Clarification Text

Clarification Text

Purpose and Scope of the Information Notice

As Carpex Kurumsal Hijyen Çözümleri Tic.A.Ş., we take the necessary measures to protect your personal data within the scope of Law No. 6698 on the Protection of Personal Data (hereinafter referred to as the “KVKK” or the “Law”). We process your personal data, in our capacity as the “data controller,” in accordance with the KVKK and relevant legislation, for the purposes and through the methods explained below.

This Information Notice on the Processing of Personal Data has been prepared pursuant to Article 10 of the KVKK titled “Obligation of the Data Controller to Inform,” in order to transparently inform you about the identity of the data controller, the methods and legal grounds for collecting your personal data, the purposes of processing such data, to whom and for what purposes it may be transferred, the data processing period, and your rights listed under Article 11 of the KVKK.

Explanations made in this Information Notice regarding “Your Personal Data” also cover your “Special Category Personal Data.”

Data Controller

Company Name: Carpex Kurumsal Hijyen Çözümleri Tic. A.Ş.
Address:Aydınlı - Birlik OSB Mah. 1 No'lu Cad. No: 4/2 Tuzla / İstanbul, Türkiye
(Hereinafter referred to as the “Company” or “Carpex Kurumsal” within the scope of this Information Notice.)

Method and Legal Grounds for Collecting Personal Data

Your personal data may be collected verbally, in writing, or electronically through automatic or non-automatic methods via the Company’s affiliated units, website, social media platforms, call center, mobile applications, and similar channels.
Your personal data may be processed by being created and updated as long as your relationship with the Company continues and may be stored in both digital and physical environments.
In line with the purposes specified under the heading “Processed Personal Data and Purposes of Processing,” your personal data may be processed and transferred based on your explicit consent pursuant to Article 5/1 of Law No. 6698, or pursuant to Article 5/2 clauses (c), (e), and (f) of the Law without requiring explicit consent.

Processed Personal Data and Purposes of Processing

Your personal data is processed securely and in compliance with the Law on the Protection of Personal Data, either due to legal obligations or in order to provide more efficient services within the scope of the Company’s business operations.

Within this scope, the following categories of personal data are collected:

Contact Data

Data used to contact an individual (telephone number, address, e-mail address, IP address).

Identity Data

Data containing information regarding an individual’s identity (name and surname, Turkish ID number, mother’s name, father’s name, place and date of birth, gender, copy of ID card, tax number, social security number, nationality, employee card).

Transaction Security Data

Data consisting of digital traces created as a result of processing personal data (IP address information, website login and logout records).

Your collected personal data is processed for the following purposes:

Enabling real and/or legal third parties (employees, visitors, suppliers, business partners, etc.) related to the Company to benefit from the products and services of the Company and/or its affiliated centers and units,

Fulfilling existing and potential legal and regulatory obligations arising from all relevant laws and secondary legislation,

Carrying out inspection and regulatory duties conducted by authorized public institutions and professional organizations with public authority,

Responding to information and document requests from judicial bodies and/or administrative authorities,

Conducting listing, reporting, verification, and analysis activities regarding the use of products and services offered by the Company and its affiliated units; producing statistical and scientific data; improving products and services; increasing customer satisfaction; and making user-specific customizations,

Conducting market research, promotion, and necessary notifications related to products and services; evaluating complaints and suggestions; and contacting you directly via communication channels shared with the Company,

Taking all necessary technical and administrative measures to ensure data security for systems and applications,

within the scope of personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698.

To Whom and for What Purposes Processed Personal Data May Be Transferred

By ensuring that all necessary technical and administrative measures are taken to provide an adequate level of security in accordance with the KVKK and relevant legislation, your personal data may be transferred for the purposes stated above to:

-Persons, institutions, and/or organizations permitted by relevant legislation,
-Lawyers or law firms for the purpose of following up legal affairs,
-Certified public accountants for conducting financial and accounting processes,
-Our direct/indirect domestic and international shareholders,
-Private insurance companies, banks, funds, and foundations,
-Our subsidiaries and/or affiliates,
-Consultants,
-Business partners,
-Domestic and international organizations with whom we cooperate, and from whom we receive or to whom we provide services on a contractual basis,within the framework of the personal data processing conditions and purposes set forth in Articles 8 and 9 of the KVKK.

Data Processing and Retention Period

Your personal data is processed in accordance with all applicable laws and regulations to which the Company and its affiliated units are subject, limited to the purposes specified in this Information Notice and in compliance with data processing and statute of limitation periods stipulated by legislation. In the event of changes to data processing periods under the law, the newly determined periods shall apply.
In accordance with the principle of purpose limitation, personal data is processed only for the period required to fulfill the purposes specified in this Information Notice and, in any case, in line with Company practices and commercial customs. Upon expiration of such periods, personal data is deleted, destroyed, or anonymized.
Process-based personal data retention periods are specified below.

Rights of the Data Subject

As a data subject, you may exercise your rights set forth under Article 11 of the KVKK by submitting your requests in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller” either:
In writing to: Aydınlı - Birlik OSB Mah. 1 No'lu Cad. No: 4/2 Tuzla / İstanbul
Or electronically via e-mail to:aroma@carpex.com.tr
More detailed regulations regarding this matter are provided in the Carpex Kurumsal Personal Data Application and Response Procedure and the Carpex Kurumsal Personal Data Protection and Processing Policy.