KVKK Illumination Text

Clarification Text on the Processing of Personal Data

Data Controller

Hande Kaygusuzer . (referred to as “ Chime of Smile ” or “Company”)

As Chime of Smile , we have published this Personal Data Processing Enlightenment Text (“Clarification Text”) in order to enlighten the data owner regarding the processing, storage and transfer of your personal data within the framework of our activities arising from the Law on the Protection of Personal Data No. 6698 (“KVKK”). ”) we have prepared.

In addition to these, detailed information about the cookies and SDKs used in case you visit our website, mobile site and/or mobile application is included in the Cookie Policy. Personal data processed through these are explained in this Clarification Text.

The Clarification Text will be effective as of the date of publication by Chime of Smile . Chime of Smile can always make changes to the Clarification Text if necessary. Changes to be made become effective immediately after the Clarification Text is published at https:// chimeofsmile aromatherapy.net/KVKK-aydinletme-metni.

one- Contacts

1.1- Customers

DATA CATEGORIES

1.1.1- Credentials

Processed Personal Data:

Name – Surname, Date of Birth, Gender, TR Identity Number

Personal Data Processing Purposes:

Execution of Finance and Accounting Affairs, Execution of Communication Activities; Execution of Company / Product / Service Loyalty Processes; Execution of Activities in Compliance with the Legislation; Follow-up and Execution of Legal Affairs; Execution of Business Continuity Activities; Execution and Supervision of Business Activities; Execution of Goods / Services Sales Processes; Execution of Goods / Services After-Sales Support Services; Execution of Customer Relationship Management Processes; Execution of Activities for Customer Satisfaction; Execution of Advertising, Campaign and Promotion Processes; Execution of Storage and Archive Activities; Execution of Contract and Membership Processes; Follow-up of Requests / Complaints; Planning and Execution of Commercial and/or Business Strategies; Conducting the Necessary Works by Business Units and Execution of Related Business Processes to Benefit from the Offered Products and Services; Providing Information to Authorized Persons, Institutions and Organizations

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

It is necessary to process the personal data of the parties of the contract, provided that it is directly related to the establishment or performance of a contract,

Provided that it is mandatory for the data controller to fulfill its legal obligations and does not harm the fundamental rights and freedoms of the data subject, data processing is mandatory for the legitimate interests of the data controller, based on legal reasons. For cases not covered by the above purposes, your personal data is processed based on your explicit consent, the details of which are specified in the Consent Text.

Personal Data Collection Methods:

The above-mentioned personal data is collected through membership forms on our website, fields in the content of my account page that can be filled depending on your preference, your requests and applications, contracts, campaigns and third-party authentication systems (Ex: Google Login, Facebook Login, etc.).

1.1.2- Contact Information

Processed Personal Data:

E-Mail Address, Billing & Delivery Addresses, Mobile Number

Personal Data Processing Purposes:

Execution of Finance and Accounting Affairs; Execution of Communication Activities; Conducting Business Activities; Execution of Company / Product / Service Loyalty Processes; Follow-up and Execution of Legal Affairs; Execution of Goods/Service Sales Processes; Execution of Goods / Services After-Sales Support Services; Execution of Customer Relationship Management Processes; Execution of Activities for Customer Satisfaction; Conducting Marketing Analysis Studies; Execution of Advertising, Campaign and Promotion Processes; Follow-up of Requests / Complaints; Execution of Marketing Processes of Products / Services; Execution of Storage and Archive Processes; Providing Information to Authorized Persons, Institutions and Organizations

Legal Reasons for Personal Data Processing:

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

Provided that it is clearly stipulated in the laws, Provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract, It is necessary for the data controller to fulfill its legal obligations, and the data is for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. It is processed on the basis of legal reasons. For cases not covered by the above purposes, your personal data is processed based on your explicit consent, the details of which are specified in the Consent Text.

Personal Data Collection Methods:

The above-mentioned personal data can be filled in the content of our website, especially on the membership pages, agreements, my account page, your requests and applications, contracts, campaigns and third-party authentication systems (Ex: Google Login, Facebook Login, etc.). ) are collected via

1.1.3- Legal Transaction Information

Processed Personal Data:

In Case of Dispute, Information in the Case File, Warnings, Correspondence with Judicial and Administrative Authorities

Personal Data Processing Purposes:

Follow-up and Execution of Legal Affairs; Execution and Supervision of Business Activities; Providing Information to Authorized Persons, Institutions and Organizations; Execution of Activities in Compliance with the Legislation; Execution of Storage and Archive Activities; Execution of Risk Management Processes; Execution of Contract Processes; Follow-up of Requests/Complaints; Ensuring the Security of Data Controller Operations

Legal Reasons for Personal Data Processing:

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

It is processed on the basis of legal grounds that it is mandatory for the data controller to fulfill its legal obligations, Data processing is mandatory for the establishment, exercise or protection of a right, and Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Personal Data Collection Methods:

The above-mentioned personal data are collected through official letters and other printed / electronic documents from judicial and administrative authorities.

1.1.4- Customer Transaction Information

Processed Personal Data:

Billing Information, Request Information, Order Information, Customer Comments

Personal Data Processing Purposes:

Execution of Supply Chain Management Processes; Execution and Supervision of Business Activities; Providing Information to Authorized Persons, Institutions and Organizations; Execution of Activities in Compliance with the Legislation; Execution of Finance and Accounting Affairs; Execution of Storage and Archive Activities; Execution of Contract Processes; Execution of Goods / Services Sales Processes; Execution of Goods / Services After-Sales Support Services; Execution of Customer Relationship Management Processes; Execution of Activities for Customer Satisfaction; Conducting Marketing Analysis Studies; Execution of Advertising, Campaign and Promotion Processes; Follow-up of Requests / Complaints, Execution of Marketing Processes of Products / Services

Legal Reasons for Personal Data Processing:

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

Personal Data Collection Methods:

The above-mentioned personal data are collected through printed/electronic forms, call center records, e-mails and SAP programs.

1.1.5- Transaction Security Information

Processed Personal Data:

IP Address Information, Website Login and Exit Information, Username Information, Password Information, Traffic Data (Connection Time / Duration etc.)

Personal Data Processing Purposes:

Execution of Information Security Processes; Conducting Audit / Ethical Activities; Execution and Supervision of Business Activities; Execution of Storage and Archive Activities; Ensuring the Security of Data Controller Operations; Providing Information to Authorized Persons, Institutions and Organizations; Execution of Activities in Compliance with the Legislation; Follow-up and Execution of Legal Affairs; Execution of Goods / Services Sales Processes; Follow-up of Requests / Complaints

Legal Reasons for Personal Data Processing:

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

It is processed on the basis of legal reasons, provided that it is expressly stipulated in the law, that it is mandatory for the data controller to fulfill its legal obligation, and that data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data controller. For cases not covered by the above purposes, your personal data is processed based on your explicit consent, the details of which are specified in the Consent Text.

Personal Data Collection Methods:

The personal data mentioned above are collected through information security systems and electronic devices.

1.1.6- Financial Information

Processed Personal Data:

Encrypted Credit Card Information, Bank Account / IBAN Number Information

Personal Data Processing Purposes:

Execution of Activities in Compliance with the Legislation; Follow-up and Execution of Legal Affairs; Execution of Finance and Accounting Affairs; Execution of Return Processes; Execution and Supervision of Business Activities; Execution of Goods / Services Sales Processes; Execution of Storage and Archive Activities; Execution of Risk Management Processes; Execution of Contract Processes; Providing Information to Authorized Persons, Institutions and Organizations

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

Provided that it is directly related to the establishment or performance of a contract, the processing of personal data belonging to the parties of the contract is necessary and is processed on the basis of legal reasons for the Data controller to fulfill its legal obligation.

Personal Data Collection Methods:

The above-mentioned personal data are collected through printed and electronic forms, e-mails and requests and messages on the website.

1.1.7- Audio and Visual Recording Information

Processed Personal Data:

Call Center Audio Recordings

Personal Data Processing Purposes:

Execution of Company Product and Service Engagement Processes; Execution of Customer Relationship Management Processes; Execution of Activities for Customer Satisfaction; Execution of Goods / Services After-Sales Support Services; Execution of Storage and Archive Activities; Follow-up of Requests / Complaints; Execution of Marketing Processes of Products / Services; Execution of Customer Relationship Management Processes; Conducting Marketing Analysis Studies; Providing Information to Authorized Persons, Institutions and Organizations

Legal Reasons for Personal Data Processing:

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

Personal Data Collection Methods:

The above-mentioned personal data is collected electronically during calls to our call center.

1.1.8- Location Information

Processed Personal Data:

Location Information

Personal Data Processing Purposes:

Execution of Customer Relationship Management Processes; Conducting Marketing Analysis Studies; Execution of Advertising / Campaign / Promotion Processes; Execution of Activities for Customer Satisfaction; Execution of Marketing Processes of Products / Services; Execution of Goods / Services Sales Processes; Execution of Goods / Services Production and Operation Processes

Legal Reasons for Personal Data Processing:

Your personal data within this scope are processed by Chime of Smile for the realization of the above-mentioned purposes, based on the legal reason of the Explicit Consent, which is specified in the relevant legislation and Article 5 of the KVKK, the details of which can be accessed from the Consent Text.

Personal Data Collection Methods:

The above-mentioned personal data is collected according to your preference in the internet browser you use and the mobile application of our Company.

TRANSFERRING PERSONAL DATA

Personal data belonging to customers are only available to the extent necessary for the realization of the relevant purpose, by following the rules in Article 8 titled "Transfer of Personal Data" and/or Article 9 titled "Transferring Personal Data Abroad" and by taking the necessary technical and administrative measures; To our affiliates and subsidiaries limited to the purposes listed above, Seller of the purchased product (for the delivery of the product), cargo companies (for the delivery of the product), banks (for the payment of the product) and (delivery) within the scope of the agreements between us for the above-mentioned purposes, in accordance with the legislation. It can be transferred to authorized persons and official institutions in accordance with legal regulations and legislation in order to fulfill our legal obligations, can be recorded in our programs and/or systems provided/available to us by our infrastructure suppliers.

1.2-Online Users

DATA CATEGORIES

1.2.1- Transaction Security Information

Processed Personal Data:

IP Address Information, Website Login Information, Password and Password Information Computer Screen Records, Device IMEI Number, Device MAC Address

Personal Data Processing Purposes:

Execution of Information Security Processes; Execution of Activities in Compliance with the Legislation; Managing Customer Relationship Management Processes; Follow-up of Requests and Complaints; Providing Information to Authorized Persons, Institutions and Organizations

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

Personal Data Collection Methods:

Your personal data mentioned above are collected through internet applications, information systems and electronic devices (telecommunications infrastructure, computers and telephones, etc.) and other documents declared by you.

TRANSFERRING PERSONAL DATA

Personal data belonging to Online Users, in accordance with the rules in Article 8 titled "Transfer of Personal Data" and/or Article 9 titled "Transfer of Personal Data Abroad" and by taking the necessary technical and administrative measures, only to the extent necessary for the realization of the relevant purpose;

In order to fulfill our legal obligations, it can be transferred to authorized persons and official institutions in accordance with legal regulations and legislation, and can be recorded in our programs and/or systems provided / made available to us by our infrastructure suppliers in the field of Technology.

1.2.2- Employee / Interns / Shareholders

Detailed information about the processed personal data of employees, interns and shareholders of Chime of Smile is published in a way that only they can access, and they have been given detailed information on this subject.

1.2.3- Employee Candidates

DATA CATEGORIES

1.2.3.1- Credentials

Processed Personal Data:

Name – Surname, Marital Status, Date of Birth, Place of Birth

Personal Data Processing Purposes:

Execution of Selection, Placement and Application Processes of Employee Candidates; Planning Human Resources Policies and Processes; Conducting Interview Processes; Conducting Business Activities; Execution of Contract Processes; Execution of Communication Activities

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

Provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract and the data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Personal Data Collection Methods:

The personal data mentioned above are collected via CVs sent to our Company via e-mail, Private Employment Offices (İŞKUR, Kariyer.net etc.) and other channels (LinkedIn etc.).

1.2.3.2- Contact Information

Processed Personal Data:

E-Mail Address, Contact Address, Mobile Number

Personal Data Processing Purposes:

Execution of Selection, Placement and Application Processes of Employee Candidates; Execution of Communication Activities; Planning Human Resources Policies and Processes; Conducting Interview Processes; Conducting Business Activities

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

Personal Data Collection Methods:

The personal data mentioned above are collected via CVs sent to our Company via e-mail, Private Employment Offices (İŞKUR, Kariyer.net etc.) and other channels (LinkedIn etc.).

1.2.3.3- Personal Information

Processed Personal Data:

Military Status, Reference Information, CV Information

Personal Data Processing Purposes:

Execution of Selection, Placement and Application Processes of Employee Candidates; Conducting Business Activities; Execution of Contract Processes; Execution of Wage Policy; Planning of Human Resources Policies and Processes

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

Provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract, the data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, and Based on the legal grounds of Explicit Consent for the reference information in the CV. is processed.

Personal Data Collection Methods:

The personal data mentioned above are collected via CVs sent to our Company via e-mail, Private Employment Offices (İŞKUR, Kariyer.net etc.) and other channels (LinkedIn etc.).

1.2.3.4- Professional Experience Information

Processed Personal Data:

Education Background and Details, Work History and Details, Diploma Information, Foreign Language Knowledge, Computer Usage Information, Position/Title Information

Personal Data Processing Purposes:

Execution of Selection, Placement and Application Processes of Employee Candidates; Planning Human Resources Policies and Processes; Conducting Business Activities; Execution of Contract Processes; Execution of Wage Policy

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

Personal Data Collection Methods:

The personal data mentioned above are collected through CVs sent to our Company via e-mail, Private Employment Offices (İŞKUR, Kariyer.net etc.), other channels (LinkedIn etc.) and your statements.

1.2.3.5- Health Information

Processed Personal Data:

Disability Status

Personal Data Processing Purposes:

Execution of Selection, Placement and Application Processes of Employee Candidates; Conducting Audit and Ethics Activities; Planning Human Resources Policies and Processes; Conducting Business Activities

Legal Reasons for Personal Data Processing

Your personal data within this scope are required by Chime of Smile in order to achieve the above-mentioned purposes, as specified in the relevant legislation and Article 6 of the KVKK;

Personal data related to health and sexual life may only be processed without the explicit consent of the person concerned, for the purposes of protecting public health, performing preventive medicine, medical diagnosis, treatment and care services, planning and managing health services and financing, by persons or authorized institutions and organizations under the obligation of secrecy. processed on a legal basis. Except for the limitations set in Article 6 of the KVKK, the processing of these data will only take place based on your explicit consent.

Personal Data Collection Methods:

The personal data mentioned above are collected through CVs sent to our Company via e-mail, Private Employment Offices (İŞKUR, Kariyer.net etc.), other channels (LinkedIn etc.) and your statements.

TRANSFERRING PERSONAL DATA

Identity, contact, personnel and professional experience information of employee candidates is subject to the permission of the employee candidates in this regard, in accordance with the rules in Article 8 titled “Transfer of Personal Data” or Article 9 titled “Transfer of Personal Data Abroad” and in accordance with the necessary technical information. and by taking administrative measures only to the extent necessary for the realization of the relevant purpose;

It can be transferred to affiliates and subsidiaries and recorded in our programs and/or systems provided / made available to us by our infrastructure suppliers in the Technology field.

1.2.4-Partner Officials and Employees

DATA CATEGORIES

1.2.4.1- Credentials

Processed Personal Data:

Name – Surname, TR Identity Number, Copy of ID

Personal Data Processing Purposes:

Execution of Communication Activities; Execution and Supervision of Business Activities; Planning and Execution of Commercial and/or Business Strategies; Follow-up of Requests / Complaints; Providing Information to Authorized Persons, Institutions and Organizations; Execution of Activities in Compliance with the Legislation; Execution of Contract Processes

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

It is necessary to process the personal data of the parties of the contract, provided that it is directly related to the establishment or performance of a contract,

Personal Data Collection Methods:

The personal data mentioned above are collected through business cards, contracts, face-to-face meetings, electronic forms and calls to our call center.

1.2.4.2- Contact Information

Processed Personal Data:

E-Mail Address, Mobile Number, Address

Personal Data Processing Purposes:

Legal Reasons for Personal Data Processing:

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

It is necessary to process the personal data of the parties of the contract, provided that it is directly related to the establishment or performance of a contract,

Personal Data Collection Methods:

The personal data mentioned above are collected through business cards, contracts and face-to-face interviews.

1.2.4.3- Transaction Information

Processed Personal Data:

Request Information

Personal Data Processing Purposes:

Execution and Supervision of Business Activities; Providing Information to Authorized Persons, Institutions and Organizations; Execution of Activities in Compliance with the Legislation; Execution of Finance and Accounting Affairs; Execution of Storage and Archive Activities; Execution of Contract Processes

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

It is processed on the basis of legal reasons, provided that it is expressly stipulated in the laws, that it is directly related to the establishment or performance of a contract, that the processing of personal data belonging to the parties of the contract is necessary and that it is mandatory for the data controller to fulfill its legal obligation.

Personal Data Collection Methods:

The above-mentioned personal data are collected through printed / electronic forms, call center records, e-mails, SAP programs.

1.2.4.4- Financial Information

Processed Personal Data:

Bank Account / IBAN Number Information, Billing Information Request Information

Personal Data Processing Purposes:

Execution of Finance and Accounting Affairs; Execution and Supervision of Business Activities; Execution of Activities in Compliance with the Legislation; Providing Information to Authorized Persons, Institutions and Organizations

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

Personal Data Collection Methods:

The above-mentioned personal data are collected through electronic and printed forms.

1.2.4.5- Legal Transaction Information

Processed Personal Data:

In Case of Dispute, Information in the Case File, Warnings, Correspondence with Judicial and Administrative Authorities

Personal Data Processing Purposes:

Legal Reasons for Personal Data Processing:

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

It is processed on the basis of legal reasons that it is clearly stipulated in the laws, that it is mandatory for the data controller to fulfill its legal obligation, and that data processing is mandatory for the establishment, exercise or protection of a right.

Personal Data Collection Methods:

The above-mentioned personal data are collected through official letters and other printed / electronic documents from judicial and administrative authorities.

1.2.4.6- Risk Management Information

Processed Personal Data:

Information Processed for Managing Commercial Risks

Personal Data Processing Purposes:

Execution and Supervision of Business Activities; Execution of Storage and Archive Activities; Execution of Risk Management Processes; Execution of Contract Processes; Follow-up of Requests / Complaints; Carrying out Internal Audit Activities; Conducting Intelligence Activities

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

Personal Data Collection Methods:

The above-mentioned personal data are collected during participation in a meeting or event, during the sales process, through contracts and documents declared by the person concerned.

1.2.4.7- Audio and Visual Recording Information

Processed Personal Data:

Call Center Audio Recordings

Personal Data Processing Purposes:

Execution of Information Security Processes; Providing Information to Authorized Persons, Institutions and Organizations; Execution of Activities in Compliance with the Legislation; Conducting Audit / Ethical Activities; Execution of Goods / Services Sales Processes; Execution of Advertising / Campaign / Promotion Processes; Execution of Storage and Archive Activities; Follow-up of Requests / Complaints; Execution of Marketing Processes of Products / Services

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

It is clearly stipulated in the law, It is mandatory for the data controller to fulfill its legal obligation, Data processing is mandatory for the establishment, exercise or protection of a right, Provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract, and Provided that it does not harm the rights and freedoms of the data controller, the data processing is mandatory for the legitimate interests of the data controller, based on legal reasons.

Personal Data Collection Methods:

The above-mentioned personal data is collected electronically during calls to our call center.

TRANSFERRING PERSONAL DATA

Personal data belonging to business partner officials and employees, only to the extent necessary for the realization of the relevant purpose, in compliance with the rules in Article 8 of the KVKK titled "Transfer of Personal Data" or in Article 9 titled "Transfer of Personal Data Abroad" and by taking the necessary technical and administrative measures. ;

1.2.5- Supplier Employees

DATA CATEGORIES

1.2.5.1- Credentials

Processed Personal Data:

Name – Surname, TR Identity Number, Signature, Photocopy of Identity Card, Photograph, SGK Registry Number, Marital Status, Date and Place of Birth, Names and Surnames of Family Members, TR Identity Numbers of Family Members, Number of Children, Parent Name, Identity Card Serial Number, Identity Card Volume Number, Identity Card Family Sequence Number, Place of Issue of Identity Card, Reason for Issue of Identity Card, Date of Issue of Identity Card, Nationality, Foreign Identity Number, Photocopy of Marriage Certificate, Gender

Personal Data Processing Purposes:

Execution of Information Security Processes; Fulfilling Obligations Arising from Employment Contracts and Legislation; Conducting Audit / Ethical Activities; Execution of Activities in Compliance with the Legislation; Execution of Finance and Accounting; Providing Physical Space Security; Follow-up and Execution of Legal Affairs; Execution of Communication Activities; Planning Human Resources Policies and Processes; Execution / Supervision of Business Activities; Execution of Occupational Health / Safety Activities; Execution of Goods / Services Procurement Processes; Execution of Storage and Archive Activities; Ensuring the Security of Movable Property and Resources; Execution of Contract Processes; Providing Information to Authorized Persons, Institutions and Organizations

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

It is necessary to process the personal data of the parties of the contract, provided that it is directly related to the establishment or performance of a contract,

Personal Data Collection Methods:

The personal data mentioned above are collected through printed / electronic forms, contracts, undertakings, e-mails, SAP programs, face-to-face interviews and submissions made by suppliers.

1.2.5.2- Contact Information

Processed Personal Data:

E-Mail Address, Contact Address, Mobile Phone Number, Home Phone Number, Contact Information of Family Members, Residence Certificate

Personal Data Processing Purposes:

Execution of Emergency Management Processes; Fulfilling Obligations Arising from Employment Contracts and Legislation; Follow-up and Execution of Legal Affairs; Execution of Communication Activities; Execution of Occupational Health / Safety Activities; Execution of Storage and Archive Activities; Execution of Contract Processes; Planning and Execution of the Company's Commercial and/or Business Strategies; Providing Technical and Commercial Business and Transaction Security; Providing Information to Authorized Persons, Institutions and Organizations

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

Provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract, it is necessary for the data controller to fulfill its legal obligations, and the data processing is compulsory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. processed on the basis of reasons.

Personal Data Collection Methods:

The above-mentioned personal data is collected through printed / electronic forms, contracts, undertakings, e-mails, SAP programs, submissions made by suppliers and your statements.

1.2.5.3- Risk Management Information

Processed Personal Data:

Information Processed for the Management of Commercial Risks

Personal Data Processing Purposes:

Execution and Supervision of Business Activities; Execution of Storage and Archive Activities; Execution of Risk Management Processes; Execution of Contract Processes; Follow-up of Requests / Complaints; Conducting Internal Audit Activities; Conducting Intelligence Activities

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

Personal Data Collection Methods:

The above-mentioned personal data are collected during participation in a meeting or event, during the sales process, through contracts and through documents declared by the person concerned.

1.2.5.4- Personal Information

Processed Personal Data:

SGK Job Entry - Dismissal Notices, Permission Forms, Payroll Information, CV Information, Title Information, Reference Information, Benefits Information, BES Information, Information within the Scope of AGI, Payroll Information, Overtime Records, Attendance Schedules, Diploma Photocopy, Disciplinary Investigation, Defense Articles, Official Correspondence, Embezzlement Forms, Military Status Documents, Educational Status of Family Members

Personal Data Processing Purposes:

Fulfilling Obligations Arising from Employment Contracts and Legislation; Execution of Activities in Compliance with the Legislation; Execution of Finance and Accounting Affairs; Execution of Assignment Processes; Follow-up and Execution of Legal Affairs; Planning Human Resources Processes; Execution and Supervision of Business Activities; Execution of Contract Processes; Providing Information to Authorized Persons, Institutions and Organizations; Execution of Storage and Archiving Activities, Execution of Remuneration Policy, Execution of Benefits and Benefits Processes, Execution of Management Activities

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

It is processed on the basis of legal reasons, provided that it is clearly stipulated in the laws, It is mandatory for the data controller to fulfill its legal obligations, It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract, and Explicit Consent for References.

Personal Data Collection Methods:

The above-mentioned personal data is collected through printed / electronic forms, contracts, undertakings, e-mails, SAP programs, submissions made by suppliers and your statements.

1.2.5.5- Legal Transaction Information

Processed Personal Data:

Information in Correspondence with Judicial Authorities, Information in Correspondence with Administrative Authorities, Information in the Case File in Case of Dispute, Warnings, Notices

Personal Data Processing Purposes:

Follow-up and Execution of Legal Affairs; Conducting Internal Audit Activities; Execution of Activities in Compliance with the Legislation; Execution of Risk Management Processes; Execution of Storage and Archiving Activities; Ensuring the Security of Data Controller Operations; Providing Information to Authorized Persons, Institutions and Organizations

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

It is processed on the basis of legal reasons that it is mandatory for the data controller to fulfill its legal obligations and that data processing is mandatory for the establishment, exercise or protection of a right.

Personal Data Collection Methods:

The above-mentioned personal data are collected through official letters and other printed / electronic documents from judicial and administrative authorities.

1.2.5.5- Physical Space Security Information

Processed Personal Data:

Input - Output Record Information, Camera Records

Personal Data Processing Purposes:

Execution of Emergency Management Processes; Execution of Audit Activities; Providing Physical Space Security; Execution of Occupational Health / Safety Activities; Execution of Risk Management Processes; Follow-up of Requests / Complaints; Ensuring the Security of Movable Property and Resources; Ensuring the Security of Data Controller Operations; Providing Information to Authorized Persons, Institutions and Organizations

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

Personal Data Collection Methods:

The above-mentioned personal data are processed through CCTV cameras.

1.2.5.6- Transaction Security Information

Processed Personal Data:

IP Address Information, User Name and Password Information, Website Login - Exit Information, E-Mail Traffic Logs, Corporate E-Mail Account Archives, Password and Password Information

Personal Data Processing Purposes:

Execution of Information Security Processes; Conducting Audit / Ethical Activities; Execution of Access Authorizations; Follow-up and Execution of Legal Affairs; Audit of Business Activities; Execution of Risk Management Processes; Execution of Storage and Archive Activities; Ensuring the Security of Data Controller Operations

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

Personal Data Collection Methods

The personal data mentioned above are collected through information security systems and electronic devices.

1.2.5.7- Financial Information

Processed Personal Data:

Fee, Bank Account Information, Tax Exemption Information, Advance / Debt / Balance Information

Personal Data Processing Purposes:

Fulfilling Obligations Arising from Employment Contracts and Legislation; Conducting Audit / Ethical Activities; Execution of Activities in Compliance with the Legislation; Execution of Finance and Accounting Affairs; Follow-up and Execution of Legal Affairs; Execution of Risk Management Processes; Execution of Storage and Archive Activities; Providing Information to Authorized Persons, Institutions and Organizations

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

Personal Data Collection Methods:

The above-mentioned personal data is collected through printed / electronic forms, contracts, undertakings, e-mails, SAP programs, submissions made by suppliers and your statements.

1.2.5.8- Professional Experience Information

Processed Personal Data:

Educational Information, Work Experiences, Foreign Language Information, Courses Attended, In-service Training Information, Certificates

Personal Data Processing Purposes:

Conducting Educational Activities; Execution of Assignment Processes; Planning Human Resources Processes; Execution / Supervision of Business Activities; Execution of Occupational Health / Safety Activities; Execution of Contract Processes; Execution of Wage Policy; Execution of Talent / Career Development Activities

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

Personal Data Collection Methods:

The personal data mentioned above are collected through resumes, certificates and diplomas.

1.2.5.9- Audio and Visual Recording Information

Processed Personal Data:

Call Center Audio Recordings

Personal Data Processing Purposes:

Execution of Information Security Processes; Conducting Audit / Ethical Activities; Conducting Internal Audit Activities; Execution of Goods / Services After-Sales Support Services; Execution of Customer Relationship Management Processes; Execution of Storage and Archive Activities; Follow-up of Requests / Complaints Execution of Management Activities

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

Personal Data Collection Methods:

The above-mentioned personal data regarding supplier employees working in our call center are collected electronically during calls made to our call center.

1.2.5.10- Health Information

Processed Personal Data:

Disability Status, Health Reports, Blood Type Information, Health Information About Family Members

Personal Data Processing Purposes:

Execution of Emergency Management Processes; Conducting Internal Audit Activities; Execution of Occupational Health / Safety Activities; Fulfilling Obligations Arising from Employment Contracts and Legislation; Execution of Activities in Compliance with the Legislation; Execution of Risk Management Processes

Legal Reasons for Personal Data Processing

Your personal data within this scope are required by Chime of Smile in order to achieve the above-mentioned purposes, as specified in the relevant legislation and Article 6 of the KVKK;

Personal data related to health and sexual life can only be processed without the explicit consent of the person concerned, for the purposes of protecting public health, performing preventive medicine, medical diagnosis, treatment and care services, planning and managing health services and financing, by persons under the obligation of keeping confidentiality or by authorized institutions and organizations.

processed on a legal basis. Except for the limitations set in Article 6 of the KVKK, the processing of these data will only take place based on your explicit consent.

Personal Data Collection Methods:

The personal data mentioned above are collected through health / disability reports.

TRANSFERRING PERSONAL DATA

Personal data belonging to supplier employees, only to the extent necessary for the realization of the relevant purpose, by complying with the rules in Article 8 of the KVKK titled "Transfer of Personal Data" or Article 9 titled "Transferring Personal Data Abroad" and by taking the necessary technical and administrative measures;

It can be transferred to affiliates and subsidiaries limited to the purposes listed above, and to our business partners in accordance with the legislation within the scope of the agreements between us, To authorized persons and official institutions in accordance with legal regulations and legislation in order to fulfill our legal obligations, and to our programs provided / made available to us by our infrastructure suppliers in the field of technology and/or can be recorded on our systems.

1.2.6- Supplier Authorities

DATA CATEGORIES

1.2.6.1- Credentials

Processed Personal Data:

Name – Surname, TR Identity Number, Signature Circular, Signature, Copy of Identity

Personal Data Processing Purposes:

Execution of Activities in Compliance with the Legislation; Execution of Finance and Accounting Affairs; Follow-up and Execution of Legal Affairs; Conducting Internal Audit Activities; Execution of Communication Activities; Execution of Goods / Services Procurement Processes; Execution of Risk Management Processes; Execution of Contract Processes; Follow-up of Requests / Complaints; Providing Information to Authorized Persons, Institutions and Organizations

Legal Reasons for Personal Data Processing:

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

Personal Data Collection Methods:

The personal data mentioned above are collected through business cards, printed / electronic forms, call center records, contracts, undertakings, e-mails, reports, SAP programs and face-to-face interviews.

1.2.6.2- Contact Information

Processed Personal Data:

E-Mail Address, Contact Address, Mobile Number

Personal Data Processing Purposes:

Execution of Finance and Accounting Affairs; Execution of Communication Activities; Execution of Goods / Services Procurement Processes; Execution of Contract Processes; Follow-up of Requests / Complaints; Execution of Management Activities

Legal Reasons for Personal Data Processing:

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

Personal Data Collection Methods:

1.2.6.3- Legal Transaction Information

Processed Personal Data:

Information in Correspondence with Judicial Authorities, Information in Correspondence with Administrative Authorities, Information in the Case File in Case of Dispute, Warnings

Personal Data Processing Purposes:

Follow-up and Execution of Legal Affairs; Conducting Internal Audit Activities; Execution of Risk Management Processes; Ensuring the Security of Data Controller Operations; Providing Information to Authorized Persons, Institutions and Organizations

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

Personal Data Collection Methods:

The above-mentioned personal data are collected through official letters and other printed / electronic documents from judicial and administrative authorities.

1.2.6.4- Transaction Information

Processed Personal Data:

Request Information, Order Information

Personal Data Processing Purposes:

Follow-up and Execution of Legal Affairs; Conducting Internal Audit Activities; Execution of Communication Activities; Conducting Business Activities; Execution of Goods / Services Procurement Processes; Execution of Customer Relationship Management Processes; Execution of Risk Management Processes; Follow-up of Requests/Complaints

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

Personal Data Collection Methods:

The above-mentioned personal data are collected through printed / electronic forms, call center records, e-mails, SAP programs and face-to-face interviews.

1.2.6.5- Transaction Security Information

Processed Personal Data:

IP Address Information, Device MAC Address, Username, Password and Password Information

Personal Data Processing Purposes:

Execution of Information Security Processes; Conducting Audit / Ethical Activities; Preventing Frauds; Audit of Business Activities; Execution of Risk Management Processes; Execution of Storage and Archive Activities; Ensuring the Security of Data Controller Operations

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

It is processed on the basis of legal reasons, which are clearly stipulated in the laws and are mandatory for the Data Controller to fulfill his legal obligations.

Personal Data Collection Methods:

The personal data mentioned above are collected through information security systems and electronic devices.

1.2.6.6- Financial Information

Processed Personal Data:

Billing Information, Bank Account Information, Current Account Information

Personal Data Processing Purposes:

Conducting Audit / Ethical Activities; Execution of Activities in Compliance with the Legislation; Execution of Finance and Accounting Affairs; Execution / Supervision of Business Activities; Execution of Goods / Services Procurement Processes; Execution of Contract Processes; Execution of Supply Chain Management Processes; Execution of Management Activities

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

Provided that it is clearly stipulated in the laws, it is processed on the basis of legal reasons, provided that it is directly related to the establishment or performance of a contract, that the processing of personal data belonging to the parties of the contract is necessary and that it is mandatory for the data controller to fulfill its legal obligation.

Personal Data Collection Methods:

The above-mentioned personal data are collected through printed / electronic forms, contracts, undertakings and SAP programs.

1.2.6.7- Risk Management Information

Processed Personal Data:

Information Processed for the Management of Commercial / Technical / Administrative Risks

Personal Data Processing Purposes:

Conducting Audit / Ethical Activities; Follow-up and Execution of Legal Affairs; Execution and Supervision of Business Activities; Execution of Occupational Health and Safety Activities; Execution of Risk Management Processes; Execution of Storage and Archive Activities; Ensuring the Security of Data Controller Operations; Execution of Management Activities

Legal Reasons for Personal Data Processing

Your personal data within this scope, for the realization of the above-mentioned purposes by Chime of Smile , specified in the relevant legislation and Article 5 of the KVKK;

Personal Data Collection Methods:

The above-mentioned personal data is collected during participation in an event or training, through the information declared by the person concerned and through official and commercial correspondence.

TRANSFERRING PERSONAL DATA

Personal data belonging to supplier officials, only to the extent necessary for the realization of the relevant purpose, by following the rules in Article 8 of the KVKK titled "Transfer of Personal Data" or Article 9 titled "Transferring Personal Data Abroad" and by taking the necessary technical and administrative measures;

2- Storage of Personal Data, Your Rights and Application

2.1- Storage and Disposal

Our company has established a Retention and Disposal Policy for the storage and deletion of personal data. Storage and destruction of your personal data is carried out within the scope of this policy. Accordingly, if a period is determined for the storage of data in the KVKK or in the relevant laws and other relevant legislation, the said data must be kept for at least this period.

Taking into account the possibility that a possible court request or a request by an administrative authority authorized by law regarding the relevant data arrives late to us, or a dispute that we may be a party to occurs, a period of 6 months to 1 year is added to the periods stipulated in the legislation for the storage of your data, and the storage period of the data is determined. At the end of the period, the data in question is deleted, destroyed or anonymized.

If the legislation does not specify a period for the storage period of the data we process, your data will be deleted, destroyed or anonymized without any request, after the expiry of the 10-year statute of limitations from the end of our legal relationship, taking into account possible disputes as a requirement of the relationship between us.

If all the processing conditions for personal data have been eliminated or if the storage period declared by us or determined within the scope of the legislation has expired, your data will be deleted, destroyed or anonymized ex officio on the first periodic destruction date or within 6 months at the latest. If you request the deletion of your data for a valid reason, your data will be deleted within 30 days at the latest to the extent legally possible. If you request the deletion or destruction of your data, the retention period of which is determined in the legislation, before the stipulated periods, your request will not be fulfilled.

2.2- Your Rights

Regarding your personal data within the scope of KVKK and related legislation;

- Learning whether your personal data is processed,

- If your personal data has been processed, requesting information about it,

- Learning the purpose of processing personal data and whether they are used in accordance with its purpose,

- Knowing the third parties to whom your personal data is transferred,

- Requesting correction of your personal data if it is incomplete or incorrectly processed,

- Requesting the deletion or destruction of your personal data within the framework of the conditions stipulated in the KVKK legislation,

- When you request the deletion or destruction of your personal data with the correction of incomplete or incorrect data, requesting that this situation be notified to the third parties to whom we have transferred your personal data,

- Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems, and

- If you suffer damage due to unlawful processing of personal data, you have the right to demand that this damage be remedied.

2.3- Application

If you wish to make your applications and requests regarding your personal data, by using the Related Person Application Form;

- With wet signature and photocopy of identity card, Camiatik, Asmalı Çınar Sk. No: 6, 35430 Urla/İzmir ,

- By personally applying to our Company with a valid identity document,

- By sending it to our registered e-mail address hande@chimofsmile.eco using a registered e-mail (KEP) address and secure electronic signature or mobile signature, or by sending it to our e-mail address hande@chimeofsmile.eco from your e-mail address previously notified to our Company and registered in our system . You can forward it to .

In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, in these applications of the persons concerned, name - surname, signature if the application is written, TR identity number (passport number if the applicant is a foreigner), domicile or workplace address for notification, e-mail for notification, if any. address, telephone number and fax number and information on the subject of the request are mandatory.

The data subject should clearly and comprehensibly state the requested issue in the application, which includes explanations regarding the right to be exercised and requested by the data subject to exercise the above-mentioned rights. Information and documents related to the application must be attached to the application.

Although the subject of the request must be related to the person of the applicant, if acting on behalf of someone else, the applicant must be specifically authorized in this regard and this authority must be documented (special power of attorney). In addition, the application must contain identity and address information, and documents confirming identity must be attached to the application.

Requests made by unauthorized third parties on behalf of someone else will not be considered.

Your claims regarding your personal data are evaluated and answered within 30 days at the latest from the date they reach our Company. In the event that your application is evaluated negatively, the reasons for the reasoned refusal will be communicated to you via e-mail or postal mail, if possible, to the address you specified in the application, by the method in which the request was made.