Privacy policy

PRIVACY POLICY AND KVKK

KVKK CLARIFICATION STATEMENT

The subject of this KVKK Disclosure Statement is to state the principles on which OSD Tekstil Limited Şirketi (“Company”) processes all kinds of personal data of all persons associated with the Company in accordance with the Personal Data Protection Law No. 6698 (“Law”). . Accordingly, the Company, which is the data controller in accordance with Article 3 of the Law, personal data owners (employees, prospective employees, customers, suppliers, consultants, business partners, shareholders, company officials, company representatives, contractual persons) in accordance with Article 10 of the Law. It informs and enlightens the persons with whom it has relations and its employees, persons who are the addressees of all kinds of legal proceedings, its visitors and the real or legal persons with whom it communicates for whatever reason) with this KVKK Disclosure Declaration. Personal data and special categories of personal data processed by the company are stored securely in physical or electronic environment for the appropriate period of time for the purpose of processing. The Company declares that it acts in accordance with the obligations stipulated in all relevant legislation, especially KVKK, regarding the protection of personal data within the scope of the activities in question.




1.Data Controller and Representative

Data Controller


Company Title: OSD Textile Limited Company

Address: Hacıeyüplü Mahallesi, 3125 Sokak, No:8, PK:20050, Merkezefendi/Denizli

Tax Number: 6481365350

Tax Office: Gökpınar Tax Office

Mersis Number:

Phone Number: +90 258 371 10 13

Email: infocozyhome@yahoo.com

Web Address: cozyhome.com.tr

KEP Address: osdtekstil@hs01.kep.tr



2.Purposes of Processing Personal Data

2.1. Personal data is processed by the data controller or the legal/real persons he/she will appoint in order to achieve the following purposes, in accordance with the general principles specified in Article 4 of the Law, based on one or more of the personal data processing conditions specified in Articles 5 and 6. In all personal data processing activities carried out by the company, we act in accordance with the obligations specified in all relevant legislation, especially the Law, and the decisions of the Personal Data Protection Board. If explicit consent is given;


Execution of Information Security Processes

Execution of Access Authorizations

Conducting Activities in Compliance with Legislation

To fulfill the obligations undertaken pursuant to the distance sales contract and other agreements concluded with customers

Execution of Customer Relationship Management Processes

Carrying out Activities for Customer Satisfaction

Tracking of Requests / Complaints

Email, SMS, whatsapp etc. Sending messages, bulletins and other publications through the platforms will be processed for the purposes listed above and may be shared with the persons specified in this information text.

2.2. Apart from the purposes mentioned above, personal data may also be processed to ensure that the legal obligations determined by the regulatory and supervisory authorities and specified in the Law and other legislation are fulfilled.




3.Transfer of Personal Data and Transfer Purposes

Personal data processed within the scope of the declared purposes are processed by the Company in line with the principles in Article 8 of the Law, for the purpose of carrying out the activities of the Company, based on the express consent of the personal data owner, if there is an explicit consent of the personal data owner, or based on the express consent of the personal data owner, in accordance with the 2nd paragraph of Article 5 and Article 6 of the Law. In case the data processing conditions stipulated in paragraph 3 are present, it may be transferred based on these provisions to the following persons who have a contractual relationship with the Company, limited to the subject of the contract.


To the Company's business partnerships, dealers or affiliates in order to carry out and ensure the continuity of commercial activities,

To suppliers and supplier employees on a limited basis for the purpose of providing outsourced products and services,

To audit firms within the scope of relevant contracts for the purpose of auditing commercial activities in accordance with the provisions of the relevant legislation,

Legal and tax advisors, financial advisors and other advisors, if any,

To shareholders, limited to the purpose of designing and implementing strategies regarding the Company's commercial activities,

To public institutions and organizations, limited to their requests within the legal authority of the relevant public institutions and organizations,

To institutions and organizations designated to ensure the fulfillment of legal obligations specified in the Law,

To banks and insurance companies regarding the commercial activities of the Company,

Name, surname and contact information of the customers are provided to payment institutions for the purpose of identity verification in accordance with the payment institution framework agreement to be approved at the payment stage and in accordance with the Regulation on Measures for the Prevention of Laundering Proceeds of Crime and Financing of Terrorism published in the Official Gazette dated 9 January 2008 and numbered 26751,



4.Transfer Abroad

4.1. The company may transfer personal data abroad at any time by obtaining the explicit consent of the personal data owner.


4.2. In the absence of the express consent of the personal data owner, personal data may be transferred abroad if the conditions for data processing are met without seeking explicit consent, as stipulated in the 2nd paragraph of Article 5 and the 3rd paragraph of Article 6 of the Law. In this case, personal data will be transferred only to individuals and organizations resident in these countries, after they are declared foreign countries with adequate protection, as determined by the Personal Data Protection Board, in accordance with Article 9 of the Law; For countries where it is determined and declared that there is no adequate protection, data may be transferred, provided that it is limited to cases where the data controllers in Turkey and the relevant foreign country undertake to provide adequate protection in writing and the Board's permission can be obtained for the relevant transfer.



5.Collection Method and Legal Reason for Personal Data

5.1. Personal data is collected by our Company or real or legal persons who process data on behalf of the Company; website, contracts made with the personal data owner, information forms, surveys, social media applications, call centers, participation in training, seminars, fairs and similar environments organized by the Company, with whom the Company has a business relationship and/or receives services complementary to its activities. It is collected through verbal, written or electronic channels, including but not limited to those listed here, through the parties, contracted organizations, contact offices and other physical environments and other similar channels, and where possible, personal data is collected with the express consent of the owner.



5.2. Personal data is obtained in all business processes for the purposes of ensuring that the Company can continue its commercial life and fulfill its obligations arising from the law completely and accurately, and the personal data collected in this regard is based on the data processing conditions specified in Article 5 of the Law, pursuant to Article 4 of the Law. It is processed in accordance with the general principles listed in the article. In this context, the following types of "personal data" may be processed in accordance with the terms and conditions stated in the Information Text:


Identity Data: Name, Surname, date of birth and other identity data


Contact Data: Your address, telephone number, e-mail address and other contact data.


Customer Transaction Data: Your voice and other digital information, such as your voice call records kept in accordance with call center standards



6.Preservation of Personal Data

Your personal data is processed for a limited period of time, in order to fulfill the purposes described in the information text and in any case, in accordance with our company's practices and commercial life practices; After the period expires, it is deleted, destroyed or made anonymous. Your personal data that you have entered into the system can only be changed by you, and all necessary technical and administrative measures are taken by our Company to prevent anyone else from accessing or changing this information.



7.Our Cookie Policy

In order to carry out online behavioral advertising and marketing, our company has the right to associate the behavior of the user visiting the site with a cookie in the browser, even if they are not a member, and to define remarketing lists based on metrics such as the number of pages viewed, duration of visit and number of target completions. You can learn about the cookies and similar devices we use, their purposes, how you can manage your preferences, and other information that may be of interest to you in our Cookie Policy.


8.Rights of Personal Data Owner

8.1. The personal data owner has the following rights listed in Article 11 of the Law:


Learning whether personal data is being processed or not,

Requesting information if personal data has been processed,

Learning the purpose of processing personal data and whether they are used for their intended purpose,

Knowing the third parties to whom personal data is transferred at home or abroad,

Requesting correction of personal data if they are incomplete or incorrectly processed,

Requesting the deletion or destruction of data in case the reasons requiring the processing of personal data disappear,

To request that the information corrected or deleted upon the request of the personal data owner be notified to third parties to whom the personal data has been transferred, if any,

Objecting to the emergence of a result that is unfavorable to the individual by analyzing the processed data exclusively through automatic systems,

Request compensation for damages in case of damage due to unlawful processing of personal data.

8.2. In accordance with the 1st paragraph of Article 13 of the Law, personal data owners will be able to make their requests to exercise their above-mentioned rights with the following information and methods in accordance with the "Communiqué on the Procedures and Principles of Application to the Data Controller" published in the Official Gazette dated 10 March 2018 and numbered 30356. .



Information that must be included in the application:


The applicant's name, surname and signature if the application is written,

If the applicant is a citizen of the Republic of Türkiye, T.R. identification number; If not, passport number along with nationality or identification number, if any,

The applicant's residence or workplace address subject to notification,

The applicant's notification e-mail address, telephone or fax number,

The subject of the applicant's request,

Information and documents regarding the subject of the applicant's request.



Application Methods:


The applicant can personally deliver it to the Company's address by filling out the attached application form ("ANNEX-1"), with a wet signature, in a sealed envelope and with the note "Information Request Pursuant to the Personal Data Protection Law" on the envelope, to the Company's information office at the address below. .

The applicant can send a notification to the Company address through a notary public, but the phrase "Information Request Pursuant to the Personal Data Protection Law" must be added to the notification envelope.

Besides these;


With the secure electronic signature defined in the Electronic Signature Law No. 5070,

With mobile signature,

to osdtekstil@hs01.kep.tr, which is the registered e-mail address of the Company, with the note "Information Request Pursuant to the Personal Data Protection Law" in the subject line of the e-mail,

Applications can also be made by using the e-mail address previously notified to the Company and registered in the Company's system.



8.3. As a personal data owner, in the application containing explanations regarding the request; The requested matter must be clear and understandable, the requested subject must be related to the personal data owner, or if the application is made on behalf of someone else, one must be specifically authorized in this regard and the authority must be documented, the application must contain identity and address information, and documents proving identity must be attached to the application.


8.4. It is important that the information shared during the application is conveyed correctly, this is necessary in order to use the rights on data within the scope of the Law, and the responsibility arising from providing false or inaccurate information belongs to the relevant person.


8.5. Applications will be finalized as soon as possible and within 30 (thirty) days at the latest.


8.6. If responding to applications regarding the processing of personal data requires an additional cost, the relevant person (applicant) may be charged the fee in the tariff determined by the Personal Data Protection Board.


9.Request to Update Information

In case of any change in their data, the personal data owner will be able to notify their updated and accurate personal information to the Company address or e-mail address infocozyhome@yahoo.com.


10.Changes

The Company reserves the right to make changes to this Disclosure Statement in case of changes in the Law or the methods determined by the Personal Data Protection Board.


ANNEX 1


Application Form for Obtaining Information within the Scope of KVKK



Name and surname :


T.R. Identification number :


(In Case of Not Being a Turkish Citizen


Nationality, Passport or Identity Number (if applicable)


Address:


Email :


Telephone and/or Fax:


Demand  :


Descriptions:


Signature: