Enlightenment and Consent Meni

Dağcı Natural Products Food Industry Trade Limited Company (“Valerian Cosmetic”)

REGARDING THE PROCESSING OF PERSONAL DATA
INFORMATION AND CONSENT TEXT

This text has been prepared to provide you with information regarding the processing of your personal data within the framework of Article 10 of the Law on the Protection of Personal Data No. 6698 (“ Law ”). This information and explicit consent text is an integral part of the Policy on the Protection and Processing of Personal Data (“ Policy ”) prepared by Dağcı Doğal Ür ünler Gıda Sanayi Ticaret Limited Şirketi (“Valerian Cosmetic”) within the scope of the Law on the Protection of Personal Data No. 6698. All relevant definitions are also explained in the Policy.

Our company Dağcı Doğal Ür ünler Gıda Sanayi Ticaret Limited Şirketi (“Valerian Cosmetic or the Company ”) is the data controller in accordance with the Law regarding the personal data of Members, Visitors and Suppliers (“ Data Owner/Data Owners ”), and this Information and Consent Text aims to inform the relevant parties about the personal data processing activities carried out by the Company within the context of the website ( https://valeriancosmetic.com/ ) ( “Website”) in accordance with the said Law and to obtain their explicit consent for the situations specified in Article 3 below.

  1. Purpose of Processing Personal Data

In the context of accessing and using the Website, personal data of data owners are processed within the framework of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law in order to ensure the sale of products on the Website, to follow up on orders, to carry out/follow up the Company's legal affairs, to plan and execute corporate communication activities, to carry out corporate governance activities, to improve the services offered through the Website, to develop new services and to provide information about them, to resolve Data Owner problems and complaints, to determine and implement the Company's commercial and business strategies, to comply with legal processes and legislation, to respond to information requests from administrative and judicial authorities, to plan internal reporting and business development activities, to ensure information and transaction security and to prevent misuse, to plan and execute the necessary operational activities to ensure that the Company's activities are carried out in accordance with the Company's procedures and policies prepared within the scope of the Personal Data Protection Law, and to make the necessary arrangements to ensure that the processed data is up-to-date and accurate.

Your personal data is processed in accordance with the law and the rules of honesty and for specific, clear and legitimate purposes, is kept accurate and up-to-date as necessary, is used in a limited and proportionate manner in connection with the purpose for which it is processed, and is retained for the retention period determined in accordance with the law. Detailed information on the processing of personal data by the Company can be accessed from the Policy located at https://valeriancosmetic.com/ .

  1. Personal Data to be Processed Based on Explicit Consent and Purposes of Processing

For the following situations where the personal data processing conditions in Articles 5/2 and 6/3 of the Law cannot be met, the explicit consent of the Data Owner must be obtained in order for the Company to process personal data.

In this context, explicit consent is obtained from data owners for all personal data processing purposes listed in Article 2 of this Information Text.

  1. Sharing of Personal Data

Personal data collected by the Company in the context of the Website may be shared with legally authorized public institutions and organizations, third parties from whom we receive support in areas such as information technologies, security, call center, technical and logistics; business partners with whom we cooperate and/or receive service, banks, financial institutions; law offices from which support is received in areas such as law, tax and similar areas, consultancy firms and other related parties to whom transfer is necessary for the specified purposes, in accordance with the basic principles stipulated by the KVKK and within the scope of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK and in order to carry out the necessary work to enable you to benefit from the services offered by our Company, to ensure the legal and commercial security of persons in business relations with our Company, to determine and implement our Company's service and business strategies and to ensure the execution of our Company's policies.

Personal data processed within the context of the Website may be shared by the Company with the network server by the service provider in order for the Website to function, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law.

  1. Method and Legal Reason for Collection of Personal Data

Your personal data, forms and information you have filled out/provided on the Website, information you have sent to us via mail, e-mail and similar media are collected by our Company itself. The legal reasons based on which your data is collected through the methods specified in this information are processed in accordance with the nature of the data, for the purposes specified in Articles 5 and 6 of the Law and this information and explicit consent text, data processing is mandatory for the performance of the contract, it is mandatory for the fulfillment of our legal obligations, data processing is mandatory for the legitimate interests of the data controller.

  1. Security of Your Personal Data

In order to ensure that your personal data is processed in accordance with the law and stored securely and to prevent unlawful access to your personal data, the Company takes all necessary technical and administrative measures to ensure an appropriate level of security.

  1. User Rights as Personal Data Owner

Pursuant to Article 11 of the Law, data owners have the right to; (i) learn whether or not their personal data is processed, (ii) request information if their personal data is processed, (iii) learn the purpose of processing personal data and whether or not it is used in accordance with its purpose, (iv) know the third parties to whom personal data is transferred domestically or abroad, (v) request correction of personal data if it is processed incompletely or incorrectly and request notification of the action taken within this scope to third parties to whom personal data is transferred, (vi) request deletion or destruction of personal data if the reasons requiring processing are eliminated despite the fact that it has been processed in accordance with the provisions of the Law and other relevant laws and request notification of the action taken within this scope to third parties to whom personal data is transferred, (vii) object to the emergence of a result to the detriment of the person by means of analysis of processed data exclusively through automated systems and (viii) request compensation for the damages incurred due to unlawful processing of personal data.

You can exercise these rights by filling out our Personal Data Owner Application Form located at https://valeriancosmetic.com/ .

You can send the application method with a wet signature to Bağlarçeşme Mh. Doğan Araslı Bul. No:139b Esenyurt/İstanbul, together with documents showing your identity, in accordance with the procedures and principles set forth in the Communiqué on the Procedures and Principles of Application to the Data Controller, dated 10.03.2018 and numbered 30356. You can also use your e-mail address, which has been previously notified to us and registered in the Company system , to https://valeriancosmetic.com/ You can also send the application form to the address. The right/demand you want to exercise must be clearly stated in your request along with your identity information and all necessary explanations must be made by adding all the information and documents subject to your request. Requests sent to us and meeting the required qualifications will be finalized within 30 (thirty) days depending on the nature of the request.

The Company reserves the right to charge fees for requests based on the fee schedule determined by the Personal Data Protection Board (if any).

*We would like to inform you that if you do not accept this text, which you must accept for the processing of your personal data listed above, our service relationship cannot be fulfilled in terms of our processes that require your explicit consent, with the exception of situations where processing is permitted under the KVKK legislation, and our Company's business processes and operational activities will be negatively affected.