Personal Data Protection Policy

PODO LIME COSMETICS INDUSTRY TRADE LIMITED COMPANY

PERSONAL DATA PROTECTION POLICY

The Law on the Protection of Personal Data No. 6698 ("Law") entered into force on April 7, 2016. The Law defines personal data, sets forth the principles regarding its protection and the conditions to be followed by those who are data controllers in the processing of such data. According to the Law, personal data is any information relating to an "identified or identifiable natural person". Processing of personal data refers to "any operation performed on personal data, including obtaining, recording, storing, changing, sharing with third parties and transferring personal data abroad, whether automatically or non-automatically provided that it is part of any data recording system".

PODO LIME KOZMETİK SANAYİ TİCARET LİMİTED ŞİRKETİ ("PODO LIME KOZMETİK") adopts the principles regarding the protection and processing of personal data in the relevant legislation and takes the necessary administrative and technical measures in order to ensure compliance with the Law.

This policy details the purposes for which PODO LIME KOZMETİK processes personal data, the legal basis on which it processes it, the rights of data owners and how these rights can be exercised.

1. Processing of Personal Data As PODO LIME KOZMETİK, we process personal data in accordance with the principles set forth in the relevant legislation or in cases where the personal data owner has given explicit consent, within the framework of the following principles:

  • Processing in accordance with law and the rule of honesty,

  • Ensuring that personal data is accurate and up-to-date when necessary,

  • Processing for specified, clear and legitimate purposes,

  • Being connected, limited and proportionate to the purpose for which they are processed,

  • Preservation for the period stipulated in the relevant legislation or necessary for the purpose for which they are processed.

2. Purposes of Processing Personal Data Personal data is processed by PODO LIME KOZMETİK for the following purposes:

  • Carrying out customer/user transactions,

  • Receiving orders and providing products/services,

  • Providing after-sales support services,

  • Monitoring of finance and accounting affairs,

  • Planning and execution of company audit activities,

  • Planning and execution of marketing processes of products and services,

  • Management of relations with business partners and/or suppliers,

  • Management of information security and IT infrastructure.

3. Measures for the Protection of Personal Data PODO LIME KOZMETİK takes the necessary administrative and technical measures to prevent the unlawful processing and access of personal data and to ensure the preservation of data. In this context;

  • Data security policies have been established,

  • Access authorizations are kept under control,

  • Firewalls and encryption methods are used.

4. Data Owners' Rights Pursuant to Article 11 of the Law, data owners;

  • To learn whether your personal data is being processed,

  • To request information regarding the processing of personal data,

  • Has the right to learn the purpose of processing personal data and whether they are used in accordance with their purpose.

Data owners may apply to PODO LIME KOZMETİK in writing to exercise their rights specified above under the Law.

Contact Information: PODO LIME COSMETICS INDUSTRY TRADE LIMITED COMPANY
Altaycesme Neighborhood Martyr Taner Celikdemir Street Saray Apt 2/A Maltepe / Istanbul

PODO LIME COSMETICS PERSONAL DATA TRANSFER POLICY

1. Purpose and Scope As PODO LIME KOZMETİK, we value the protection of personal data. This policy determines the principles regarding the sharing and transfer of personal data with third parties.

2. General Principles Regarding the Transfer of Personal Data PODO LIME KOZMETİK transfers personal data in accordance with the following principles:

  • Compliance with law and rules of integrity

  • Accuracy and timeliness

  • Processing for specified, explicit and legitimate purposes

  • Being bound by purpose and limited

  • Preservation for the period required by the legislation or for the purpose for which it is processed.

3. Purposes of Transfer of Personal Data Personal data may be transferred for the following purposes:

  • Fulfillment of legal obligations

  • Performance of contractual obligations

  • Conducting in-house operations

  • Ensuring customer satisfaction

  • Marketing and promotional activities

4. Parties to Which Personal Data is Transferred PODO LIME KOZMETİK may share personal data with the following parties:

  • Authorized public institutions and organizations

  • Business partners at home and abroad

  • Legal and financial consultancy firms

  • Suppliers and service providers

5. Data Transfer Abroad Personal data may be transferred abroad in accordance with the relevant legislation. This transfer is carried out with measures to ensure the protection of the rights of the relevant persons.

6. Rights of Data Owners Data owners have the following rights within the scope of KVKK:

  • Learning whether your own data is being processed

  • Requesting access to data

  • Request correction of incorrect or incomplete information

  • Requesting data to be deleted or anonymized

  • Obtaining information regarding the transfer of data

7. Policy Changes PODO LIME KOZMETİK may update this policy if necessary. The changes will be announced by publishing on our company's official website.

PODO LIME COSMETICS PERSONAL DATA APPLICATION FORM

SCOPE OF THE RIGHT TO APPLY Under Article 11 of the Law on the Protection of Personal Data No. 6698 (“Law”), personal data owners (“Data Owners”) are granted certain rights. The Data Owner may assert these rights granted to him/her by applying to PODO LIME KOZMETİK , the data controller, through the methods explained in this application form. The Data Owner’s rights are as follows:

  1. To learn whether your personal data is being processed,
  2. To request information regarding the processing of personal data,
  3. To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
  4. To learn the third parties to whom personal data is transferred domestically or abroad,
  5. To request correction of personal data if it is processed incompletely or incorrectly and to request notification of the action taken to third parties to whom personal data is transferred,
  6. To request that your personal data be deleted, destroyed or made anonymous if the reasons requiring processing are eliminated, even though it has been processed in accordance with the provisions of the Personal Data Protection Law and other relevant laws, and to request that the process carried out within this scope be notified to third parties to whom your personal data has been transferred,
  7. To object to the emergence of a negative result due to the analysis of processed data exclusively through automated systems,
  8. To request compensation in case of damages due to unlawful processing of personal data.

APPLICATION METHOD Data Owners must submit their applications regarding their rights to PODO LIME KOZMETİK, the data controller, in writing or by other methods determined by the Personal Data Protection Board (“KVK Board”) in accordance with Article 13 of the Law. Applications to be made to PODO LIME KOZMETİK in “written” form will be made by taking a printout of this form and using one of the methods below.

APPLICATION METHOD APPLICATION ADDRESS INFORMATION TO BE SHOWN IN THE APPLICATION
Registered Letter/Notary Altaycesme Neighborhood, Martyr Taner Celikdemir Street, Saray Apt 2/A, Maltepe / Istanbul “Request for Information Within the Scope of the Personal Data Protection Law” will be written on the envelope/notification.
Apply in Person Altaycesme Neighborhood, Martyr Taner Celikdemir Street, Saray Apt 2/A, Maltepe / Istanbul “Request for Information Within the Scope of the Personal Data Protection Law” will be written on the envelope.
Registered Electronic Mail (REM) [Your KEP Address] The subject of the e-mail will be written as "Personal Data Protection Law Information Request".
Via Email (To be confirmed) podolimekozmetik@gmail.com The subject of the e-mail will be written as "Personal Data Protection Law Information Request".

The person concerned will be contacted via the registered telephone number to identify him/her and determine whether the requester has actually made this application.

SCOPE OF THE REQUEST AND DATA OWNER CONTACT INFORMATION In order for the Data Owner's application to be finalized by PODO LIME KOZMETİK and the results to be communicated to the Data Owner, the following information must be arranged by the Data Owner.

Name Surname: TR ID Number: Address: Mobile Phone: Email Address:

Relationship with PODO LIME KOZMETİK: ☐ Customer ☐ Business Partner ☐ Visitor ☐ Candidate Employee (persons who apply for a job/share their resume) ☐ Former Employee/Retiree: Years worked: …………………………………….. ☐ Other: (Please specify) ……………………………………..

Whether the Relationship with PODO LIME COSMETICS Has Ended: ☐ Ongoing ☐ Ended

Please state your request within the scope of the Law in detail and clearly: ………………………………………………………………………………………………………………………………… …………………………………………………………………………………………………………………………………

CONCLUDING APPLICATIONS If Data Owners submit their requests regarding their personal data to PODO LIME KOZMETİK in writing in accordance with Article 13 of the Law and through the methods explained in this application form, PODO LIME KOZMETİK will finalize the request within (30) days from the date the request reaches us, depending on the nature of the request. As PODO LIME KOZMETİK , our positive or negative response will be communicated to Data Owners in a reasoned manner in writing or electronically.

Please choose the method by which we will notify you of our response to your application:

☐ I want it sent to my address.

☐ I want it to be sent to my email address. (We will be able to respond to you faster if you choose the email method.)

☐ I want to receive it in person. (In case of receiving it by proxy, a notarized power of attorney or authorization document is required.)

In order to ensure the security of personal data and prevent unlawful data sharing, PODO LIME KOZMETİK may request information from the applicant for identity verification in order to determine whether the applicant is the owner of the personal data subject to the application. PODO LIME KOZMETİK may also ask questions to the personal data owner regarding their application in order to ensure that the application of the personal data owner is concluded in accordance with the request. The Data Owner accepts that PODO LIME KOZMETİK has no liability for the requests arising from the incorrect information or unauthorized application due to the information regarding the requests submitted within the scope of this form being incorrect and up-to-date or unauthorized application.

Applicant (Data Owner)

Name - Surname:

Application Date: Signature: