Better Sleep and More

Budizzz Community PDPA

BARTKA INNOVATION RESEARCH DEVELOPMENT INC.

INFORMATION TEXT ON THE PROCESSING OF PERSONAL DATA

OF BUDIZZZ COMMUNITY USERS

Data Controller

Your personal data will be transferred to Göktürk Merkez Mah. as the data controller. Camlik Cad. Bartka Innovation Research Development Inc. located at 36/1A Eyüpsultan/Istanbul. ("Company") within the scope of the provisions of the Personal Data Protection Law No. 6698 ("KVKK") and within the framework of this Information Text Regarding the Processing of Personal Data of Budizzz Community Users ("Information Text").

Our company respects your concerns regarding the protection of your privacy and personal data and works to establish and maintain a trusting relationship with you. In this context, our Company processes your personal data in accordance with all legislative provisions regarding the protection of personal data, especially KVKK, ensures that your data is hosted securely, and takes all necessary security measures against possible unlawful access. This Information Text explains the extent to which your personal data collected within the framework of sales and after-sales activities of products and/or services offered by our Company or on behalf of our Company are processed.

Method of Collection of Your Personal Data

Your personal data may be collected by our Company from electronic and/or physical media through fully or partially automated or non-automatic means, provided that it is part of any data recording system; “Budizzz” mobile application, the Budizz community within the application and all kinds of software integrated into this community, printed forms (contracts, technical support forms, invoices, etc.), call / contact center, e-mail, SMS, telephone, fax, It is collected through integrated systems belonging to cargo/mail, cookies and other identification technologies, request/complaint platforms, authorized public institutions and organizations and other relevant 3rd parties.

Your Processed Personal Data Categories, Purposes of Processing Your Personal Data and Legal Reasons

Within the scope of the personal data processing conditions specified in Articles 5 and 6 of the KVKK, providing users with access to the Budizzz community within the Budizzz mobile application and the software integrated into this community, granting the right to benefit from this community, allowing users to communicate with other users in the community. ensuring the establishment of the community, monitoring whether users benefit from the community, providing user information, user relations management; Evaluating and resolving requests and/or complaints; ensuring user satisfaction; Your personal data categories processed within the scope of the processes of information security, ensuring data accuracy and quality standards, and fulfilling obligations arising from the legislation, and the purposes of processing such personal data are explained in detail below.

Personal Data Category / Personal Data Processing Purposes and Legal Reasons for Processing

Identity Data

Your data in this category shall be processed by the data controller, provided that data processing is mandatory for the establishment, exercise, or protection of a right in accordance with subparagraph (e) of the 2nd paragraph of Article 5 of the KVKK, and provided that it does not harm the fundamental rights and freedoms of the relevant person in accordance with subparagraph (f). When data processing is mandatory for legitimate interests, personal data is processed within the scope of processing conditions (legal reasons) and for the following purposes:

Conducting Audit / Ethics Activities
Conducting Activities in Compliance with Legislation
Execution of Commitment Processes to Company/Product/Services
Follow-up and Execution of Legal Affairs
Conducting Communication Activities
Execution/Audit of Business Activities
Carrying out Business Continuity Ensuring Activities
Execution of Goods/Service After-Sales Support Services
Execution of Goods/Service Sales Processes
Execution of Customer Relationship Management Processes
Carrying out Activities for Customer Satisfaction
Carrying out Storage and Archive Activities
Execution of Contract Processes
Follow-up of Requests/Complaints
Execution of Supply Chain Management Processes
Providing Information to Authorized Persons, Institutions and Organizations

Your data in this category, if found in accordance with the first paragraph of Article 5 of the KVKK, is processed within the scope of the express consent personal data processing condition (legal reason) and for the following purposes:

Conducting Marketing Analysis Studies
Execution of Advertising / Campaign / Promotion Processes
Execution of Marketing Processes of Products / Services

Communication Data

Your data in this category shall be processed by the data controller, provided that data processing is mandatory for the establishment, exercise or protection of a right in accordance with subparagraph (e) of the 2nd paragraph of Article 5 of the KVKK, and provided that it does not harm the fundamental rights and freedoms of the relevant person in accordance with subparagraph (f). When data processing is mandatory for legitimate interests, personal data is processed within the scope of processing conditions (legal reasons) and for the following purposes:

Conducting Audit / Ethics Activities
Conducting Activities in Compliance with Legislation
Execution of Commitment Processes to Company/Product/Services
Follow-up and Execution of Legal Affairs
Conducting Communication Activities
Execution/Audit of Business Activities
Carrying out Business Continuity Ensuring Activities
Execution of Goods/Service After-Sales Support Services
Execution of Goods/Service Sales Processes
Execution of Customer Relationship Management Processes
Carrying out Activities for Customer Satisfaction
Carrying out Storage and Archive Activities
Execution of Contract Processes
Follow-up of Requests/Complaints
Execution of Supply Chain Management Processes
Providing Information to Authorized Persons, Institutions and Organizations

Your data in this category (such as the Budizzz community username) is processed within the scope of the express consent personal data processing condition (legal reason) and for the following purposes, if found in accordance with the 1st paragraph of Article 5 of the KVKK:

Conducting Marketing Analysis Studies
Execution of Advertising / Campaign / Promotion Processes
Execution of Marketing Processes of Products / Services

Financial Data

Conducting Audit / Ethics Activities
Conducting Activities in Compliance with Legislation
Carrying out Finance and Accounting Affairs
Follow-up and Execution of Legal Affairs
Execution/Audit of Business Activities
Execution of Goods/Service After-Sales Support Services
Execution of Goods / Service Sales Processes
Execution of Customer Relationship Management Processes
Carrying out Storage and Archive Activities
Execution of Contract Processes
Tracking of Requests / Complaints
Providing Information to Authorized Persons, Institutions and Organizations

Legal Transaction Information

Conducting Audit / Ethics Activities
Conducting Activities in Compliance with Legislation
Follow-up and Execution of Legal Affairs
Execution of Goods/Service After-Sales Support Services
Carrying out Storage and Archive Activities
Execution of Contract Processes
Tracking of Requests / Complaints
Providing Information to Authorized Persons, Institutions and Organizations

Transaction Security Data

Your data in this category is mandatory for the data controller to fulfill its legal obligation in accordance with subparagraph (d) of the 2nd paragraph of Article 5 of the KVKK, data processing is mandatory for the establishment, exercise, or protection of a right in accordance with subparagraph (e) and (f). In accordance with the clause), personal data is processed within the scope of personal data processing conditions (legal reasons) and for the following purposes:

Execution of Information Security Processes
Conducting Audit / Ethics Activities
Conducting Activities in Compliance with Legislation
Execution of Goods / Service Sales Processes
Execution of Customer Relationship Management Processes
Carrying out Storage and Archive Activities
Execution of Contract Processes
Tracking of Requests / Complaints
Ensuring the Security of Data Controller Operations
Providing Information to Authorized Persons, Institutions and Organizations

Customer Transaction Information

Conducting Audit / Ethics Activities
Conducting Activities in Compliance with Legislation
Follow-up and Execution of Legal Affairs
Execution/Audit of Business Activities
Execution of Goods / Service Sales Processes
Execution of Goods/Service After-Sales Support Services
Execution of Customer Relationship Management Processes
Providing Information to Authorized Persons, Institutions and Organizations
Carrying out Storage and Archive Activities
Execution of Contract Processes
Tracking of Requests / Complaints
Ensuring the Security of Data Controller Operations
Providing Information to Authorized Persons, Institutions and Organizations

Conducting Marketing Analysis Studies
Execution of Advertising / Campaign / Promotion Processes
Execution of Marketing Processes of Products / Services

Marketing Data

Conducting Activities in Compliance with Legislation
Follow-up and Execution of Legal Affairs
Carrying out Storage and Archive Activities
Providing Information to Authorized Persons, Institutions and Organizations

Execution of Commitment Processes to Company / Product / Services
Conducting Communication Activities
Execution of Customer Relationship Management Processes
Conducting Marketing Analysis Studies
Execution of Advertising / Campaign / Promotion Processes
Execution of Marketing Processes of Products / Services

Visual and Audio Data

(The images and videos you share through the Budizzz Community are in line with your own choice and will. Additionally, your audio data is processed if you contact customer services within the scope of the membership processes.)

Your data in this category is mandatory for the data controller to fulfill its legal obligation in accordance with subparagraph (d) of the 2nd paragraph of Article 5 of the KVKK, data processing is mandatory for the establishment, exercise or protection of a right in accordance with subparagraph (e) and (f). In accordance with the clause), personal data is processed within the scope of personal data processing conditions (legal reasons) and for the following purposes:

Conducting Audit / Ethics Activities
Conducting Activities in Compliance with Legislation
Follow-up and Execution of Legal Affairs
Conducting Internal Audit / Investigation / Intelligence Activities
Execution of Customer Relationship Management Processes
Carrying out Activities for Customer Satisfaction
Carrying out Storage and Archive Activities
Ensuring the Security of Data Controller Operations
Providing Information to Authorized Persons, Institutions and Organizations

Conducting Marketing Analysis Studies
Execution of Advertising / Campaign / Promotion Processes
Execution of Marketing Processes of Products / Services

Request / Complaint Data

Your data in this category is mandatory for the data controller to fulfill its legal obligation in accordance with subparagraph (d) of the 2nd paragraph of Article 5 of the KVKK, data processing is mandatory for the establishment, exercise or protection of a right in accordance with subparagraph (e) and (f). In accordance with the clause), personal data is processed within the scope of personal data processing conditions (legal reasons) and for the following purposes:

Conducting Audit / Ethics Activities
Follow-up and Execution of Legal Affairs
Conducting Communication Activities
Execution/Audit of Business Activities
Receiving and Evaluating Suggestions for Improving Business Processes
Execution of Customer Relationship Management Processes
Carrying out Activities for Customer Satisfaction
Carrying out Storage and Archive Activities
Tracking of Requests / Complaints
Providing Information to Authorized Persons, Institutions and Organizations

Conducting Marketing Analysis Studies
Execution of Advertising / Campaign / Promotion Processes
Execution of Marketing Processes of Products / Services

Transfer of Your Personal Data to Third Parties Domestic and/or Abroad

Within our company, your personal data can only be accessed by our employees who have limited access to the purposes detailed above to the extent necessary to fulfill their duties.

On the other hand, your collected personal data will be transferred to the following recipient groups in accordance with the personal data processing conditions specified in Articles 8 and 9 of the KVKK and if the above-mentioned personal data processing conditions (legal reasons) for the relevant data category are also present in terms of transfer purposes. can be transferred:

Your personal data is limited to identity, communication, legal transactions, customer transactions, transaction security, finance, marketing, visual and audio data, and request/complaint data categories, especially for the purpose of providing products and/or services in terms of carrying out the company's activities. For the data category, our suppliers located at home and/or abroad, including our group companies that act as suppliers for the purposes specified in the relevant category (e.g. legal consultants, auditing companies, companies providing customer service, agencies, companies from which services are received within the scope of events and organizations, and information technologies and data hosting service providers),

In this context, especially Discourse, which provides the software infrastructure (For detailed information, please see: https://www.discourse.org/)

Your personal data limited to identity, communication, customer transaction, transaction security, and marketing data categories, especially for the purposes of personalizing our company's products/services and carrying out personalized marketing activities using the pseudonym method, can be processed for the purposes and cryptographic methods specified in the relevant category for each data category above. to our third-party service providers located abroad (e.g. Google, Criteo, Microsoft and other third party pseudonym service providers),
To banks and payment service organizations and payment systems organizations located in the country and/or abroad for the purposes specified in the relevant category for each data category above, especially payment, finance, accounting, and collection purposes for products/services,
Identity, communication, legal transaction, customer transaction, transaction security, finance, marketing, visual and audio, and demand/complaint, especially for the purpose of carrying out our Company's legal and financial review activities in possible mergers, acquisitions, joint ventures, divisions, and other structural changes. Your personal data is limited to data categories, for the purposes specified in the relevant category for each data category above, potential buyers, sellers, or other parties to whom the transaction is addressed, and their employees, consultants, and database service members involved in the relevant process, who are under the obligation of confidentiality. to its providers,
Corporate communication activities (e.g. promotions, campaigns, promotions, surveys, sweepstakes, and competitions organized by the Company in electronic and/or physical media, especially social media platforms (e.g. Facebook, Instagram, and Twitter); products/services offered by the Company Your personal data limited to identity, communication, customer transaction, marketing, request/complaint, visual and audio data categories, especially for the purposes of planning and/or carrying out the evaluations/comments on the Company's electronic platforms) are determined in the relevant category for each data category above. to social media platforms, press/broadcasting organizations located in the country and/or abroad and other third parties who provide access to the content by making it available to the public for these purposes.
Your personal data is limited to identity, communication, legal transaction, customer transaction, transaction security, finance, marketing, visual and audio, and request/complaint data categories, especially for the purposes of fulfilling our company's legal obligations and monitoring legal affairs, for each data category above. To authorized public institutions and organizations (e.g. courts) located at home and/or abroad for the purposes specified in the relevant category.

Before transferring your personal data to third parties for purposes subject to explicit consent, this issue will be submitted to your approval and if you give explicit consent, such transfer will be carried out. Accordingly, for advertising, marketing, and other purposes, the shares you make on the Budizzz Community will not be transferred to social media platforms, press/broadcasting organizations, and other third parties who provide access by making the content public in this context, without consulting your approval and obtaining your explicit consent.

Processing Period of Your Personal Data

We store your personal data obtained during our company activities in accordance with the general principles and regulations specified in our Company's policies and procedures regarding storage and destruction, prepared in accordance with the Constitution, KVKK, the Regulation on Deletion, Destruction or Anonymization of Personal Data and other relevant legislation. and destroys it.

In this context, your personal data will be destroyed if all of the above personal data processing conditions are eliminated within the scope of Articles 5 and 6 of the KVKK. Accordingly, your personal data will continue to be processed during the legal statute of limitations following the termination of your relationship with our Company or the application and/or supply of products and/or services. Your personal data processed based on express consent personal data processing condition will be destroyed in the first destruction period if you withdraw your explicit consent. In terms of your requests regarding the destruction of your personal data, we kindly request you to review the 6th section of this Information Text.

Your Rights Under KVKK

We hereby inform you that, as a personal data owner, you have the following rights in accordance with Article 11 of the KVKK:

Learning whether your personal data is being processed or not,
Requesting information if your personal data has been processed,
Learning the purpose of processing your personal data and whether they are used for their intended purpose,
Knowing the third parties to whom your personal data is transferred at home or abroad,
Requesting correction of your personal data if it has been processed incorrectly or incompletely, and requesting that the action taken in this context be notified to third parties to whom your personal data has been transferred,
To request the deletion or destruction of your personal data in the event that the reasons requiring processing are eliminated, even though it has been processed in accordance with the law and other relevant legal provisions, and to request that the transactions made in this context and if your personal data have been processed incompletely or incorrectly be notified to third parties to whom your personal data has been transferred,
Object to the emergence of a result that is unfavorable to the person by analyzing your processed data exclusively through automatic systems,
Request compensation for damages in case of damage due to unlawful processing of your personal data.

You can submit your applications regarding your above-mentioned rights to the Data Controller in accordance with the provisions of the Communiqué on Application Procedures and Principles (in writing or via registered e-mail (KEP) address, secure electronic signature, mobile signature or your e-mail address that you have previously notified to our Company and is registered in our systems. electronically with information/documents* (T.R. ID number or passport number for citizens of other countries, notification base address/workplace address, mobile phone/telephone/fax number, e-mail address) that confirm your identity so that our Company can determine that you are the beneficial owner. etc.) together), by filling out the Relevant Person Application Form, which you can access here, or by submitting it to our Company through the channels specified in the Relevant Person Application Form of the data controller, in accordance with the procedures and principles explained above and regulated in the relevant legislation. Depending on the nature of your request, your applications will be finalized free of charge as soon as possible and within 30 (thirty) days at the latest; However, if the process requires an additional cost, you may be charged according to the tariff determined by the Personal Data Protection Board.

* We would like to remind you that any special personal data (e.g. religious information or blood type information) should not be included within the scope of the documents in question.