Protection of Your Datas

INFORMATION ON CONFIDENTIALITY AND PROTECTION OF PERSONAL DATA

BIONLEY attaches utmost importance to protecting the fundamental rights and freedoms of individuals, especially the right to privacy as regulated in Article 20 of the Constitution. Within this framework, it pays attention to the protection and processing of personal data in accordance with the law and acts with this understanding in all its planning and activities.

BIONLEY does not consider the protection of personal data, which is the basis of privacy, and the processing of personal data in accordance with the law only within the scope of compliance with the legislation, but puts the value it attaches to human beings at the heart of its approach. Acting with this awareness, BIOINLEY takes all necessary administrative and technical measures to store personal data securely and to prevent unlawful processing. Within this framework, information on the processing and transfer conditions of personal data generated or shared during the use of the website "www.bionley.com" in accordance with the Law No. 6698 on the Protection of Personal Data is presented below.

1. Definitions
Website: The website located at the address "www.bionley.com".
Law: Law No. 6698 on the Protection of Personal Data.
Personal Data: Any information relating to an identified or identifiable natural person.
Online Visitor/Related Person: All persons accessing the Website. It is included within the Visitor person group in the relevant company policies.
Board: Personal Data Protection Board.
Company: BIONLEY BIOTECHNOLOGY
Hosting provider: It refers to real or legal persons who provide or operate systems that host services and content on the internet.

2. Processed Personal Data
The personal data of the Online Visitor processed depending on the access to the Website and the transactions made on the Website are presented below:
- For Online Visitors who visit the Website,
- Transaction Security Information (IP address, site traffic information, etc.)
- For Online Visitors filling in forms on the Website,
- Identity Information (name, surname)
- Contact Information (e-mail address, phone number)
Apart from those listed above, it is possible to process other data that may be mandatory for the operation, development and security of the Website in accordance with the Law.

3. Method and Legal Reason for Collecting Personal Data
Personal data is collected by fully automated or partially automated means by using the Website and filling out the contact form to be stored for the period required for the purpose of processing. Personal data is processed based on the explicit consent of the Online Visitor. However, personal data may also be processed without explicit consent based on one of the legal reasons stated in paragraph 2 of Article 5 of the Law, which are (i) expressly stipulated in the law, (ii) it is mandatory for the data controller to fulfill its legal obligation, (iii) data processing is mandatory for the establishment, exercise or protection of a right, (iv) data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of personal data owners.

4. Purposes of Processing Personal Data
- In the event that personal data is explicitly stipulated in the laws or within the framework of other conditions specified in paragraph 2 of Article 5 of the Law, depending on the transactions made by the Online Visitor on the Website;
- In case the "Identity and contact information" contact form is filled in, in order to carry out / supervise business activities, to carry out customer relationship management processes, to carry out activities related to customer satisfaction, to carry out after-sales support services for goods / services, to follow up requests / complaints and to carry out communication activities in this context, "Site traffic information" is processed in order to carry out information security processes. On the other hand, pursuant to Law No. 5651 and other legislation, the Hosting Provider has the obligation to record and store site traffic information. The processing of personal data for the purpose of sending commercial electronic messages is subject to the explicit consent of the Online Visitor. Third party cookies are not used on the Website. However, only cookies that are mandatory for the operation and security of the site may be used. The Online Visitor may not accept cookies by changing the browser settings or may ensure that a warning is given to him/her. When the use of cookies is stopped, certain functions of the Website may not function properly.
The links below provide information on how to manage (and disable) cookies in some common browsers:
Chrome Browser:
https://support.google.com/accounts/answer/61416?hl=tr
Internet Explorer:
https://support.microsoft.com/tr-tr/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox
https://support.mozilla.org/tr/products/firefox/protect-your-privacy/cookies
Safari:
https://support.apple.com/tr-tr/guide/safari/manage-cookies-and-website-data-sfri11471/mac

5. To whom and for what purpose the processed personal data can be transferred
Personal data may be transferred to BIONLEY's group companies, subsidiaries, affiliates, affiliates, business partners and authorized public institutions and organizations within the framework of the conditions specified in Articles 8 and 9 of the Law, provided that the necessary security measures are taken within the framework of the conditions specified in Articles 8 and 9 of the Law, limited to the purposes specified in the fourth article of this text, if one of the conditions specified in paragraph 2 of Article 5 of the Law is present.
In the absence of one of the conditions in paragraph 2 of Article 5 of the Law, the transfer of Personal Data is subject to the explicit consent of the Online Visitor.

6. Rights of the Personal Data Subject Pursuant to Article 11 of the Law
Pursuant to Article 10 of the Law, BIONLEY informs the data subject of his/her rights; provides guidance on how to exercise such rights and realizes the necessary internal functioning, administrative and technical arrangements for all these. Pursuant to Article 11 of the Law, personal data owners;
- Learn whether their personal data is being processed or not,
- Request information if their personal data has been processed,
- To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
- To know the third parties to whom personal data are transferred domestically or abroad,
- To request correction of personal data in case of incomplete or incorrect processing
- To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law,
- Request notification of the transactions (correction and destruction of data) made pursuant to subparagraphs (d) and (e) of Article 11 of the Law to third parties to whom personal data are transferred,
- To object to the occurrence of a result to your detriment by analyzing the processed data exclusively through automated systems,
- To demand compensation for damages in case of damage due to unlawful processing of personal data, has rights.
Requests and applications regarding the implementation of the Law may be submitted in writing in person to "*********" by filling out the Personal Data Owner Application Form or may be submitted electronically through a Notary Public or by using a secure electronic signature or mobile signature. Requests and applications may be made by the data subject if BIONLEY has an e-mail address previously notified and registered in BIONLEY's system It can also be sent to info@bionley.com.
In Requests and Applications;
- Name, surname and signature if the application is in writing,
- Turkish Republic ID number for citizens of the Republic of Turkey, nationality, passport number or ID number, if any, for foreigners,
- Residential or workplace address for notification,
- Electronic mail address, telephone and fax number for notification, if any,
- Subject of request must be present.

Relevant information and documents must be attached to the application. BIONLEY finalizes the requests in the application free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction in question requires an additional cost, the fee in the tariff determined by the Board may be charged. BIONLEY may either accept the request or reject it by explaining its reasoning and notify its response to the Relevant Person in writing or electronically. In case the request in the application is accepted, BIONLEY shall fulfill its requirements as soon as possible and inform the Relevant Person. In case the application is caused by BIONLEY's error, the fee charged shall be refunded to the data subject. In cases where the application is rejected, the response is found insufficient or the application is not responded to in due time; the data subject has the right to file a complaint to the Board within thirty days from the date of learning the response and in any case within sixty days from the date of application.

7. Security of Data
BIONLEY is obliged to take all necessary administrative and technical measures to prevent unlawful processing of personal data and unlawful access to personal data, to ensure the protection of personal data, and to ensure the appropriate level of security.
In case of redirection to other sites or applications through the website, BIONLEY is not aware of the compliance of the redirected sites and applications with the legislation on the protection of personal data and is not under any responsibility regarding their privacy policies and contents. By using the Website, the Online Visitor declares that he/she has read all the terms written in this information text and that he/she has been informed about the processing of his/her personal data.

CLARIFICATION TEXT

BIONLEY takes the highest possible security measures to ensure that your personal data is collected, stored and shared in accordance with the law and to protect your privacy. Our aim is to inform you in the most transparent way about the ways your personal data are collected, the purposes of processing, the persons shared, the legal reasons and your rights in accordance with Article 10 of the Personal Data Protection Law No. 6698 and in line with your satisfaction.

a. Data Controller
In accordance with Law No. 6698 on the Protection of Personal Data ("Law"), your personal data is processed by BIONLEY in the capacity of data controller.

b. Purposes of Processing Personal Data
Your personal data conducting emergency management processes, conducting information security processes, conducting employee candidate/trainee selection and placement processes, conducting application processes of employee candidates, conducting employee satisfaction and loyalty processes, conducting employee benefits and interests processes, conducting audit/ethical activities, conducting training activities, conducting access authorizations, conducting activities in accordance with the legislation, conducting communication activities, planning of human resources processes, execution/supervision of business activities, execution of business continuity activities, execution of goods/service purchasing processes, execution of goods/service sales processes, follow-up of requests/complaints, ensuring the security of movable goods and resources, execution of customer relationship management processes, execution of marketing analysis studies, execution of advertising/campaign/promotion processes, execution of sponsorship activities.

c. Method and Legal Grounds for Collecting Personal Data
Your personal data in question; personal data processing activity is "clearly stipulated by law", "it is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract", "it is mandatory for the Company to fulfill its legal obligation"; "it is mandatory for the establishment, exercise or protection of a right"; "personal data is made public by the person concerned"; "data processing is mandatory for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the data subjects" or based on one of the legal reasons or your explicit consent Is application forms, customer information forms, various documents submitted to the Company, mail and e-mails sent to the Company, call center, Company website, social media tools, It is collected through third parties such as persons and companies to which the Company provides or receives services and business partners, subcontractors, service/product suppliers and group companies, employment companies and job search portals, mobile applications, corporate communication accounts and devices, Company information systems and devices, security cameras, fingerprints.

d. To whom and for what purpose personal data may be transferred
Your personal data conducting emergency management processes, conducting information security processes, conducting employee candidate/trainee selection and placement processes, conducting application processes of employee candidates, conducting employee satisfaction and loyalty processes, conducting employee benefits and interests processes, conducting audit/ethics activities, conducting training activities, conducting access authorizations, conducting activities in accordance with the legislation, conducting communication activities, planning human resources processes, execution/supervision of business activities, execution of business continuity activities, execution of goods/service purchasing processes, execution of goods/service sales processes, follow-up of requests/complaints, ensuring the security of movable goods and resources, execution of customer relationship management processes, execution of marketing analysis studies, execution of advertising/campaign/promotion processes, execution of sponsorship activities, and only limited to the data required for the realization of the relevant purposes; shareholders, the Company's group/group companies, subsidiaries, affiliates, business partners, suppliers, natural persons or private law legal entities (organizations with which the Company cooperates in order to fulfill its contractual or legal obligations: independent audit firms, insurance companies, law offices and banks, etc.), authorized public institutions and organizations. ), authorized public institutions and organizations.

e. Rights of the Personal Data Owner Pursuant to Article 11 of the Law
You may submit your requests and applications within the scope of Article 11 of the Law "regulating the rights of the data subject". After filling out the application form on our website, you can submit your applications in person with wet signature or send it to our postal address via Notary Public, you can send it electronically by registered electronic mail (KEP), secure electronic signature, mobile signature or by using your electronic mail address that you have previously notified to our Company and registered in our system. Our postal address ******* Our e-mail address is: info@bionley.com