GPDR

CLARIFICATION TEXT ON THE LAW ON PERSONAL DATA PROTECTION

As T-Bioteknoloji Laboratuvar Estetik Medikal Kozmetik San. Tic. Ltd. Şti. we show maximum sensitivity to the security of your personal data. With this awareness, as a Company, we attach great importance to the processing and preservation of all kinds of personal data belonging to all persons related to the Company in accordance with the Personal Data Protection Law No. 6698 ("PDPL"). With the full realization of this responsibility, we process your personal data in the capacity of "Data Controller" defined within the scope of PDPL, as explained below and within the limits ordered by the legislation.

In this clarification text;

Personal Data: Any information relating to an identified or identifiable natural person,

• Personal Data Protection Law ("PDPL"):Law No. 6698 on the Protection of Personal Data, which entered into force as published in the Official Gazette on 04.2016,
• Data Controller: The natural or legal entity who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system,
• Data Processor: Refers to the natural or legal entity who processes personal data on behalf of the Data Controller based on the authorization granted by the Data Controller.

Data Controller:

Pursuant to PDPL, your personal data that you share with the capacity of interlocutor, supplier, customer, employee, intern, visitor, etc. will be evaluated by the legal entity T-Biyoteknoloji Laboratuvar Estetik Medikal Kozmetik San. Tic. Ltd. Şti., which is determined as the data controller, within the scope specified below.

Collection and Processing of Personal Data and Business Purposes

Although your personal data may vary depending on the relationship between you and our company; It may be collected verbally, in writing or electronically by automatic or non-automatic methods, our company units, website, social media channels, mobile applications and similar means. Your personal data will be created and updated and processed as long as your relationship with our Company continues.

Your personal data collected will be processed in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the PDPL in order to ensure that the necessary work is carried out by the relevant business units for you to benefit from the services of our company, to ensure the legal and commercial security of our company and the persons who have a business relationship with our company, to determine and implement the strategies of our company and to ensure the execution of our company's human resources policies,

The data will be processed in accordance with the law and good faith,

• Accurately and up to date when needed,
• For specific, explicit and legitimate purposes,
• Relevant, limited and proportionate to the purpose for which they are processed,
• in accordance with the rules of retention for the period stipulated in the relevant legislation or required for the purpose for which they are processed.

• To whom and for what purpose the processed personal data can be transferred:

Your collected personal data may be transferred to our business partners, suppliers, legally authorized public institutions and private persons within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the PDPL for the purposes of carrying out the necessary work by the relevant business units for you to benefit from the services of our company, ensuring the legal and commercial security of our company and the persons who have a business relationship with our company, determining and implementing the commercial and business strategies of our company and ensuring the execution of our company's human resources policies.

• Method and Legal Grounds for Collecting Personal Data:

Recording your personal data by T-Biyoteknoloji Laboratuvar Estetik Medikal Kozmetik San. Tic. Ltd. Şti dealers, affiliates, suppliers or business partners in all kinds of verbal, written or electronic media by T-Biyoteknoloji dealers, affiliates, suppliers or business partners, in order to provide our services in line with the above-mentioned purposes and to fulfill our company's obligations arising from the contract and the law in a complete and accurate manner, and recording the information you verbally declare to the company employees verbally by the security cameras in our workplace / factory and affiliated units in our systems by these persons, Recording the information you share regarding the transactions you make through the Factory, Workplace Center, Site or Mobile Application in our systems, recording the data generated / obtained from the use of your fixed-mobile internet and communication devices and / or mobile applications in various environments and places in our systems, You become a member of the site or any transaction on the site and mobile application, filling out surveys, registration and recording of behavioral transactions in our systems, recording the redirection process from the websites of our business partners to the site and mobile application, with cookies and other similar technologies working on the site or mobile application as explained in detail in the cookie policy, call center, mobile application, site, our e-mail addresses, We collect your personal data by automatic methods such as recording your requests and complaints that you have communicated to us during mutual communication via social media and other communication channels, recording, updating and enriching your conversations with our company employees, or by non-automatic methods such as recording information/documents about you from official institutions, organizations and judicial/administrative authorities. Your personal data collected for this legal reason may also be processed and transferred for the purposes specified in Articles (1) and (2) of this text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK.

For the legal reasons that data processing is necessary for the establishment and performance of the contract regarding all kinds of transaction processes on the site, factory, sales offices and mobile application, for the legal reasons that data processing is mandatory for the fulfillment of the legal obligation and the legitimate interests of the data controller; for the legal reason of fulfilling the legal obligation regarding our retention obligations arising from the legislation; the legal grounds that "data processing is mandatory for the legitimate interests of the data controller" and that data processing and transfer is mandatory for the establishment, exercise or protection of rights; the legal grounds that data processing is necessary for the establishment and performance of the contract and explicit consent for site membership processes; and the explicit consent you give in commercial communication processes. You can withdraw your explicit consent at any time and without any justification and terminate personal data processing activities based on explicit consent.

• Rights of the Personal Data Owner listed in Article 11 of the PDPL:

As personal data owners, if you submit your requests regarding your rights to our company by the methods set out below, our company will finalize your request free of charge within 30 days at the latest, depending on the nature of the request. However, if a fee is stipulated by the Personal Data Protection Board, the fee in the tariff determined by our company will be charged. In this context, personal data owners have the right to demand compensation for the damages;

• Learn whether personal data is being processed,
• Request information if personal data has been processed,
• To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom personal data are transferred domestically and abroad,
• To request correction of personal data in case of incomplete or incorrect processing,
• To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the PDPL,
• To request notification of the transactions made pursuant to subparagraphs (e) and (f) to third parties to whom personal data are transferred,
• To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,
• Damage due to unlawful processing of personal data

Pursuant to paragraph 1 of Article 13 of the PDPL, you may submit your request to our company in writing or by other methods determined by the Personal Data Protection Board. Since the Personal Data Protection Board has not determined any method at this stage, your application must be submitted to our company in writing in accordance with the PDPL. In this context, the channels and procedures to submit your written application to our company within the scope of Article 11 of the PDPL are explained below.

To exercise your rights specified above and to use the necessary information to identify you, you may submit your request, which includes your explanations regarding the right you wish to exercise from among the rights specified in Article 11 of the KVKK, in a clear and understandable manner, and by attaching documents that identify you and your address, in writing and with wet signature, by hand, by mail or through a notary. tlab.com.tr or Üçevler Mah. Niltim 70. Street İbrahim Yazıcı Plaza-1 No:1/22D 16270 Nilüfer/BURSA.