Customer Clarification Text

INFORMATION TEXT UNDER THE LAW ON THE PROTECTION OF PERSONAL DATA NO. 6698

Notification

The Law on the Protection of Personal Data No. 6698 (“KVKK”) was adopted on March 24, 2016, and entered into force after being published in the Official Gazette on April 7, 2016.

The Law was enacted to protect the fundamental rights and freedoms of individuals, especially the right to privacy, during the processing of personal data, and to regulate the obligations, procedures, and principles that must be followed by natural and legal persons who process personal data. Through this document, the Company informs and enlightens its visitors.

Our Company shall process your personal data—including your name, email address, business and home address, phone number, and other personal information provided via the forms on this website—only for the purposes stated herein, and within the scope and limitations set forth in this Information Text and, where applicable, in the Explicit Consent Text.

DATA CONTROLLER AND CONTACT PERSON

As stated in this Information Text, the Company acts as the data controller in accordance with the KVKK.

Data Controller Information

  • Full Name: KOZMO KİMYA SANAYİ VE DIŞ TİCARET LTD. ŞTİ.

  • Short Name: ‘KOZMO KİMYA’ or ‘Company’

  • Address: Gökevler Mah. 2312 Sk. Ginza Corner Plaza No:16 D:29
    Postal Code: 34522 Esenyurt / ISTANBUL

  • Website: https://kozmokimya.com

  • Registered Email (KEP): kozmokimya@hs03.kep.tr

Purposes for Processing Your Data

Your personal data may be processed by our Company for the following purposes:

  • To carry out internal operations necessary to provide the products and services offered by our Company,

  • To recommend suitable products and services in line with your current needs, through collaboration with relevant departments and business partners,

  • To manage human resources and protect individual rights,

  • To make and implement commercial decisions,

  • To conduct marketing activities for our products and services,

  • To manage information and operational security processes,

  • To handle requests and complaints,

  • To carry out communication activities,

  • To ensure the legal safety of the Company and individuals with whom we have business relationships.

In accordance with Articles 5 and 6 of the Law, your personal data may also be processed by the Company, as the data controller, without requiring your explicit consent in the following cases:

a) If expressly stipulated by law,
b) If it is necessary to protect the life or physical integrity of the person who cannot express their consent due to physical impossibility or whose consent is not legally valid,
c) If the processing of personal data is necessary for the performance of a contract,
ç) If it is necessary for the data controller to fulfill its legal obligations,
d) If the data has been made public by the individual,
e) If data processing is necessary for the establishment, use, or protection of a right,
f) If processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Purposes of Personal Data Processing

  • To communicate with you and others as part of our business.

  • To send you important information regarding our terms of service, changes in our digital services, and other administrative messages.

  • To improve quality, training, and security (e.g., through recorded or monitored calls to our customer service lines).

  • To resolve complaints and process requests for access or correction of data.

  • To manage and oversee our infrastructure and business operations, and to comply with internal policies and procedures, including auditing, finance and accounting, billing and collections, IT systems, data and website hosting, business continuity, recordkeeping, and print/document management.

Personal Data We Process

  • Identity Information: Your name, surname, Turkish identity number, and other information you provide with your explicit consent.

  • Contact Information: Your residential and business addresses, phone number, email address, registered email (KEP) address, and other communication channels you consent to share.

  • Customer Transaction Data: Call center records, billing and order details, and your requests.

  • Marketing Data: Purchase history, surveys, cookie records, and data obtained from campaign activities.

  • Visual and Audio Records: Records obtained from customer support via email or phone communication.

To whom and for what purpose the processed personal data can be transferred

Your personal data collected; Ensuring the legal and commercial security of our Company and the persons who have a business relationship with our Company; Carrying out the necessary work by our business units to benefit you from the products and services offered by our Company; To our domestic business partners, payment systems, cargo companies, law and accounting offices, legally authorized public institutions and private persons for the purposes of determining and implementing our Company’s commercial and business strategies and ensuring the execution of our Company’s human resources policies, and to our domestic business partners, payment systems, cargo companies, law and accounting offices, legally authorized public institutions and private persons. and 9. within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the LPPD.

Our Company does not transfer data abroad.

Method and Legal Reason for Collecting Personal Data

Your personal data is collected by our Company through different channels and based on different legal reasons in order to carry out our commercial activities.

Your personal data is collected through the surveys we conduct with you, our web page, our call center and the official e-mail address of the COMPANY, info@kozmokimya.com or any e-mail address of the Company using the extension “@kozmokimya.com”, kozmokimya@hs03.kep.tr in case personal data is sent to the address.

Personal data is also collected by physically sending documents, physically filling out a document provided by the Company, calling the internal numbers of the Company.

Your personal data is also collected automatically through cookies used in the Company’s web address and extensions. These cookies are only necessary cookies for the visitor to use the site with full efficiency and are used to remember the visitor’s preferences and do not provide any other personal data.

You can access our cookie policy at https://kozmokimya.com/tr/internet-sitesi-cerez-aydinlatma-metni/.

The Company does not engage in any personal data processing activities that do not fall within the scope of personal data processing conditions.

The personal data processing conditions in the KVKK are as follows;

Explicit consent of the person concerned,

Explicitly stipulated by law,

It is mandatory for the protection of the life or physical integrity of the person who is unable to disclose his consent due to actual impossibility or whose consent is not legally valid,

It is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract,

It is mandatory for the data controller to fulfill its legal obligation,

It has been made public by the data subject himself/herself,

Data processing is mandatory for the establishment, exercise or protection of a right,

Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Our company basically does not aim to process special categories of personal data. However, your special categories of personal data that we need to process due to our activities are also processed in a measured manner within the legislation.

The conditions listed in the LPPD for the processing of special categories of personal data are as follows;

Explicit consent of the person concerned,

Explicitly stipulated in the laws,

It is mandatory for the protection of the life or physical integrity of the person who is unable to disclose his consent due to actual impossibility or whose consent is not legally valid,

It is related to the personal data made public by the person concerned and is in accordance with the will to make it public,

It is mandatory for the establishment, use or protection of a right,

Protection of public health by persons or authorized institutions and organizations under the obligation to keep secrets, It is compulsory for the fulfillment of legal obligations in the fields of employment, occupational health and safety, social security, social services and social assistance,

It is compulsory for the fulfillment of legal obligations in the fields of employment, occupational health and safety, social security, social services and social assistance, It is compulsory for the fulfillment of legal obligations in the fields of employment, occupational health and safety, social security, social services and social assistance, It is compulsory for foundations, associations and other non-profit organizations or formations established for political, philosophical, religious or trade union purposes, provided that they comply with the legislation to which they are subject and their purposes, are limited to their fields of activity and are not disclosed to third parties; are intended for current or former members and members or persons who are in regular contact with these organizations and formations

One or more legal bases for personal data processing may coexist to render a personal data processing activity lawful.

In order to fulfill the purposes mentioned above, it becomes necessary to process your data as specified. During the transfer of identity information to our Company, data that are not within the scope of our processing purposes may also be transferred to us. Within the scope of administrative and technical measures, we delete and/or anonymize such data following the periods stipulated in the legislation; however, it is not always possible to ensure this in every case. In such cases, we must seek your explicit consent for the processing of the relevant data.

Rights of the Data Subject Under Article 11 of the KVKK

As personal data owners, if you submit your requests regarding your rights to our Company using the methods specified in this Clarification Text, our Company will conclude the request as soon as possible and within no later than thirty days, free of charge, depending on the nature of the request. However, if a fee is stipulated by the Personal Data Protection Board, the fee in the tariff determined by our Company will be charged. In this context, personal data owners have the right to:

  • Learn whether personal data is being processed,

  • Request information if their personal data has been processed,

  • Learn the purpose of data processing and whether the data is used for its intended purpose,

  • Know the third parties to whom personal data is transferred domestically or abroad,

  • Request the correction of personal data if it is incomplete or inaccurately processed, and request notification of such corrections to third parties to whom the data has been transferred,

  • Request the deletion or destruction of personal data in case the reasons requiring their processing cease to exist, even though they were processed in accordance with the KVKK and other relevant laws, and request that this be notified to third parties to whom the data has been transferred,

  • Object to a result against themselves arising from the analysis of the processed data exclusively through automated systems,

  • Request compensation for the damage in case of suffering damage due to the unlawful processing of personal data.

How Can You Exercise Your Rights?

You may download the “application form” at the following link:
https://kozmokimya.com/data-subject-application-form/,
and submit your request/complaint by filling it out and sending it to us via e-mail at info@kozmokimya.com, or by physically sending it to the address:
Gökevler Mah. 2312 Sk. Ginza Corner Plaza No:16 D:29 Esenyurt / ISTANBUL via cargo/post.

If you submit your request using one of the methods shown above, your request will be evaluated within a maximum of 30 days in accordance with Article 13/2 of the KVKK, and you will be informed accordingly. If your request is accepted, the necessary actions will be promptly carried out by the data controller COMPANY.

Requests are generally processed free of charge. However, if fulfilling the request requires a cost, a fee may be requested by the COMPANY in accordance with Article 7 of the “Communiqué on the Principles and Procedures for the Request to the Data Controller”:
“If the response to the request is to be provided in writing, no fee will be charged for up to 10 pages. For each page exceeding 10 pages, a processing fee of 1 TL may be charged. If the response is to be provided on a recording medium such as a CD or flash drive, the fee may not exceed the cost of the recording medium.”

DEFINITIONS

Explicit Consent: Consent that is based on being informed about a specific subject and declared freely by the data subject.

Company: Refers to Kozmo Kimya, located at Gökevler Mah. 2312 Sk. Ginza Corner Plaza No:16 D:29 Esenyurt / ISTANBUL.

Cookie: Small files stored on users’ computers or mobile devices that help to store preferences and other information related to visited web pages.

Relevant User: Persons who process personal data within the data controller’s organization or in accordance with the authorization and instructions received from the data controller, excluding those responsible for technical data storage, protection, and backup.

Destruction: Refers to the deletion, destruction, or anonymization of personal data.

Contact Person: The real person notified by the data controller during registration to the Registry for the purpose of establishing communication with the Authority regarding the obligations of legal entities based in Turkey or foreign legal entity data controllers’ representatives within the scope of the Law and secondary regulations based on this Law. (The contact person is not authorized to represent the Data Controller. As the name implies, they are appointed only to facilitate communication between the data controller, data subjects, and the Authority.)

Law/KVKK: The Law on the Protection of Personal Data No. 6698, published in the Official Gazette dated April 7, 2016 and numbered 29677, and enacted on March 24, 2016.

Recording Medium: Any environment where personal data is processed, whether fully or partially by automatic means, or by non-automatic means provided that it is part of any data recording system.

Personal Data: Any information relating to an identified or identifiable natural person.

Processing of Personal Data: Any operation performed on personal data, whether by fully or partially automatic means or by non-automatic means provided that it is part of a data recording system, such as collection, recording, storage, preservation, alteration, reorganization, disclosure, transfer, acquisition, making available, classification, or prevention of use.

Board: The Personal Data Protection Board.

Special Categories of Personal Data: Data relating to individuals’ race, ethnic origin, political opinions, philosophical beliefs, religion, sect or other beliefs, appearance and clothing, membership to associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data.

Data Processor: A natural or legal person who processes personal data on behalf of the data controller, based on the authority granted by the data controller.

Data Recording System: A recording system in which personal data is structured according to specific criteria.

Data Subject/Relevant Person: The natural person whose personal data is being processed.

Data Controller: A natural or legal person who determines the purposes and means of the processing of personal data and is responsible for the establishment and management of the data recording system.

Source: Law No. 6698 on the Protection of Personal Data – Regulation on the Deletion, Destruction, or Anonymization of Personal Data – Regulation on the Data Controllers Registry – Communiqué on the Principles and Procedures to be Followed in the Fulfillment of the Obligation to Inform – Communiqué on the Principles and Procedures for Applications to the Data Controller.