card or driver's license that you have submitted,
Your contact data such as your address, telephone number, e-mail address,
Your financial data such as your bank account number and IBAN number,
Your answers and comments that you share for the purpose of evaluating our services,
Closed circuit camera system image,
Vehicle license plate information,
Navigation information obtained during the use of our website, IP address, browser information and your location data that you have provided with your own consent. Your personal data listed above and your special personal data may be processed within the scope of the personal data processing conditions specified in Articles 5 and 6 of the Personal Data Protection Law and the purposes listed below:
Sharing the requested information with the Social Security Institution, the Police and other public institutions and organizations in accordance with the relevant legislation,
Fulfilling legal and regulatory requirements,
Confirming your identity by the Sales and Support departments,
Planning and managing the internal operations of the institution by the Company Management,
Providing training to our employees by the Human Resources department,
Monitoring and preventing abuse and unauthorized transactions by the Audit and Information Systems departments,
Performing risk management and quality development activities by the Information Systems departments,
Invoicing by the Financial Affairs departments in return for our services,
Confirming your relationship with institutions that have agreements with our company by the Financial Affairs departments,
Responding to all your questions and complaints regarding our services by the Company Management, Support and Sales departments,
Providing all necessary technical and administrative services within the scope of data security of our company's systems and applications by the Company Management, Information Systems departments taking measures,
Marketing, Media and Communication, Designing and communicating special content, tangible and intangible benefits on web and mobile channels,
Measuring, increasing and researching customer satisfaction by the relevant departments of our company,
Performing education and training activities by educational institutions that the institution cooperates with. The above-mentioned “Personal and Special Data” may be stored in physical and electronic archives within Maa Althahab and external service providers with great care and in compliance with the provisions of the legislation.
Transfer of Personal Data and Purposes of Transfer
Your personal data is stored in our database available in electronic environment. The personal data you share with us is shared with third parties only in necessary cases, such as sharing your address with the cargo company for the delivery of your order, and only with your approval. Your personal data may be shared with our business partners, suppliers, company officials, shareholders, legally authorized public institutions and private individuals within the framework of the Personal Data Protection Law No. 6698, other legislation provisions and for the purposes explained above, and within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Personal Data Protection Law below.
Ministry of Health, sub-units affiliated to the ministry and family medicine centers,
Private insurance companies (health, retirement, life insurance and similar),
Social Security Institution,
General Directorate of Security and other law enforcement agencies,
General Directorate of Population,
Judicial authorities,
Your authorized legal representatives,
Third parties from whom we receive consultancy, including lawyers, tax consultants and auditors we work,
Regulatory and supervisory institutions and official authorities,
With your employer,
Our suppliers, support service providers, archive service providers and business partners whose services we benefit from or with whom we cooperate(For more detailed information, you can contact our company in writing and get information.)
Transfer of Personal Data Abroad
The company can transfer personal data abroad at any time by obtaining the explicit consent of the personal data owner. In the absence of the explicit consent of the personal data owner, personal data can be transferred abroad if the conditions for processing data without explicit consent, as stipulated in Article 5, paragraph 2 and Article 6, paragraph 3 of the Law, are met. In this case, personal data can only be transferred to persons and organizations resident in foreign countries after the Personal Data Protection Board has determined and declared that foreign countries have sufficient protection, in accordance with Article 9 of the Law; and for countries where it has been determined and declared that there is no sufficient protection, it can be transferred only to the cases where the data controllers in Turkey and the relevant foreign country have undertaken in writing to provide sufficient protection and the Board's permission can be obtained for the relevant transfer.
- Personal Data Collection Method and Legal Reason
Personal data is collected by our Company or real or legal persons processing data on behalf of the Company through the website, contracts made with the personal data owner, information forms, surveys, social media applications, call centers, participation in training, seminars, fairs and similar environments organized by the Company, parties with whom the Company has a business relationship and/or receives services complementary to its activities, contracted organizations, offices and other physical environments where it can communicate and other similar channels, including but not limited to those listed here, and is collected with the express consent of the personal data owner, where possible.
Personal data is obtained in all business processes for the Company to continue its commercial life and to fulfill its obligations arising from the law completely and correctly, and personal data collected in this direction is processed in accordance with the general principles listed in Article 4 of the Law, based on the data processing conditions specified in Article 5 of the Law.
Rights of the Personal Data Owner
The personal data owner has the following rights listed in Article 11 of the Law:
- To learn whether personal data is processed,
- To request information about personal data if it has been processed,
- To access and request personal health data,
- To learn the purpose of processing personal data and whether it is used in accordance with its purpose,
- To know the third parties to whom personal data is transferred domestically or abroad,
- To request correction of personal data if it is processed incompletely or incorrectly,
- To request deletion or destruction of personal data,
- To request notification of the third parties to whom personal data is transferred regarding the correction of personal data if it is processed incompletely or incorrectly and/or the deletion or destruction of personal data,
- To object to the emergence of a result against the person by analyzing the processed data exclusively through automated systems,
- To request compensation for the damages incurred due to the unlawful processing of personal data.
- Data Security and Right to Apply
Your personal data is meticulously protected within technical and administrative possibilities and necessary security measures are provided at a level appropriate to possible risks, also considering technological possibilities. In accordance with Article 13, paragraph 1 of the PDP Law, you can submit your request regarding the use of your rights specified above to our Company in writing or by other methods determined by the Personal Data Protection Board. In order to use your rights specified above, you can submit your request including the necessary information identifying your identity and explanations regarding the right you request to use among the rights specified in Article 11 of the PDP Law, and you can submit your requests within the scope of the Law by filling out the “Application Form Pursuant to the Personal Data Protection Law” on the www.maa-althahab.com website and deliver your request by hand with a wet signature to Başak Mah. Yunus Emre Cad. Başak Pazar No:17 Başakşehir/İstanbul or send it to the maisondemaakozmetik@hs01.kep.tr e-mail address with a secure electronic signature. You can also send the application form to info@maa-althabab.com by using the e-mail address previously notified to us by you and registered in the Maison De Maa Kozmetik San. ve Dış Tic. Ltd. Şti system. Our company will finalize the request free of charge as soon as possible and within thirty (30) days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, we will charge the fee in the tariff determined by the Personal Data Protection Board.
- Updating Information
In case of any change in the personal data owner's data,can report their correct personal information to the Company address or to the e-mail address info@maa-althahab.com.
- Changes
The Company reserves the right to make changes to this Disclosure Statement in the event of a change in the Law or the methods determined by the Personal Data Protection Board.
- Other
For detailed information about the Company's data processing policy, you can review the "Personal Data Protection and Processing Policy" located at www.maa-althahab.com.
ANNEX-1
Application Form for Information Acquisition within the Scope of KVKK
Privacy Policy
As the Maa Althahab brand, it attaches great importance to the privacy rights of its customers and implements the Privacy Policy explained below.
The following items include topics such as what customer information is collected on our site, for what purposes it is collected, in what ways it is used, how you can change this information, and your preferences regarding communication with you.
If you become a member of our website and e-bulletin, we will need some of your personal information such as your name, surname, e-mail address, phone number, gender, date of birth, personal interests, invoice and delivery addresses in order to provide you with better service. This information is used to carry out and complete order processes and to communicate with our customers. Your credit card information requested on the payment page is not kept on our website or on the servers of the companies that provide services to it in any way in order to keep the security of our valued customers who shop on the site at the highest level. In this way, all transactions for payment are carried out between the bank and your computer (your tablet or mobile device) via the www.maa-althahab.com interface.
In addition to these; It is used to provide information about products, services, campaigns and promotions, to better understand our customers' shopping preferences, to conduct trend and statistical analyses, and to strengthen the security of the site.
You can always send your membership / personal information and communication preferences or requests on any subject by sending an e-mail to info@maa-althahab.com. For additional information, you can reach us via our Customer Services line at (+90) 212 488 68 30.