Policy of Protection and Processing Personal Data

As Kampotu İlaç Gıda San. Ve Tic. A.Ş. (hereinafter referred to as “Kampotu”), we sensitively protect the personal data of our stakeholders and, as the data controller, we fulfill all our obligations in accordance with the Personal Data Protection Law No. 6698 (“KVKK”) and the relevant legislation. We explain the scope within which our stakeholders' personal data may be processed and the rights of our guests in this information document.

1-Your Personal Data and Our Collection Methods

Within the scope of the Personal Data Protection Law, personal data refers to any information related to an identified or identifiable natural person, such as their name, surname, Turkish Republic ID number, tax number, address, email address, and IP address ("Personal Data"). A special type of this type, Special Personal Data, refers to data related to race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance, membership in associations, foundations, or unions, health, sexual life, criminal convictions, and security measures, as well as biometric and genetic data ("Special Personal Data"). The explanations regarding your Personal Data in this Information Document also cover your Special Personal Data. All information you share with us by phone or electronically is processed under the Personal Data Protection Law.

2- By What Methods and Legal Reasons Do We Collect Your Personal Data?

In all personal data processing activities we conduct, we comply with all obligations and principles stipulated in relevant legislation, especially the KVKK, and take the necessary security measures to ensure the secure processing of your Personal Data. In accordance with the KVKK, we collect your Personal Data in written form through your declarations in our completed visitor form and process it in accordance with Articles 5.1, 5.2, and 6.3 of the KVKK, depending on the purpose of processing.

3- To Whom Can Personal Data Be Transferred?

For this purpose, the persons/organizations to whom personal data may be transferred are: institutions or organizations permitted by the KVKK and other legislative provisions; personal data protection authority, our subsidiaries and/or our direct/indirect domestic/international affiliates/partners, provided that they comply with the legislation; As Kampotu, these are third parties from whom we receive services and collaborate, and who are jointly and severally responsible for implementing data security measures such as protecting all personal data, preventing unauthorized access, and preventing unlawful processing.

Your personal data may only be transferred to third parties from whom we receive support in areas such as storage, archiving, IT support (servers, hosting, programs, cloud computing), and security, located domestically and internationally, particularly in the EU, the US, the UK, OECD countries, India, China, and Russia.

... In addition, based on your explicit consent, in the event that a portion or assets of Kampotu (including, but not limited to, trademarks, domain names, and other commercial enterprise elements) are sold, your Personal Data may be transferred to the transferee, natural or legal persons, and to third parties, both domestic and international, including their stakeholders, business partners, agents, and consultants, to the extent required by the transfer. These third parties may process your Personal Data to a limited extent after due assessment is made by these third parties during the transaction process. In the event of a transfer, the transferee may continue to process your Personal Data, which constitutes the assets and the values attached to these assets, acting as the data controller.

Our Company may process your personal data, which we receive from you through our website and other communication channels, provided that adequate and effective measures are taken in accordance with the security and confidentiality principles set forth in the legislation; Public institutions or organizations authorized to request this data due to legal obligations may share it with domestic and international institutions and business partners with whom we have agreements due to our activities.

4-What Personal Data Do We Process?

The following are examples of the Personal Data we process:

Personal Data You Provide to Us: Name, surname, date of birth, T.A.This includes your national identity number, tax number, phone number, email address, work and residence addresses, security camera recordings, and any other personal data you share with us through the channels specified above.

Other Information, Including Personal Data Collected Automatically: This includes your personal data collected automatically using video recording devices or other means.

Other Information, Including Personal Data Obtained from Other Sources: Updated delivery and address information shared with us by our business partners, suppliers, and other third parties based on your prior consent; This includes your personal data, such as account information.

5- For What Purposes Do We Process Your Personal Data?

We process your personal data without your explicit consent in exceptional cases permitted under the KVKK, but with your explicit consent for certain data specified in the law.

This data is processed in accordance with KVKK Article 5/2 and Art. 6/3 is collected in the following cases:

To fulfill our legal obligations,
To comply with information storage, reporting, and notification obligations stipulated by legislation, relevant regulatory bodies, and other authorities,
To communicate for the provision and delivery of transportation services, maintenance, and repair operations or services,
To receive your questions and complaints, to respond to you, to use these in the event of a dispute when necessary, to establish or perform a contract, to fulfill our legal obligations, or to establish or protect a right, and to protect our legitimate interests, such as reducing costs and using resources efficiently, provided that it does not harm your fundamental rights and freedoms.

We process your Personal Data collected through the channels and methods described above, to send you promotional and informative messages about our new and existing products, and to develop new service models. This data may be processed for the purposes of using cookies for this purpose, organizing corporate communications and other events and invitations within this scope, and providing information about these events.

6- What is the Processing Period for Your Personal Data?

Your personal data will be processed in accordance with the legislation on personal data protection, especially the KVKK, and the mandatory periods stipulated in other legislation, in all cases, as long as the above-mentioned legitimate purposes are not eliminated.

7- Conditions Under Which Your Personal Data May Be Processed?

As specified in Article 5 of the KVKK,

The existence of your explicit consent,
Explicitly provided for in the law,
In cases where you are unable to express your consent due to a practical impossibility or are unable to give your consent. It is necessary for the protection of the life or physical integrity of the person or another person whose legal validity is not recognized.
Processing personal data belonging to the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract.
Processing is necessary for the data controller to fulfill its legal obligation.
Processing is made public by the data subject.
Processing is necessary for the establishment, exercise, or protection of a right.
Processing is necessary for the legitimate interests of the data controller, provided that it does not prejudice the fundamental rights and freedoms of the data subject.

As long as at least one of the processing conditions is met, we collect, record, store, preserve, update, organize, transfer, and process your information in order to continue our services.

8- As the Data Subject Your Rights

As stipulated in Article 11 of the Personal Data Protection Law, as a data subject, you have the right to:

Learn whether your personal data is being processed,
Request information about your personal data if it has been processed,
Learn the purpose of processing your personal data and whether it is being used in accordance with its intended purpose,
Know the third parties, both domestic and international, to whom your personal data has been transferred,
Request correction of your personal data if it has been processed incompletely or inaccurately,
Request deletion or destruction of your personal data under the conditions stipulated in Article 7 of the Law,
Request notification of the actions taken pursuant to the above two articles to third parties to whom your personal data has been transferred,
Object to any detrimental consequences arising from the analysis of processed data exclusively through automated systems,
Damage due to unlawful processing of your personal dataIf you incur a loss, you have the right to demand compensation for the damages.

In this context, you can fill out the application form available on our website "www.kampotu.com.tr" and submit it to the email address "[email protected]", which includes your requests regarding these rights. You must also send this Application Form with a secure electronic signature to the email address with the extension "kep" provided to you, or with a wet signature and identification documents to the mailing address below, or via notary. Kampotu will process your request free of charge as soon as possible and no later than 30 (thirty) days after the relevant documents are received. If any costs arise from fulfilling your requests, we may only charge you the fees set by the Personal Data Protection Board.

Postal Address:Aydınlı Mah. IAYOSB Gazi Bulvarı No:50/A Tuzla/Istanbul

(Istanbul Trade Registry No: 838272, Mersis No: 0494 0586 4950 0001)

E-mail Address: [email protected]

For more detailed information on this topic You can review Personal Data Protection Law No. 6698 and visit the website www.kvkk.gov.tr.

Sincerely,

Kampotu İlaç Gıda San.Ve Tic.A.Ş. (“Kampotu”)

Address: İAYOSB Aydınlı Mah. Gazi Bulvarı No:50/A Tuzla/Istanbul

Phone: +90 (216) 2662006

E-mail: [email protected]