PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA
Purpose of this notice and our company’s position as data controller
Our company, Cosmos Designe Spor Ekipmanları Mobilya Nakliyat İthalat İhracat Sanayi ve Ticaret Limited Şirketi (“Cosmos Pilates” and/or the “Company”), is the “data controller” for customers’ personal data under the Turkish Personal Data Protection Law No. 6698 (the “Law”). This notice is intended to inform customers, as required by that Law, about the personal-data processing carried out by Cosmos Pilates. Under the Law, the data you share is stored in the IKAS data centre. The data centre of the firm we receive this support from holds numerous certifications on this subject.
Purpose of processing customers’ personal data
Customers’ personal data is processed, within the conditions and purposes of personal-data processing set out in Articles 5 and 6 of the Law, so that the relevant business units can carry out the work needed for people to benefit from the products and services offered by Cosmos Pilates and can run the related business processes; so that the relevant business units can carry out the work needed to conduct the commercial activities of Cosmos Pilates and can run the related business processes; for the planning and execution of Cosmos Pilates’ commercial and/or business strategies; and to ensure the legal, technical and commercial-business security of Cosmos Pilates and of the people who are in a business relationship with Cosmos Pilates. Detailed information on the processing of personal data can be reached in the Policy on the Processing and Protection of Personal Data under Law No. 6698 by Cosmos Pilates.
Personal data to be processed with customers’ explicit consent, and the purposes
The personal data to be processed with explicit consent, and the purposes of that processing, are set out in the Consent Text.
Transfer of customers’ personal data
Customers’ personal data may be shared, within the personal-data processing conditions and purposes set out in Articles 8 and 9 of the Law, with Cosmos Designe Spor Ekipmanları Mobilya Nakliyat İthalat İhracat Sanayi ve Ticaret Limited Şirketi, company officers, our affiliates, business partners, suppliers, shareholders, and public institutions and private organisations that are legally authorised. This includes the work needed for people to benefit from the products and services offered by Cosmos Pilates, the conduct of Cosmos Pilates’ commercial activities, the planning and execution of commercial and/or business strategies, and the planning and execution of activities needed to ensure the legal, technical and commercial-business security of Cosmos Pilates and of the people in a business relationship with Cosmos Pilates.
Method of collecting personal data, and the legal ground
Personal data is collected from customers by electronic means. Personal data collected on the legal grounds stated above may be processed and transferred for the purposes set out in Articles 5 and 6 of the Law, in this notice, and, where explicit consent is required, in the Consent Text.
Rights of customers as data subjects
Under Article 11 of the Law, data subjects have the right: (i) to learn whether personal data relating to them is processed; (ii) if it has been processed, to request information about it; (iii) to learn the purpose of processing and whether it is used in line with that purpose; (iv) to know the third parties to whom personal data is transferred in Turkey or abroad; (v) to request correction if personal data is incomplete or inaccurate, and to request that this is notified to the third parties to whom it was transferred; (vi) to request deletion or destruction of personal data if the reasons requiring processing disappear, even though it was processed in accordance with the Law and other relevant laws, and to request that this is notified to the third parties to whom it was transferred; (vii) to object to a result that is to their detriment and arises solely from analysis of processed data by automated systems; and (viii) to claim compensation if they suffer damage because personal data was processed unlawfully. Requests to use these rights may be sent by data subjects by the methods set out in the Policy on the Processing and Protection of Personal Data under Law No. 6698 by Cosmos Pilates. Cosmos Pilates will assess those requests and conclude them within 30 days. Cosmos Pilates reserves the right to charge the fee tariff, if any, set by the Personal Data Protection Board for such requests.
CONSENT TEXT ON THE PROCESSING OF PERSONAL DATA
Our company, Cosmos Designe Spor Ekipmanları Mobilya Nakliyat İthalat İhracat Sanayi ve Ticaret Limited Şirketi (“Cosmos Pilates” and/or the “Company”), is the “data controller” for customers’ personal data under Law No. 6698 (the “Law”). This Consent Text aims to obtain customers’ explicit consent for the personal-data processing activities carried out by Cosmos Pilates and listed below, as required by that Law. Where the personal-data processing conditions in Articles 5/2 and 6/3 of the Law are not met, Cosmos Pilates must obtain customers’ explicit consent in order to process personal data in the situations below. For processes that do not require explicit consent, processing continues under the Privacy Notice. In processes that do require explicit consent, data is still processed in line with the basic principles stated in the Privacy Notice.
In this scope, customers’ personal data is processed for the purposes stated under Section 3 – Article IV of the Policy on the Processing and Protection of Personal Data under Law No. 6698 by Cosmos Pilates, and in accordance with the procedure set out there. Accordingly, personal data may be processed in line with the approval the customer gives, and may be shared for these purposes with the parties named in the Privacy Notice. The purposes include creating campaigns for customers; business partners of Cosmos Pilates offering Cosmos Pilates customers special opportunities they can use at Cosmos Pilates; cross-selling; defining target audiences; following customer behaviour in order to carry out activities that improve the user experience; developing the operation of the Cosmos Pilates website and mobile application and personalising them to customer needs; direct and indirect marketing, personalised marketing and remarketing; personalised segmentation, targeting, analysis and internal reporting; planning and carrying out market research and customer-satisfaction activities; recommending and presenting the products and services offered by Cosmos Pilates by customising them to the relevant people’s tastes, usage habits and needs, and planning and carrying out customer-relationship processes; in general, planning and carrying out the sales and marketing processes of Cosmos Pilates’ products and/or services; and planning and carrying out processes that create and/or increase loyalty to the products and/or services offered by Cosmos Pilates.