Ana sayfa / Protection of personal data

Protection of personal data

In accordance with the Law on Protection of Personal Data No. 6698 (“KVKK”), Ontex Tüketim Ürünleri San.Tic. Incorporated Company (“COMPANY”) (MERSİS NO: 0091001062500015), in the capacity of Data Controller, will process your personal data by being used, recorded, stored, updated, transferred and/or classified within the framework described below, depending on business purposes.

In this context, in accordance with the Laws and Regulations issued by our Company to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, and to protect personal data, appropriate security is provided in order to prevent unlawful processing of your personal data, to prevent unlawful access and processing and to ensure its preservation. All technical and administrative measures are taken to ensure the level of

1. Personal Data Collection Method:

Your personal data, our Company’s Headquarters (Istanbul), Factory (Selimpaşa/Istanbul), Our Business Units, ( www.hastabezial.com ,www.bebekbezim.com , http://www.shop.canbebe.com.tr/ , https://www.canped.com , http://www.canbebe.com , http://www.ontex.com , http://www.biryoluvaristersen.com ) through automatic or non-automatic means, through websites, social media accounts, mobile applications, parties from which our company receives services that are complementary or extensions of its activities, contracted organizations, business partners, suppliers and lower or upper carriers and other similar channels, It can be collected in written, oral or electronic form.

2. Legal Reasons for Collecting Personal Data:

our data collected in the scope above is processed by our Company within the framework of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law.

Provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract, based on the legal reason;

o Updating customer contact information,
o Opening sales records and performing invoicing activities,
o Establishing or performing the sales contract due to your purchase of our company’s products and services, following up the order,
o Providing the products and services you have purchased,
o Providing after-sales support services.

Based on the legal reason that it is clearly stipulated by the law and is mandatory for the data controller to fulfill its legal obligation;

o Fulfilling the requests of official institutions,
o Giving information to the authorized institutions based on the legislation,
o Ensuring compliance with the storage obligations stipulated in the legislation,
o Answering the applications of the relevant persons in accordance with the legislation and performing the necessary procedures.

Based on the legal reason that data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject;

o Execution of customer relations,
o Follow-up of financial transactions,
o Carrying out the necessary work by our business units and carrying out the relevant business processes in order to make the relevant persons benefit from the products and services offered by our Company, including the sales and marketing activities of our products and services,

To carry out the necessary work by our relevant business units for the realization of commercial activities carried out by our company and to carry out the related business processes,
Ensuring the legal, technical and commercial-occupational safety of our company and the persons who have a business relationship with our company,
Determining and implementing our company’s commercial and business strategies,
Follow-up and execution of legal affairs,
Execution of information security processes,
Planning and execution of customer satisfaction and corporate communication activities,
Storing personal data for the duration of the general statute of limitations in order to constitute evidence in possible future disputes.

3. Purposes of Collecting and Processing Personal Data:

Communicating and engaging with (potential) customers such as group or individual patients or caregivers, while also handling their requests efficiently;
Fulfilling our legal obligations arising from the legislation,
Providing you with company products and services, fulfilling our obligations to you, issuing records and documents, complying with information storage, reporting, informing, tax and other obligations stipulated by local and international legal regulations,
Fulfilling, executing, performing, proving and improving the transactions regarding our obligations, reporting to customers, fulfilling the requirements of the contracts you have concluded and/or concluded; statistics, customer satisfaction studies,
In accordance with the Law No. 6563 on the regulation of Electronic Commerce, sending e-mails and sms for advertising and promotional purposes to the parties whose express consent was obtained and whose contact information is included due to their commercial activities in our institution,
Planning, auditing and execution of information security processes
Creation and management of information technology infrastructure
Planning and execution of fringe benefits and benefits for employees
Planning and/or execution of corporate communication for employees and/or corporate social responsibility and/or non-governmental organizations activities in which employees participate

Planning and execution of employees’ access rights to information
Monitoring and/or supervision of employees’ business activities
Follow-up of finance and/or accounting works
Planning of human resources processes
Planning and/or execution of efficiency/efficiency and/or appropriateness analyzes of business activities
Planning and execution of business activities
Planning and execution of information access
Authorizations of business partners and/or suppliers
Management of relations with business partners and/or suppliers
Planning and/or execution of occupational health and/or safety processes
Planning and execution of corporate communication, logistics and management activities
Planning and execution of customer relationship management processes
Planning and/or execution of customer satisfaction activities
Follow-up of customer requests and/or complaints
Fulfillment of obligations arising from recruitment, employment contract and/or legislation for company employees
Planning and execution of internal and external training and orientation activities
Planning and execution of necessary operational activities to ensure that company activities are carried out in accordance with company procedures and / or relevant legislation
Planning and/or execution of the processes of establishing and/or increasing loyalty to the products and/or services offered by the company
Planning and/or execution of the Company’s operational risk processes
Follow-up of contract processes and/or legal requests
Planning and execution of supply chain management processes
Compensation Management
Planning and execution of operational processes
Planning and execution of market research activities for sales and marketing of products and services
Planning and execution of sales and marketing processes of products and/or services
Ensuring data is accurate and up-to-date
Giving information to authorized institutions based on legislation
Your personal data is processed for the purpose of creating and tracking visitor records.

4. Provisions that do not require explicit consent

In accordance with the KVKK, in the presence of one of the following conditions listed in the Law, it is possible to process general personal data without your explicit consent;

clearly stipulated in the law,
It is compulsory for the protection of the life or physical integrity of the person or another person, who is unable to express his or her consent due to actual impossibility or whose consent is not legally valid.
It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract
It is mandatory for our Company to fulfill its legal obligation as a data controller,
The person concerned has been made public by himself,
Data processing is mandatory for the establishment, exercise or protection of a right
Data processing is mandatory for the legitimate interests of our Company, provided that it does not harm the fundamental rights and freedoms of the person concerned.

5. Persons/Organizations to which Personal Data can be Transferred:

To the business partners, shareholders and affiliates of the COMPANY,
Persons or organizations permitted by the Tax Procedure Law, Social Security Institution legislation, Turkish Commercial Code, Code of Obligations and other legislation,
Legally authorized public institutions and organizations, administrative authorities and legal authorities,
To foreign companies and affiliates, (Ontex BV Group – Belgium)
Real or legal persons with whom we receive service and cooperate in product/service comparison, analysis, evaluation, advertisement and realization of the above-mentioned purposes, institutions with which we have contracted to send the messages we send to our customers, and the person who delivers the orders to you. It will be possible to transfer to logistics companies within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law No. 6698.

6. Rights of Personal Data Owner:

In accordance with Article 11 of the KVKK, you have the following rights regarding your personal data;

Learning whether personal data is processed or not,

If personal data has been processed, requesting information about it,
Learning the purpose of processing personal data and whether they are used in accordance with its purpose,
Knowing the third parties to whom personal data is transferred at home or abroad,
Requesting correction of personal data in case of incomplete or incorrect processing, requesting notification of the transactions made to third parties to whom personal data has been transferred,
Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in the KVKK, requesting the notification of the transactions made to the third parties to whom the personal data has been transferred,
Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
To request the compensation of the damage in case of loss due to unlawful processing of personal data.

You can find detailed information about the applications from the KVKK application form on our website.

For detailed information about the personal data application process, click here. (pdf attached)
Click here to access the KVKK application form. (pdf attached)