INFORMATION AND CONSENT TEXT REGARDING THE PROCESSING OF PERSONAL DATA

1. The Purpose of the Clarification Text and the Position of our Company's Data Supervisor:

Our company Estela Dermokozmetik Tic.Ltd.Şti. (“Cyrene” and/or the “Company”) has the title of “data controller” within the scope of the Law on Protection of Personal Data No. 6698 (“Law”) in terms of personal data regarding customers, and in accordance with this Clarification and Consent Text, the customers cyrene.com It is aimed to inform about the personal data processing activities carried out by .tr and to obtain their explicit consent for the cases specified in article 3 below.

2. Purpose of Processing Personal Data of Customers:

Personal data of customers, business units to make the necessary work to benefit the persons concerned from the products and services offered by Cyrene, and execution of the relevant business processes, Planning and execution of Cyrene's commercial and/or business strategies, ensuring the legal, technical and commercial-occupational security of Cyrene and the related persons who have a business relationship with Cyrene, and the taste, usage habits and habits of the products and services offered by Cyrene. It is processed within the framework of the personal data processing conditions and purposes specified in the 5th and 6th articles of the Law, including the planning and execution of the activities required to be customized according to their needs and promoted to the relevant persons. Detailed information on the processing of personal data by Cyrene can be accessed by Cyrene under the Law No. 6698 at https://www.cyrene.com.tr/ Policy on the Processing and Protection of Personal Data

3. Personal Data to be Processed with the Explicit Consent of Customers and Purposes of Processing:

In this context, personal data of customers; Creating campaigns for customers, cross-selling, determining the target audience, executing activities to increase the user experience by tracking customer movements and improving the functioning of the Cyrene brand website and mobile application and personalizing it according to customer needs, direct and non-direct marketing, personalized marketing and re-marketing. Cyrene's products and/or services, including for the purposes of carrying out marketing activities, tailor-made segmentation, targeting, analysis and internal reporting, market research, planning and execution of customer satisfaction activities, and planning and execution of customer relationship management processes. In line with the Customer's approval within the scope of planning and execution of sales and marketing processes, creating and/or increasing loyalty to the products and/or services offered by Cyrene and shared with the parties specified in this Clarification and Consent Text.

4.Transfer of Personal Data of Customers:

Personal data of customers, business units to carry out the necessary work to benefit the persons concerned from the products and services offered by Cyrene, and the execution of the relevant business processes, Planning and execution of Cyrene's commercial and/or business strategies, ensuring the legal, technical and commercial-occupational security of Cyrene and the related persons who have a business relationship with Cyrene, and the taste, usage habits and habits of the products and services offered by Cyrene. Estela Dermokozmetik Tic.Ltd.Şti, company officials, affiliates, business partners, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, including the planning and execution of activities required to be customized according to their needs and promoted to relevant persons. Our bee can be shared with our suppliers, shareholders, legally authorized public institutions and organizations and private institutions.

5. Personal Data Collection Method and Legal Reason:

Personal data is collected from customers electronically. Personal data collected for the above-mentioned legal reasons can be processed and transferred for the purposes specified in Articles 5 and 6 of the Law and in this Clarification and Consent Text.

6. Customers' Rights as Personal Data Owners:

In accordance with Article 11 of the Law, data owners; (i) to learn whether personal data about them is being processed, (ii) to request information if their personal data has been processed, (iii) to learn the purpose of processing personal data and whether they are used in accordance with its purpose, (iv) to which personal data is transferred in the country or abroad. knowing the third parties, (v) requesting the correction of personal data in case of incomplete or incorrect processing and requesting the notification of the transaction made within this scope to the third parties to whom the personal data has been transferred, to request the deletion or destruction of personal data in case of withdrawal, and to request the notification of the transaction made within this scope to the third parties to whom the personal data has been transferred, (vii) to object to the emergence of a result against the person by analyzing the processed data exclusively through automated systems, and (viii) to receive personal data has the right to demand the compensation of the damage in case of loss due to unlawful processing of the data.

.